PHP shmop.c module permits write of arbitrary memory.

Hi list-eners, ========================================================== Title: Php shmop write of arbitrary memory - Safe Mode Bypass Affected: Php = 5.0.2 & 4.3.9 if shmop module is loaded. Vulnerability Type: Input Validation - write of arbitrary memory ==Summary Shared Memory PHP Module has ...

phpBB viewtopic.php fails to properly sanitize input passed to the "highlight" parameter

Overview phpBB contains an user input validation problem with regard to the parsing of the URL. An intruder can deface a phpBB website, execute arbitrary commands, or gain administrative privileges on a compromised bulletin board. Description phpBB is an open-source bulletin board. A lack of inpu...

[SA13468] Ethereal Multiple Vulnerabilities

TITLE: Ethereal Multiple Vulnerabilities SECUNIA ADVISORY ID: SA13468 VERIFY ADVISORY: http://secunia.com/advisories/13468/ CRITICAL: Highly critical IMPACT: DoS, System access WHERE: From remote SOFTWARE: Ethereal 0.x http://secunia.com/product/1228/ DESCRIPTION: Multiple vulnerabilities have be...

Mandrake Linux Security Advisory : iproute2 (MDKSA-2004:148)

Herbert Xu discovered that iproute can accept spoofed messages sent via the kernel netlink interface by other users on the local machine. This could lead to a local Denial of Service attack. The updated packages have been patched to prevent this problem. %NASLMINLEVEL 70300 C Tenable Network...

PunBB Search Dropdown Private Forum Disclosure

According to its banner, the remote version of PunBB reportedly may include protected forums in a search dropdown list regardless of whether a user has permissions to view those forums. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if...

PunBB profile.php XSS

According to its banner, the version of PunBB installed on the remote host fails to properly sanitize user input to the script 'profile.php'. With a specially crafted URL, an attacker can inject arbitrary HTML and script code into a user's browser, resulting in a loss of integrity, theft of...

PunBB IMG Tag Client Side Scripting XSS

The remote version of PunBB is vulnerable to cross-site scripting flaws because the application does not validate the IMG tag. With a specially crafted URL, an attacker can cause arbitrary code execution within a user's browser, resulting in a loss of integrity. %NASLMINLEVEL 70300 C Tenable...

Solaris 9 (sparc) : 116774-04

SunOS 5.9: ping patch. Date this patch was last updated by Sun : Feb/05/10 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc'; include'compat.inc'; if description scriptid1575...

Mandrake Linux Security Advisory : samba (MDKSA-2004:131)

Karol Wiesek discovered a bug in the input validation routines in Samba 3.x used to match filename strings containing wildcard characters. This bug may allow a user to consume more than normal amounts of CPU cycles which would impact the performance and response of the server. In some cases it...

Debian DSA-589-1 : libgd1 - integer overflows

'infamous41md' discovered several integer overflows in the PNG image decoding routines of the GD graphics library. This could lead to the execution of arbitrary code on the victim's machine. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugi...

[SA13091] Moodle Unspecified SQL Injection Vulnerabilities

---------------------------------------------------------------------- Monitor, Filter, and Manage Security Information - Filtering and Management of Secunia advisories - Overview, documentation, and detailed reports - Alerting via email and SMS Request Trial: https://ca.secunia.com/?f=l...

Solaris 9 (sparc) : 117455-01

SunOS 5.9: in.rwhod Patch. Date this patch was last updated by Sun : Nov/01/04 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc'; include'compat.inc'; if description...

Mandrake Linux Security Advisory : mpg123 (MDKSA-2004:120)

Carlos Barros discovered two buffer overflow vulnerabilities in mpg123; the first in the getauthfromURL function and the second in the httpopen function. These vulnerabilities could be exploited to possibly execute arbitrary code with the privileges of the user running mpg123. The provided packag...

[ GLSA 200411-02 ] Cherokee: Format string vulnerability

Gentoo Linux Security Advisory GLSA 200411-02 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - http://security.gentoo.org/ - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Severity:...

[SA13012] TortoiseCVS "SSH2_MSG_DEBUG" Packet Handling Buffer Overflow

TITLE: TortoiseCVS "SSH2MSGDEBUG" Packet Handling Buffer Overflow SECUNIA ADVISORY ID: SA13012 VERIFY ADVISORY: http://secunia.com/advisories/13012/ CRITICAL: Moderately critical IMPACT: System access WHERE: From remote SOFTWARE: TortoiseCVS 1.x http://secunia.com/product/4183/ DESCRIPTION: A...

[SA12995] ImageMagick EXIF Parser Buffer Overflow Vulnerability

TITLE: ImageMagick EXIF Parser Buffer Overflow Vulnerability SECUNIA ADVISORY ID: SA12995 VERIFY ADVISORY: http://secunia.com/advisories/12995/ CRITICAL: Highly critical IMPACT: System access WHERE: From remote SOFTWARE: ImageMagick 6.x http://secunia.com/product/3763/ DESCRIPTION: A vulnerabilit...

[SA12965] SKForum Unspecified "my wiki" and "wiki" Vulnerability

TITLE: SKForum Unspecified "my wiki" and "wiki" Vulnerability SECUNIA ADVISORY ID: SA12965 VERIFY ADVISORY: http://secunia.com/advisories/12965/ CRITICAL: Moderately critical IMPACT: Unknown WHERE: From remote SOFTWARE: SKForum 1.x http://secunia.com/product/4140/ DESCRIPTION: A vulnerability wit...

Important: Red Hat Security Advisory: squid security update

An updated squid package that fixes a remote denial of service vulnerability is now avaliable. Squid is a full-featured Web proxy cache. iDEFENSE reported a flaw in the squid SNMP module. This flaw could allow an attacker who has the ability to send arbitrary packets to the SNMP port to restart t...

KLA10226 Multiple vulnerabilities in WahtsUp Gold

Multiple serious vulnerabilities have been found in WhatsUp Gold. Malicious users can exploit these vulnerabilities to cause denial of service or execute arbitrary code. Below is a complete list of vulnerabilities 1. Unknown vectors can be exploited remotely via a specially designed GET request; ...

BugPort Attached File Handling Unspecified Issue

The remote host seems to be running BugPort, an open source web-based system to manage tasks and defects throughout the software development process. This version of BugPort contains an unspecified attachment handling flaw. %NASLMINLEVEL 70300 C Tenable Network Security, Inc...