CVE-2007-3184

Cisco Trust Agent CTA before 2.1.104.0, when running on MacOS X, allows attackers with physical access to bypass authentication and modify System Preferences, including passwords, by invoking the Apple Menu when the Access Control Server ACS produces a user notification message after posture...

CVE-2007-3184

Cisco Trust Agent (CTA) for Mac OS X prior to 2.1(104).0 is vulnerable to a local, unauthenticated attack with physical access: when the ACS prompts a user notification after posture validation, an attacker can interact with the Apple Menu to bypass authentication and access System Preferences wi...

CVE-2007-3184: Improper Authentication

Cisco Trust Agent CTA before 2.1.104.0, when running on MacOS X, allows attackers with physical access to bypass authentication and modify System Preferences, including passwords, by invoking the Apple Menu when the Access Control Server ACS produces a user notification message after posture...

Cisco Trust Agent Vulnerability

Vulnerability: There is a vulnerability affecting the latest version v2.1.103.0 of the Cisco Trust Agent software for MacOS X that can allow an individual with physical access to an endpoint to bypass authentication and gain administrative access to the local machine. Description: When Cisco Secu...

Cisco Trust Agent Local Privilege Escalation Vulnerability

Cisco Trust Agent versions 2.1103 and prior contain a vulnerability when running on Apple Mac OS X that could allow an unauthenticated, local user to bypass security restrictions and gain unauthorized access to the affected system. This vulnerability exists due to improper display of user...

Ol BookMarks Manager 0.7.4 - SQL Injection

Ol BookMarks Manager 0.7.4 - SQL Injection ========================================================================== Ol Bookmarks Manager 0.7.4 root Remote SQL Injection Vulnerabilities ========================================================================== Found by: Cyber-Security...

Ol Bookmarks Manager 0.7.4 Remote SQL Injection Vulnerability

Exploit for unknown platform in category web applications ============================================================= Ol Bookmarks Manager 0.7.4 Remote SQL Injection Vulnerability =============================================================...

Critical: seamonkey security update

seamonkey-1.0.8-0.1.el4.0.1: 1.0.8-0.1.el4.0.1 - Replace default bookmarks and prefs 1.0.8-0.1.el4 - Update to 1.0.8 RC 1.0.7-0.2.el4 - added fix for 204589: mozilla-config points to the wrong places devhelp-0.10-0.7.el4: 0.10-0.7.el4 - Rebuild against newer gecko...

Apple Airport Extreme fails to properly process 802.11 frames

Overview A vulnerability exists in the Apple AirPort Extreme wireless driver that may allow an attacker to crash a vulnerable system. Description The Apple AirPort Extreme adapter is an 802.11g compatible wireless adapter used in Apple OS X laptops and desktops. A flaw exists in the way AirPort...

MOAB-21-01-2007.rb.txt

!/usr/bin/ruby Copyright c 2007 Kevin Finisterre Lance M. Havok All pwnage reserved. "Exploit" for MOAB-21-01-2007: OS X, making root shells easier each day. SHELLWRAP = 'int main system"/bin/sh -i"; return 0; ' SHELLPLANT = 'int main system"chown root: /tmp/shX; chmod 4755 /tmp/shX"; return 0; '...

Mac OS X 10.4.8 System Preferences Local Privilege Escalation Exploit

No description provided by source. !/usr/bin/ruby Copyright c 2007 Kevin Finisterre kflists at digitalmunition.com Lance M. Havok lmh at info-pull.com All pwnage reserved. "Exploit" for MOAB-21-01-2007: OS X, making root shells easier each day...

MOAB-21-01-2007: System Preferences writeconfig Local Privilege Escalation Vulnerability

Summary Apple provides the following description in the The Preference Application documentation: System Preferences is the standard location for presenting system-level preferences on OSX. The preference panes shipped with Mac OS X include panes affecting hardware such as the Sound, Mouse, and...

Apple Mac OSX 10.4.8 - System Preferences Privilege Escalation

Apple Mac OSX 10.4.8 - System Preferences Privilege Escalation !/usr/bin/ruby Copyright c 2007 Kevin Finisterre Lance M. Havok All pwnage reserved. "Exploit" for MOAB-21-01-2007: OS X, making root shells easier each day. SHELLWRAP = 'int main system"/bin/sh -i"; return 0; ' SHELLPLANT = 'int main...

Apple Mac OSX 10.4.8 - System Preferences Privilege Escalation

!/usr/bin/ruby Copyright c 2007 Kevin Finisterre Lance M. Havok All pwnage reserved. "Exploit" for MOAB-21-01-2007: OS X, making root shells easier each day. SHELLWRAP = 'int main system"/bin/sh -i"; return 0; ' SHELLPLANT = 'int main system"chown root: /tmp/shX; chmod 4755 /tmp/shX"; return 0; '...

Mac OS X 10.4.8 System Preferences Local Privilege Escalation Exploit

Exploit for macOS platform in category local exploits ===================================================================== Mac OS X 10.4.8 System Preferences Local Privilege Escalation Exploit ===================================================================== !/usr/bin/ruby Copyright c 2007...

phpicalendar-xss.txt

PHP icalendar multiple variable cross site scripting Vendor url:http://phpicalendar.net/ Advisore:http://lostmon.blogspot.com/2006/12/ php-icalendar-multiple-variable-cross.html Vendor notify: YES Exploit included:YES PHP icalendar contains a flaw that allows a remote cross site scripting...

Critical seamonkey security update

1.0.7-0.1.el4.1 - Replace default bookmarks and prefs 1.0.7-0.1.el4 - Update to 1.0.7 RC...

Critical firefox security update

1.5.0.9-0.1.el4.1 - Replace default bookmarks and prefs 1.5.0.9-0.1.el4 - Update to 1.5.0.9 RC - Update the pango patches to support mathml and various other fixes. - Let Firefox handle gcc warnings; it weeds out frequent offenders...

Critical seamonkey security update

1.0.6-0.1.1.el4 - Replace bookmarks and prefs 1.0.6-0.1.el4 - Update to 1.0.6 RC 1.0.5-0.1.el4 - Update to 1.0.5...

Debian DSA-1154-1 : squirrelmail - variable overwriting

James Bercegay of GulfTech Security Research discovered a vulnerability in SquirrelMail where an authenticated user could overwrite random variables in the compose script. This might be exploited to read or write the preferences or attachment files of other users. %NASLMINLEVEL 70300 C Tenable...