ARP Spoof

Added: 08/23/2010 Background The Address Resolution Protocol ARP is used to resolve IP addresses into the hardware addresses which are used for delivering packets on a local network. Problem It is possible to send a computer a forged ARP reply, which is then stored in that computer's cache. This...

Resoluciуn mнnima de 800x600 SQLi injection Vulnerability

Exploit for php platform in category web applications ========================================================= Resoluciуn mнnima de 800x600 SQLi injection Vulnerability =========================================================...

kernel: dns_resolver upcall security issue

The DNS resolution functionality in the CIFS implementation in the Linux kernel before 2.6.35, when CONFIGCIFSDFSUPCALL is enabled, relies on a user's keyring for the dnsresolver upcall in the cifs.upcall userspace helper, which allows local users to spoof the results of DNS queries and perform...

MDVA-2010:081 : glibc

glibc 2.10.1 on Mandriva 2010.0 can't resolve names with some buggy routers. This update includes upstream fixes post glibc 2.10.1 release that fixes the issue Mandriva bug 57698. Other glibc resolver fixes are included too, which addresses also some other upstream opened bugs. %NASLMINLEVEL 7030...

Apache vulnerability after the prefix name resolution vulnerability(analysis and Defense)-vulnerability warning-the black bar safety net

cnbird We all know that windows2003 + IIS6. 0, if the directory structure has xxx. asp such a directory, then all the directory of the file regardless of the extension of what are as asp to parse. We generally call this the loophole for windows2003+iis6. 0 directory to resolve the vulnerability...

Oracle JRE/JDK: Multiple vulnerabilities

Background The Oracle Java Development Kit JDK formerly known as Sun JDK and the Oracle Java Runtime Environment JRE formerly known as Sun JRE provide the Oracle Java platform formerly known as Sun Java Platform. Description Multiple vulnerabilities have been reported in the Oracle Java...

multipath-tools: World-writeable socket

Background multipath-tools are used to drive the Device Mapper multipathing driver. Description multipath-tools uses world-writable permissions for the socket file /var/run/multipathd.sock. Impact Local users could send arbitrary commands to the multipath daemon, causing cluster failures and data...

Fedora Update for dvipng FEDORA-2010-8252

Check for the Version of dvipng OpenVAS Vulnerability Test Fedora Update for dvipng FEDORA-2010-8252 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the term...

IBM Cognos Express Server Backdoor Account Remote Code Execution

Added: 05/25/2010 CVE: CVE-2010-0557 BID: 38084 OSVDB: 62118 Background IBM Cognos Express is an integrated business intelligence BI and planning solution which delivers the essential reporting, analysis, dashboard, scorecard, planning, budgeting and forecasting capabilities that midsize companie...

[SECURITY] Fedora 11 Update: dvipng-1.13-1.fc11

This program makes PNG and/or GIF graphics from DVI files as obtained from TeX and its relatives. It is intended to produce anti-aliased screen-resolution images as fast as is possible. The target audience is people who need to generate and regenerate many images again and again...

[SECURITY] Fedora 12 Update: dvipng-1.13-1.fc12

This program makes PNG and/or GIF graphics from DVI files as obtained from TeX and its relatives. It is intended to produce anti-aliased screen-resolution images as fast as is possible. The target audience is people who need to generate and regenerate many images again and again...

Fedora Update for couchdb FEDORA-2010-8298

Check for the Version of couchdb OpenVAS Vulnerability Test Fedora Update for couchdb FEDORA-2010-8298 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...

[SECURITY] Fedora 11 Update: couchdb-0.10.2-1.fc11

Apache CouchDB is a distributed, fault-tolerant and schema-free document-oriented database accessible via a RESTful HTTP/JSON API. Among other features, it provides robust, incremental replication with bi-directional conflict detection and resolution, and is queryable and indexable using a...

Mandriva Update for gdm MDVA-2010:133 (gdm)

Check for the Version of gdm OpenVAS Vulnerability Test Mandriva Update for gdm MDVA-2010:133 gdm Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms o...

Mandriva Update for gdm MDVA-2010:133 (gdm)

Check for the Version of gdm OpenVAS Vulnerability Test Mandriva Update for gdm MDVA-2010:133 gdm Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms o...

Microsoft SQL Server - Resolution Overflow (MS02-039) (Metasploit)

$Id: ms02039slammer.rb 9179 2010-04-30 08:40:19Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework...

Sudo sudoedit Local Command Privilege Escalation Vulnerability

Sudo contains a vulnerability that could allow an authenticated, local attacker to execute arbitrary commands with elevated privileges. This vulnerability exists due to an error in the affected software while matching commands due to incorrect path resolution. A local attacker with privileges to...

FreeBSD : sudo -- Privilege escalation with sudoedit (1a9f678d-48ca-11df-85f8-000c29a67389)

Todd Miller reports : Sudo's command matching routine expects actual commands to include one or more slash '/' characters. The flaw is that sudo's path resolution code did not add a './' prefix to commands found in the current working directory. This creates an ambiguity between a 'sudoedit'...

sudo -- Privilege escalation with sudoedit

Todd Miller reports: Sudo's command matching routine expects actual commands to include one or more slash '/' characters. The flaw is that sudo's path resolution code did not add a "./" prefix to commands found in the current working directory. This creates an ambiguity between a "sudoedit" comma...

RedHat Update for brltty RHSA-2010:0181-05

Check for the Version of brltty OpenVAS Vulnerability Test RedHat Update for brltty RHSA-2010:0181-05 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the ter...