CVE-2007-5994

PHP remote file inclusion vulnerability in checknoimage.php in Fritz Berger yet another php photo album - next generation yappa-ng 2.3.2 allows remote attackers to execute arbitrary PHP code via a URL in the configpathsrcinclude parameter...

CVE-2007-5994

CVE-2007-5994 describes a PHP remote file inclusion in Fritz Berger’s yet another php photo album - next generation (yappa-ng) 2.3.2. The flaw occurs in check_noimage.php when an attacker supplies a URL in the config[path_src_include] parameter, allowing arbitrary PHP code execution on the affect...

yappa-ng-rfi.txt

yappa-ng 2.3.2 RFI ---------- Author : ShAy6oOoN ---------- Group : PitBull Crew ---------- Script : yappa-ng 2.3.2 ---------- Download : http://downloads.sourceforge.net/yappa-ng/yappa-ng232.zip?modtime=1114464654&bigmirror=0 ---------- Vuln Type: RFI ---------- Registerglobals: ON...

CVE-2007-5823

Directory traversal vulnerability in forum.php in Ben Ng Scribe 0.2 and earlier allows remote attackers to create or overwrite arbitrary files via a .. dot dot in the username parameter in a Register action...

CVE-2007-5822

The CVE-2007-5822 entry affects Ben Ng Scribe 0.2 and earlier, where a flaw in forum.php allows direct static code injection. An attacker can leverage the username parameter in the Register action to cause remote PHP code to be written into a file under regged/. The root cause appears to be impro...

Joomla! Component Flash Uploader 2.5.1 - Remote File Inclusion

Joomla! Component Flash Uploader 2.5.1 - Remote File Inclusion -------------------------------------------- = = = Mdx c 2007 = = = -------------------------------------------- = = =Joomla comjoomlaflashuploader Remote File Include 2.5.1,2.5.2 = = ============================================ = =...

DTSA-35-1 aircrack-ng - programming error

Bulletin has no description...

GLSA-200704-16 : Aircrack-ng: Remote execution of arbitrary code

The remote host is affected by the vulnerability described in GLSA-200704-16 Aircrack-ng: Remote execution of arbitrary code Jonathan So reported that the airodump-ng module does not correctly check the size of 802.11 authentication packets before copying them into a buffer. Impact : A remote...

Debian DSA-1280-1 : aircrack-ng - buffer overflow

It was discovered that aircrack-ng, a WEP/WPA security analysis tool, performs insufficient validation of 802.11 authentication packets, which allows the execution of arbitrary code. The oldstable distribution sarge doesn't contain aircrack-ng packages. %NASLMINLEVEL 70300 C Tenable Network...

Airodump-ng buffer overflow vulnerability

Overview The airodump-ng program, which is a part of the aircrack-ng suite, contains a buffer overflow vulnerability. If successfully exploited, this vulnerability may allow an attacker to execute code. Description The aircrack-ng suite is a group of related programs that can be used to recover W...

[SECURITY] [DSA 1280-1] New aircrack-ng packages fix arbitrary code execution

-------------------------------------------------------------------------- Debian Security Advisory DSA 1280-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff April 24th, 2007 http://www.debian.org/security/faq -...

DSA-1280-1 aircrack-ng - buffer overflow

Bulletin has no description...

Aircrack-ng: Remote execution of arbitrary code

Background Aircrack-ng is an 802.11 WEP and WPA-PSK keys cracking program that can recover keys once enough data packets have been captured. Description Jonathan So reported that the airodump-ng module does not correctly check the size of 802.11 authentication packets before copying them into a...

Stack overflow

Stack-based buffer overflow in aircrack-ng airodump-ng 0.7 allows remote attackers to execute arbitrary code via crafted 802.11 authentication packets...

CVE-2007-2057

Stack-based buffer overflow in aircrack-ng airodump-ng 0.7 allows remote attackers to execute arbitrary code via crafted 802.11 authentication packets...

CVE-2007-2057

Stack-based buffer overflow in aircrack-ng airodump-ng 0.7 allows remote attackers to execute arbitrary code via crafted 802.11 authentication packets...

DEBIAN-CVE-2007-2057

Stack-based buffer overflow in aircrack-ng airodump-ng 0.7 allows remote attackers to execute arbitrary code via crafted 802.11 authentication packets...

CVE-2007-2057

Stack-based buffer overflow in aircrack-ng airodump-ng 0.7 allows remote attackers to execute arbitrary code via crafted 802.11 authentication packets...

CVE-2007-2057

Stack-based buffer overflow in aircrack-ng airodump-ng 0.7 allows remote attackers to execute arbitrary code via crafted 802.11 authentication packets...

CVE-2007-2057

Summary of CVE-2007-2057 (aircrack-ng) The vulnerability is a stack-based buffer overflow in the airodump-ng component of aircrack-ng (affecting the 0.7 series) triggered by processing crafted 802.11 authentication packets. This can allow a remote attacker to execute arbitrary code with the privi...