kernel security and bug fix update

2.6.9-89.0.15.0.1.EL - fix skb alignment that was causing sendto to fail with EFAULT Olaf Kirch orabug 6845794 - fix enomem due to larger mtu size page alloc Zach Brown orabug 5486128 - backout patch sysrq-b that queues upto keventd thread Guru Anbalagane orabug 6125546 - netrx/netpoll race...

SuSE9 Security Update : YaST2 (YOU Patch Number 11952)

This update fixes a security bug in yast2-core that allows local attackers to provide malicious YaST2 modules to YaST2 which are subsequently executed with root privileges. To trigger this vulnerability root has to execute yast2 in an untrusted directory i.e. /tmp. %NASLMINLEVEL 70300 C Tenable...

Notepad++ 5.4.5 - .C .CPP Local Stack Buffer Overflow (PoC)

Notepad++ 5.4.5 - .C .CPP Local Stack Buffer Overflow PoC / 0dayNotepad++ 5.4.5 Local .C/CPP Stack Buffer Overflow POC by fl0 fl0w / / LATEST FIXES Notepad++ v5.4.5 fixed bugs from v5.4.4 : 1. Fix plugins shortcuts not working bug. 2. Fix the tooltip on toolbar display bug for the plugins icons. ...

Aurora CMS 1.0.2 - 'install.plugin.php' Remote File Inclusion

--------------------------------------------------------------------------------------------------------------- Aurora Content Management System Enterprise Edition install.plugin.php = Remote File Include Vulnerability...

PHPSANE 0.5.0 - save.php Remote File Inclusion

PHPSANE 0.5.0 - save.php Remote File Inclusion ----------------------------------------------------------------------------------- phpSANE v 0.5.0 save.php Remote File Inclusion Vulnerability ----------------------------------------------------------------------------------- Author: CoBRa21 Mail:...

kernel

New Linux kernel packages are available for Slackware 12.2 and -current to address a security issue. A kernel bug discovered by Tavis Ormandy and Julien Tinnes of the Google Security Team could allow a local user to fill memory page zero with arbitrary code and then use the kernel sendpage...

2WIRE Gateway - Authentication Bypass / Password Reset (2)

2WIRE GATEWAY AUTHENTICATION BYPASS & PASSWORD RESET - Part 2 08/15/09 DESCRIPTION ----------------- Additional to the authentication bypass exploit page submitted by hkm. EXPLOIT/POC ----------------- Authentication Bypass - just use this page to set a new password...

CVE-2009-2475

Sun Java SE 5.0 before Update 20 and 6 before Update 15, and OpenJDK, might allow context-dependent attackers to obtain sensitive information via vectors involving static variables that are declared without the final keyword, related to 1 LayoutQueue, 2 Cursor.predefined, 3...

Adobe 'Zero Day' Flaw is Eight Months Old

The current zero-day attacks against Adobe Flash Player are not quite zero-day after all. According to new information, Adobe’s security response team knew about the vulnerability since December 31, 2008 see image below but it was misdiagnosed as a “data loss corruption” issue. When word of the...

nfsen -- remote command execution

nfsen reports: Due to double input checking, a remote command execution security bug exists in all NfSen versions 1.3 and 1.3.1. Users are requested to update to nfsen-1.3.2...

AdaptBB 1.0 (forumspath) Remote File Inclusion Vulnerability

No description provided by source. =-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=- =- AdaptBB 1.0 Remote File Include =- =- Webpage: http://www.adaptbb.com =- Download http://sourceforge.net/project/downloading.php?groupid=253154&filename=AdaptBB1.0.zip...

Online Grades & Attendance 3.2.6 Credentials Changer SQL Exploit

No description provided by source. !/usr/bin/perl || || || -----------------------------------------\ == -- ----------- ---------------------------- ------------------/ ¡VIVA SPAIN!...¡GANAREMOS EL MUNDIAL!...o.O ¡PROUD TO BE SPANISH!...

Mozilla Firefox 3.0.10 (KEYGEN) Remote Denial of Service Exploit

Exploit for multiple platform in category dos / poc ================================================================ Mozilla Firefox 3.0.10 KEYGEN Remote Denial of Service Exploit ================================================================ ===8=================== Original Nachrichtentext...

Mozilla Firefox 3.0.10 - KEYGEN Remote Denial of Service

Mozilla Firefox 3.0.10 - KEYGEN Remote Denial of Service ===8=================== Original Nachrichtentext =================== From the very-low-hanging-fruit-department Firefox Denial of Service KEYGEN Release mode: Forced release. Ref : TZO-27-2009 - Firefox Denial of Service KEYGEN WWW :...

Lighttpd < 1.4.23 (BSD/Solaris) - Source Code Disclosure

Severe vulnerability due to a bug in FreeBSD, OS X and Solaris 10 filesystems affecting Lighttpd 1.4.23 A bug was discovered in the way FreeBSD, OS X and Solaris prior version 10 handle symlinks appended with a slash /. Accessing a regular file through a symbolic link with appended slash succeeds...

Kensei Board 2.0.0b - Multiple SQL Injections

Kensei Board = 2.0.0b Multiple Remote SQL Injection Vulnerabilities Bug found && Exploited by cOndemned Greetz: SELECT FROM friends Download Script : http://www.kenseiboard.com/counter/click.php?id=2 --- source of index.php : ... 87. if $incfunction == "showforum" 88. if $GETt == "" 89...

Dog Pedigree Online Database 1.0.1b - Blind SQL Injection

!/usr/bin/perl || || || -----------------------------------------\ == -- ----------- ---------------------------- ------------------/ ¡VIVA SPAIN!...¡GANAREMOS EL MUNDIAL!...o.O ¡PROUD TO BE SPANISH! ----------------------------------------------------------------------------------------------...

webSPELL 4.2.0e - page Blind SQL Injection

webSPELL 4.2.0e - page Blind SQL Injection !/usr/bin/perl use LWP::UserAgent; use HTTP::Cookies; use Getopt::Long; '/ -.- ------------------oOO------OOo----------------- | | | / / / / | | / / / / / / / / / / / | | // // / / / // / // / // | | ///,// /./,/, // | | Security Research Division //...

Leap CMS 0.1.4 - 'searchterm' Blind SQL Injection

!/usr/bin/perl || || || -----------------------------------------\ == -- ----------- ---------------------------- ------------------/ ¡VIVA SPAIN!...¡GANAREMOS EL MUNDIAL!...o.O ¡PROUD TO BE SPANISH! ----------------------------------------------------------------------------------------------...

CVE-2009-1285: phpMyAdmin Code Injection

Well, I usually don’t blog about these bugs but phpMyAdmin is a project that is used almost everywhere and this is a quick and dirty way to get code execution. This issue affects phpMyAdmin 3.x before 3.1.3.2 and it was disclosed on 14 April 2009. The bug is present at...