Samba 3.0.20 - Remote Heap Overflow

Samba 3.0.20 - Remote Heap Overflow // / Samba 3.0.20 heap overflow / / per Debian 3.0.14a Debian e altre versioni / / per versionare il sorgente: / / usare l'opzione DEBUG / / usare free dalla GOT non funziona su Mandriva,RHEL e Fedora / / da qualche parte nel 3°/4° pacchetto di risposta dice ...

OpenSSL 'EVP_VerifyFinal'函数签名验证漏洞

BUGTRAQ ID: 33150 CVE ID：CVE-2008-5077 CNCVE ID：CNCVE-20085077 OpenSSL是一款开放源码的SSL实现，用来实现网络通信的高强度加密。 部分OpenSSL函数验证DSA和ECDSA密钥时不正确验证"EVPVerifyFinal"函数返回值，发送特殊构建的签名证书链给客户端，可绕过签名检查。 通过恶意服务器或中间人攻击，可使证书链中的畸形SSL/TLS签名绕过客户端软件检查，导致盲目信任并泄漏敏感信息。 成功利用此漏洞需要服务器使用包含DSA或者ECDSA密钥的证书。 Ubuntu Ubuntu Linux 8.10 spar...

Samba < 3.0.20 - Remote Heap Overflow

// / Samba 3.0.20 heap overflow / / per Debian 3.0.14a Debian e altre versioni / / per versionare il sorgente: / / usare l'opzione DEBUG / / usare free dalla GOT non funziona su Mandriva,RHEL e Fedora / / da qualche parte nel 3°/4° pacchetto di risposta dice la versione di Samba / / coded by...

SeaMonkey 1.1.14 Denial Of Service Exploit

!/usr/bin/perl SeaMonkey "; $data .= "SeaMonkey "; $data .= "" x900; $data .= ""; openFILE,'',$file or die'file error'; print FILE $data; closeFILE; sub usage print "\n+---------------------------------------------------------+\r". "\n| SeaMonkey = 1.1.14 marquee Denial of Service Exploit |\r"...

SeaMonkey <= 1.1.14 (marquee) Denial of Service Exploit

Exploit for multiple platform in category dos / poc ======================================================= SeaMonkey "; $data .= "SeaMonkey "; $data .= "" x900; $data .= ""; openFILE,'',$file or die'file error'; print FILE $data; closeFILE; sub usage print...

SeaMonkey 1.1.14 - Denial of Service

SeaMonkey 1.1.14 - Denial of Service !/usr/bin/perl SeaMonkey "; $data .= "SeaMonkey "; $data .= "" x900; $data .= ""; openFILE,'',$file or die'file error'; print FILE $data; closeFILE; sub usage print "\n+---------------------------------------------------------+\r". "\n| SeaMonkey = 1.1.14...

Slackware 12.2 / current : samba (SSA:2009-005-01)

New samba packages are available for Slackware 12.2 and -current to fix a security issue. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Slackware Security Advisory 2009-005-01. The text itself is copyright C Slackwa...

SeaMonkey 1.1.14 - Denial of Service

!/usr/bin/perl SeaMonkey "; $data .= "SeaMonkey "; $data .= "" x900; $data .= ""; openFILE,'',$file or die'file error'; print FILE $data; closeFILE; sub usage print "\n+---------------------------------------------------------+\r". "\n| SeaMonkey = 1.1.14 marquee Denial of Service Exploit |\r"...

samba

New samba packages are available for Slackware 12.2 and -current to fix a security issue. More details about this issue may be found in the Common Vulnerabilities and Exposures CVE database: https://vulners.com/cve/CVE-2009-0022 Here are the details from the Slackware 12.2 ChangeLog:...

Slackware 10.2 / 11.0 / 12.0 / 12.1 / 12.2 / current : mozilla-thunderbird (SSA:2008-366-01)

New mozilla-thunderbird packages are available for Slackware 10.2, 11.0, 12.0, 12.1, 12.2, and -current to fix security issues. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Slackware Security Advisory 2008-366-01...

Linux/x86-64 - setreuid(0,0) + execve(/bin/zsh, [/bin/zsh, NULL]) + XOR Encoded Shellcode (87 bytes)

Linux/x86-64 - setreuid0,0 + execve/bin/zsh, /bin/zsh, NULL + XOR Encoded Shellcode 87 bytes. Shellcode exploit for Linuxx86-64 platform Title: Linux x86-64 setreuid 0,0 & execve"/bin/zsh", "/bin/zsh", NULL + XOR encoded - 87 bytes Author: egeektronic Twitter: @egeektronic Tested on: Slackware...

Linux/x86 - setreuid(0,0) + execve("/bin/zsh", [/bin/zsh, NULL]) + XOR Encoded Shellcode (53 bytes)

Linux/x86 - setreuid0,0 + execve"/bin/zsh", /bin/zsh, NULL + XOR Encoded Shellcode 53 bytes. Shellcode exploit for Linuxx86 platform Title: Linux x86 setreuid 0,0 & execve"/bin/zsh", "/bin/zsh", NULL + XOR encoded - 53 bytes Author: egeektronic Twitter: @egeektronic Tested on: Slackware 13.37...

Linux/x86-64 - setreuid(0,0) + execve(/bin/ash,NULL,NULL) + XOR Encoded Shellcode (85 bytes)

Linux/x86-64 - setreuid0,0 + execve/bin/ash,NULL,NULL + XOR Encoded Shellcode 85 bytes. Shellcode exploit for Linuxx86-64 platform Title: Linux x86-64 setreuid 0,0 & execve"/bin/ash",NULL,NULL + XOR encoded - 85 bytes Author: egeektronic Twitter: @egeektronic Tested on: Slackware 13.37 Thanks: Ma...

Linux/x86 - setreuid(0,0) + execve(/bin/ash,NULL,NULL) + XOR Encoded Shellcode (58 bytes)

Linux/x86 - setreuid0,0 + execve/bin/ash,NULL,NULL + XOR Encoded Shellcode 58 bytes. Shellcode exploit for Linuxx86 platform Title: Linux x86 setreuid 0,0 & execve"/bin/ash",NULL,NULL + XOR encoded - 58 bytes Author: egeektronic Twitter: @egeektronic Tested on: Slackware 13.37 Thanks: Jonathan...

[slackware-security] mozilla-thunderbird

New mozilla-thunderbird packages are available for Slackware 10.2, 11.0, 12.0, 12.1, 12.2, and -current to fix security issues. More details about the issues may be found on the Mozilla site: http://www.mozilla.org/security/known-vulnerabilities/thunderbird20.html Here are the details from the...

Slackware 11.0 / 12.0 / 12.1 / 12.2 / current : seamonkey (SSA:2008-362-01)

New seamonkey packages are available for Slackware 11.0, 12.0, 12.1, 12.2, and -current to fix security issues. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Slackware Security Advisory 2008-362-01. The text itself ...

[slackware-security] seamonkey

New seamonkey packages are available for Slackware 11.0, 12.0, 12.1, 12.2, and -current to fix security issues. More details about the issues may be found on the Mozilla web site: http://www.mozilla.org/security/known-vulnerabilities/seamonkey11.html Here are the details from the Slackware 12.2...

PHP 'mbstring扩展缓冲区溢出漏洞

BUGTRAQ ID: 32948 CVE ID：CVE-2008-5557 PHP是一款网络编程语言。 PHP mbstring扩展存在输入验证错误，远程攻击者可以利用漏洞使应用程序崩溃。 mbstring扩展用于处理多字节unicode字符串，在解码部分HTML实体为unicode字符串时存在问题，由于解码器不正确处理错误条件，堆分配缓冲区的边界检查可被有效的绕过。攻击者利用漏洞可传送任意数据到堆特定域而以应用程序权限执行任意指令。 PHP PHP 5.2.6 PHP PHP 5.2.5 PHP PHP 5.2.4 PHP PHP 5.2.3 PHP PHP 5.2.2 PHP PH...

Slackware 10.2 / 11.0 / 12.0 / 12.1 / 12.2 / current : mozilla-firefox (SSA:2008-353-01)

New mozilla-firefox packages are available for Slackware 10.2, 11.0, 12.0, 12.1, 12.2, and -current to fix security issues. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Slackware Security Advisory 2008-353-01. The...

[slackware-security] mozilla-firefox

New mozilla-firefox packages are available for Slackware 10.2, 11.0, 12.0, 12.1, 12.2, and -current to fix security issues. More details about the issues may be found on the Mozilla website: http://www.mozilla.org/security/known-vulnerabilities/firefox20.html...