Firefox Multiple Vulnerabilities Dec-09 (Linux)

The host is installed with Firefox Browser and is prone to multiple vulnerabilities. OpenVAS Vulnerability Test $Id: secpodfirefoxmultvulndec09lin02.nasl 5055 2017-01-20 14:08:39Z teissa $ Firefox Multiple Vulnerabilities Dec-09 Linux Authors: Sharath S Copyright: Copyright c 2009 SecPod,...

Thunderbird Multiple Vulnerabilities Dec-09 (Linux)

The host is installed with Thunderbird browser and is prone to multiple vulnerabilities. OpenVAS Vulnerability Test $Id: secpodthunderbirdmultvulndec09lin.nasl 5148 2017-01-31 13:16:55Z teissa $ Thunderbird Multiple Vulnerabilities Dec-09 Linux Authors: Sharath S Copyright: Copyright c 2009 SecPo...

Privilege escalation using watch point — Mozilla

Shutdown demonstrated that it was possible to use a JavaScript watch to gain elevated privilege. This could be used to compromise the user's computer and install malware...

insecure user account lam-runtime-7.0.6-2mdk rpm

Serverity: HIGH I found a bug when lam-runtime-7.0.6-2mdk is installed it creates a new user/group with insecure permissions. BUG: user "mpi" is created without a password which can be used to compromise a system. rpm -qf /var/lib/mpi/testmpi.lam lam-runtime-7.0.6-2mdk FIX: Either lock the accoun...

advRX181104.txt

| REXOTECdotCOM | |=-----= ADV RX171104 - Cscope :: Race condition on temporary file -----=| | | |=--- - INFORMATION ----------------------------------------------------------------------| VulnDiscovery: 2003/05/21 Release Date : 2004/11/17 Author : Gangstuck / Psirac Application : Cscope Affecte...

GLSA-200406-11 : Horde-IMP: Input validation vulnerability

The remote host is affected by the vulnerability described in GLSA-200406-11 Horde-IMP: Input validation vulnerability Horde-IMP fails to properly sanitize email messages that contain malicious HTML or script code. Impact : By enticing a user to read a specially crafted e-mail, an attacker can...

Apache::Gallery 0.4/0.5/0.6 - Insecure File Storage Privilege Escalation

// source: https://www.securityfocus.com/bid/8561/info It has been discovered that Apache::Gallery, when using Inline C, stores shared libraries in an insecure fashion. As a result, an attacker may be capable of having malicious code linked into the Apache process. This could lead to a malicious...

Max Web Portal 1.30 - Multiple Vulnerabilities

Max Web Portal 1.30 - Multiple Vulnerabilities Max Web Portal Multiple Vulnerabilities Vendor: Max Web Portal Product: Max Web Portal Version: alertdocument.cookie Remember this vuln as I will later explain how it can be used to aide an attacker to compromise user and admin accounts. Hidden Form...

Macromedia Shockwave Flash Malformed Header Overflow #2

Macromedia Shockwave Flash Malformed Header Overflow 2 Release Date: December 16, 2002 Severity: High Remote Code Execution Systems Affected: Macromedia Flash Player versions less than 6.0.65.0 Description: While working on some pre-release Retina® CHAM tools, multiple exploitable conditions were...

[SECURITY] [DSA-070-1] netkit-telnet AYT buffer overflow

------------------------------------------------------------------------ Debian Security Advisory DSA-070-1 [email protected] http://www.debian.org/security/ Robert van der Meulen August 10, 2001 - ------------------------------------------------------------------------ Package : netkit-telnet...

Cat Soft Serv-U FTP Server 2.4/2.5 - FTP Directory Traversal

source: https://www.securityfocus.com/bid/2052/info FTP Serv-U is an internet FTP server from CatSoft. Authenticated users can gain access to the ftproot of the drive where Serv-U FTP has been installed. Users that have read, write, execute and list access in the home directory will have the same...