Core Security Technologies Advisory 2010.0608

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Core Security Technologies - CoreLabs Advisory http://corelabs.coresecurity.com/ HP OpenView NNM OvJavaLocale Buffer Overflow Vulnerability 1. Advisory Information Title: HP OpenView NNM OvJavaLocale Buffer Overflow Vulnerability Advisory Id:...

HP OpenView NNM OvJavaLocale Buffer Overflow Vulnerability

Advisory ID Internal CORE-2010-0608 1. Advisory Information Title: HP OpenView NNM OvJavaLocale Buffer Overflow Vulnerability Advisory Id: CORE-2010-0608 Date published: 2010-08-03 Date of last update: 2010-08-03 Vendors contacted: HP Release mode: Coordinated release 2. Vulnerability Information...

Important: Red Hat Security Advisory: tomcat5 security update

Updated tomcat5 packages that fix multiple security issues are now available for Red Hat Enterprise Linux 5. The Red Hat Security Response Team has rated this update as having important security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity ratings, ar...

Changes to DMCA Protect Jailbreaking, Some Security Research

A new change to the much-maligned Digital Millennium Copyright Act free users who jailbreak their iPhones and other mobile handsets from worries about prosecution under the provisions of the DMCA that prevented circumvention of protection technologies. A separate change announced Monday also give...

[SECURITY] Fedora 13 Update: galeon-2.0.7-30.fc13

Galeon is a web browser built around Gecko Mozilla's rendering engine and Necko Mozilla's networking engine. It's a GNOME web browser, designed to take advantage of as many GNOME technologies as makes sense. Galeon was written to do just one thing - browse the web...

rpc.pcnfsd - Remote Format String

rpc.pcnfsd - Remote Format String / Check Point Software Technologies - Vulnerability Discovery Team VDT Rodrigo Rubira Branco - rpc.pcnfsd syslog format string vulnerability / include include include include include define PCNFSDPROG 150001 define PCNFSDVERS 1 define PCNFSDPRINIT 2 define...

rpc.pcnfsd Remote Format String Exploit

Exploit for aix platform in category remote exploits ======================================= rpc.pcnfsd Remote Format String Exploit ======================================= / Check Point Software Technologies - Vulnerability Discovery Team VDT Rodrigo Rubira Branco - rpc.pcnfsd syslog format stri...

ZDI-10-125: IBM SolidDB solid.exe Handshake Request Username Field Remote Code Execution Vulnerability

ZDI-10-125: IBM SolidDB solid.exe Handshake Request Username Field Remote Code Execution Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-10-125 July 13, 2010 -- CVSS: 10, AV:N/AC:L/Au:N/C:C/I:C/A:C -- Affected Vendors: IBM -- Affected Products: IBM solidDB -- TippingPointTM IPS...

Spammers Moving to Disposable Domains

Spammers and the botnet operators they’re allied with are continuing to adapt their techniques to evade security technologies, and now are using what amount to disposable domains for their activities. A new report shows that the spammers are buying dozens of domains at a time and moving from one ...

cmd.exe Unicode Buffer Overflow (SEH)

No description provided by source. Exploit Title: cmd.exe Unicode Buffer Overflow SEH Date: 7/8/2010 Author: bitform Software Link: N/A Version: N/A Tested on: Windows Server 2003 SP2 and Windows XP SP2 CVE : none 1 Acknowledgements Props to Dan Crowley @dancrowley at Core Security Technologies f...

CubeCart PHP 4.3.x - 'shipkey' SQL Injection

SQL Injection in CubeCart PHP Free & Commercial Shopping Cart Application 1. Advisory Information Title: SQL Injection in CubeCart PHP Free & Commercial Shopping Cart Application Advisory Id: CORE-2010-0415 Advisory URL: http://www.coresecurity.com/content/cubecart-php-shopping-cart-sql-injection...

Novell iManager Multiple Vulnerabilities

No description provided by source. -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Core Security Technologies - CoreLabs Advisory http://corelabs.coresecurity.com/ Novell iManager Multiple Vulnerabilities 1. Advisory Information Title: Novell iManager Multiple Vulnerabilities Advisory Id:...

Novell iManager Multiple Vulnerabilities

Exploit for novell platform in category dos / poc ======================================== Novell iManager Multiple Vulnerabilities ======================================== 1. Advisory Information Title: Novell iManager Multiple Vulnerabilities Advisory Id: CORE-2010-0316 Advisory URL:...

Novell iManager - Multiple Vulnerabilities

Novell iManager - Multiple Vulnerabilities -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Core Security Technologies - CoreLabs Advisory http://corelabs.coresecurity.com/ Novell iManager Multiple Vulnerabilities 1. Advisory Information Title: Novell iManager Multiple Vulnerabilities Advisory Id:...

Scribe CMS Cross Site Scripting

Vulnerability ID: HTB22422 Reference: http://www.htbridge.ch/advisory/xssvulnerabilityinscribecms2.html Product: Scribe CMS Vendor: Sigmer Technologies Vulnerable Version: Current at 03.06.2010 and Probably Prior Versions Vendor Notification: 07 June 2010 Vulnerability Type: XSS Cross Site...

CVE-2010-2425: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in TitanFTPd in South River Technologies Titan FTP Server 8.10.1125, and probably earlier versions, allows remote authenticated users to read or delete arbitrary files via "..//" sequences in a COMB command...

XSS vulnerability in Scribe CMS

Vulnerability ID: HTB22420 Reference: http://www.htbridge.ch/advisory/xssvulnerabilityinscribecms.html Product: Scribe CMS Vendor: Sigmer Technologies Vulnerable Version: Current at 03.06.2010 and Probably Prior Versions Vendor Notification: 07 June 2010 Vulnerability Type: XSS Cross Site Scripti...

Novell iManager Multiple Vulnerabilities

Novell iManager Multiple Vulnerabilities 1. Advisory Information Title: Novell iManager Multiple Vulnerabilities Advisory Id: CORE-2010-0316 Advisory URL: http://www.coresecurity.com/content/novell-imanager-buffer-overflow-off-by-one-vulnerabilities Date published: 2010-06-23 Date of last update:...

XSS vulnerability in Scribe CMS

Vulnerability ID: HTB22422 Reference: http://www.htbridge.ch/advisory/xssvulnerabilityinscribecms2.html Product: Scribe CMS Vendor: Sigmer Technologies Vulnerable Version: Current at 03.06.2010 and Probably Prior Versions Vendor Notification: 07 June 2010 Vulnerability Type: XSS Cross Site...

Sigmer Technologies Scribe CMS - copy_folder.php Cross-Site Scripting

Sigmer Technologies Scribe CMS - copyfolder.php Cross-Site Scripting source: https://www.securityfocus.com/bid/41000/info Sigmer Technologies Scribe CMS is prone to a cross-site scripting vulnerability because the application fails to sufficiently sanitize user-supplied input. An attacker may...