kernel: qla2xxx NPIV vport management pseudofiles are world writable

A certain Red Hat configuration step for the qla2xxx driver in the Linux kernel 2.6.18 on Red Hat Enterprise Linux RHEL 5, when NPort ID Virtualization NPIV hardware is used, sets world-writable permissions for the 1 vportcreate and 2 vportdelete files under /sys/class/scsihost/, which allows loc...

PT-2010-1294 · Linux +1 · Linux Kernel +1

Name of the Vulnerable Software and Affected Versions: Red Hat Enterprise Linux RHEL 5 with Linux kernel 2.6.18 Description: The issue concerns a Red Hat configuration step for the qla2xxx driver in the Linux kernel when N Port ID Virtualization NPIV hardware is used. This configuration sets...

Alt-N SecurityGateway username Buffer Overflow

$Id: altnsecuritygateway.rb 8010 2009-12-28 20:38:50Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...

Alt-N SecurityGateway username Buffer Overflow

Alt-N SecurityGateway is prone to a buffer overflow condition. This is due to insufficient bounds checking on the "username" parameter. Successful exploitation could result in code execution with SYSTEM level privileges. NOTE: This service doesn't restart, you'll only get one shot. However, it...

SoftCab Sound Converter - 'sndConverter.ocx' ActiveX Insecure Method

Exploited By : ThE g0bL!N function Doit File = "Dz.exe" dz.SaveFormatFile SoftCab Sound Converter ActiveX sndConverter.ocx Insecure Method Exploit...

SoftCab Sound Converter ActiveX Insecure Method Exploit

Exploit for unknown platform in category web applications ========================================================================== SoftCab Sound Converter ActiveX Insecure Method Exploit sndConverter.ocx ========================================================================== Exploited By : T...

PlayMeNow .M3U Universal Buffer Overflow

Author: ThE g0bL!N Tested on: xp sp2,sp3 Grrets: His0k4 Alone : my $shellcode = "\x31\xc9\x83\xe9\xde\xd9\xee\xd9\x74\x24\xf4\x5b\x81\x73\x13\x38". "\x78\x73\x8a\x83\xeb\xfc\xe2\xf4\xc4\x90\x37\x8a\x38\x78\xf8\xcf". "\x04\xf3\x0f\x8f\x40\x79\x9c\x01\x77\x60\xf8\xd5\x18\x79\x98\xc3"...

PlayMeNow Malformed (M3U) Universal XP Seh BoF

Exploit for unknown platform in category local exploits ============================================== PlayMeNow Malformed M3U Universal XP Seh BoF ============================================== Title: PlayMeNow Malformed M3U Universal XP Seh BoF CVE-ID: OSVDB-ID: Author: ThE g0bL!N Published:...

PlayMeNow - .m3u Universal XP Buffer Overflow (SEH)

PlayMeNow - .m3u Universal XP Buffer Overflow SEH Author: ThE g0bL!N Tested on: xp sp2,sp3 Grrets: His0k4 Alone : my $shellcode = "\x31\xc9\x83\xe9\xde\xd9\xee\xd9\x74\x24\xf4\x5b\x81\x73\x13\x38". "\x78\x73\x8a\x83\xeb\xfc\xe2\xf4\xc4\x90\x37\x8a\x38\x78\xf8\xcf"...

V.H.S. Booking (hotel_habitaciones.php HotelID) Remote SQL Injection

Exploit for unknown platform in category web applications ================================================================================== V.H.S. Booking hotelhabitaciones.php HotelID Remote SQL Injection Vulnerability...

Texas Rankem(player.asp player_id) Remote SQL Injection Vulnerability

No description provided by source. ? ?????????????????????????In The Name Of Allah The Mercifull?????????????????????? ? Tybe:player.asp playerid bl!nd SQL Injection Vulnerability Vendor: www.clicktech.com Software:Texas Rankem author: R3d-D3v!L Date: 17.dec.2009 T!ME: 3:03 am ? Home: WwW.xP10.ME...

Eshopbuilde CMS SQL Injection

================= IUT-CERT ================= Title: Eshopbuilde CMS SQL Injection Vulnerability Vendor: www.eshopbuilder.ir Dork: Design by Satcom Co Type: Input.Validation.Vulnerability SQL Injection Fix: N/A ================== nsec.ir ================= Description: ------------------ Eshopbuild...

Check Point response to security advisory about password hashes in UTM-1 Edge/Edge N appliance

...

MDaemon 9.6.4 IMAPD FETCH Buffer Overflow

$Id$ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' class Metasploit3 'MDaemon 9.6....

MDaemon <= 6.8.5 WorldClient form2raw.cgi Stack Overflow

$Id$ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' class Metasploit3 'MDaemon %q...

Alt-N WebAdmin USER Buffer Overflow

$Id$ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' class Metasploit3 'Alt-N WebAdm...

Alt-N MDaemon POP3 Server USER and APOP Commands Buffer Overflow (CVE-2006-4364)

Alt-N MDaemon is an email server product that supports a rich set of message exchanging protocols. The Post Office Protocol version 3 POP3 allows for the retrieving of electronic mail over a TCP/IP connection. The MDaemon POP3 server is a server side implementation of the protocol. The default...

MDaemon Content Filter Directory Traversal

MDaemon is a Windows-based email server that provides full mail server functionality. MDaemon supports the SMTP, IMAP and POP3 protocols. MDaemon provides Content Filter functionality to filter incoming email messages based on the headers and message content. RFC 2183 defines header fields in a...

Unfixed XSS vulnerability at www.fuanna.com.cn

Security researcher n-bl4x, has submitted on 10/02/2009 a cross-site-scripting XSS vulnerability affecting www.fuanna.com.cn, which at the time of submission ranked 653927 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 16/12/2011. It is...

An image gallery 1.0 (navigation.php) Local Directory Traversal Vuln

No description provided by source. ------------------------------------------------------------------------- An image gallery 1.0navigation.php Local Directory Traversal ------------------------------------------------------------------------- Author : ThE g0bL!N Download :...