CVE-2009-0657

The CVE-2009-0657 entry refers to Toshiba Face Recognition 2.0.2.32. A physically proximate attacker can gain notebook access by presenting a large number of images with altered viewpoint and lighting to match a stored image of the authorized user. Per NVD, the exploit is local, with medium compl...

Amaya Web Editor 11 Remote SEH Overwrite Exploit

Summary Amaya is a Web editor, i.e. a tool used to create and update documents directly on the Web. Description Amaya Web Editor is prone to a buffer overflow vulnerability because the application fails to perform adequate boundary checks on user-supplied input. Attackers may leverage these issue...

CVE-2009-0348

CVE-2009-0348 affects Sun Java System Access Manager: login module responsiveness difference during failed logins allows remote username enumeration. Versions implicated: 6 2005Q1 (aka 6.3), 7 2005Q4 (aka 7.0), and 7.1. The description does not specify an exploit or affected patch level beyond th...

CVE-2009-0348: Exposure of Sensitive Information to an Unauthorized Actor

The login module in Sun Java System Access Manager 6 2005Q1 aka 6.3, 7 2005Q4 aka 7.0, and 7.1 responds differently to a failed login attempt depending on whether the user account exists, which allows remote attackers to enumerate valid usernames...

Sun Java System Access Manager 7.1 - Username Enumeration

Sun Java System Access Manager 7.1 - Username Enumeration source: https://www.securityfocus.com/bid/33489/info Sun Java System Access Manager is prone to a username-enumeration weakness because of a design error in the application when verifying user-supplied input. Attackers may exploit this...

Sun Java System Access Manager 7.1 - 'Username' Enumeration

source: https://www.securityfocus.com/bid/33489/info Sun Java System Access Manager is prone to a username-enumeration weakness because of a design error in the application when verifying user-supplied input. Attackers may exploit this weakness to discern valid usernames. This may aid them in...

FTPShell Server 4.3 (licence key) Remote Buffer Overflow PoC

Summary FTPShell server is a windows FTP service that enables remote file downloads and uploads. It supports regular and secure FTP based on both SSL/TLS and SSH2. It is also extremely easy to configure and use. Description FTPShell Server 4.3 suffers from buffer overflow vulnerability that can b...

CVE-2009-0170

Sun Java System Access Manager 6.3 2005Q1, 7 2005Q4, and 7.1 allows remote authenticated users with console privileges to discover passwords, and obtain unspecified other "access to resources," by visiting the Configuration Items component in the console...

CVE-2009-0169

Sun Java System Access Manager 7.1 allows remote authenticated sub-realm administrators to gain privileges, as demonstrated by creating the amadmin account in the sub-realm, and then logging in as amadmin in the root realm...

CVE-2009-0169: Undefined Security Weakness

Sun Java System Access Manager 7.1 allows remote authenticated sub-realm administrators to gain privileges, as demonstrated by creating the amadmin account in the sub-realm, and then logging in as amadmin in the root realm...

CVE-2009-0170: Undefined Security Weakness

Sun Java System Access Manager 6.3 2005Q1, 7 2005Q4, and 7.1 allows remote authenticated users with console privileges to discover passwords, and obtain unspecified other "access to resources," by visiting the Configuration Items component in the console...

Sun Java System Access Manager 'sub-realm'特权提升漏洞

BUGTRAQ ID: 33266 CNCAN ID：CNCAN-2009011503 Sun Java System Access Manager是一款安全单点登录、认证、授权解决方案。 Sun Java System Access Manager存在安全漏洞，允许sub-real管理员提升特权或访问root realm作为管理员。 目前没有详细漏洞细节提供。 Sun Java System Access Manager 7.1 Windows Sun Java System Access Manager 7.1 Solaris x86 Sun Java System Access...

Update Protection against Samba Root File System Access Security Bypass Vulnerability

A security bypass vulnerability was reported in Samba, a popular open source implementation of the SMB/CIFS file sharing protocol. The vulnerability is due to a design weakness in the root file system. Remote attackers can leverage the vulnerability to gain read-only access to the local file syst...

Secunia Research: CA ARCserve Backup RPC "handle_t" Argument Vulnerability

====================================================================== Secunia Research 11/12/2008 - CA ARCserve Backup RPC "handlet" Argument Vulnerability - ====================================================================== Table of Contents Affected...

Altiris Deployment Solution Agent < 6.9.355 Local Privilege Escalation (SYM08-019)

The version of the Altiris Deployment Solution Agent installed on the remote host is affected by a local privilege escalation issue. Successful exploitation of this issue could allow an authorized non-privileged user to gain local system access on the client system. C Tenable Network Security, In...

Nero ShowTime 5.0.15.0 m3u Playlist File Remote Buffer Overflow PoC

Summary Nero ShowTime provides you with a high-performance software DVD player that takes you to a new dimension in DVD's. Its cinema-like sound and excellent image quality for all digital pictures make an adventure of every film! What is more, Nero ShowTime supports all DVD-Video formats and can...

Secunia Research: Streamripper Multiple Buffer Overflows

====================================================================== Secunia Research 19/11/2008 - Streamripper Multiple Buffer Overflows - ====================================================================== Table of Contents Affected...

tbmnetcms-lfi.txt

------------------------------------------------------------------------------------------------------------- TBmnetCMS v1.0 index.php?content Local File Inclusion Vulnerability http://www.tbmnet.de...

Secunia Research: Adobe PageMaker PMD File Processing Buffer Overflows

====================================================================== Secunia Research 29/10/2008 - Adobe PageMaker PMD File Processing Buffer Overflows - ====================================================================== Table of Contents Affected...

Restrict anonymous users from viewing user profiles.

Even if I start Confluence with -Dconfluence.disable.peopledirectory.anonymous=true, it is still possible to browse individual users by visiting a URL like https://wikiBaseUrl/display/accountName. This is a major security problem for us because it exposes: 1. The user's name 2. The user's ID 3. T...