Command injection

DOSBox 0.72 and earlier allows local users to obtain access to the filesystem on the host operating system via the mount command. NOTE: the researcher reports a vendor response stating that this is not a security problem...

CVE-2007-6328

DOSBox 0.72 and earlier allows local users to obtain access to the filesystem on the host operating system via the mount command. NOTE: the researcher reports a vendor response stating that this is not a security problem...

CVE-2007-6328

CVE-2007-6328 affects DOSBox 0.72 and earlier. The mount command allows local users to access the host filesystem, with complete impact on confidentiality, integrity, and availability per the CVSS data. The root cause is a filesystem access pathway via mount in older DOSBox versions; exploitation...

CVE-2007-6328

DOSBox 0.72 and earlier allows local users to obtain access to the filesystem on the host operating system via the mount command. NOTE: the researcher reports a vendor response stating that this is not a security problem...

CVE-2007-6328

DOSBox 0.72 and earlier allows local users to obtain access to the filesystem on the host operating system via the mount command. NOTE: the researcher reports a vendor response stating that this is not a security problem...

simpnews24103-xss.txt

netVigilance Security Advisory 70 SimpNews version 2.41.03 Multiple XSS Attack Vulnerabilities Description: SimpNews is a news system written in PHP. Features: Data stored in MySQL, admin interface, support for multiple languages, support for multiple instances in one database, own header, multip...

Recently updated links for users with personal spaces link to profile if personal space is not accessible

Users without the global access right for personal space can still see links to personal spaces in the "Recently updated" list on their dashboard. This is a serious security problem for extranets, when one wants to prevent non anonymous external users to see who's using the wiki. Note: this probl...

Recently updated links for users with personal spaces link to profile if personal space is not accessible

Users without the global access right for personal space can still see links to personal spaces in the "Recently updated" list on their dashboard. This is a serious security problem for extranets, when one wants to prevent non anonymous external users to see who's using the wiki. Note: this probl...

IE mhtml redirection vulnerability using the method-vulnerability warning-the black bar safety net

This vulnerability is primarily an information leak, see http://secunia. com/advisories/1 9 7 3 8/specific description. In order to ensure client safety, the xmlhttp is not cross-domain access to information. But the IE security problems, in the service end through the mhtml redirection...

Apache, IIS and other http servers allow by sending a carriage return character forged log-vulnerability warning-the black bar safety net

Description: The majority of the http server receives contains%0d%0a the request resolves to a carriage return and in the log wraps, the use of this A feature can be falsification of logs. Details: Most http servers support-such as%0 0 encoding of request, the main purpose is to provide reliable...

SUSE-SA:2006:043: apache,apache2

The remote host is missing the patch for the advisory SUSE-SA:2006:043 apache,apache2. The following security problem was fixed in the Apache and Apache 2 web servers: modrewrite: Fix an off-by-one security problem in the ldap scheme handling. For some RewriteRules this could lead to a pointer...

Fedora Core 6 : mono-1.1.17.1-4.fc6 (2007-067)

A security problem was found and fixed in mono class libraries that affects the Mono web server implementation. By appending spaces to URLs attackers could download the source code of ASP.net scripts that would normally get executed by the web server. After upgrading the packages you need to...

[Full-disclosure] REMLAB Web Mech Designer 2.0.5 Path Disclosure Vulnerability

Description: REMLAB http://remlab.sourceforge.net/ is a fully fuctional cross-platform web-based Battlemech designer for the tactical board game Battletech http://www.classicbattletech.com/ . REMLAB is built entirely on HTML, PHP, and JavaScript with AJAX functionality. The vulnerability exists i...

Solaris 2.5.1 (i386) : 106647-03

The remote host is missing Sun Security Patch number 106647-03 SNC 3.2: rpc.pcnfsd has security problem, also hangs and dumps core. Date this patch was last updated by Sun : Wed Dec 08 17:00:00 MST 1999 You should install this patch for your system to be up-to-date. %NASLMINLEVEL 999999...

Solaris 2.6 (sparc) : 106646-03

The remote host is missing Sun Security Patch number 106646-03 SNC 3.2: rpc.pcnfsd has security problem, also hangs and dumps core. Date this patch was last updated by Sun : Wed Jan 08 03:39:58 MST 2003 You should install this patch for your system to be up-to-date. %NASLMINLEVEL 999999...

Solaris 2.6 (i386) : 106647-03

The remote host is missing Sun Security Patch number 106647-03 SNC 3.2: rpc.pcnfsd has security problem, also hangs and dumps core. Date this patch was last updated by Sun : Wed Dec 08 17:00:00 MST 1999 You should install this patch for your system to be up-to-date. %NASLMINLEVEL 999999...

Solaris 7 (sparc) : 106646-03

The remote host is missing Sun Security Patch number 106646-03 SNC 3.2: rpc.pcnfsd has security problem, also hangs and dumps core. Date this patch was last updated by Sun : Wed Jan 08 03:39:58 MST 2003 You should install this patch for your system to be up-to-date. %NASLMINLEVEL 999999...

Solaris 7 (i386) : 106647-03

The remote host is missing Sun Security Patch number 106647-03 SNC 3.2: rpc.pcnfsd has security problem, also hangs and dumps core. Date this patch was last updated by Sun : Wed Dec 08 17:00:00 MST 1999 You should install this patch for your system to be up-to-date. %NASLMINLEVEL 999999...

MDKSA-2006:090 : shadow-utils

A potential security problem was found in the useradd tool when it creates a new user's mailbox due to a missing argument to the open call, resulting in the first permissions of the file being some random garbage found on the stack, which could possibly be held open for reading or writing before...

[Full-disclosure] IronWall webserver remote file access.

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 IronWall webserver 7.41 directory traversal - Software App: IronWall Webserver Version: 7.41 estable others not tested Platform: win32 Background Ironwall webserver is a small web server for win32 systems. It can be downloaded totally free at...