avts10-passwd.txt

126 $result.=" ."; else $result.=" ".$string$i; if strlendechexord$string$i==2 $exa.=" ".dechexord$string$i...

AV Tutorial Script 1.0 - Remote User Pass Change

AV Tutorial Script 1.0 - Remote User Pass Change 126 $result.=" ."; else $result.=" ".$string$i; if strlendechexord$string...

Mandrake Linux Security Advisory : jasper (MDKSA-2007:129)

A function in the JasPer JPEG-2000 library before 1.900 could allow a remote user-assisted attack to cause a crash and possibly corrupt the heap via malformed image files. Updated packages have been patched to prevent this issue. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptiv...

[ MDKSA-2007:129 ] - Updated jasper packages fix vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Mandriva Linux Security Advisory MDKSA-2007:129 http://www.mandriva.com/security/ Package : jasper Date : June 19, 2007 Affected: 2007.0, 2007.1, Corporate 4.0 Problem Description: A function in the JasPer JPEG-2000 library before 1.900 could allow a...

Important: Red Hat Security Advisory: kernel security and bug fix update

Updated kernel packages that fix security issues and bugs in the Red Hat Enterprise Linux 5 kernel are now available. This update has been rated as having important security impact by the Red Hat Security Response Team. The Linux kernel handles the basic functions of the operating system. These n...

CVE-2007-0936

Multiple unspecified vulnerabilities in Microsoft Visio 2002 allow remote user-assisted attackers to execute arbitrary code via a Visio .VSD, VSS, .VST file with a crafted packed object that triggers memory corruption, aka "Visio Document Packaging Vulnerability."...

CVE-2007-0934

Unspecified vulnerability in Microsoft Visio 2002 allows remote user-assisted attackers to execute arbitrary code via a Visio .VSD, VSS, .VST file with a crafted version number that triggers memory corruption...

CVE-2007-0934

Unspecified vulnerability in Microsoft Visio 2002 allows remote user-assisted attackers to execute arbitrary code via a Visio .VSD, VSS, .VST file with a crafted version number that triggers memory corruption...

CVE-2007-2907

Unspecified vulnerability in SSL-Explorer before 0.2.13 allows remote authenticated users to enter redirect URLs containing 1 JavaScript or 2 HTTP headers via an unspecified vector, possibly the forwardTo parameter to redirect.do. NOTE: the impact might be cross-site scripting XSS or HTTP request...

CVE-2007-2746

The CVE-2007-2746 entry concerns Plain Black WebGUI: the viewList function in lib/WebGUI/Asset/Wobject/DataForm.pm for versions before 7.3.14 improperly uses data structures containing privilege information, enabling remote authenticated users to obtain sensitive data or potentially cause other u...

CVE-2007-2721

The jpcqcxgetcompparms function in jpc/jpccs.c for the JasPer JPEG-2000 library libjasper before 1.900 allows remote user-assisted attackers to cause a denial of service crash and possibly corrupt the heap via malformed image files, as originally demonstrated using imagemagick convert...

CVE-2007-2692

The mysqlchangedb function in MySQL 5.0.x before 5.0.40 and 5.1.x before 5.1.18 does not restore THD::dbaccess privileges when returning from SQL SECURITY INVOKER stored routines, which allows remote authenticated users to gain privileges...

CVE-2007-2699

The CVE-2007-2699 entry concerns BEA WebLogic Express/Server 9.0/9.1 where the Administration Console fails to enforce Domain Security Policies, allowing remote administrative users in the Deployer role to upload arbitrary files. The connected documents indicate an abuse scenario via the WebLogic...

CVE-2007-2700

The vulnerability CVE-2007-2700 affects BEA WebLogic Express and WebLogic Server (versions 9.0 and 9.1). The WLST script generated by configToScript does not encrypt certain attributes in configuration files when creating a new domain, enabling remote authenticated users to obtain sensitive infor...

snaps144-passwd.txt

126 $result.=" ."; else...

Snaps! Gallery 1.4.4 - Remote User Pass Change

Snaps! Gallery 1.4.4 - Remote User Pass Change ?php / \|/// \ - - // @ @ ----oOOo---oOOo--------------------------------------------------- Y! Underground Group [email protected] Dj7xpl.2600.ir ----ooooO-----Ooooo-------------------------------------------------- \ / \ /...

util security update

CentOS Errata and Security Advisory CESA-2007:0235 An updated util-linux package that corrects a security issue and fixes several bugs is now available. This update has been rated as having low security impact by the Red Hat Security Response Team. The util-linux package contains a collection of...

RHEL 4 : util-linux (RHSA-2007:0235)

An updated util-linux package that corrects a security issue and fixes several bugs is now available. This update has been rated as having low security impact by the Red Hat Security Response Team. The util-linux package contains a collection of basic system utilities. A flaw was found in the way...

Design/Logic Flaw

mirror --script in lftp before 3.5.9 does not properly quote shell metacharacters, which might allow remote user-assisted attackers to execute shell commands via a malicious script. NOTE: it is not clear whether this issue crosses security boundaries, since the script already supports commands su...

CVE-2007-2348

mirror --script in lftp before 3.5.9 does not properly quote shell metacharacters, which might allow remote user-assisted attackers to execute shell commands via a malicious script. NOTE: it is not clear whether this issue crosses security boundaries, since the script already supports commands su...