[SA13331] FreeImage Library Interleaved Bitmap Image Buffer Overflow Vulnerability

TITLE: FreeImage Library Interleaved Bitmap Image Buffer Overflow Vulnerability SECUNIA ADVISORY ID: SA13331 VERIFY ADVISORY: http://secunia.com/advisories/13331/ CRITICAL: Moderately critical IMPACT: DoS, System access WHERE: From remote SOFTWARE: FreeImage 3.x http://secunia.com/product/4341/...

mailtraq-update.txt

Recently, a vulnerability was discovered by Reed Arvin in the Mailtraq 2.6.1.1677 administration console. The vendor provided solution does not fully mitigate the privilege escalation vulnerability. You will find the original vulnerability advisory and the updated work around exploit information...

Sun Java Plug-in fails to restrict access to private Java packages

Overview There is a vulnerability in the Sun Java Plug-in that could allow a malicious Java applet to bypass restrictions for untrusted applets. Description The Java Plug-in is part of the Java 2 Runtime Environment JRE and establishes a framework for displaying Java applets within a web browser...

aclient.txt

Summary: A privilege escalation flaw exists in the AClient Service for Windows Version 5.6.181 http://www.altiris.com/. Details: A privilege escalation technique can be used to gain SYSTEM level access while interacting with the AClient Service for Windows tray icon. Vulnerable Versions: Altiris...

[SA13191] Skype "callto:" URI Handler Buffer Overflow Vulnerability

TITLE: Skype "callto:" URI Handler Buffer Overflow Vulnerability SECUNIA ADVISORY ID: SA13191 VERIFY ADVISORY: http://secunia.com/advisories/13191/ CRITICAL: Highly critical IMPACT: System access WHERE: From remote SOFTWARE: Skype for Windows 1.x http://secunia.com/product/4250/ DESCRIPTION: A...

[SA13177] UNARJ Filename Handling Buffer Overflow Vulnerability

---------------------------------------------------------------------- Monitor, Filter, and Manage Security Information - Filtering and Management of Secunia advisories - Overview, documentation, and detailed reports - Alerting via email and SMS Request Trial: https://ca.secunia.com/?f=l...

[SA13119] IBM Tivoli Access Manager for e-business Kerberos Vulnerabilities

---------------------------------------------------------------------- Monitor, Filter, and Manage Security Information - Filtering and Management of Secunia advisories - Overview, documentation, and detailed reports - Alerting via email and SMS Request Trial: https://ca.secunia.com/?f=l...

Internet Explorer HTML Help Control ActiveX Cross Domain/Zone Scripting Vulnerabilities

TITLE : Internet Explorer HTML Help Control ActiveX Cross Domain/Zone Scripting Vulnerabilities Criticality : Less Critical : WHERE : From remote Requires user interaction IMPACT : Security Bypass System Access Exposure of Sensitive Information SOFTWARE : Microsoft Internet Explorer 6 Tested on :...

[SA13012] TortoiseCVS "SSH2_MSG_DEBUG" Packet Handling Buffer Overflow

TITLE: TortoiseCVS "SSH2MSGDEBUG" Packet Handling Buffer Overflow SECUNIA ADVISORY ID: SA13012 VERIFY ADVISORY: http://secunia.com/advisories/13012/ CRITICAL: Moderately critical IMPACT: System access WHERE: From remote SOFTWARE: TortoiseCVS 1.x http://secunia.com/product/4183/ DESCRIPTION: A...

[SA12853] phpCodeGenie "Simple Application Generation" Code Execution Vulnerability

TITLE: phpCodeGenie "Simple Application Generation" Code Execution Vulnerability SECUNIA ADVISORY ID: SA12853 VERIFY ADVISORY: http://secunia.com/advisories/12853/ CRITICAL: Less critical IMPACT: System access WHERE: From remote SOFTWARE: phpCodeGenie 3.x http://secunia.com/product/4141/...

[SA12995] ImageMagick EXIF Parser Buffer Overflow Vulnerability

TITLE: ImageMagick EXIF Parser Buffer Overflow Vulnerability SECUNIA ADVISORY ID: SA12995 VERIFY ADVISORY: http://secunia.com/advisories/12995/ CRITICAL: Highly critical IMPACT: System access WHERE: From remote SOFTWARE: ImageMagick 6.x http://secunia.com/product/3763/ DESCRIPTION: A vulnerabilit...

[SA12973] OpenSSL "der_chop" Script Insecure Temporary File Creation

TITLE: OpenSSL "derchop" Script Insecure Temporary File Creation SECUNIA ADVISORY ID: SA12973 VERIFY ADVISORY: http://secunia.com/advisories/12973/ CRITICAL: Less critical IMPACT: Privilege escalation WHERE: Local system SOFTWARE: OpenSSL 0.9.x http://secunia.com/product/253/ DESCRIPTION: A...

Veritas NetBackup - Remote Command Execution (Metasploit)

$Id: veritasnetbackupcmdexec.rb 10617 2010-10-09 06:55:52Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...

[SA12813] phpMyAdmin Unspecified Arbitrary Command Execution Vulnerability

TITLE: phpMyAdmin Unspecified Arbitrary Command Execution Vulnerability SECUNIA ADVISORY ID: SA12813 VERIFY ADVISORY: http://secunia.com/advisories/12813/ CRITICAL: Highly critical IMPACT: System access WHERE: From remote SOFTWARE: phpMyAdmin 2.x http://secunia.com/product/1720/ DESCRIPTION: A...

Full path disclosure in PHP Links

Nkxtox Advisory 0000-00003 Full path disclosure in PHP Links Date: 03/10/04 Bug: http://server/phplinks/index.php?show=juax0rx Warning: maininclude/juax0rx.php: failed to open stream: No such file or directory in /home/h4x0rsit3/b0x/phplinks/index.php on line 198 Warning: main: Failed opening...

[SA12694] AIX Network Authentication Service Multiple Vulnerabilities

TITLE: AIX Network Authentication Service Multiple Vulnerabilities SECUNIA ADVISORY ID: SA12694 VERIFY ADVISORY: http://secunia.com/advisories/12694/ CRITICAL: Highly critical IMPACT: DoS, System access WHERE: From remote OPERATING SYSTEM: AIX 5.x http://secunia.com/product/213/ SOFTWARE: IBM...

[SA12672] RealOne Player / RealPlayer / Helix Player Multiple Vulnerabilities

TITLE: RealOne Player / RealPlayer / Helix Player Multiple Vulnerabilities SECUNIA ADVISORY ID: SA12672 VERIFY ADVISORY: http://secunia.com/advisories/12672/ CRITICAL: Highly critical IMPACT: Manipulation of data, System access WHERE: From remote SOFTWARE: RealPlayer 8...

[SA12684] dBpowerAMP Audio Player / Music Converter Playlist Handling Buffer Overflow

TITLE: dBpowerAMP Audio Player / Music Converter Playlist Handling Buffer Overflow SECUNIA ADVISORY ID: SA12684 VERIFY ADVISORY: http://secunia.com/advisories/12684/ CRITICAL: Highly critical IMPACT: System access WHERE: From remote SOFTWARE: dBpowerAMP Music Converter 10.x...

Multiple Safari bugs

Security Bypass, Cross Site Scripting, Manipulation of data, Exposure of system information, Exposure of sensitive information, Privilege escalation, DoS, System access...

[SA12455] Kazaa Altnet Download Manager Buffer Overflow Vulnerability

TITLE: Kazaa Altnet Download Manager Buffer Overflow Vulnerability SECUNIA ADVISORY ID: SA12455 VERIFY ADVISORY: http://secunia.com/advisories/12455/ CRITICAL: Highly critical IMPACT: System access WHERE: From remote SOFTWARE: Kazaa 2.x http://secunia.com/product/616/ DESCRIPTION: CelebrityHacker...