kernel security and bug fix update

2.6.32-220.4.1.el6 - fs Revert 'proc: enable writing to /proc/pid/mem' Johannes Weiner 782649 782650 CVE-2012-0056 2.6.32-220.3.1.el6 - kernel Remove 'WARNING: at kernel/sched.c:5915' Larry Woodman 768288 766051 - x86 kernel: Fix memory corruption in module load Prarit Bhargava 769595 767140 -...

XSS Bug Found in WordPress 3.3

A pair of researchers have identified a cross-site scripting vulnerability in WordPress 3.3, however the bug is only reproducible on installations that were installed using an IP address rather than a domain. The vulnerability was identified and published by Aditya Modha and Samir Shah, who poste...

CoCSoft StreamDown 6.8.0 Buffer Overflow

Stream Down 6.8.0 seh based buffer overflow triggered when processing the server response packet. During the overflow a structured exception handler is overwritten. Module Options msf use exploit/windows/misc/stream/downbof msf undefineddownbof show actions ...actions... msf undefineddownbof set...

Fedora 15 : colord-0.1.15-1.fc15 (2011-16451)

New rebased upstream version. - This release fixes an important security bug: CVE-2011-4349. - Do not crash the daemon if adding the device to the db failed - Fix a memory leak when getting properties from a device Note that Tenable Network Security has extracted the preceding description block...

Family Connections CMS 2.5.0/2.7.1 - 'less.php' Remote Command Execution

$theme = isset$argv1 ? $argv1 : 'default'; system"clear"; if fileexists"$dir/themes/$theme/style.css" echo "\n themes/$theme/style.css already exists.\n\n"; echo "Overwrite y/n ? "; $handle = fopen "php://stdin","r"; $line = fgets$handle; if trim$line != 'y' exit; $worked = system"php -q...

CVE-2011-3640

Untrusted search path vulnerability in Mozilla Network Security Services NSS, as used in Google Chrome before 17 on Windows and Mac OS X, might allow local users to gain privileges via a Trojan horse pkcs11.txt file in a top-level directory. NOTE: the vendor's response was "Strange behavior, but...

CVE-2011-3640

Untrusted search path vulnerability in Mozilla Network Security Services NSS, as used in Google Chrome before 17 on Windows and Mac OS X, might allow local users to gain privileges via a Trojan horse pkcs11.txt file in a top-level directory. NOTE: the vendor's response was "Strange behavior, but...

HDWIKI tasteless 0day-vulnerability warning-the black bar safety net

Author: thanks Blog: http://hi.baidu.com/thanks4sec Release date: 2011-10-10 HDWIKI official website: http://kaiyuan.hudong.com/ Affected versions: HDWIKI all ----------------------------------- Looking for a long did not find echo, but tasteless so made a Have thought better of using the method...

GenStat 14.1.0.5943 - Multiple Vulnerabilities

Luigi Auriemma Application: GenStat http://www.vsni.co.uk/software/genstat/ Versions: 8B46 24 MOV EAX,DWORD PTR DS:...

Security issue is_a function in PHP 5.3.7+

PHP 5.3.7 changed the behavior of the isa function, used to check if an object is an instance of a class, to call the autoload function. This causes a remote code execute problem when coupled with a standard library like PEAR that internally uses isa to check if a returned variable is an Error...

Inline attachment downloads vulnerable to XSS by setting tweaked HTML content type

Please see CONFDEV-9069 https://jira.atlassian.com/browse/CONFDEV-9069 for the current issue addressed at fixing attachment XSS vulnerabilities. --- TLDR: white-list mime-types which can be served "inline" and don't let the user set arbitrary mime-types. I have been having a good laugh sorry...

Microsoft Windows 远程桌面协议CVE-2011-1968拒绝服务漏洞

Bugtraq ID: 48995 CVE ID：CVE-2011-1968 Microsoft Windows是一款流行的操作系统。 当处理特制的RDP报文时，远程桌面服务存在安全漏洞，攻击者发送特制的RDP报文序列可使系统重新启动。 要成功利用漏洞需要远程桌面管理启用（默认不启用） Microsoft Windows XP Service Pack 3 0 Microsoft Windows XP Professional x64 Edition SP2 Microsoft Windows XP Professional x64 Edition Microsoft Windows X...

PHPCMS V9 Cross-Station 2 and repair-vulnerability warning-the black bar safety net

Some place it with the filter, the Server environment registerglobals = On time directly toXSS and... Fishing fishing. Nothing. In order to rank before the issue. Well well to. Detail:/install/header. tpl. php? step=b&stepsb=cc/titlescriptalert1 1 1;/scriptyou fuck your own test to go. In order t...

sssd security, bug fix, and enhancement update

1.5.1-37 - Reverts: rhbz680443 - Dynamic DNS update fails if multiple servers are - given in ipaserver config option 1.5.1-36 - Resolves: rhbz709333 - sssd. should require sssd-client. 1.5.1-35 - Resolves: rhbz707340 - latest sssd fails if ldapdefaultauthtoktype is - not mentioned - Resolves:...

CVE-2011-1623

CVE-2011-1623 affects Cisco MXE 5600 devices running Cisco Media Processing Software prior to 1.2. The root user account is enabled by default with a password, allowing an attacker to gain complete control via local console, SSH, or Telnet (if enabled). Remediation documented by Cisco: upgrade to...

libguestfs security, bug fix, and enhancement update

1.7.17-17 - Remove dependency on gfs2-utils. resolves: rhbz695138 1.7.17-16 - Canonicalize /dev/vd paths in virt-inspector code. resolves: rhbz691724 1.7.17-15 - Fix trace segfault for non-daemon functions. resolves: rhbz676788 1.7.17-14 - Add explicit BuildRequires for latest augeas. RHBZ677616...

Important: Red Hat Security Advisory: qemu-kvm security, bug fix, and enhancement update

Updated qemu-kvm packages that fix two security issues, several bugs, and add various enhancements are now available for Red Hat Enterprise Linux 6. The Red Hat Security Response Team has rated this update as having important security impact. Common Vulnerability Scoring System CVSS base scores,...

SuSE 10 Security Update : java-1_6_0-ibm, java-1_6_0-ibm-32bit, java-1_6_0-ibm-64bit, java-1_6_0-ibm-alsa, java-1_6_0-ibm-alsa-32bit, java-1_6_0-ibm-demo, java-1_6_0-ibm-devel, java-1_6_0-ibm-devel-32bit, java-1_6_0-ibm-fonts, java-1_6_0-ibm-jdbc, java-1_6_0-ibm-jdbc-32bit, java-1_6_0-ibm-jdbc-64bit, java-1_6_0-ibm-plugin, java-1_6_0-ibm-plugin-32bit, java-1_6_0-ibm-src (ZYPP Patch Number 7369)

IBM Java 6 SR9 FP1 was updated to fix a critical security bug in float number handling : - The Java Runtime Environment hangs forever when converting '2.2250738585072012e-308' to a binary floating-point number. CVE-2010-4476 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text descriptio...

Foxit PDF Reader 4.2 Javascript File Write

Exploit for windows platform in category local exploits $Id: foxitreaderfilewrite.rb 11955 2011-03-14 12:01:55Z swtornio $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more...

Nokia N97 - .m3u Playlist Crash (PoC)

Nokia N97 - .m3u Playlist Crash PoC !/usr/bin/perl Title : Nokia N97 PlayList M3U Crash PoC Author : KedAns-Dz E-mail : [email protected] Home : HMD/AM 30008/04300 - Algeria -00213555248701 Twitter page : twitter.com/kedans platform : hardware Impact : Crashs & Reboot Some Times Rebooted Tested o...