Debian DSA-942-1 : albatross - design error

A design error has been discovered in the Albatross web application toolkit that causes user-supplied data to be used as part of template execution and hence arbitrary code execution. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were...

[OpenPKG-SA-2006.021] OpenPKG Security Advisory (openssl)

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 OpenPKG Security Advisory The OpenPKG Project http://www.openpkg.org/security/ http://www.openpkg.org [email protected] [email protected] OpenPKG-SA-2006.021 28-Sep-2006 Package: openssl Vulnerability: denial of service OpenPKG Specific: ...

CVE-2006-5067

PHP remote file inclusion vulnerability in loader.php in PHP System Administration Toolkit PHPSaTK allows remote attackers to execute arbitrary PHP code via a URL in the GLOBALSconfig parameter. NOTE: this issue is disputed by CVE; analysis shows that the GLOBALSconfig variable is initialized...

PT-2006-5806 · Php · Phpsatk

Name of the Vulnerable Software and Affected Versions: PHP System Administration Toolkit PHPSaTK affected versions not specified Description: A remote file inclusion issue in the loader.php file of PHPSaTK allows remote attackers to execute arbitrary PHP code via a URL in the config parameter of...

CVE-2006-5067

PHPSaTK (PHP System Administration Toolkit) is affected by a remote file inclusion issue in loader.php via a URL in GLOBALS[config], allowing arbitrary PHP code execution. Affected component is loader.php in PHPSaTK; root cause is RFI through GLOBALS[config], as described in multiple sources. Som...

CVE-2006-5067

PHP remote file inclusion vulnerability in loader.php in PHP System Administration Toolkit PHPSaTK allows remote attackers to execute arbitrary PHP code via a URL in the GLOBALSconfig parameter. NOTE: this issue is disputed by CVE; analysis shows that the GLOBALSconfig variable is initialized...

Compression Plus CP5DLL32.DLL ZOO Archive Header Processing Overflow RCE

The version of the Compression Plus toolkit installed on the remote Windows host contains a DLL file that is affected by a stack-based overflow condition when processing specially crafted ZOO files. A remote attacker can exploit this issue, via an inconsistent size parameter in a ZOO file header,...

CVE-2006-4233

Globus Toolkit 3.2.x, 4.0.x, and 4.1.0 before 20060815 allow local users to obtain sensitive information proxy certificates and overwrite arbitrary files via a symlink attack on temporary files in the /tmp directory, as demonstrated by files created by 1 myproxy-admin-adduser, 2 grid-ca-sign, and...

CVE-2006-4232

Race condition in the grid-proxy-init tool in Globus Toolkit 3.2.x, 4.0.x, and 4.1.0 before 20060815 allows local users to steal credential data by replacing the proxy credentials file in between file creation and the check for exclusive file access...

CVE-2006-4232

Race condition in the grid-proxy-init tool in Globus Toolkit 3.2.x, 4.0.x, and 4.1.0 before 20060815 allows local users to steal credential data by replacing the proxy credentials file in between file creation and the check for exclusive file access...

CVE-2006-4233

Globus Toolkit 3.2.x, 4.0.x, and 4.1.0 before 20060815 are affected by a local‑only race condition in temporary file handling (in /tmp) that can let an attacker obtain proxy certificates and overwrite arbitrary files via a symlink attack. The issue is demonstrated by files created by myproxy-admi...

CVE-2006-4233

Globus Toolkit 3.2.x, 4.0.x, and 4.1.0 before 20060815 allow local users to obtain sensitive information proxy certificates and overwrite arbitrary files via a symlink attack on temporary files in the /tmp directory, as demonstrated by files created by 1 myproxy-admin-adduser, 2 grid-ca-sign, and...

CVE-2006-4232

CVE-2006-4232 : A race condition in the grid-proxy-init tool of Globus Toolkit (versions 3.2.x, 4.0.x, 4.1.0 before 20060815) allows local attackers to steal credential data by replacing the proxy credentials file between its creation and the check for exclusive access. The vulnerability arises f...

Multiple Globus Toolkit grid toolkit vulnerabilities

Race conditions. Symbolic links problem...

[SA21516] Globus Toolkit Multiple Vulnerabilities

---------------------------------------------------------------------- Hardcore Disassembler / Reverse Engineer Wanted! Want to work with IDA and BinDiff? Want to write PoC's and Exploits? Your nationality is not important. We will get you a work permit, find an apartment, and offer a relocation...

CentOS 3 / 4 : gtk2 (CESA-2005:344)

Updated gtk2 packages that fix a double free vulnerability are now available. This update has been rated as having important security impact by the Red Hat Security Response Team. The gtk2 package contains the GIMP ToolKit GTK+, a library for creating graphical user interfaces for the X Window...

CVE-2006-3309

SQL injection vulnerability in SPT--ForumTopics.php in Scout Portal Toolkit SPT 1.4.0 and earlier allows remote attackers to execute arbitrary SQL commands via the forumid parameter...

CVE-2006-3309

SQL injection vulnerability in SPT--ForumTopics.php in Scout Portal Toolkit SPT 1.4.0 and earlier allows remote attackers to execute arbitrary SQL commands via the forumid parameter...

CVE-2006-3309

CVE-2006-3309 concerns a SQL injection in the Scout Portal Toolkit (SPT) via the SPT--ForumTopics.php script’s forumid parameter. Affected product/version: Scout Portal Toolkit (SPT) ≤ 1.4.0. Root cause: insufficient input sanitization leading to SQL-related command execution. Impact: potential d...

Scout Portal Toolkit SPT--ForumTopics.php forumid Parameter SQL Injection

The remote host is running Scout Portal Toolkit, an open source toolkit for organizing collections of online resources / knowledge. The version of Scout Portal Toolkit installed on the remote host fails to sanitize user-supplied input to the 'forumid' parameter to the 'SPT--ForumTopics.php' scrip...