CVE-2012-2123

The capbprmsetcreds function in security/commoncap.c in the Linux kernel before 3.3.3 does not properly handle the use of file system capabilities aka fcaps for implementing a privileged executable file, which allows local users to bypass intended personality restrictions via a crafted applicatio...

Apache 2.2 - Scoreboard Invalid Free On Shutdown

Source: http://www.halfdog.net/Security/2011/ApacheScoreboardInvalidFreeOnShutdown/ Introduction Apache 2.2 webservers may use a shared memory segment to share child process status information scoreboard between the child processes and the parent process running as root. A child running with lowe...

Apache Httpd < 2.0.65 : scoreboard parent DoS

A flaw was found in the handling of the scoreboard. An unprivileged child process could cause the parent process to crash at shutdown rather than terminate cleanly...

Apache Httpd < 2.2.22 : scoreboard parent DoS

A flaw was found in the handling of the scoreboard. An unprivileged child process could cause the parent process to crash at shutdown rather than terminate cleanly...

fuse: unprivileged user can unmount arbitrary locations via symlink attack

FUSE, possibly 2.8.5 and earlier, allows local users to create mtab entries with arbitrary pathnames, and consequently unmount any filesystem, via a symlink attack on the parent directory of the mountpoint of a FUSE filesystem, a different vulnerability than CVE-2010-0789...

The path separator"\"with"/"in the Web of induced vulnerability-vulnerability warning-the black bar safety net

Whether is under windows the path separator""or linux"/", this is not a serious problem, but in the web of the upper surface of the opening will appear a lot of"bugs", if the web Developer did not consider this issue, then may appear very serious bug. In the VC code\ \ \is an escape character,...

CVE-2009-5073

IBM Tivoli Directory Server TDS 6.0 before 6.0.0.59 aka 6.0.0.8-TIV-ITDS-IF0001 allows remote authenticated users to cause a denial of service infinite loop and daemon hang by adding a nested group that contains the Distinguished Name DN of its parent entry...

CVE-2009-5073

IBM Tivoli Directory Server TDS 6.0 before 6.0.0.59 aka 6.0.0.8-TIV-ITDS-IF0001 allows remote authenticated users to cause a denial of service infinite loop and daemon hang by adding a nested group that contains the Distinguished Name DN of its parent entry...

acroread: critical APSB11-03

The U3D component in Adobe Reader and Acrobat 10.x before 10.0.1, 9.x before 9.4.2, and 8.x before 8.2.6 on Windows and Mac OS X allow remote attackers to execute arbitrary code via a 3D file with an invalid Parent Node count that triggers an incorrect size calculation and memory corruption, a...

(mod_dav_svn): DoS (crash) by processing certain requests to display all available repositories to a web browser

The walk function in repos.c in the moddavsvn module for the Apache HTTP Server, as distributed in Apache Subversion before 1.6.15, allows remote authenticated users to cause a denial of service NULL pointer dereference and daemon crash via vectors that trigger the walking of SVNParentPath...

Memory corruption

The U3D component in Adobe Reader and Acrobat 10.x before 10.0.1, 9.x before 9.4.2, and 8.x before 8.2.6 on Windows and Mac OS X allow remote attackers to execute arbitrary code via a 3D file with an invalid Parent Node count that triggers an incorrect size calculation and memory corruption, a...

Adobe Reader u3d Parent Node Count Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Adobe Reader on Mac OS X. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The flaw exists within the U3D componen...

CVE-2010-3879

FUSE, possibly 2.8.5 and earlier, allows local users to create mtab entries with arbitrary pathnames, and consequently unmount any filesystem, via a symlink attack on the parent directory of the mountpoint of a FUSE filesystem, a different vulnerability than CVE-2010-0789...

httpd: request header information leak

The apreadrequest function in server/protocol.c in the Apache HTTP Server 2.2.x before 2.2.15, when a multithreaded MPM is used, does not properly handle headers in subrequests in certain circumstances involving a parent request that has a body, which might allow remote attackers to obtain...

CVE-2010-2696: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in gallery/index.php in Sijio Community Software allows remote attackers to execute arbitrary SQL commands via the parent parameter...

Specialized Data Systems (SDS) SQL Injection

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Vendor : Specialized Data Systems SDS Product : Parent Connect Version : 2010.04.11 tested, all versions presumed vulnerable URL : http://www.schooloffice.com/newweb/Items.aspx?catId=c22 Description from vendor website: "SDS ... brings to your...

SDS Parent Connect SQL Injection

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Vendor : Specialized Data Systems SDS Product : Parent Connect Version : 2010.04.11 tested, all versions presumed vulnerable URL : http://www.schooloffice.com/newweb/Items.aspx?catId=c22 Description from vendor website: "SDS ... brings to your...

Specialized Data Systems Parent Connect 2010.04.11 - Multiple SQL Injections

Specialized Data Systems Parent Connect 2010.04.11 - Multiple SQL Injections source: https://www.securityfocus.com/bid/40324/info Specialized Data Systems Parent Connect is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied data before using it...

Specialized Data Systems Parent Connect 2010.04.11 - Multiple SQL Injections

source: https://www.securityfocus.com/bid/40324/info Specialized Data Systems Parent Connect is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting these issues could allow an attacker to compromi...

MoinMoin Wiki Security Bypass Vulnerability

This host is running MoinMoin Wiki and is prone to security bypass vulnerability. OpenVAS Vulnerability Test $Id: secpodmoinmoinwikiaclsecbypassvuln.nasl 5394 2017-02-22 09:22:42Z teissa $ MoinMoin Wiki ACL Security Bypass Vulnerability Authors: Antu Sanadi Copyright: Copyright c 2010 SecPod,...