konversation irc client 0.15 - Multiple Vulnerabilities

konversation irc client 0.15 - Multiple Vulnerabilities source: https://www.securityfocus.com/bid/12312/info Konversation is a freely available IRC client for KDE windows environments on Linux platforms. Multiple remote vulnerabilities affect the Konversation IRC client. These issues are due to...

poppassd_pam: Unauthorized password changing

Background poppassdpam is a PAM-enabled server for changing system passwords that can be used to change POP server passwords. Description Gentoo Linux developer Marcus Hanwell discovered that poppassdpam did not check that the old password was valid before changing passwords. Our investigation...

MSXPSP2-ieEXP.txt

This is a multi-part message in MIME format. ------=NextPart00000B201C4E9A9.341A2510 Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit Did they really do a good job on service pack 2? Was it worth the investment that's reported more then the missile defense system? All...

Working Resources BadBlue 2.55 - MFCISAPICommand Remote Buffer Overflow (1)

// source: https://www.securityfocus.com/bid/12673/info A remote buffer overflow vulnerability affects Working Resources BadBlue. This issue is due to a failure of the application to securely copy GET request parameters into finite process buffers. An attacker may leverage this issue to execute...

[SA13539] Junkie FTP Client Two Vulnerabilities

TITLE: Junkie FTP Client Two Vulnerabilities SECUNIA ADVISORY ID: SA13539 VERIFY ADVISORY: http://secunia.com/advisories/13539/ CRITICAL: Moderately critical IMPACT: System access, Manipulation of data WHERE: From remote SOFTWARE: Junkie FTP Client 0.x http://secunia.com/product/4415/ DESCRIPTION...

php -- multiple vulnerabilities

Secunia reports: Multiple vulnerabilities have been reported in PHP, which can be exploited to gain escalated privileges, bypass certain security restrictions, gain knowledge of sensitive information, or compromise a vulnerable system...

USN-29-1: samba vulnerability

During an audit of the Samba 3.x code base Stefan Esser discovered a Unicode file name buffer overflow within the handling of TRANSACT2QFILEPATHINFO replies. A malicious samba user with write access to a share could exploit this by creating specially crafted path names files with very long names...

TABS MailCarrier 2.51 - Remote Buffer Overflow

TABS MailCarrier 2.51 - Remote Buffer Overflow / Remote exploit for MailCarrier by NoPh0BiA, no@0x00:/Exploits/MailCarrier$ ./mailcarried-exploit 192.168.0.1 MailCarrier Buffer Overflow Exploit by NoPh0BiA. x Connected to: 192.168.0.1 PORT: 25 x Sending evil buffer..done. x Trying to connect to...

[SA12833] VERITAS Cluster Server Unspecified System Compromise Vulnerability

TITLE: VERITAS Cluster Server Unspecified System Compromise Vulnerability SECUNIA ADVISORY ID: SA12833 VERIFY ADVISORY: http://secunia.com/advisories/12833/ CRITICAL: Highly critical IMPACT: System access WHERE: From remote SOFTWARE: VERITAS Cluster Server 4.x http://secunia.com/product/4059/...

[ GLSA 200410-05 ] Cyrus-SASL: Buffer overflow and SASL_PATH vulnerabilities

Gentoo Linux Security Advisory GLSA 200410-05 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - http://security.gentoo.org/ - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Severity:...

[SA12745] HP VirtualVault / Webproxy mod_ssl Format String Vulnerability

TITLE: HP VirtualVault / Webproxy modssl Format String Vulnerability SECUNIA ADVISORY ID: SA12745 VERIFY ADVISORY: http://secunia.com/advisories/12745/ CRITICAL: Highly critical IMPACT: System access WHERE: From remote SOFTWARE: HP Webproxy 2.x http://secunia.com/product/2307/ HP VirtualVault 4.x...

[SA12677] AIX libXm.a Multiple Vulnerabilities

TITLE: AIX libXm.a Multiple Vulnerabilities SECUNIA ADVISORY ID: SA12677 VERIFY ADVISORY: http://secunia.com/advisories/12677/ CRITICAL: Highly critical IMPACT: System access WHERE: From remote OPERATING SYSTEM: AIX 5.x http://secunia.com/product/213/ DESCRIPTION: IBM has acknowledged some...

MS04-028 Exploitation Backdoor Account Detection

It was possible to log into the remote host with the login 'X' and a blank password. A widely available exploit, using one of the vulnerabilities described in the Microsoft Bulletin MS04-028 creates such an account. This probably means that the remote host has been compromised by the use of this...

[SA12456] Grokster Altnet Download Manager Buffer Overflow Vulnerability

TITLE: Grokster Altnet Download Manager Buffer Overflow Vulnerability SECUNIA ADVISORY ID: SA12456 VERIFY ADVISORY: http://secunia.com/advisories/12456/ CRITICAL: Highly critical IMPACT: System access WHERE: From remote SOFTWARE: Grokster 2.x http://secunia.com/product/3863/ DESCRIPTION:...

Tomcat: Insecure installation

Background Tomcat is the Apache Jakarta Project's official implementation of Java Servlets and Java Server Pages. Description The Gentoo ebuild for Tomcat sets the ownership of the Tomcat init scripts as tomcat:tomcat, but those scripts are executed with root privileges when the system is started...

libpng stack-based buffer overflow and other code concerns

Chris Evans has discovered multiple vulnerabilities in libpng, which can be exploited by malicious people to compromise a vulnerable system or cause a DoS Denial of Service...

Mandrake Linux Security Advisory : rxvt (MDKSA-2003:034)

Digital Defense Inc. released a paper detailing insecurities in various terminal emulators, including rxvt. Many of the features supported by these programs can be abused when untrusted data is displayed on the screen. This abuse can be anything from garbage data being displayed to the screen or ...

Mandrake Linux Security Advisory : php (MDKSA-2003:019)

A buffer overflow was discovered in the wordwrap function in versions of PHP greater than 4.1.2 and less than 4.3.0. Under certain circumstances, this buffer overflow can be used to overwite heap memory and could potentially lead to remote system compromise. %NASLMINLEVEL 70300 C Tenable Network...

SuSE-SA:2004:008: cvs

The remote host is missing the patch for the advisory SuSE-SA:2004:008 cvs. The Concurrent Versions System CVS offers tools which allow developers to share and maintain large software projects. During the analyzation of the CVS protocol and their implementation, the SuSE Security Team discovered ...

SUSE-SA:2003:0015: tcpdump

The remote host is missing the patch for the advisory SUSE-SA:2003:0015 tcpdump. The network traffic analyzer tool tcpdump is vulnerable to a denial-of- service condition while parsing ISAKMP or BGP packets. This bug can be exploited remotely by an attacker to stop the use of tcpdump for analyzin...