imail.cookie.txt

Neither Regular or secure mode of Imail properly give out a hash on cookies leaving the cookies straight readable to any onlookers. No exploit is needed POC: "IMailUserId 1006332dgd2@Someserver" -------------------------- "IMailpassword 1234" Straight From Cookie ^^ edited to protect user Shoutz ...

iTunes < 4.8.0 MPEG-4 Parsing Overflow (Mac OS X)

The remote host is running a version of iTunes which is older than version 4.8.0. Such versions reportedly fail to perform certain validation checks on MPEG4 files, and hence it could be possible to trigger a buffer overflow condition. Successful exploitation of this issue could lead to a denial ...

KLA10215 DoS vulnerability in IDA pro

An unspecified vulnerability was found in IDA Pro. By exploiting this vulnerability malicious users can cause denial of service or possibly execute arbitrary code. This vulnerability can be exploited remotely via a specially designed dll name. Original advisories - Related products IDA-Pro CVE li...

DC++ Download Drive Arbitrary File Appending

According to its version number, the DC++ client installed on the remote host is affected by a vulnerability that may let a remote user append data to files anywhere on the drive on which DC++ is installed. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid18012;...

QuickTime < 6.5.2 PictureViewer Malformed JPEG Overflow (Windows)

The remote host is using QuickTime, a popular media player/Plug-in that handles many Media files. The remote version of this software contains a buffer overflow vulnerability in its PictureViewer that could allow an attacker to execute arbitrary code on the remote host. To exploit this...

Network Service Malformed Data Remote DoS

It appears to be possible to crash the remote service by sending it a few kilobytes of random data. An attacker may use this flaw to make this service crash continuously, preventing this service from working properly. It may also be possible to exploit this flaw to execute arbitrary code on this...

TYPO3 SQL Injection vunerabilitie

Hello Bugtraq : Two week ago I found a SQL Inejetion vulnerabilitie in Typo3 in the links-section/module/whatever you call it. I didn't really try to develope an exploit because I thought typo3 would directly react. But unfortunately that didn't happen :/ So here is the url that "exploits" the...

OFF2000: Office Programs Can Browse Restricted Drives (302753)

The remote host is running a version of Microsoft Office that contains a security flaw that could allow a user to browse restricted drives. An attacker could exploit this flaw to gain access to files he would otherwise not have access to. C Tenable Network Security, Inc. include"compat.inc"; if...

[Full-Disclosure] [gentoo-announce] [ GLSA 200502-22 ] wpa_supplicant: Buffer overflow vulnerability

Gentoo Linux Security Advisory GLSA 200502-22 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - http://security.gentoo.org/ - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Severity:...

HP-UX PHSS_30526 : HP OpenView Operations, Remote Unauthorized Access (HPSBMA01010 SSRT4727 rev.2)

s700800 11.00 OV ITO6.0X Intermediate server A.06.17 : A potential security vulnerability has been identified with HP OpenView Operations where a missing authentication check could be remotely exploited to allow unauthorized access. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The...

HP-UX Security patch : PHSS_22406

The remote host is missing HP-UX Security Patch number PHSS22406 . Sec. Vulnerability OpenView NNM ovalarmsrv %NASLMINLEVEL 70300 C Tenable Network Security, Inc. if ! definedfunc"bnrandom" exit0; include'deprecatednasllevel.inc'; include'compat.inc'; ifdescription scriptid16838;...

HP-UX PHCO_24701 : HP-UX running rlpdaemon, Remote Unauthorized Access, Increased Privilege (HPSBUX00163 SSRT071386 rev.2)

s700800 11.11 lpspool subsystem cumulative patch : Buffer overflow in rlpdaemon. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and patch checks in this plugin were extracted from HP patch PHCO24701. The text itself is copyright C Hewlett-Packard Development Company, L....

HP-UX PHCO_24083 : HP-UX running login(1), Local Increased Privilege (HPSBUX00160 SSRT071385 rev.3)

s700800 11.00 login1 cumulative patch : The login1 command allows restricted shell users to circumvent security checks. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and patch checks in this plugin were extracted from HP patch PHCO24083. The text itself is copyright C...

HP-UX PHCO_22686 : HPSBUX0012-134 Sec. Vulnerability in top(1) (rev.1)

s700800 11.00 top1 cumulative patch : the top1 command has a security defect. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and patch checks in this plugin were extracted from HP patch PHCO22686. The text itself is copyright C Hewlett-Packard Development Company, L.P...

GLSA-200501-29 : Mailman: XSS vulnerability

The remote host is affected by the vulnerability described in GLSA-200501-29 Mailman: XSS vulnerability Florian Weimer has discovered a cross-site scripting vulnerability in the error messages that are produced by Mailman. Impact : By enticing a user to visiting a specially crafted URL, an attack...

Fedora Core 2 : xpdf-3.00-3.8 (2005-135)

Wed Feb 09 2005 Than Ngo 1:3.00-3.8 - More fixing of CVE-2004-0888 patch bug 135393, 147524 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible...

WebWasher Classic Server Mode Arbitrary Proxy CONNECT Request

There is a flaw in the remote WebWasher Proxy. The Proxy, when issued a CONNECT command for 127.0.0.1 or localhost/loopback, will comply with the request and initiate a connection to the local machine. This bypasses any sort of firewalling as well as gives access to local applications which are...

Exim vulnerable to buffer overflow via the dns_build_reverse() routine

Overview The Exim Mail Transfer Agent MTA contains a buffer overflow that allows a local attacker to execute arbitrary code. Description Exim MTA is an open-source mail transport agent distributed by the University of Cambridge. A lack of input validation on user supplied data may allow a buffer...

Debian DSA-658-1 : libdbi-perl - insecure temporary file

Javier Fernandez-Sanguino Pena from the Debian Security Audit Project discovered that the DBI library, the Perl5 database interface, creates a temporary PID file in an insecure manner. This can be exploited by a malicious user to overwrite arbitrary files owned by the person executing the parts o...

Adobe Acrobat Reader for UNIX contains a buffer overflow in mailListIsPdf()

Overview A buffer overflow in Adobe Acrobat Reader for UNIX could allow a remote attacker to execute arbitrary code. Description Adobe Acrobat Reader is an application that allows users to view PDF Portable Document Format files. Acrobat Reader for UNIX Linux, Sun Solaris SPARC, IBM AIX, or HP-UX...