4971 matches found
[SECURITY] [DSA 1365-1] New id3lib3.8.3 packages fix denial of service
-------------------------------------------------------------------------- Debian Security Advisory DSA 1365-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff September 1st, 2007 http://www.debian.org/security/faq -...
DSA-1365-1 id3lib3.8.3
Bulletin has no description...
PHP and ASP are two kinds of script upload vulnerability explore-exploit warning-the black bar safety net
1 pass exploit the principles just for the form format of the upload of asp and php scripts ncnetcat For the submission packet the dos interface to run under: nc-vv www.. com 8 01.txt -vv: echo 8 0: the www port 1.txt: is your data packet to be transmitted use of more methods, please check this...
How to write a remote overflow EXPLOIT Linux-vulnerability warning-the black bar safety net
Translator's note: presumably a lot of Friends of buffer overflow very much aware, the Internet also has a lot about the windows buffer overflow exploits tutorial I also wrote several articles on. But under linux the complete overflow tutorials I haven't seen maybe is my eye clumsy. Today in...
Joomla 1.0.12 CMS - Session fixation Issue in backend Administration interface
==================================================================================== Team Intell Security Advisory TISA2007-03 ------------------------------------------------------------------------------------ Joomla 1.0.12 CMS - Session fixation Issue in backend Administration interface...
Mambo 4.6.2 CMS - Session fixation Issue in backend Administration interface
==================================================================================== Team Intell Security Advisory TISA2007-04 ------------------------------------------------------------------------------------ Mambo 4.6.2 CMS - Session fixation Issue in backend Administration interface...
DSA-1339-1 iceape - several
Bulletin has no description...
Debian DSA-1321-1 : evolution-data-server - programming error
It was discovered that the IMAP code in the Evolution Data Server performs insufficient sanitising of a value later used an array index, which can lead to the execution of arbitrary code. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin...
Debian DSA-1311-1 : postgresql-7.4 - programming error
It was discovered that the PostgreSQL database performs insufficient validation of variables passed to privileged SQL statement called'security definers', which could lead to SQL privilege escalation. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in...
CVE-2007-3280
The Database Link library dblink in PostgreSQL 8.1 implements functions via CREATE statements that map to arbitrary libraries based on the C programming language, which allows remote authenticated superusers to map and execute a function from any library, as demonstrated by using the system...
Design/Logic Flaw
The Database Link library dblink in PostgreSQL 8.1 implements functions via CREATE statements that map to arbitrary libraries based on the C programming language, which allows remote authenticated superusers to map and execute a function from any library, as demonstrated by using the system...
Debian DSA-1309-1 : postgresql-8.1 - programming error
It was discovered that the PostgreSQL database performs insufficient validation of variables passed to privileged SQL statements, so called'security definers', which could lead to SQL privilege escalation. The oldstable distribution sarge doesn't contain PostgreSQL 8.1. %NASLMINLEVEL 70300 C...
[SECURITY] [DSA 1309-1] New PostgreSQL 8.1 packages fix privilege escalation
-------------------------------------------------------------------------- Debian Security Advisory DSA 1309-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff June 16th, 2007 http://www.debian.org/security/faq -...
PHP parse_str() arbitrary variable overwrite
Title: PHP parsestr arbitrary variable overwrite Vendor: http://www.php.net/ Advisory: http://www.acid-root.new.fr/advisories/14070612.txt Author: DarkFig gmdarkfig at gmail dot com Written on: 2007/06/12 Released on: 2007/06/12 Risk level: Medium / High I.BACKGROUND Quote from php.net PHP is a...
eudora-seh-overwrite.txt
!/usr/bin/python Eudora 7.1 IMAP FLAGS 0day Remote SEH Overwrite PoC Exploit Bug discovered by Krystian Kloskowski h07 Tested on Eudora 7.1.0.9 / 2k SP4 Polish Shellcode type: Windows Execute Command calc.exe Details:.. Eudora -- SELECT IMBOX --------- IMAP server Eudora -- FLAGS ..AAAA... ----...
Debian DSA-1245-1 : proftpd - programming error
Martin Loewer discovered that the proftpd FTP daemon is vulnerable to denial of service if the addon module for Radius authentication is enabled. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Debian Security Advisor...
[SECURITY] [DSA 1288-1] New pptpd packages fix denial of service
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - -------------------------------------------------------------------------- Debian Security Advisory DSA 1288-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff May 8th, 2007 http://www.debian.org/security/faq -...
Debian DSA-1288-1 : pptpd - programming error
It was discovered that the PoPToP Point to Point Tunneling Server contains a programming error, which allows the tear-down of a PPTP connection through a malformed GRE packet, resulting in denial of service. The oldstable distribution sarge is not affected by this problem. %NASLMINLEVEL 70300 C...
3proxy 0.5.3g (Linux) - proxy.c logurl() Remote Buffer Overflow
3proxy 0.5.3g Linux - proxy.c logurl Remote Buffer Overflow / 3proxyv0.5.3g: linux remote buffer overflow exploit. by: vade79/v9 [email protected] fakehalo/realhalo compile: gcc x3proxy.c -o x3proxy syntax: ./x3proxy -pscr+ -h host sumus homepage/url: http://3proxy.ru/ 3Proxy tiny free proxy server...
Trojan-static variation dynamic DLL Trojans big secret-vulnerability warning-the black bar safety net
Believe often play the Trojan friends will know some of the Trojan characteristics, will also have their own favorite Trojan, however, many friends still don't know in recent years the rise of“DLL Trojan”. What is the“DLL Trojan”? It is generally the Trojans have what different? One, from the DLL...