(pam_env): Stack-based buffer overflow by parsing user's pam_environment file

Stack-based buffer overflow in the assembleline function in modules/pamenv/pamenv.c in Linux-PAM aka pam before 1.1.5 allows local users to cause a denial of service crash and possibly execute arbitrary code via a long string of white spaces at the beginning of the /.pamenvironment file...

0day! phpweb pseudo-static page injection-vulnerability warning-the black bar safety net

phpweb all of the entire Station program pseudo-static pages are presentsql injection Main Station: http://phpweb.net/ Added’detection: http://www.phpweb.net/down/html/?772'. html Error The presence of injection. Can't use spaces, only use/Rowe http://www.phpweb.net/page/html/?56'//and//1=1/. htm...

DEBIAN-CVE-2011-3148

Stack-based buffer overflow in the assembleline function in modules/pamenv/pamenv.c in Linux-PAM aka pam before 1.1.5 allows local users to cause a denial of service crash and possibly execute arbitrary code via a long string of white spaces at the beginning of the /.pamenvironment file...

Stack overflow

Stack-based buffer overflow in the assembleline function in modules/pamenv/pamenv.c in Linux-PAM aka pam before 1.1.5 allows local users to cause a denial of service crash and possibly execute arbitrary code via a long string of white spaces at the beginning of the /.pamenvironment file...

CVE-2012-2303

The Spaces module 6.x-3.x before 6.x-3.4 for Drupal does not enforce permissions on non-object pages, which allows remote attackers to obtain sensitive information and possibly have other impacts via unspecified vectors to the 1 Spaces or 2 Spaces OG module...

Information disclosure

The Spaces module 6.x-3.x before 6.x-3.4 for Drupal does not enforce permissions on non-object pages, which allows remote attackers to obtain sensitive information and possibly have other impacts via unspecified vectors to the 1 Spaces or 2 Spaces OG module...

CVE-2012-2303

The Spaces module 6.x-3.x before 6.x-3.4 for Drupal does not enforce permissions on non-object pages, which allows remote attackers to obtain sensitive information and possibly have other impacts via unspecified vectors to the 1 Spaces or 2 Spaces OG module...

CVE-2012-2303

The issue CVE-2012-2303 affects the Drupal Spaces module (Spaces and Spaces OG) for Drupal 6.x-3.x, with prior to 6.x-3.4 vulnerable. Root cause: permissions are not enforced on non-object pages, enabling remote disclosure of sensitive information via unspecified vectors to the Spaces modules. Im...

CVE-2012-2303

The Spaces module 6.x-3.x before 6.x-3.4 for Drupal does not enforce permissions on non-object pages, which allows remote attackers to obtain sensitive information and possibly have other impacts via unspecified vectors to the 1 Spaces or 2 Spaces OG module...

CVE-2012-2303: Undefined Security Weakness

The Spaces module 6.x-3.x before 6.x-3.4 for Drupal does not enforce permissions on non-object pages, which allows remote attackers to obtain sensitive information and possibly have other impacts via unspecified vectors to the 1 Spaces or 2 Spaces OG module...

PT-2012-3936

Name of the Vulnerable Software and Affected Versions Drupal Spaces module versions 6.x-3.x before 6.x-3.4 Description The issue allows remote attackers to obtain sensitive information and possibly have other impacts via unspecified vectors to the Spaces or Spaces OG module, due to the failure to...

Password Reset doesn't recognise spaces in usernames

When I enter my new password and submit the page, it responds with a message about the username 'philip', but my username is 'philip widan'. There was a similar issue with the Bonfire plugin, which required an upgrade to JIRA v5 to resolve. The URL I clicked on to get to the password reset page...

Code injection

The PDF functionality in Google Chrome before 19.0.1084.52 does not properly perform a cast of an unspecified variable during handling of color spaces, which allows remote attackers to cause a denial of service or possibly have unknown other impact via a crafted document...

CVE-2011-3113

Removed by vendor...

CVE-2011-3113: Undefined Security Weakness

The PDF functionality in Google Chrome before 19.0.1084.52 does not properly perform a cast of an unspecified variable during handling of color spaces, which allows remote attackers to cause a denial of service or possibly have unknown other impact via a crafted document...

PT-2012-1672

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 19.0.1084.52 Description The issue is related to the PDF functionality, which does not properly handle color spaces. This can be exploited by remote attackers using a crafted document, potentially leading to a...

tomcat: Multiple weaknesses in HTTP DIGEST authentication

The HTTP Digest Access Authentication implementation in Apache Tomcat 5.5.x before 5.5.34, 6.x before 6.0.33, and 7.x before 7.0.12 does not check realm values, which might allow remote attackers to bypass intended access restrictions by leveraging the availability of a protection space with weak...

SA-CONTRIB-2012-066 - Spaces and Spaces OG - Access Bypass

CVE: CVE-2012-2303 Spaces is an API module intended to make configuration options generally avaliable only at the sitewide level to be configurable and overridden by individual "spaces" on a Drupal site. The spaces and spacesog modules part of the spaces package in some cases do not apply the...

Symantec Experiment: Half Of Those Who Find Smartphones Don't Return Them

Good Samaritans are few and far between when it comes to lost cell phones, according to the conclusions of a social experiment conducted by security firm Symantec. Smart phones are unlikely to be returned by those who find them, but very likely to be perused for sensitive data including photos,...

tomcat: Multiple weaknesses in HTTP DIGEST authentication

The HTTP Digest Access Authentication implementation in Apache Tomcat 5.5.x before 5.5.34, 6.x before 6.0.33, and 7.x before 7.0.12 does not check realm values, which might allow remote attackers to bypass intended access restrictions by leveraging the availability of a protection space with weak...