[SECURITY] [DSA 603-1] New openssl packages fix insecure temporary file creation

-------------------------------------------------------------------------- Debian Security Advisory DSA 603-1 [email protected] http://www.debian.org/security/ Martin Schulze December 1st, 2004 http://www.debian.org/security/faq -...

RX171104 Cscope v15.5 and minors - symlink vulnerability - advisory, exploit and patch.

| REXOTECdotCOM | |=-----= ADV RX171104 - Cscope :: Race condition on temporary file -----=| | | |=--- - INFORMATION ----------------------------------------------------------------------| VulnDiscovery: 2003/05/21 Release Date : 2004/11/17 Author : Gangstuck / Psirac [email protected]...

mp-ldu.txt

Multiple SQL-injections in Land Down Under v701 Date: 30.10.04 Application: Land Down Under v701 Platform: PHP Severity: Medium Link: http://www.neocrome.net Vendor Status Vulnerabilities have been fixed. Details An input validation vulnerability was reported in Land Down Under v701. A remote use...

Debian DSA-062-1 : rxvt - buffer overflow

Samuel Dralet reported on bugtraq that version 2.6.2 of rxvt a VT102 terminal emulator for X have a buffer overflow in thettprintf function. A local user could abuse this making rxvt print a special string using that function, for example by using the -T or -name command-line options. That string...

CVE-2004-0457

The mysqlhotcopy script in mysql 4.0.20 and earlier, when using the scp method from the mysql-server package, allows local users to overwrite arbitrary files via a symlink attack on temporary files...

getmail: Filesystem overwrite vulnerability

Background getmail is a reliable fetchmail replacement that supports Maildir, Mboxrd and external MDA delivery. Description David Watson discovered a vulnerability in getmail when it is configured to run as root and deliver mail to the maildirs/mbox files of untrusted local users. A malicious loc...

CVE-2004-1680

application.cgi in the Pingtel Xpressa handset running firmware 2.1.11.24 allows remote authenticated users to cause a denial of service VxWorks OS crash via a long HTTP GET request, possibly triggering a buffer overflow...

SAFE TEAM Regulus 2.2 - 'Custchoice.php' Update Your Password Action Information Disclosure

source: https://www.securityfocus.com/bid/11133/info Regulus is reported prone to an information disclosure vulnerability. It is reported that a specified user/customer password hash is contained in a hidden tag of the 'Update Your Password' action page. An attacker may employ data that is obtain...

CVE-2002-1311

Courier sqwebmail before 0.40.0 does not quickly drop privileges after startup in certain cases, which could allow local users to read arbitrary files...

CVE-2004-0160

Synaesthesia 2.2 and earlier allows local users to execute arbitrary code via a symlink attack on the configuration file...

CVE-2001-0485

Unknown vulnerability in netprint in IRIX 6.2, and possibly other versions, allows local users with lp privileges attacker to execute arbitrary commands via the -n option...

ISS BlackIce Server Protect Unprivileged User Attack

Release Date: August 11, 2004 Severity: Medium Vendor: Internet Security Systems Software: BlackIce Server Protect 3.6cno and below Remote: Remotely Executable from Local and Trusted Networks Vulnerabilities: Unpriviledged User Attack Technical Details: Unpriviledged User Attack was originally...

BlackICE unprivileged local user attack

Pimp industries. "Its all about the Bling, B^!@s and Fame!" BlackICE PC protection / Server Protection Tested on version v3.6.cno Unprivileged local user disabling anyone from using BlackICE C Paul Craig - Pimp Industries 2004 Background ------------- Blackice is a firewall developed by ISS,...

TurboTrafficTrader C 1.0 - Multiple Cross-Site Scripting HTML Injection Vulnerabilities

TurboTrafficTrader C 1.0 - Multiple Cross-Site Scripting HTML Injection Vulnerabilities source: https://www.securityfocus.com/bid/10359/info It has been reported that TurboTrafficTrader C does not properly sanitize input received from users. It has been conjectured that this may allow a remote us...

FTE fails to properly validate command line arguments

Overview FTE contains a vulnerability in the processing of command line arguments that could allow an attacker to execute arbitrary code. Description FTE is a text editor available for a variety of operating systems. There is a buffer overflow vulnerability in the way FTE performs bounds checking...

CVE-2003-1040

kmod in the Linux kernel does not set its uid, suid, gid, or sgid to 0, which allows local users to cause a denial of service crash by sending certain signals to kmod...

Xoops 2.0.x - viewtopic.php Cross-Site Scripting

Xoops 2.0.x - viewtopic.php Cross-Site Scripting source: https://www.securityfocus.com/bid/9497/info It has been reported that Xoops may be prone to a cross-site scripting vulnerability that may allow a remote user to execute HTML or script code in a user's browser. HTML and script code may be...

CVE-2003-0659

Buffer overflow in a function in User32.dll on Windows NT through Server 2003 allows local users to execute arbitrary code via long 1 LBDIR messages to ListBox or 2 CBDIR messages to ComboBox controls in a privileged application...

CVE-2003-0771

Gallery.pm in Apache::Gallery aka A::G uses predictable temporary filenames when running Inline::C, which allows local users to execute arbitrary code by creating and modifying the files before Apache::Gallery does...

RealOne Player for Linux 2.2 Alpha - Insecure Configuration File Permission Privilege Escalation

RealOne Player for Linux 2.2 Alpha - Insecure Configuration File Permission Privilege Escalation // source: https://www.securityfocus.com/bid/8571/info The configuration files for the RealOne Player are installed in the a hidden folder in a users home directory. The issue presents itself, because...