MS08-039: Vulnerabilities in Outlook Web Access for Exchange Server Could Allow Elevation of Privilege (953747)

The remote host is running a version of Outlook Web Access OWA for Exchange Server that is vulnerable to multiple cross-site scripting issues in the HTML parser and Data validation code. These vulnerabilities may allow an attacker to elevate his privileges by convincing a user to open a malformed...

Microsoft Security Bulletin MS08-034 – Important Vulnerability in WINS Could Allow Elevation of Privilege (948745)

Microsoft Security Bulletin MS08-034 – Important Vulnerability in WINS Could Allow Elevation of Privilege 948745 Published: June 10, 2008 | Updated: June 11, 2008 Version: 1.1 General Information Executive Summary This security update resolves a privately reported vulnerability in the Windows...

verycms2. 0 elevation of privilege vulnerability-vulnerability warning-the black bar safety net

code: passportclient.php function Loginipwrite$winduid global $db,$timestamp,$onlineip; $logininfo="$onlineip|$timestamp|6"; $db-update "UPDATE pwuser SET lastvisit=thisvisit,thisvisit="$timestamp",onlineip="$logininfo" WHERE uid="$winduid""; Look at the$onlineip how to Global.php...

Microsoft Security Bulletin MS08-025 – Important Vulnerability in Windows Kernel Could Allow Elevation of Privilege (941693)

Microsoft Security Bulletin MS08-025 – Important Vulnerability in Windows Kernel Could Allow Elevation of Privilege 941693 Published: April 8, 2008 Version: 1.0 General Information Executive Summary This security update resolves a privately reported vulnerability in the Windows kernel. A local...

Moderate: Red Hat Security Advisory: dbus security update

Updated dbus packages that fix an issue with circumventing the security policy are now available. This update has been rated as having moderate security impact by the Red Hat Security Response Team. D-Bus is a system for sending messages between applications. It is used both for the system-wide...

ListManager < 9.3b / 9.2c / 8.95d Multiple Vulnerabilities

The remote host is running ListManager, a web-based commercial mailing list management application from Lyris. According to its banner, the version of ListManager installed on the remote host relies on client-side code to validate unspecified form parameters before processing them. An attacker wh...

Samba 3.0.27a send_mailslot() Remote Buffer Overflow PoC

No description provided by source. / http://secunia.com/secuniaresearch/2007-99/advisory/ A remote attacker could send a specially crafted "SAMLOGON" domain logon packet, possibly leading to the execution of arbitrary code with...

SuSE 10 Security Update : IBM Java 1.4.2 (ZYPP Patch Number 4542)

The IBM Java JRE/SDK has been brought to release 1.4.2 SR9, containing several bugfixes, including the following security fixes : - A buffer overflow vulnerability in the image parsing code in the JavaTM Runtime Environment may allow an untrusted applet or application to elevate its privileges. F...

Microsoft SharePoint Server跨站脚本漏洞（MS07-059）

BUGTRAQ ID: 23832 CVECAN ID: CVE-2007-2581 SharePoint Server是一个服务器功能集成套件，提供全面的内容管理和企业搜索，加速共享业务流程并简化跨界限信息共享。 Microsoft Windows SharePoint Services 3.0和Microsoft Office SharePoint Server 2007中存在一个跨站脚本执行漏洞，恶意服务器可能利用此漏洞收集客户端系统的有用信息。...

VMware Workstation < 5.5.5 and Server < 1.0.4 Multiple Vulnerabilities

The version of VMware Workstation/Server installed on the remote host is affected by multiple vulnerabilities, including a privelege elevation vulnerability that allows a guest to take over a host and a buffer overflow vulnerability in the DHCP daemon. The buffer overlflow in the DHCP server may...

iDefense Security Advisory 08.16.07: IBM DB2 Universal Database Directory Creation Vulnerability

IBM DB2 Universal Database Directory Creation Vulnerability iDefense Security Advisory 08.16.07 http://labs.idefense.com/intelligence/vulnerabilities/ Aug 16, 2007 I. BACKGROUND IBM Corp.'s DB2 Universal Database product is a large database server product commonly used for high end databases. For...

Microsoft Virtual PC/Virtual Server堆溢出漏洞（MS07-049）

BUGTRAQ ID: 25298 CVECAN ID: CVE-2007-0948 Microsoft Virtual PC和Virtual Server都是流行的虚拟机工具，允许在同一台计算机上运行多个操作系统。 Microsoft Virtual PC和Microsoft Virtual Server中存在权限提升漏洞，这可能允许对虚拟机操作系统拥有管理员权限的用户在主机操作系统或其他虚拟机操作系统上运行代码。...

MS07-049: Vulnerability in Virtual PC and Virtual Server Could Allow Elevation of Privilege (937986)

The remote host is running a version of Virtual PC or Virtual Server that is vulerable to a heap overflow that could allow arbitrary code to be run. An attacker may use this to execute arbitrary code on the host operating system or others guests. To succeed, the attacker needs administrative...

GLSA-200707-10 : Festival: Privilege elevation

The remote host is affected by the vulnerability described in GLSA-200707-10 Festival: Privilege elevation Konstantine Shirow reported a vulnerability in default Gentoo configurations of Festival. The daemon is configured to run with root privileges and to listen on localhost, without requiring a...

[ GLSA 200707-10 ] Festival: Privilege elevation

Gentoo Linux Security Advisory GLSA 200707-10 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - http://security.gentoo.org/ - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Severity:...

Festival: Privilege elevation

Background Festival is a text-to-speech accessibility program. Description Konstantine Shirow reported a vulnerability in default Gentoo configurations of Festival. The daemon is configured to run with root privileges and to listen on localhost, without requiring a password. Impact A local attack...

DSA-1336-1 mozilla-firefox

Bulletin has no description...

symtdi. sys local privilege elevation vulnerability-vulnerability warning-the black bar safety net

The recent adoption of the disassembly analysis found a symantec of the vulnerability, this vulnerability is in symtdi.sys in the presence of, by the To the driver in the processing IRPMJDEVICECONTROL routine does not check the user passed a buffer address of legitimacy, Cause any kernel address ...

Moderate: xorg-x11 security update

6.8.2-1.EL.19.0.1 - Add Enterprise Linux detection 6.8.2-1.EL.19 - Fix root priv elevation bug 242903. Just don't delete the directory and make sure when we create the directory, that we set the mode using mkdir -m...

WinPcap 4.0 NPF.SYS Privilege Elevation Vulnerability PoC Exploit

No description provided by source. / WinPcap NPF.SYS Privilege Elevation Vulnerability PoC exploit ------------------------------------------------------------- Affected software: WinPcap versions affected Confirmed - WinPcap 4.0 and previous WinPcap fixed version stable : WinPcap 4.0.1 ...