FreeBSD : libxine -- multiple buffer overflow vulnerabilities (1b043693-8617-11db-93b2-000e35248ad7)

The libxine development team reports that several vulnerabilities had been found in the libxine library. The first vulnerability is caused by improper checking of the src/input/libreal/real.c 'realparsesdp' function. A remote attacker could exploit this by tricking an user to connect to a...

EEYE: Intel Network Adapter Driver Local Privilege Escalation

eEye Research - http://research.eeye.com Intel Network Adapter Driver Local Privilege Escalation Release Date: December 7, 2006 Date Reported: July 10, 2006 Severity: Medium Local Privilege Escalation to Kernel Systems Affected: Windows 2000, XP, 2003, Vista Intel PRO 10/100 - 8.0.27.0 or previou...

Xerox WorkCentre Multiple Vulnerabilities

Binary data 3834.prm...

Debian DSA-1207-2 : phpmyadmin - several vulnerabilities

The phpmyadmin update in DSA 1207 introduced a regression. This update corrects this flaw. For completeness, please find below the original advisory text : Several remote vulnerabilities have been discovered in phpMyAdmin, a program to administrate MySQL over the web. The Common Vulnerabilities a...

Debian DSA-977-1 : heimdal - several vulnerabilities

Two vulnerabilities have been discovered in heimdal, a free implementation of Kerberos 5. The Common Vulnerabilities and Exposures project identifies the following vulnerabilities : - CVE-2006-0582 Privilege escalation in the rsh server allows an authenticated attacker to overwrite arbitrary file...

Debian DSA-1029-1 : libphp-adodb - several vulnerabilities

Several vulnerabilities have been discovered in libphp-adodb, the 'adodb' database abstraction layer for PHP. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2006-0146 Andreas Sandblad discovered that improper user input sanitisation results in a potenti...

Debian DSA-1079-1 : mysql-dfsg - several vulnerabilities

Several vulnerabilities have been discovered in MySQL, a popular SQL database. The Common Vulnerabilities and Exposures Project identifies the following problems : - CVE-2006-0903 Improper handling of SQL queries containing the NULL character allows local users to bypass logging mechanisms. -...

Debian DSA-897-1 : phpsysinfo - programming errors

Several vulnerabilities have been discovered in phpsysinfo, a PHP based host information application. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2005-0870 Maksymilian Arciemowicz discovered several cross site scripting problems, of which not all wer...

Debian DSA-1071-1 : mysql - several vulnerabilities

Several vulnerabilities have been discovered in MySQL, a popular SQL database. The Common Vulnerabilities and Exposures Project identifies the following problems : - CVE-2006-0903 Improper handling of SQL queries containing the NULL character allows local users to bypass logging mechanisms. -...

Debian DSA-888-1 : openssl - cryptographic weakness

Yutaka Oiwa discovered a vulnerability in the Open Secure Socket Layer OpenSSL library that can allow an attacker to perform active protocol-version rollback attacks that could lead to the use of the weaker SSL 2.0 protocol even though both ends support SSL 3.0 or TLS 1.0. The following matrix...

GLSA-200609-01 : Streamripper: Multiple remote buffer overflows

The remote host is affected by the vulnerability described in GLSA-200609-01 Streamripper: Multiple remote buffer overflows Ulf Harnhammar, from the Debian Security Audit Project, has found that Streamripper is vulnerable to multiple stack based buffer overflows caused by improper bounds checking...

SAP DB / MaxDB WebDBM Client Database Name Remote Overflow

The remote host is running SAP DB or MaxDB, a SAP-certified open- source database supporting OLTP and OLAP. According to its version, the Web DBM component of MaxDB on the remote host reportedly contains a buffer overflow that can be triggered by an HTTP request containing a long database name. A...

[Full-disclosure] EEYE: Internet Explorer Compressed Content URL Heap Overflow Vulnerability

Internet Explorer Compressed Content URL Heap Overflow Vulnerability Release Date: August 24, 2006 Date Reported: August 17, 2006 Severity: High Code Execution Systems Affected: Internet Explorer 6 SP1 with MS06-042 - Windows 2000 Internet Explorer 6 SP1 with MS06-042 - Windows XP SP1 Overview:...

WEBInsta CMS index.php templates_dir Parameter Remote File Inclusion

The remote host is running WEBInsta CMS, a content management system written in PHP. The version of WEBInsta CMS installed on the remote host fails to sanitize user-supplied input to the 'templatesdir' parameter of the 'index.php' script before using it to include PHP code. Regardless of PHP's...

MyBB < 1.1.6 HTTP Header CLIENT-IP Field SQL Injection

Binary data 3689.prm...

[EEYEB-20060524] Symantec Remote Management Stack Buffer Overflow

Symantec Remote Management Stack Buffer Overflow Release Date: June 12, 2006 Date Reported: May 24, 2006 Severity: High Remote Code Execution Systems Affected: Symantec AntiVirus 10.0.x for Windows all versions Symantec AntiVirus 10.1.x for Windows all versions Symantec Client Security 3.0.x for...

WhatsUp Network Monitoring Tool Default Administrative Credentials

Binary data 3625.prm...

[EEYEB20051011A] - Microsoft Distributed Transaction Coordinator Heap Overflow

Microsoft Distributed Transaction Coordinator Heap Overflow http://www.eeye.com/html/research/advisories/AD20060509a.html Release Date: May 9, 2006 Date Reported: October 11, 2005 Patch Development Time In Days: 210 Severity: High Remote Code Execution Systems Affected: Windows NT 4.0 Windows 200...

[EEYEB20051011B] - Microsoft Distributed Transaction Coordinator Denial of Service

Microsoft Distributed Transaction Coordinator Denial of Service http://www.eeye.com/html/research/advisories/AD20060509b.html Release Date: May 9, 2006 Date Reported: October 11, 2005 Patch Development Time In Days: 210 Severity: Low Denial of Service Systems Affected: Windows NT 4.0 Windows 2000...

USN-279-1: libnasl/nessus vulnerability

Jayesh KS discovered that the naslsplit function in the NASL Nessus Attack Scripting Language library did not check for a zero-length separator argument, which lead to an invalid memory allocation. This library is primarily used in the Nessus security scanner; a remote attacker could exploit this...