Anonymous Remote Arbitrary Code Execution in Alien Arena 7.30

Anonymous Remote Arbitrary Code Execution in Alien Arena 7.30 ------------------------------------------------------------- October 21st, 2009 ======= Summary ======= Name: Anonymous Remote Arbitrary Code Execution in Alien Arena 7.30 Release Date: October 21st, 2009 Discoverer: Jason Geffner...

Novell ZENworks Patch Management Multiple SQL Injection Vulnerabilities (CVE-2005-3315)

ZENworks is a resource management solution developed by Novell. The product provides system administrators with management capabilities of remote networked computers. The software suite is composed of several product components. Some of the available ZENworks product components are ZENworks Deskt...

GTetrinet: Remote code execution

Background GTetrinet is a networked Tetris clone for GNOME 2. Description Michael Gehring has found that GTetrinet fails to properly handle array indexes. Impact An attacker can potentially execute arbitrary code by sending a negative number of players to the server. Workaround There is no known...

[Full-disclosure] DM Primer error handling weakness & an old CAM BO revisited

Apologies for the poor grammer and formatting... DM Primer is a shared service related to CA's Unicenter Remote Control. It is used in Enterprise environments to deploy URC6 from the URC v6.x Administration server. Dmprimer.exe listens on a client device for instructions from the server in a...

krb5 security update

CentOS Errata and Security Advisory CESA-2005:562 Updated krb5 packages which fix multiple security issues are now available for Red Hat Enterprise Linux 2.1 and 3. This update has been rated as having critical security impact by the Red Hat Security Response Team. Updated 26 Sep 2005 krb5-server...

ISS Protection Brief: Windows IP Options Remote Compromise

-----BEGIN PGP SIGNED MESSAGE----- Internet Security Systems Protection Brief April 12, 2005 Windows IP Options Remote Compromise Summary: X-force has discovered a vulnerability in Windows NT-based IP Stack drivers. This vulnerability affects most modern Windows operating systems, and could allow...

Important: Red Hat Security Advisory: krb5 security update

Updated krb5 packages which fix two buffer overflow vulnerabilities in the included Kerberos-aware telnet client are now available. This update has been rated as having important security impact by the Red Hat Security Response Team. Kerberos is a networked authentication system which uses a...

WFBE.txt

// File Browsing Exploit // Tested on Windows 98 running Novell 3.2.0.0 // // By, t0mMaC // AIM: t0mMaC2600 // // // Disclaimer: // This is for experimental purposes only, using this venerability to gain access to nodes, hard drives, // directories, etc which your not suppose to be in is illegal...

bazarr CALL POLICE

/ irix 6.5 Mediamail buffer overflow!!! CALL BRAVO TEAM / / by: bazarr / / [email protected] / / bazarr episode 2 / ------------------- PREFACE THIS ADVISORY HAS BEEN HIGHLY HIGHLY HIGHLY CENSORED FOR EXTREME CONTENT PLEASE GOTO http://geocities.com/rrazab/adv/bazarr-episode-2.txt FOR THE...

Phenoelit Advisory #0815 +--

Phenoelit Advisory wir-haben-auch-mal-was-gefunden 0815 +-- Authors FX [email protected] FtR [email protected] kim0 [email protected] DasIch [email protected] Phenoelit Group http://www.phenoelit.de Advisory http://www.phenoelit.de/stuff/HPChai.txt Affected Products Hewlett Packard HP ChaiVM HP 90...

IRIX 6.5.x - usrlibInPersoninpview Race Condition

IRIX 6.5.x - usrlibInPersoninpview Race Condition / source: https://www.securityfocus.com/bid/1530/info Certain versions of IRIX ship with a version of inpview that creates files in '/var/tmp/' in an insecure manner and is therefore prone to a race condition. InPerson's 'inpview' is a networked...