Multiple MacOS X security vulnerabilities

Apple Type Services server font processing buffer overflow. ftpd may allow arbitrary users to determine account name validity. CFNetwork may allow arbitrary FTP commands to be executed via a crafted FTP URI. Security Framework Secure Transport may not negotiate the best cipher available. PPP driv...

Apple Mac OS X CFNetwork may allow arbitrary FTP commands to be executed via a crafted FTP URI

Overview Apple Mac OS X CFNetwork may allow arbitrary FTP commands to be executed via a crafted FTP URI. Description According to Apple Security Update 2006-007:By enticing a user to access a maliciously crafted FTP URI, an attacker can cause the user's FTP client to issue arbitrary FTP commands ...

Woltlab Burning Board WBB_UserID SQL注入漏洞

Woltlab Burning Board是一款基于PHP的WEB应用程序。 Woltlab Burning Board不充分过滤用户提交的URI输入，远程攻击者可以利用漏洞进行SQL注入攻击，获得敏感信息。 问题是脚本对用户提交的'WBBUserID'参数缺少过滤，提交恶意SQL查询作为参数数据，可更改原来的SQL逻辑，获得敏感信息。 WoltLab Burning Board Lite 1.0.2 http://www.woltlab.de/products/burningboardlite/indexen.php...

security flaw

Links web browser 1.00pre12 and Elinks 0.9.2 with smbclient installed allows remote attackers to execute arbitrary code via shell metacharacters in an smb:// URI, as demonstrated by using PUT and GET statements...

CVE-2006-5925

Links web browser 1.00pre12 and Elinks 0.9.2 with smbclient installed allows remote attackers to execute arbitrary code via shell metacharacters in an smb:// URI, as demonstrated by using PUT and GET statements...

CVE-2006-5925

CVE-2006-5925 : A flaw in Elinks (and affected smb:// handling) allows a remote attacker to execute arbitrary code when smbclient is installed, by processing crafted smb:// URIs. The issue affects Elinks 0.9.2 and related configurations; Red Hat/CentOS and Ubuntu advisories (RHSA-2006:0742, USN-8...

CVE-2006-5850

Stack-based buffer overflow in Essentia Web Server 2.15 for Windows allows remote attackers to execute arbitrary code via a long URI, as demonstrated by a GET or HEAD request. NOTE: some of these details are obtained from third party information...

CVE-2006-5850

Stack-based buffer overflow in Essentia Web Server 2.15 for Windows allows remote attackers to execute arbitrary code via a long URI, as demonstrated by a GET or HEAD request. NOTE: some of these details are obtained from third party information...

America Online ICQ ActiveX Control Code Execution Vulnerability

This vulnerability allows attackers to execute arbitrary code on vulnerable installations of AOL ICQ. User interaction is not required to exploit this vulnerability. The specific flaw exists in the DownloadAgent function of the ICQPhone.SipxPhoneManager ActiveX control with the following CLSID:...

CVE-2006-5711

ECI Telecom B-FOCuS Wireless 802.11b/g ADSL2+ Router allows remote attackers to read arbitrary files via a certain HTTP request, as demonstrated by a request for a router configuration file, related to the /html/defs/ URI...

Microsoft Internet Explorer MHTML URI处理器信息泄露漏洞

Microsoft Internet Explorer是微软发布的非常流行的WEB浏览器。 Internet Explorer在处理有“mhtml:”URI处理器的URL的重新定向时存在漏洞，可能允许用户访问其他WEB站点所服务的文档。 Microsoft Internet Explorer 6 for Windows XP SP2 目前厂商还没有提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本： http://www.microsoft.com/windows/ie/default.asp...

Microsoft Internet Explorer嵌入图象URI欺骗漏洞

Microsoft Internet Explorer是一款流行的WEB浏览器。 Microsoft Internet Explorer在处理部分URI连接时存在问题，远程攻击者可以利用这个漏洞隐藏URI连接中的真实内容，诱骗用户访问恶意站点。 图象包含在正确格式的HREF标记中时，可隐藏URI连接中的真实内容，这个漏洞可诱骗用户访问一个非法连接而不被怀疑。 攻击者可以通过提供恶意图象使的显示的URI连接指向合法信任的站点，如果没有任何怀疑的用户把鼠标移到相关的链接，可能导致他们认为链接的是信任正确的站点而被欺骗。 Microsoft Internet Explorer 6.0SP1...

Microsoft Windows MHTML超长URI串溢出漏洞（MS06-043）

Microsoft Windows是微软发布的非常流行的操作系统。 inetcomm.dll在使用"mhtml:" URI解析器处理URL时存在栈溢出漏洞，成功利用此漏洞的攻击者可以完全控制受影响的系统。 攻击者可以通过超长的URL来触发这个漏洞，如诱骗用户通过Internet Explorer打开恶意的站点或打开特制的Internet快捷方式。 Microsoft Windows XP SP2 Microsoft Windows XP Professional x64 Edition Microsoft Windows Server 2003 x64 Edition Microsoft...

Microsoft IE FTP URI处理任意FTP命令执行漏洞（MS06-042）

Microsoft Internet Explorer是微软发布的非常流行的WEB浏览器。 Microsoft Internet Explorer对URI参数串的处理上存在漏洞，远程攻击者可能利用此漏洞在用户访问的FTP服务器上执行恶意命令。 Internet Explorer允许用户在地址栏中输入ftp://ftpuser:ftppass@server/directory 以访问登录FTP服务器。如果攻击者在FTP命令前加入URL编码的换行符（%0a）的话，就可以通过ftp:// URL向FTP会话中注入命令。但攻击者只能执行用户可以在FTP服务器上允许执行的操作。 Microsoft...

Opera Web浏览器URI标签解析堆溢出漏洞

Opera是一款流行的WEB浏览器，支持多种平台。 Opera浏览器在解析包含有URL的标签时存在堆溢出漏洞，成功利用这个漏洞的攻击者可能以登录用户的权限执行任意代码，失败的攻击也可能导致浏览器崩溃。 在解析过程中分配了256字节的堆缓冲区，但没有经过长度检查便将标签的URL拷贝到了这个缓冲区。C/C++的漏洞代码如下： char localurl = malloc256; strcpylocalurl, tagurl; Opera Software Opera 9.01 Opera Software Opera 9.0 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载：...

CVE-2006-5034

Directory traversal vulnerability in Paul Smith Computer Services vCAP 1.9.0 Beta and earlier allows remote attackers to read arbitrary files via a .. dot dot in the URI...

CVE-2006-5018

ContentKeeper 123.25 and earlier places passwords in cleartext in an INPUT element in cgi-bin/ck/changepw.cgi, which allows remote authenticated users to obtain passwords via this URI...

CVE-2006-5018

ContentKeeper 123.25 and earlier places passwords in cleartext in an INPUT element in cgi-bin/ck/changepw.cgi, which allows remote authenticated users to obtain passwords via this URI...

CVE-2006-5050

CVE-2006-5050 affects BusyBox by its httpd component, enabling directory traversal through URL-encoded "%2e%2e/" sequences in the URI. The underlying issue is a path traversal vulnerability that could allow remote attackers to read arbitrary files. According to the NVD entry, this is a network-ac...

CVE-2006-5035

Multiple cross-site scripting XSS vulnerabilities in Paul Smith Computer Services vCAP 1.7.0 allow remote attackers to inject arbitrary web script or HTML via 1 the statusmsg parameter in RegisterPage.cgi or 2 a URI corresponding to a nonexistent file. NOTE: the provenance of this information is...