Cross site request forgery (csrf)

Multiple cross-site request forgery CSRF vulnerabilities in the update feature in Drupal 5.x before 5.13 and 6.x before 6.7 allow remote attackers to perform unauthorized actions as the superuser via unspecified vectors, as demonstrated by causing the superuser to "execute old updates" that modif...

CVE-2008-6532

Multiple cross-site request forgery CSRF vulnerabilities in the update feature in Drupal 5.x before 5.13 and 6.x before 6.7 allow remote attackers to perform unauthorized actions as the superuser via unspecified vectors, as demonstrated by causing the superuser to "execute old updates" that modif...

CVE-2008-6532

Multiple cross-site request forgery CSRF vulnerabilities in the update feature in Drupal 5.x before 5.13 and 6.x before 6.7 allow remote attackers to perform unauthorized actions as the superuser via unspecified vectors, as demonstrated by causing the superuser to "execute old updates" that modif...

CVE-2008-6532

CVE-2008-6532 describes multiple CSRF vulnerabilities in Drupal’s update feature. Affected software: Drupal 5.x before 5.13 and 6.x before 6.7. The issue enables remote attackers to cause the superuser to perform unauthorized actions via unspecified vectors, exemplified by the superuser executing...

Sun xVM VirtualBox 2.02.1 - Local Privilege Escalation

Sun xVM VirtualBox 2.02.1 - Local Privilege Escalation source: https://www.securityfocus.com/bid/34080/info Sun xVM VirtualBox is prone to a local privilege-escalation vulnerability. An attacker can exploit this vulnerability to run arbitrary code with superuser privileges. The following versions...

FreeBSD 'telnetd' Daemon Remote Code Execution Vulnerability

FreeBSD is prone to a remote code-execution vulnerability. Remote attackers can exploit this issue to execute arbitrary code with superuser privileges. Successfully exploiting this issue will facilitate in the complete compromise of affected computers. FreeBSD 7.0-RELEASE is vulnerable; other...

RHEL 5 : sudo (RHSA-2009:0267)

The remote Redhat Enterprise Linux 5 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2009:0267 advisory. The sudo superuser do utility allows system administrators to give certain users the ability to run commands as root with logging. A flaw was...

FreeBSD : drupal -- multiple vulnerabilities (609c790e-ce0a-11dd-a721-0030843d3802)

The Drupal Project reports : The update system is vulnerable to Cross site request forgeries. Malicious users may cause the superuser user 1 to execute old updates that may damage the database. When an input format is deleted, not all existing content on a site is updated to reflect this deletion...

drupal -- multiple vulnerabilities

The Drupal Project reports: The update system is vulnerable to Cross site request forgeries. Malicious users may cause the superuser user 1 to execute old updates that may damage the database. When an input format is deleted, not all existing content on a site is updated to reflect this deletion...

[BMSA 2008-09] Two buffer overflow vulnerabilities in Rumpus v6.0

BLUE MOON SECURITY ADVISORY 2008-09 =================================== :Title: Two buffer overflows in Maxum Rumpus :Severity: Critical :Reporter: Blue Moon Consulting :Products: Maxum Rumpus v6.0 :Fixed in: 6.0.1 Description ----------- Rumpus turns any Mac into a file transfer server. Rumpus...

Maxum Rumpus 6.0 - Multiple Remote Buffer Overflow Vulnerabilities

Maxum Rumpus 6.0 - Multiple Remote Buffer Overflow Vulnerabilities BLUE MOON SECURITY ADVISORY 2008-09 =================================== :Title: Two buffer overflows in Maxum Rumpus :Severity: Critical :Reporter: Blue Moon Consulting :Products: Maxum Rumpus v6.0 :Fixed in: 6.0.1 Description...

Design/Logic Flaw

Unspecified vulnerability in IBM Lotus Quickr 8.1 before Fix pack 1 8.1.0.1 allows a place manager to "demote or delete a place superuser group" via unknown vectors...

Linux Kernel 'generic_file_splice_write()' Local Privilege Escalation Vulnerabil

The Linux kernel is prone to a local privilege-escalation vulnerability related to the 'genericfilesplicewrite' function. Local attackers can exploit this issue to gain superuser privileges. Successful exploits will result in the complete compromise of the computer. Versions prior to Linux kernel...

FreeBSD Security Advisory (FreeBSD-SA-04:12.jailroute.asc)

The remote host is missing an update to the system as announced in the referenced advisory FreeBSD-SA-04:12.jailroute.asc SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

QNX Neutrino RTOS 6.3 - phgrafx Local Buffer Overflow

QNX Neutrino RTOS 6.3 - phgrafx Local Buffer Overflow source: https://www.securityfocus.com/bid/30024/info QNX Neutrino RTOS is prone to a local buffer-overflow vulnerability because it fails to perform adequate boundary checks on user-supplied input. This issue affects the 'phgrafx' utility...

QNX Neutrino RTOS 6.3 - 'phgrafx' Local Buffer Overflow

source: https://www.securityfocus.com/bid/30024/info QNX Neutrino RTOS is prone to a local buffer-overflow vulnerability because it fails to perform adequate boundary checks on user-supplied input. This issue affects the 'phgrafx' utility. Attackers can exploit this issue to execute arbitrary cod...

Apple Mac OSX 10.x - Applescript ARDAgent Shell Privilege Escalation

Apple Mac OSX 10.x - Applescript ARDAgent Shell Privilege Escalation source: https://www.securityfocus.com/bid/29831/info Mac OS X is prone to a local privilege-escalation vulnerability affecting ARDAgent Apple Remote Desktop. Successful exploits allow local attackers to execute arbitrary code wi...

Apple Mac OSX 10.x - Applescript ARDAgent Shell Privilege Escalation

source: https://www.securityfocus.com/bid/29831/info Mac OS X is prone to a local privilege-escalation vulnerability affecting ARDAgent Apple Remote Desktop. Successful exploits allow local attackers to execute arbitrary code with superuser privileges, completely compromising the affected compute...

Apple Mac OS X AppleScript ARDAgent Shell Local Privilege Escalation Vulnerability

Description Mac OS X is prone to a local privilege-escalation vulnerability affecting ARDAgent Apple Remote Desktop. Successful exploits allow local attackers to execute arbitrary code with superuser privileges, completely compromising the affected computer. This issue is confirmed to affect Mac ...

CVE-2008-2053

Unspecified vulnerability in Cisco Unified Customer Voice Portal CVP 4.0.x before 4.02ES14, 4.1.x before 4.11ES11, and 7.x before 7.01 allows remote authenticated users with administrator role privileges to create, modify, or delete a superuser account...