RHEL 4 / 5 : ghostscript (RHSA-2008:0155)

The remote Redhat Enterprise Linux 4 / 5 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2008:0155 advisory. - ghostscript: stack-based buffer overflow in .seticcspace operator CVE-2008-0411 Note that Nessus has not tested for this issue but has instead...

libmodplug 's3m' Remote Buffer Overflow Vulnerability

No description provided by source. /The libmodplug library is prone to a remote buffer-overflow vulnerability because the software fails to perform adequate boundary checks on user-supplied data. An attacker can exploit this issue to execute arbitrary code with the privileges of the user running ...

Libmodplug - 's3m' Buffer Overflow

/The libmodplug library is prone to a remote buffer-overflow vulnerability because the software fails to perform adequate boundary checks on user-supplied data. An attacker can exploit this issue to execute arbitrary code with the privileges of the user running an application that relies on the...

xorg-race.txt

!/bin/sh Xorg-x11-xfs Race Condition Vuln local root exploit CVE-2007-3103 Another lame xploit by vl4dZ : works on redhat el5 and before $ id uid=1001kecos gid=1001user groups=1001user $ sh xfs-RaceCondition-root-exploit.sh Generate large data file in /tmp/.font-unix Wait for xfs service to be...

X.Org xorg-x11-xfs <= 1.0.2-3.1 Local Race Condition Exploit

No description provided by source. !/bin/sh Xorg-x11-xfs Race Condition Vuln local root exploit CVE-2007-3103 Another lame xploit by vl4dZ : works on redhat el5 and before $ id uid=1001kecos gid=1001user groups=1001user $ sh xfs-RaceCondition-root-exploit.sh Generate large data file in...

X.Org xorg-x11-xfs 1.0.2-3.1 - Local Race Condition

X.Org xorg-x11-xfs 1.0.2-3.1 - Local Race Condition !/bin/sh Xorg-x11-xfs Race Condition Vuln local root exploit CVE-2007-3103 Another lame xploit by vl4dZ : works on redhat el5 and before $ id uid=1001kecos gid=1001user groups=1001user $ sh xfs-RaceCondition-root-exploit.sh Generate large data...

X.Org xorg-x11-xfs 1.0.2-3.1 - Local Race Condition

!/bin/sh Xorg-x11-xfs Race Condition Vuln local root exploit CVE-2007-3103 Another lame xploit by vl4dZ : works on redhat el5 and before $ id uid=1001kecos gid=1001user groups=1001user $ sh xfs-RaceCondition-root-exploit.sh Generate large data file in /tmp/.font-unix Wait for xfs service to be...

Linux Kernel PowerPC chrp/setup.c文件空指针引用漏洞

BUGTRAQ ID: 27555 CVECAN ID: CVE-2007-6694 Linux Kernel是开放源码操作系统Linux所使用的内核。 Linux Kernel在PowerPC平台上执行里存在漏洞，本地攻击者可能利用此漏洞导致拒绝服务。 当运行在PowerPC时，Linux Kernel的chrp/setup.c文件中的chrpshowcpuinfo函数可能会出现崩溃。如果本地攻击者导致ofgetproperty函数失败的话，就会触发空指针引用，导致拒绝服务的情况。 Linux kernel 2.4.21 - 2.6.18-53 厂商补丁： RedHat ------...

libsmi, wireshark security update

CentOS Errata and Security Advisory CESA-2008:0058 Updated wireshark packages that fix several security issues are now available for Red Hat Enterprise Linux 4 and 5. This update has been rated as having moderate security impact by the Red Hat Security Response Team. Wireshark is a program for...

Debian Security Advisory DSA 403-1 (kernel-image-2.4.18-1-alpha, kernel-image-2.4.18-1-i386, kernel-source-2.4.18)

The remote host is missing an update to kernel-image-2.4.18-1-alpha, kernel-image-2.4.18-1-i386, kernel-source-2.4.18 announced via advisory DSA 403-1. OpenVAS Vulnerability Test $Id: deb4031.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 403-1 Authors:...

CVE-2008-0005

modproxyftp in Apache 2.2.x before 2.2.7-dev, 2.0.x before 2.0.62-dev, and 1.3.x before 1.3.40-dev does not define a charset, which allows remote attackers to conduct cross-site scripting XSS attacks using UTF-7 encoding...

OpenPegasus管理服务器PAM认证模块远程栈溢出漏洞

BUGTRAQ ID: 27188，27172 CVECAN ID: CVE-2008-0003，CVE-2007-5360 OpenPegasus是一个开源项目，用于实现DMTF CIM和WBEM企业管理标准。 OpenPegasus的PAM认证模块实现上存在缓冲区溢出漏洞，远程攻击者可能利用此漏洞控制服务器。 OpenPegasus的PAM认证模块中的PAMBasicAuthenticator::PAMCallback函数存在缓冲区溢出漏洞： // // copy the user password // respi-resp = char mallocPAMMAXMSGSIZE;...

Squid Proxy Cache Update Reply Processing 远程拒绝服务

Squid is prone to a remote denial-of-service vulnerability because the proxy server fails to perform boundary checks before copying user-supplied data into process buffers. Successfully exploiting this issue allows remote attackers to crash the affected application, denying further service to...

WordPress wp-db.php Character Set SQL Injection Vulnerability

CVE-2007-6318 WordPress is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in...

Fedora 8 : qt4-4.3.3-1.fc8 (2007-4285)

An update to the latest upstream release. Includes fix for security issue CVE-2007-5965 rhbz411751. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as...

Mozilla Firefox and SeaMonkey Windows.Location Property HTTP Referer头欺骗漏洞

Mozilla Firefox Seamonkey的一个弱点，允许攻击者以欺骗的HTTP referer头。弱点是由于要将一个小时间性差异时，用模态'警报（ ） '对话框，可以让使用者产生假的HTTP referer头。 攻击者可以利用这个问题来欺骗的HTTP referer头。这可能导致其它安全机制依赖于这个数据要失败的，或者让他们回到具误导性的资料。 此问题将影响之前的所有版本的Mozilla Firefox 2.0.0.10和Mozilla Seamonkey的1.1.7 。 Ubuntu Ubuntu Linux 7.10 sparc Ubuntu Ubuntu Linux 7....

RHEL 4 : libexif (RHSA-2007:1166)

The remote Redhat Enterprise Linux 4 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2007:1166 advisory. - libexif integer overflow CVE-2007-6352 Note that Nessus has not tested for this issue but has instead relied only on the application's self-reporte...

Adobe Flash Player ActionScript SecurityErrorEvent绕过安全限制漏洞

BUGTRAQ ID: 25260 CVECAN ID: CVE-2007-4324 Flash Player是一款非常流行的FLASH播放器。 Flash Player中的ActionScript 3（AS3）允许远程攻击者通过指定了连接的SWF电影绕过安全沙盒模型获得敏感信息并端口扫描任意主机，然后使用SecurityErrorEvent错误的定时差异判断端口是否开放。 AS3 Adobe引入了新的套接字相关事件SecurityErrorEvent。当Flash Player试图连接到关闭的TCP端口时会立即出现SecurityErrorEvent，如果服务在监听该端口Flash...

Adobe Flash Player ActiveX控件通用跨站脚本漏洞

Adobe Flash Player是一款流行的FLASH播放程序。 Adobe Flash Player包含的ActiveX控件处理navigateToURL API存在缺陷，远程攻击者可以利用漏洞进行跨站脚本攻击，可获得敏感信息或进行其他攻击。 navigateToURL API函数接收两个参数，URL和要浏览的帧名，SWF动画可在javascript: URI中传递而帧名可是其他域的帧名，这可导致URI执行在其他帧安全上下文中执行，攻击者可以构建恶意WEB页，诱使用户访问来触发。 RedHat Enterprise Linux Supplementary v.5 server...

OpenOffice HSQLDB数据库引擎未明JAVA代码执行漏洞

OpenOffice是一款开放冤代码的办公应用软件。 OpenOffice的第三方模块HSQLDB数据库引擎默认安装存在未明安全问题，远程攻击者可以利用漏洞以应用程序进程权限执行任意Java代码。 目前没有详细漏洞细节提供。 RedHat Enterprise Linux Optional Productivity Application v.5 server RedHat Enterprise Linux Desktop v.5 client RedHat Enterprise Linux WS 4 RedHat Enterprise Linux ES 4 RedHat...