PT-2009-2739 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 2.6.24.1 Description: The issue allows local users to cause a denial of service or gain privileges via unspecified vectors, related to the vm file structure member, and the mmap region and do munmap functions...

PT-2009-29: Tribiq CMS Multiple Vulnerabilities

Tribiq CMS is a content management system CMS software, usually implemented as a Web application, for creating and managing HTML content. It is used to manage and control a large, dynamic collection of Web material HTML documents and their associated images. Vulnerability Description Positive...

FreeBSD 6x/7 protosw kernel Local Privledge Escalation Exploit

No description provided by source. / This is a quick and very dirty exploit for the FreeBSD protosw vulnerability defined here: http://security.freebsd.org/advisories/FreeBSD-SA-08:13.protosw.asc This will overwrite your credential structure in the kernel. This will affect more than just the...

FreeBSD 6x/7 - 'protosw' Local Privilege Escalation

/ This is a quick and very dirty exploit for the FreeBSD protosw vulnerability defined here: http://security.freebsd.org/advisories/FreeBSD-SA-08:13.protosw.asc This will overwrite your credential structure in the kernel. This will affect more than just the exploit's process, which is why this...

DEBIAN-CVE-2008-5621

Cross-site request forgery CSRF vulnerability in phpMyAdmin 2.11.x before 2.11.9.4 and 3.x before 3.1.1.0 allows remote attackers to perform unauthorized actions as the administrator via a link or IMG tag to tblstructure.php with a modified table parameter. NOTE: other unspecified pages are also...

Null pointer dereference

The ActionScript 2 virtual machine in Adobe Flash Player 10.x before 10.0.12.36 and 9.x before 9.0.151.0, and Adobe AIR before 1.5, does not validate character elements during retrieval from the dictionary data structure, which allows remote attackers to cause a denial of service NULL pointer...

CUPS < 1.3.10 Multiple Overflows

Binary data 4771.prm...

Heap overflow

Heap-based buffer overflow in Adobe PageMaker 7.0.1 and 7.0.2 allows user-assisted remote attackers to execute arbitrary code via a .PMD file with a crafted font structure...

CVE-2007-6021

Heap-based buffer overflow in Adobe PageMaker 7.0.1 and 7.0.2 allows user-assisted remote attackers to execute arbitrary code via a .PMD file with a crafted font structure...

CVE-2007-5394

Stack-based buffer overflow in AldFs32.dll in Adobe PageMaker 7.0.1 and 7.0.2 allows user-assisted remote attackers to execute arbitrary code via a .PMD file with a crafted font structure, a different vulnerability than CVE-2007-5169 and CVE-2007-6432...

CVE-2007-5394

CVE-2007-5394 affects Adobe PageMaker 7.0.1 and 7.0.2 through a stack-based buffer overflow in AldFs32.dll when processing a specially crafted PMD file. The vulnerability could allow a user-assisted remote attacker to execute arbitrary code in the context of the current user. The related connecte...

CVE-2007-5394

Stack-based buffer overflow in AldFs32.dll in Adobe PageMaker 7.0.1 and 7.0.2 allows user-assisted remote attackers to execute arbitrary code via a .PMD file with a crafted font structure, a different vulnerability than CVE-2007-5169 and CVE-2007-6432...

CVE-2007-6021

Heap-based buffer overflow in Adobe PageMaker 7.0.1 and 7.0.2 allows user-assisted remote attackers to execute arbitrary code via a .PMD file with a crafted font structure...

eFront &lt;= 3.5.1 / build 2710 Remote Arbitrary Upload Vulnerability

No description provided by source. -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=- eFront = 3.5.1 / build 2710: Remote File Inclusion Vulnerability -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=- $ Program: eFront $ File affected: studentpage.php / professorpag...

efront-upload.txt

-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=- eFront eNYe-Sec - www.enye-sec.org -- Description by the author's page -- eFront is an easy to use, visually attractive, SCORM compatible, eLearning and Human Capital Development system. It is suitable for both company and...

eFront 3.5.1 / build 2710 - Arbitrary File Upload

-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=- eFront eNYe-Sec - www.enye-sec.org -- Description by the author's page -- eFront is an easy to use, visually attractive, SCORM compatible, eLearning and Human Capital Development system. It is suitable for both company and...

MS08-0 5 2 WMF vulnerability analysis and vulnerability testing-vulnerability warning-the black bar safety net

------ by CuteK A background knowledge By the file format to start with,to analyze the MS08-0 5 2 vulnerability, and construct a you can make without the patch the program crash pictures, 1 WMF file structure --------------------------| | Files head | |-------------------------| | File-record |...

Gentoo Security Advisory GLSA 200708-10 (mysql)

The remote host is missing updates announced in advisory GLSA 200708-10. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2007-6716

fs/direct-io.c in the dio subsystem in the Linux kernel before 2.6.23 does not properly zero out the dio struct, which allows local users to cause a denial of service OOPS, as demonstrated by a certain fio test...

FreeBSD Security Advisory (FreeBSD-SA-08:04.ipsec.asc)

The remote host is missing an update to the system as announced in the referenced advisory FreeBSD-SA-08:04.ipsec.asc ADV FreeBSD-SA-08:04.ipsec.asc OpenVAS Vulnerability Test $ Description: Auto generated from vuxml or freebsd advisories Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft...