msieLocalFile.txt

Microsoft Internet Explorer permits to examine the existence of local files Description: There is a security bug in Microsoft Internet Explorer, which allows to check up existence of local files in system directories Root C:/, WINDOWS, SYSTEM, SYSTEM32, DESKTOP, COMMAND, Internet Explorer...

Microsoft Internet Explorer permits to examine the existence of local files

Microsoft Internet Explorer permits to examine the existence of local files Description: There is a security bug in Microsoft Internet Explorer, which allows to check up existence of local files in system directories Root C:/, WINDOWS, SYSTEM, SYSTEM32, DESKTOP, COMMAND, Internet Explorer...

In-game format string bug in the Lithtech engine

Luigi Auriemma Application: Lithtech engine http://www.lithtech.com Games: Alien vs Predator 2 = 1.0.9.6 Blood 2 = 2.1 Contract Jack = 1.1 Global Operations = 2.0/2.1 Kiss Psycho Circus = 1.13 Legends of Might and Magic = 1.1 No one lives forever = 1.004 No one lives forever 2 = 1.3 Purge Jihad =...

Cisco IOS CEF Packet Information Disclosure (Bug ID CSCdu20643)

Binary data 2214.prm...

Posible security bug in phpMyWebhosting

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Hi all. There is a posible security bug in the phpMyWebhosting http://sourceforge.net/projects/phpmywebhosting/ File: includes/functions/pmwh.php Function: test Code: - ------------------------------------------------------------------------ ...... if...

ProFTPd - 'ftpdctl' 'pr_ctrls_connect' Local Overflow

/ This is simple local exploit Proof of Concept? for local bug in ProFTPd not in default options must be configured with option --enable-ctrls. Bug exist in func tion prctrlsconnect in file "src/ctrls.c", look: "src/ctrls.c" int prctrlsconnectconst char socketfile ... struct sockaddrun clsock,...

Fedora Core 1 : gnupg-1.2.3-2 (2003-025)

Phong Nguyen identified a severe bug in the way GnuPG creates and uses ElGamal keys, when those keys are used both to sign and encrypt data. This vulnerability can be used to trivially recover the private key. While the default behavior of GnuPG when generating keys does not lead to the creation ...

Potential Buffer Overrun in smbd

Description A buffer overrun has been located in the code used to support the 'mangling method = hash' smb.conf option. Please be aware that the default setting for this parameter is 'mangling method = hash2' and therefore not vulnerable. Affected Samba 3 installations can avoid this possible...

RHEL 2.1 : wget (RHSA-2002:256)

The wget packages shipped with Red Hat Linux Advanced Server 2.1 contain a security bug which, under certain circumstances, can cause local files to be written outside the download directory. Updated 09 Jan 2003 Added fixed packages for the Itanium IA64 architecture. Updated 06 Feb 2003 Added fix...

RHEL 2.1 : kernel (RHSA-2002:128)

This kernel update is available for Red Hat Linux Advanced Server 2.1. It includes a fix for an information security bug, various kernel bug fixes, and updated device drivers. 2002-07-29 This release is a rebuild for adding exported symbols for Veritas. This kernel fixes an information security...

Linux Kernel sctp_setsockopt() Integer Overflow

Product: Linux Kernel Versions: = 2.4.25 Bug: Integer overflow Impact: Attackers may be able to execute arbitrary code with kernel-level privileges. Risk: High Date: May 11, 2004 Author: Shaun Colley Email: shaunige yahoo co uk WWW: http://www.nettwerked.co.uk Introduction The Linux Kernel is the...

imgSvr.txt

Donato Ferrante Application: imgSvr http://adaimgsvr.sourceforge.net/ Version: 0.4 Bug: Index viewing Author: Donato Ferrante e-mail: [email protected] web: www.autistici.org/fdonato xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx 1. Description 2. The bug 3. The code ...

Broadcast client buffer-overflow in Terminator 3 1.0

Luigi Auriemma Application: Terminator 3: War of the Machines http://www.t3war.com Versions: 1.0 Platforms: Windows Bug: broadcast client's buffer-overflow Risk: very high Exploitation: remote and automatic, versus clients Date: 19 Mar 2004 Author: Luigi Auriemma e-mail: [email protected] web...

Security bug in Xerox Document Centre

CONTACT INFORMATION =============================================================================== Name : J.A. Gutierrez E-mail : [email protected] Reported this to the vendor on Mon Dec 15 2003 using feedback form at http://www.xerox.com, since I couldn't find a security contact. TECHNICA...

[Full-Disclosure] Get admin rights using Doro (pdf creator)

Hi, a few days ago i discovered a bug in Doro. Doro is a free tool to create pdf files from any windows program. After installing Doro you have a new printer called 'Doro PDF Writer'. If you select 'Print' the spooler calls the printer filter 'doro.dll'. The 'doro.dll' then starts 'doro.exe' and ...

Virginity Security Advisory 2003-002 : Tritanium Bulletin Board - Read and write from/to internal (protected) Threads

-------------------------------------------------------------------- Virginity Security Advisory 2003-002 - - - -------------------------------------------------------------------- DATE : 2003-10-31 22:59 GMT TYPE : remote VERSIONS AFFECTED : == Tritanium Bulletin Board 1.2.3...

Integer overflow in OpenBSD kernel

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Local security bug in OpenBSD semaphore handling Product: OpenBSD kernel 3.3-release, -current before 10/09/2003 Impact: Root may bypass securelevel Bug class: Integer overflow Vendor notified: Yes Fix available: Yes Details: An integer overflow...

DSA-362 mindi - insecure temporary file

Bulletin has no description...

Critical: Red Hat Security Advisory: : : : Updated sendmail packages fix vulnerabilities

Updated Sendmail packages are available for Red Hat Linux on IBM iSeries and pSeries systems to fix a vulnerability that allows local and possibly remote attackers to gain root privileges as well as a vulnerability that may allow remote attackers to gain root privileges by sending a carefully...

wzdftpd remote DoS

Title: wzdftpd remote DoS Affected: wzdftpd = 0.1rc4 URL: http://www.wzdftpd.net Risk: High Exploitable: Yes Remote: Yes Date: June, 27 2003 Overview: "A portable, modular and efficient ftp server, supporting SSL, winsock, multithreaded, modules ,externals scripts. unix-like permissions+acls,...