Battery Life Toolkit 1.0.9 - 'bltk_sudo' Local Privilege Escalation

source: https://www.securityfocus.com/bid/37996/info Battery Life Toolkit BLTK is prone to a local privilege-escalation vulnerability. A local attacker can exploit this issue to execute arbitrary code with superuser privileges, resulting in the complete compromise of the affected computer. This...

SilverStripe CMS 2.3.5 - Cross-Site Request Forgery / Open Redirection

Exploit Title: Silverstripe = 2.3.5 Cross Site Request Forgery & Open Redirection. Date: 12/01/10 Author: cp77fk4r | empty0pageSHIFT+2gmail.com | www.DigitalWhisper.co.il Vendor: www.silverstripe.org | Version: 2.0.0 Tested on: PHP Open Redirection: OWASP: An open redirect is an application that...

openSUSE Security Update : postgresql (postgresql-1773)

An unprivileged, authenticated PostgreSQL user could create a table which references functions with malicious content. Maintenance operations carried out be the database superuser could execute such functions CVE-2009-4136. Embedded null bytes in the common name of SSL certificates could bypass...

openSUSE Security Update : postgresql (postgresql-1773)

An unprivileged, authenticated PostgreSQL user could create a table which references functions with malicious content. Maintenance operations carried out be the database superuser could execute such functions CVE-2009-4136. Embedded null bytes in the common name of SSL certificates could bypass...

FreeBSD : postgresql -- multiple vulnerabilities (e7bc5600-eaa0-11de-bd9c-00215c6a37bb)

PostgreSQL project reports : PostgreSQL 7.4.x before 7.4.27, 8.0.x before 8.0.23, 8.1.x before 8.1.19, 8.2.x before 8.2.15, 8.3.x before 8.3.9, and 8.4.x before 8.4.2 does not properly handle a '\0' character in a domain name in the subject's Common Name CN field of an X.509 certificate, which 1...

KB "Running JIRA over SSL or HTTPS" needs review for Windows Standalone scenario

There are three recommended updates to the KB Running JIRA over SSL or HTTPS|http://confluence.atlassian.com/display/JIRA/Running+JIRA+over+SSL+or+HTTPS based on customer feedback. 1. quote When asked to "What is your first and last name" make sure you enter in the DNS name that you will use to...

KB "Running JIRA over SSL or HTTPS" needs review for Windows Standalone scenario

There are three recommended updates to the KB Running JIRA over SSL or HTTPS|http://confluence.atlassian.com/display/JIRA/Running+JIRA+over+SSL+or+HTTPS based on customer feedback. 1. quote When asked to "What is your first and last name" make sure you enter in the DNS name that you will use to...

Avast! AntiVirus 4.8.1356 - aswRdr.sys Driver Privilege Escalation

Avast! AntiVirus 4.8.1356 - aswRdr.sys Driver Privilege Escalation // source: https://www.securityfocus.com/bid/37031/info Avast! Antivirus is prone to a local privilege-escalation vulnerability. Local attackers can exploit this issue to execute arbitrary code with superuser privileges and...

Avast! AntiVirus 4.8.1356 - 'aswRdr.sys' Driver Privilege Escalation

// source: https://www.securityfocus.com/bid/37031/info Avast! Antivirus is prone to a local privilege-escalation vulnerability. Local attackers can exploit this issue to execute arbitrary code with superuser privileges and completely compromise the affected computer. Failed exploit attempts will...

Linux Kernel 2.6.26 - Auerswald USB Device Driver Buffer Overflow (PoC)

Linux Kernel 2.6.26 - Auerswald USB Device Driver Buffer Overflow PoC source: https://www.securityfocus.com/bid/48687/info The Auerswald USB Device Driver for the Linux kernel is prone to a buffer-overflow vulnerability because it fails to perform adequate boundary checks on user-supplied data...

RedHat Security Advisory RHSA-2009:1485

The remote host is missing updates announced in advisory RHSA-2009:1485. PostgreSQL is an advanced object-relational database management system DBMS. It was discovered that the upstream patch for CVE-2007-6600 included in the Red Hat Security Advisory RHSA-2008:0039 did not include protection...

RedHat Security Advisory RHSA-2009:1485

The remote host is missing updates announced in advisory RHSA-2009:1485. PostgreSQL is an advanced object-relational database management system DBMS. It was discovered that the upstream patch for CVE-2007-6600 included in the Red Hat Security Advisory RHSA-2008:0039 did not include protection...

postgresql security update

CentOS Errata and Security Advisory CESA-2009:1484 Updated postgresql packages that fix two security issues are now available for Red Hat Enterprise Linux 4 and 5. This update has been rated as having moderate security impact by the Red Hat Security Response Team. PostgreSQL is an advanced...

CentOS 3 : postgresql (CESA-2009:1485)

Updated postgresql packages that fix a security issue are now available for Red Hat Enterprise Linux 3. This update has been rated as having moderate security impact by the Red Hat Security Response Team. PostgreSQL is an advanced object-relational database management system DBMS. It was discover...

rh security update

CentOS Errata and Security Advisory CESA-2009:1485 Updated postgresql packages that fix a security issue are now available for Red Hat Enterprise Linux 3. This update has been rated as having moderate security impact by the Red Hat Security Response Team. PostgreSQL is an advanced object-relation...

Moderate: Red Hat Security Advisory: postgresql security update

Updated postgresql packages that fix a security issue are now available for Red Hat Enterprise Linux 3. This update has been rated as having moderate security impact by the Red Hat Security Response Team. PostgreSQL is an advanced object-relational database management system DBMS. It was discover...

SIDVault 'simple_bind()' Function Multiple Remote Buffer Overflow Vulnerabilities

SIDVault is prone to multiple remote buffer-overflow vulnerabilities because the application fails to properly bounds- check user-supplied input before copying it to an insufficiently sized memory buffer. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a...

Asante FM2008 backdoor account

Undocumented superuser/asante account...

Linux Kernel 2.6.30 - 'tun_chr_pool()' Null Pointer Dereference

source: https://www.securityfocus.com/bid/35724/info The Linux kernel is prone to a local NULL-pointer dereference vulnerability. A local attacker can exploit this issue to execute arbitrary code with superuser privileges or crash an affected kernel, denying service to legitimate users. This issu...

Linux Kernel 2.6.30 - tun_chr_pool() Null Pointer Dereference

Linux Kernel 2.6.30 - tunchrpool Null Pointer Dereference source: https://www.securityfocus.com/bid/35724/info The Linux kernel is prone to a local NULL-pointer dereference vulnerability. A local attacker can exploit this issue to execute arbitrary code with superuser privileges or crash an...