CVE-2008-1246

The Cisco PIX/ASA Finesse Operation System 7.1 and 7.2 allows local users to gain privileges by entering characters at the enable prompt, erasing these characters via the Backspace key, and then holding down the Backspace key for one second after erasing the final character. NOTE: third parties,...

[SECURITY] Fedora 8 Update: synce-gnome-0.11-2.fc8

SynCE-GNOME is currently just a buzzword for an idea that eventually, will encapsulate multiple applications into one applet. At the moment, SynCE-GNOME as we know it only displays nice libnotify messages when a devi ce is connected or disconnected, and it prompts for a password if one is requi r...

Mishandling of locally-saved plain text files — Mozilla

Mozilla contributor oo.rio.oo demonstrated that once a file with Content-Disposition: attachment and improper Content-Type: plain/text is saved locally, the browser would no longer open local files with .txt extensions for viewing, but would rather prompt the user to save the file...

Moving a subtask Issue Type will sometimes ask the user for a Security Level even though this value is inherited from the Parent Issue.

When you move a subtask from an Issue Type where Security Level is a hidden field, to one where Security Level is no longer hidden, the system can mistakenly ask the User for a new Security Level. This is only a minor issue, as then the subtask will not actually take on the chosen value - it will...

Quickly remove illegal file name The code of 0day-vulnerability warning-the black bar safety net

allyesno: we will encounter many so-called illegal file name For example .. con, nul, etc. FlowerCode gives the following method can quickly delete these file names http://hi.baidu.com/flowercode/blog/item/3f68be02a7cfd10d4bfb519f.html References Two lines of code get deleted quickly using illega...

Code injection

Mail in Apple iPhone 1.1.1 allows remote user-assisted attackers to force the iPhone user to make calls to arbitrary telephone numbers via a "tel:" link, which does not prompt the user before dialing the number...

CVE-2007-3755

Mail in Apple iPhone 1.1.1 allows remote user-assisted attackers to force the iPhone user to make calls to arbitrary telephone numbers via a "tel:" link, which does not prompt the user before dialing the number...

CVE-2007-3755

The CVE-2007-3755 issue affects the Apple iPhone’s Mail client (around v1.1.1) where embedded tel: links can trigger phone calls without user confirmation. The root cause is processing tel: hyperlinks in the Mail client that allows remote user-assisted attackers to cause the device to dial arbitr...

PT-2007-4996 · Apple · Iphone

Name of the Vulnerable Software and Affected Versions: Apple iPhone version 1.1.1 Description: The issue allows remote user-assisted attackers to force the iPhone user to make calls to arbitrary telephone numbers via a "tel:" link. This link does not prompt the user before dialing the number...

Design/Logic Flaw

Apple Safari for Windows 3.0.3 and earlier does not prompt the user before downloading a file, which allows remote attackers to download arbitrary files to the desktop of a client system via certain HTML, as demonstrated by a filename in the DATA attribute of an OBJECT element. NOTE: it could be...

CVE-2007-4424

Apple Safari for Windows 3.0.3 and earlier does not prompt the user before downloading a file, which allows remote attackers to download arbitrary files to the desktop of a client system via certain HTML, as demonstrated by a filename in the DATA attribute of an OBJECT element. NOTE: it could be...

Microsoft IE URLMON.DLL COM对象实例化无效内存访问漏洞（MS07-033）

Internet Explorer是一款非常流行的WEB浏览器。 Internet Explorer在创建某些COM对象时存在内存破坏漏洞，成功利用此漏洞的攻击者可能完全控制受影响的系统。 如果调用了IObjectSafety函数的话，可能会访问未初始化的内存，导致执行任意代码。 攻击者可以通过构建特制的网页来利用该漏洞，当用户查看网页时，该漏洞可能允许远程执行代码。 Microsoft Internet Explorer 6.0 SP1 Microsoft Internet Explorer 6.0 Microsoft Internet Explorer 5.0.1 SP4 临时解决方...

Buffer overflow

Buffer overflow in backup/src/vmsbackup.c aka the backup utility in FreeVMS before 0.3.6 might allow local users to gain privileges via a long string in response to an "extract ny" prompt...

CVE-2007-3124

Buffer overflow in backup/src/vmsbackup.c aka the backup utility in FreeVMS before 0.3.6 might allow local users to gain privileges via a long string in response to an "extract ny" prompt...

CVE-2007-3124

Buffer overflow in backup/src/vmsbackup.c aka the backup utility in FreeVMS before 0.3.6 might allow local users to gain privileges via a long string in response to an "extract ny" prompt...

Design/Logic Flaw

GNU screen 4.0.3 allows local users to unlock the screen via a CTRL-C sequence at the password prompt. NOTE: multiple third parties report inability to reproduce this issue...

CVE-2007-3048

GNU screen 4.0.3 allows local users to unlock the screen via a CTRL-C sequence at the password prompt. NOTE: multiple third parties report inability to reproduce this issue...

CVE-2007-3048

GNU screen 4.0.3 allows local users to unlock the screen via a CTRL-C sequence at the password prompt. NOTE: multiple third parties report inability to reproduce this issue...

CVE-2007-3048

GNU screen 4.0.3 allows local users to unlock the screen via a CTRL-C sequence at the password prompt. NOTE: multiple third parties report inability to reproduce this issue...

CVE-2007-3048

Summary: CVE-2007-3048 affects GNU Screen 4.0.3, where local users may unlock the screen by issuing a CTRL-C at the password prompt. The issue has been reported with inconsistent reproducibility across reports. Impact: Local privilege-related concern affecting screen sessions; exploitation appear...