2344 matches found
PostgreSQL privilege escalation via dblink
The DBLink module in PostgreSQL 8.2 before 8.2.6, 8.1 before 8.1.11, 8.0 before 8.0.15, 7.4 before 7.4.19, and 7.3 before 7.3.21, when local trust or ident authentication is used, allows remote attackers to gain privileges via unspecified vectors. NOTE: this issue exists because of an incomplete...
CVE-2007-6661
2z project 0.9.6.1 allows attackers to change the password without supplying the old password...
CVE-2007-6661
2z project 0.9.6.1 allows attackers to change the password without supplying the old password...
SuSE 10 Security Update : findutils-locate (ZYPP Patch Number 3966)
The cronjob that deletes old core files could be tricked to delete arbitrary files. Old core files are deleted if DELETEOLDCORE=yes is set. That is not the case by default though. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc...
Old Guy's Scripts TalkBack Comments and Guestbook远程文件包含漏洞
TalkBack 2.2.7 Multiple Remote File Inclusion Vulnerabilities Old Guy's Scripts TalkBack Comments and Guestbook是一款基于PHP的WEB应用程序。 Old Guy's Scripts TalkBack Comments and Guestbook不正确过滤用户提交的URI数据，远程攻击者可以利用漏洞以WEB权限执行任意PHP代码。 问题是由于多个脚本对用户提交的'languagefile'参数缺少过滤，指定远程服务器上的任意文件作为包含参数，可导致以WEB权限执行任意PHP代码。...
DSA-1402-1 gforge - insecure temporary files
Bulletin has no description...
Fedora 7 : firestarter-1.0.3-16.fc7 (2007-0700)
Tue Jun 26 2007 Damien Durand - 1.0.3-16 - Fix BR - Fix active connections status - Sun Jun 17 2007 Damien Durand - 1.0.3-15 - Remove old doc - Fix pam configuration Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory...
CIFS signing sec= mount options don't work correctly
The Linux kernel before 2.6.23-rc1 checks the wrong global variable for the CIFS sec mount option, which might allow remote attackers to spoof CIFS network traffic that the client configured for security signatures, as demonstrated by lack of signing despite sec=ntlmv2i in a SetupAndX request...
Airkiosk/formlib application is XSS vuln
In the last week I've found a XSS vuln into the Sutra's Airkiosk application for the realtime distribution of flights/booking and check-in interface www.airkiosk.com. The XSS is possible because they are using a VULN/OLD formlib.pl in their application that permits to execute any JavaScript you...
[SECURITY] [DSA 1390-1] New t1lib packages fix arbitrary code execution
------------------------------------------------------------------------ Debian Security Advisory DSA-1390-1 [email protected] http://www.debian.org/security/ Noah Meyerhans October 18, 2007 http://www.debian.org/security/faq -...
2532|Gigs 1.2.1 (activateuser.php) Local File Inclusion Vulnerability
Exploit for unknown platform in category web applications ===================================================================== 2532|Gigs 1.2.1 activateuser.php Local File Inclusion Vulnerability =====================================================================...
Butterfly online vistors counter 1.08 RFI
App Name : Butterfly online vistors counter v.1.08 HomePage : http://www.phoenix.frihost.net/butterfly/readme.php Vuln type : Remote File Include RFI Vulnerability Discovered by : iNs Vuln Code: visitor.php includeonce $SERVER"DOCUMENTROOT" . "/butterfly/custom.php"; // include settings POC:...
CVE-2007-4049
Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2000-1205. Reason: This candidate is a duplicate of CVE-2000-1205. Notes: All CVE users should reference CVE-2000-1205 instead of this candidate. All references and descriptions in this candidate have been removed to prevent...
DSA-1326-1 fireflier
Bulletin has no description...
CVE-2007-2452
Heap-based buffer overflow in the visitoldformat function in locate/locate.c in locate in GNU findutils before 4.2.31 might allow context-dependent attackers to execute arbitrary code via a long pathname in a locate database that has the old format, a different vulnerability than CVE-2001-1036...
CVE-2007-2452
Heap-based buffer overflow in the visitoldformat function in locate/locate.c in locate in GNU findutils before 4.2.31 might allow context-dependent attackers to execute arbitrary code via a long pathname in a locate database that has the old format, a different vulnerability than CVE-2001-1036...
PT-2007-4294 · Salescart · Salescart Shopping Cart
Name of the Vulnerable Software and Affected Versions: SalesCart Shopping Cart affected versions not specified Description: The issue concerns SQL injection vulnerabilities in the cgi-bin/reorder2.asp file of SalesCart Shopping Cart, allowing remote attackers to execute arbitrary SQL commands via...
GNU findutils locate buffer overflow
Heap buffer overflow on parsing old-format locate database...
Improper Authentication
Overview Affected versions of this package are vulnerable to Improper Authentication. OpenSSH 4.6 and earlier, when ChallengeResponseAuthentication is enabled, allows remote attackers to determine the existence of user accounts by attempting to authenticate via S/KEY, which displays a different...