292 matches found
Roxio Toast 7 - DejaVu Component PATH Variable Privilege Escalation
Roxio Toast 7 - DejaVu Component PATH Variable Privilege Escalation source: https://www.securityfocus.com/bid/19596/info Roxio Toast is prone to a local privilege-escalation vulnerability because it fails to properly sanitize user-supplied input. As a result, local users may set their own search...
[Full-disclosure] NETRAGARD-20060624 SECURITY ADVISORY] [ROXIO TOAST 7 TITANIUM - LOCAL ROOT COMPROMISE ]
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Netragard, L.L.C. -- Vulnerability Research and Exploitation Team www.netragard.com Advisory Information - ---------------------------------------------------------------------- Contact: : Adriel T. Desautels Advisory ID : NETRAGARD-20060624 Product...
Roxio Toast 7 - DejaVu Component PATH Variable Privilege Escalation
source: https://www.securityfocus.com/bid/19596/info Roxio Toast is prone to a local privilege-escalation vulnerability because it fails to properly sanitize user-supplied input. As a result, local users may set their own search path for external applications that are called by setuid programs th...
Cross site scripting
Multiple cross-site scripting XSS vulnerabilities in toast.asp in Toast Forums 1.6 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 author, 2 subject, 3 message, or 4 dayprune parameter...
CVE-2006-1414
Toast Forums 1.6 and earlier are affected by multiple cross-site scripting (XSS) vulnerabilities in toast.asp. The issue allows remote attackers to inject arbitrary web script or HTML via the parameters (1) author, (2) subject, (3) message, or (4) dayprune. The vulnerability is confirmed in the C...
CVE-2006-1414: Undefined Security Weakness
Multiple cross-site scripting XSS vulnerabilities in toast.asp in Toast Forums 1.6 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 author, 2 subject, 3 message, or 4 dayprune parameter...
Toast Forums 1.6 - Toast.asp Multiple Cross-Site Scripting Vulnerabilities
Toast Forums 1.6 - Toast.asp Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/17249/info Toast Forums is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. An...
XSS in <= Toast Forums 1.6
XSS in = Toast Forums 1.6 Vuln. discovered by : r0t Date: 25 march 2005 vendor:http://www.toastforums.com/ affected versions: 1.6 and prior orginal advisory: http://pridels.blogspot.com/2006/03/xss-in-toast-forums-16.html Vuln. Description. Toast Forums contains a flaw that allows a remote cross...
CVE-2004-1398
CVE-2004-1398 describes a format string vulnerability in prelink.c within kextload on Apple OS X, used by TDIXSupport in Roxio Toast Titanium and possibly other products. The underlying issue arises from format string specifiers in the extension argument, enabling local users to execute arbitrary...
CVE-2004-1398: Undefined Security Weakness
Format string vulnerability in prelink.c in kextload in Apple OS X, as used by TDIXSupport in Roxio Toast Titanium and possibly other products, allows local users to execute arbitrary code via format string specifiers in the extension argument...
Possible local root vulnerability in Roxio Toast on Mac OS X
Possible local root vulnerability in Roxio Toast on Mac OS X By fintler [email protected] Summary: There is a format string bug in the binary /Library/Application Support/Roxio/TDIXSupport. It is installed suid root by default and may be exploited by finding the offset and overwriting the stack...