7744 matches found
Remote code execution in Samba's WINS
Description Secunia Research reported a vulnerability that allows for the execution of arbitrary code in nmbd. This defect may only be exploited when the "wins support" parameter has been enabled in smb.conf. Patch Availability A patch addressing this defect has been posted to...
FreeBSD : xpdf -- multiple remote Stream.CC vulnerabilities (2747fc39-915b-11dc-9239-001c2514716c)
Secunia Research reports : Secunia Research has discovered some vulnerabilities in Xpdf, which can be exploited by malicious people to compromise a user's system. - An array indexing error within the 'DCTStream::readProgressiveDataUnit' method in xpdf/Stream.cc can be exploited to corrupt memory...
Ubuntu 5.10 / 6.06 LTS / 6.10 : xmms vulnerabilities (USN-445-1)
Sven Krewitt of Secunia Research discovered that XMMS did not correctly handle BMP images when loading GUI skins. If a user were tricked into loading a specially crafted skin, a remote attacker could execute arbitrary code with user privileges. Note that Tenable Network Security has extracted the...
iDefense Security Advisory 11.07.07: Oracle 10g R2 PITRIG_DROPMETADATA Buffer Overflow Vulnerability
iDefense Security Advisory 11.07.07 http://labs.idefense.com/intelligence/vulnerabilities/ Nov 07, 2007 I. BACKGROUND Oracle Database Server is a family of database products that range from personal databases to enterprise solutions. Further information is available at the following URL...
Secunia Research: AbiWord Link Grammar "separate_sentence()" Buffer Overflow
====================================================================== Secunia Research 07/11/2007 - AbiWord Link Grammar "separatesentence" Buffer Overflow - ====================================================================== Table of Contents Affected...
Secunia Research: Xpdf "Stream.cc" Multiple Vulnerabilities
====================================================================== Secunia Research 07/11/2007 - Xpdf "Stream.cc" Multiple Vulnerabilities - ====================================================================== Table of Contents Affected...
Secunia Research: Link Grammar "separate_sentence()" Buffer Overflow
====================================================================== Secunia Research 07/11/2007 - Link Grammar "separatesentence" Buffer Overflow - ====================================================================== Table of Contents Affected...
Secunia Research: CUPS IPP Tags Memory Corruption Vulnerability
====================================================================== Secunia Research 31/10/2007 - CUPS IPP Tags Memory Corruption Vulnerability - ====================================================================== Table of Contents Affected...
Secunia Research: IPSwitch IMail Server IMail Client Buffer Overflow
====================================================================== Secunia Research 30/10/2007 - IPSwitch IMail Server IMail Client Buffer Overflow - ====================================================================== Table of Contents Affected...
iDefense Security Advisory 10.30.07: IBM AIX 5.2 crontab BSS Buffer Overflow Vulnerability
IBM AIX 5.2 crontab BSS Buffer Overflow Vulnerability iDefense Security Advisory 10.30.07 http://labs.idefense.com/intelligence/vulnerabilities/ Oct 30, 2007 I. BACKGROUND The crontab program is a user utility that enables users to create, remove, and edit cron jobs. The cron jobs will then later...
Secunia Research: IBM Tivoli Storage Manager Client CAD Service Script Insertion
====================================================================== Secunia Research 29/10/2007 - IBM Tivoli Storage Manager Client CAD Service Script Insertion - ====================================================================== Table of Contents Affected...
Mozilla Firefox <= 2.0.0.7 Remote Denial of Service Exploit
No description provided by source. i WwW.BugReport.ir AmnPardaz Security Research & Penetration Testing Group Bug Title: Mozilla Firefox 2.0.0.7 Denial of Service Vendor URL: www.mozilla.org Version: = 2.0.0.7 Fix Available: Yes! Soloution: Update to 2.0.0.8...
Mozilla Firefox 2.0.0.7 - Malformed XBL Constructor Remote Denial of Service
source: https://www.securityfocus.com/bid/26172/info Mozilla Firefox is prone to a remote denial-of-service vulnerability because it fails to adequately sanitize user-supplied input. Attackers can exploit this issue to cause denial-of-service conditions. Firefox 2.0.0.7 is vulnerable; other...
Secunia Research: IrfanView Palette File Importing Buffer Overflow Vulnerability
====================================================================== Secunia Research 16/10/2007 - IrfanView Palette File Importing Buffer Overflow Vulnerability - ====================================================================== Table of Contents Affected...
Unfixed XSS vulnerability at www.sehitlerolmez.net
Security researcher st@rext, has submitted on 14/10/2007 a cross-site-scripting XSS vulnerability affecting www.sehitlerolmez.net, which at the time of submission ranked 282766 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 02/11/2007. It is...
Dvbbs8 Action Network Forum latest 0day research-vulnerability warning-the black bar safety net
I here it has been assumed that a DVBBS8 SQL: We first register a user, just find a post. Just broke。。。。 We have to re-send a post. Discovery table review, where to capture | POST /dvbbs8/Appraise. asp? action=save HTTP/1.1 Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg,...
CA BrightStor ARCServe BackUp Message Engine Remote Stack Overflow Vulnerability
hi full-disclosure, CA BrightStor ARCServe BackUp Message Engine Remote Stack Overflow Vulnerability by cocoruder of Fortinet Security Research Team http://ruder.cdut.net Summary: A remote stack overflow vulnerability exist in the RPC interface of CA BrightStor ARCServe BackUp. An arbitrary...
Simple PHP Blog Multiple Vulnerabilities
Secure Network - Security Research Advisory Vuln name: Simple PHP Blog Multiple Vulnerabilities Systems affected: simplePHPBlog 0.5.0.1, simplePHPBlog 0.4.8 and all previous versions Systems not affected: - Severity: Medium Local/Remote: Remote Vendor URL: http://www.simplephpblog.com/ Authors:...
gcaldaemon-dos.txt
Secure Network - Security Research Advisory Vuln name: GCALDaemon Remote DoS Systems affected: GCALDaemon 1.0-beta13 all platforms Systems not affected: - Severity: Low Local/Remote: Remote Vendor URL: http://gcaldaemon.sourceforge.net/ Authors: Luca "ikki" Carettoni -...
Unfixed XSS vulnerability at www.csl-freemail.de
Security researcher T-Ping, has submitted on 18/09/2007 a cross-site-scripting XSS vulnerability affecting www.csl-freemail.de, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 20/09/2007. It is currently...