Microsoft Security Bulletin MS04-005

Microsoft Security Bulletin MS04-005 Vulnerability in Virtual PC for Mac could lead to privilege elevation 835150 Issued: February 10, 2004 Version: 1.0 Summary Who should read this document: Customers who are using Microsoft® Virtual PC for Mac Impact of vulnerability: Elevation of Privilege...

Множество уязвимостей в Ultimate PHP Board (UPB) Version 1.5

Множество уязвимостей в Ultimate PHP Board UPB Version 1.5 Script: Ultimate PHP Board UPB Version 1.5 Author: PHP Outburst http://www.myupb.com/ Exploit: yes В скриптах: adminmembers.php adminban.php adminbannedaddresses.php adminbanuser.php admincat.php adminconfig.php adminconfigdo.php...

NSFOCUS SA2003-08: HP-UX libc NLSPATH Environment Variable Privilege Elevation Vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 NSFOCUS Security AdvisorySA2003-08 Topic: HP-UX libc NLSPATH Environment Variable Privilege Elevation Vulnerability Release Date: 2003-11-13 CVE CAN ID: CAN-2003-0090 http://www.nsfocus.com/english/homepage/research/0308.htm Affected system:...

NSFOCUS SA2003-08: HP-UX libc NLSPATH Environment Variable Privilege Elevation Vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 NSFOCUS Security AdvisorySA2003-08 Topic: HP-UX libc NLSPATH Environment Variable Privilege Elevation Vulnerability Release Date: 2003-11-13 CVE CAN ID: CAN-2003-0090 http://www.nsfocus.com/english/homepage/research/0308.htm Affected system:...

Slight privilege elevation from bin to root in IBM DB2 7.1 - 8.1 all binaries

Title: Local Vulnerability in IBM DB2 7.1 - 8.1 all binaries Date: 27-07-2003 Platform: Only tested in Linux but can be exported to others. Only versions 7.1 and Enterprise Server Edition v8.1 were checked but could affect other versions. Impact: Slight privilege elevation from bin to root. Autho...

MS03-025: Flaw in Windows Message Handling through Utility Manager Could Enable Privilege Elevation (822679)

The remote host runs a version of Windows that has a flaw in the way the utility manager handles Windows messages. As a result, it is possible for a local user to gain additional privileges on this host. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid11789;...

[LSD] HP-UX security vulnerabilities

Hello, In this letter you will find the result of a brief security audit that we did some time ago for HP-UX platform. We have found 8 vulnerabilities seven local and a remote one. Technical details about all of the vulnerabilities were sent to the HP security team few months ago and in all cases...

CVE-2002-0373

CVE-2002-0373 affects Windows Media Player 7.1 on Windows 2000, where the Windows Media Device Manager (WMDM) Service lets a local user elevate to LocalSystem by invoking the WMDM service to connect to an invalid local storage device. The vulnerability is local and impacts the WMDM component; aff...

CVE-2002-0373

The Windows Media Device Manager WMDM Service in Microsoft Windows Media Player 7.1 on Windows 2000 systems allows local users to obtain LocalSystem rights via a program that calls the WMDM service to connect to an invalid local storage device, aka "Privilege Elevation through Windows Media Devic...

CVE-2002-0373: Undefined Security Weakness

The Windows Media Device Manager WMDM Service in Microsoft Windows Media Player 7.1 on Windows 2000 systems allows local users to obtain LocalSystem rights via a program that calls the WMDM service to connect to an invalid local storage device, aka "Privilege Elevation through Windows Media Devic...

Microsoft Security Bulletin MS03-005: Unchecked Buffer in Windows Redirector Could Allow Privilege Elevation (810577)

-----BEGIN PGP SIGNED MESSAGE----- - ------------------------------------------------------------------- Title: Unchecked Buffer in Windows Redirector Could Allow Privilege Elevation 810577 Date: 05 February 2003 Software: Microsoft Windows XP Impact: Privilege elevation Max Risk: Important...

Microsoft Security Bulletin MS02-071:Flaw in Windows WM_TIMER Message Handling Could Enable Privilege Elevation (328310)

-----BEGIN PGP SIGNED MESSAGE----- - ---------------------------------------------------------------------- Title: Flaw in Windows WMTIMER Message Handling Could Enable Privilege Elevation 328310 Date: 11 December 2002 Software: Microsoft Windows NT 4.0, Windows 2000, and Windows XP Impact:...

Microsoft Security Bulletin MS02-071

Microsoft Security Bulletin MS02-071 Print Flaw in Windows WMTIMER Message Handling Could Enable Privilege Elevation 328310 Originally posted: December 11, 2002 Summary Who should read this bulletin: Customers using Microsoft® Windows® NT 4.0, Windows 2000, and Windows XP. Impact of vulnerability...

MS02-071: WM_TIMER Message Handler Privilege Elevation (328310)

The remote version of Windows contains a flaw in the handling of WMTIMER messages for interactive processes that could allow a local user to execute arbitrary code on the remote host with the SYSTEM privileges. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid11191;...

CVE-2002-1266

Mac OS X 10.2.2 allows local users to gain privileges by mounting a disk image file that was created on another system, aka "Local User Privilege Elevation via Disk Image File."...

CVE-2002-1268

Mac OS X 10.2.2 allows local users to gain privileges via a mounted ISO 9600 CD, aka "User Privilege Elevation via Mounting an ISO 9600 CD."...

acFTP Authentication Issue

acFTP is an open-source FTP daemon for Windows platforms http://www.sourceforge.net/projects/acftp that offers more functionality than many proprietary servers including the MS FTP service. The authentication code of acFTP contains a flaw -- specifically, the server treats users as logged in...

Multiple phpNuke Modules Vulnerable to Cross-Site Scripting

phpNuke Module Vulnerabilities Enable Identity Theft Systems Affected: phpNuke 6.5b1 and prior all operating systems Risk: High Impact: Identity Theft/Impersonation/Privilege Elevation Scenario: Cross-site scripting flaws enabling cookie theft Description phpNuke is a popular, and very complex...

CVE-2002-1230

NetDDE Agent on Windows NT 4.0, 4.0 Terminal Server Edition, Windows 2000, and Windows XP allows local users to execute arbitrary code as LocalSystem via "shatter" style attack by sending a WMCOPYDATA message followed by a WMTIMER message, as demonstrated by GetAd, aka "Flaw in Windows WMTIMER...

[A3SC] MS IIS out of process privilege elevation vulnerability(A3CR@K-Vul-2002-06-002)

A3 Security Consulting: CR@K Vulnerability Research Title : MS IIS out of process privilege elevation vulnerabilityA3CR@K-Vul-2002-06-002 Reporter : li0n [email protected] Affected software : IIS 4.0, 5.0, 5.1 Risk : High Local/Remote : Local Category : Windows - IIS - Privilege elevation Date :...