[SA13678] PuTTY for Symbian OS "SSH2_MSG_DEBUG" Buffer Overflow

TITLE: PuTTY for Symbian OS "SSH2MSGDEBUG" Buffer Overflow SECUNIA ADVISORY ID: SA13678 VERIFY ADVISORY: http://secunia.com/advisories/13678/ CRITICAL: Moderately critical IMPACT: System access WHERE: From remote SOFTWARE: PuTTY for Symbian OS 1.x http://secunia.com/product/4476/ DESCRIPTION: A...

[SA13693] GRASS Multiple Scripts Insecure Temporary File Creation

TITLE: GRASS Multiple Scripts Insecure Temporary File Creation SECUNIA ADVISORY ID: SA13693 VERIFY ADVISORY: http://secunia.com/advisories/13693/ CRITICAL: Less critical IMPACT: Privilege escalation WHERE: Local system SOFTWARE: GRASS 5.7.x http://secunia.com/product/4471/ DESCRIPTION: Javier...

CVE-2004-1781

Info Touch Surfnet kiosk allows local users to crash Surfnet and access the underlying operating system via the CMDCREDITCARDCHARGE command...

PT-2004-2784 · Ipswitch · Ipswitch Ws Ftp Server

Name of the Vulnerable Software and Affected Versions: Ipswitch WS FTP Server version 4.0.2 Description: The issue allows remote authenticated users to execute arbitrary programs as SYSTEM. This is achieved by using the SITE command to modify certain iFtpSvc options handled by iftpmgr.exe...

[SA13660] PHProjekt "path_pre" Parameter Arbitrary File Inclusion Vulnerability

TITLE: PHProjekt "pathpre" Parameter Arbitrary File Inclusion Vulnerability SECUNIA ADVISORY ID: SA13660 VERIFY ADVISORY: http://secunia.com/advisories/13660/ CRITICAL: Highly critical IMPACT: System access WHERE: From remote SOFTWARE: PHProjekt 4.x http://secunia.com/product/4346/ DESCRIPTION:...

[SA13657] e107 Image Manager File Upload Vulnerability

TITLE: e107 Image Manager File Upload Vulnerability SECUNIA ADVISORY ID: SA13657 VERIFY ADVISORY: http://secunia.com/advisories/13657/ CRITICAL: Highly critical IMPACT: System access WHERE: From remote SOFTWARE: e107 0.x http://secunia.com/product/1927/ DESCRIPTION: sysbug has reported a...

[SA13652] Help Center Live Multiple Vulnerabilities

TITLE: Help Center Live Multiple Vulnerabilities SECUNIA ADVISORY ID: SA13652 VERIFY ADVISORY: http://secunia.com/advisories/13652/ CRITICAL: Highly critical IMPACT: Cross Site Scripting, Exposure of sensitive information, System access WHERE: From remote SOFTWARE: Help Center Live 1.x...

[SA13518] Cosminexus Web Contents Generator Buffer Overflow Vulnerability

TITLE: Cosminexus Web Contents Generator Buffer Overflow Vulnerability SECUNIA ADVISORY ID: SA13518 VERIFY ADVISORY: http://secunia.com/advisories/13518/ CRITICAL: Moderately critical IMPACT: System access WHERE: From remote SOFTWARE: Cosminexus Server 4.x http://secunia.com/product/4393/...

[SA13448] NetMail IMAPD Unspecified Buffer Overflow Vulnerability

TITLE: NetMail IMAPD Unspecified Buffer Overflow Vulnerability SECUNIA ADVISORY ID: SA13448 VERIFY ADVISORY: http://secunia.com/advisories/13448/ CRITICAL: Highly critical IMPACT: System access WHERE: From remote SOFTWARE: Novell NetMail 3.x http://secunia.com/product/1530/ DESCRIPTION: A...

[SA13468] Ethereal Multiple Vulnerabilities

TITLE: Ethereal Multiple Vulnerabilities SECUNIA ADVISORY ID: SA13468 VERIFY ADVISORY: http://secunia.com/advisories/13468/ CRITICAL: Highly critical IMPACT: DoS, System access WHERE: From remote SOFTWARE: Ethereal 0.x http://secunia.com/product/1228/ DESCRIPTION: Multiple vulnerabilities have be...

Microsoft Windows LSASS Connection Validation Privilege Escalation Vulnerability

Description Microsoft Windows is prone to a local privilege escalation vulnerability through LSASS Local Security Authority Subsystem Service. The vulnerability appears to be due to an error in the implementation of an enhanced access control feature. Attackers can exploit this vulnerability to...

Debian DSA-607-1 : xfree86 - several vulnerabilities

Several developers have discovered a number of problems in the libXpm library which is provided by X.Org, XFree86 and LessTif. These bugs can be exploited by remote and/or local attackers to gain access to the system or to escalate their local privileges, by using a specially crafted XPM image...

Privilege escalation flaw in MDaemon 7.2.

Summary: A privilege escalation flaw exists in MDaemon 7.2 http://www.mdaemon.com. Details: A privilege escalation technique can be used to gain SYSTEM level access while interacting with the MDaemon tray icon. Vulnerable Versions: MDaemon 7.2 Solutions: The vendor was notified of the issue. Ther...

[Full-Disclosure] Privilege escalation flaw in the AClient Service for Windows (Version 5.6.181).

Summary: A privilege escalation flaw exists in the AClient Service for Windows Version 5.6.181 http://www.altiris.com/. Details: A privilege escalation technique can be used to gain SYSTEM level access while interacting with the AClient Service for Windows tray icon. Vulnerable Versions: Altiris...

[SA13331] FreeImage Library Interleaved Bitmap Image Buffer Overflow Vulnerability

TITLE: FreeImage Library Interleaved Bitmap Image Buffer Overflow Vulnerability SECUNIA ADVISORY ID: SA13331 VERIFY ADVISORY: http://secunia.com/advisories/13331/ CRITICAL: Moderately critical IMPACT: DoS, System access WHERE: From remote SOFTWARE: FreeImage 3.x http://secunia.com/product/4341/...

mailtraq-update.txt

Recently, a vulnerability was discovered by Reed Arvin in the Mailtraq 2.6.1.1677 administration console. The vendor provided solution does not fully mitigate the privilege escalation vulnerability. You will find the original vulnerability advisory and the updated work around exploit information...

Sun Java Plug-in fails to restrict access to private Java packages

Overview There is a vulnerability in the Sun Java Plug-in that could allow a malicious Java applet to bypass restrictions for untrusted applets. Description The Java Plug-in is part of the Java 2 Runtime Environment JRE and establishes a framework for displaying Java applets within a web browser...

aclient.txt

Summary: A privilege escalation flaw exists in the AClient Service for Windows Version 5.6.181 http://www.altiris.com/. Details: A privilege escalation technique can be used to gain SYSTEM level access while interacting with the AClient Service for Windows tray icon. Vulnerable Versions: Altiris...

[SA13191] Skype "callto:" URI Handler Buffer Overflow Vulnerability

TITLE: Skype "callto:" URI Handler Buffer Overflow Vulnerability SECUNIA ADVISORY ID: SA13191 VERIFY ADVISORY: http://secunia.com/advisories/13191/ CRITICAL: Highly critical IMPACT: System access WHERE: From remote SOFTWARE: Skype for Windows 1.x http://secunia.com/product/4250/ DESCRIPTION: A...

[SA13177] UNARJ Filename Handling Buffer Overflow Vulnerability

---------------------------------------------------------------------- Monitor, Filter, and Manage Security Information - Filtering and Management of Secunia advisories - Overview, documentation, and detailed reports - Alerting via email and SMS Request Trial: https://ca.secunia.com/?f=l...