Shopping Basket Pro directory traversal vulnerability

Overview A directory traversal vulnerability exists in Shopping Basket Pro from CGI RESCUE. Shopping Basket Pro from CGI RESCUE is shopping cart software. A directory traversal vulnerability exists in Shopping Basket Pro. Impact A remote attacker could obtain a list of the file and directory name...

Aruba Mobility Controller Series cross-site scripting vulnerability

Overview Aruba Mobility Controller series, switch products from Aruba Networks, contain a cross-site scripting vulnerability. Aruba Mobility Controller series, switch products from Aruba Networks, contain a cross-site scripting vulnerability in the login page to the web management screens. Impact...

Internet Explorer vulnerable in MHTML handling

Overview Internet Explorer is vulnerable in handling MHTML MIME Encapsulation of Aggregate HTML protocol, which allows an arbitrary script execution. When Internet Explorer accesses a website with the MHTML protocol, Internet Explorer processes the contents as MHTML data, ignoring their actual...

Novell eDirectory eMBox工具edirutil命令绕过认证漏洞

BUGTRAQ ID: 28441 CVECAN ID: CVE-2008-0926 Novell eDirectory是一个的跨平台的目录服务器。 Novell eDirectory处理访问认证时存在漏洞，远程攻击者可能利用此漏洞获取非授权访问。 可通过/SOAP URL使用Novell...

Borland StarTeam Multicast服务GMWebHandler::parse_request()栈溢出漏洞

BUGTRAQ ID: 28602 CVECAN ID: CVE-2008-0311 Borland CaliberRM是Borland所捆绑的开发部署解决方案中的企业软件要求管理软件。 CaliberRM的实现上存在缓冲区溢出漏洞，远程攻击者可能利用此漏洞控制服务器。 CaliberRM的StarTeam多播服务组件（STMulticastService）包含有有漏洞的函数PGMWebHandler::parserequest： .text:003AA15D call PGMWebHandler::parserequestchar const ,uint,char...

CDNetworks Nefficient Download(NeffyLauncher.dll) Vulnerabilities

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Title: CDNetworks Nefficient DownloadNeffyLauncher.dll Vulnerabilities Author: Simon Ryeobar4mi at gmail.com, barami at ahnlab.com Severity: High Impact: Remote Code Execution Vulnerable Systems: MS Windows Systems Version: NeffyLauncher 1.0.5...

CDNetworks Nefficient Download (NeffyLauncher.dll) Code Execution Vuln

No description provided by source. Title: CDNetworks Nefficient DownloadNeffyLauncher.dll Vulnerabilities Author: Simon Ryeobar4mi at gmail.com, barami at ahnlab.com Severity: High Impact: Remote Code Execution Vulnerable Systems: MS Windows Systems Version: NeffyLauncher 1.0.5...

ZDI-08-018: Apple QuickTime Run Length Encoding Heap Overflow Vulnerability

ZDI-08-018: Apple QuickTime Run Length Encoding Heap Overflow Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-08-018 April 3, 2008 -- CVE ID: CVE-2008-1021 -- Affected Vendors: Apple -- Affected Products: Apple Quicktime 7.4.1 -- TippingPointTM IPS Customer Protection: TippingPoint...

AIX 610000 : U815333

The remote host is missing AIX PTF U815333 which is related to the security of the package devices.iscsisw.rte You should install this PTF for your system to be up-to-date. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. if ! definedfunc"bnrandom" exit0; include'deprecatednasllevel.inc';...

Microsoft IIS文件更改通知本地权限提升漏洞（MS08-005）

BUGTRAQ ID: 27101 CVECAN ID: CVE-2008-0074 Microsoft Internet信息服务（IIS）是Microsoft Windows自带的一个网络信息服务器，其中包含HTTP服务功能。 IIS处理FTPRoot、NNTPFile\Root和WWWRoot文件夹中文件变化通知的方式存在本地权限提升漏洞，成功利用这个漏洞的攻击者可以在本地系统安全环境中执行任意指令。 Microsoft IIS 7.0 Microsoft IIS 6.0 Microsoft IIS 5.1 Microsoft IIS 5.0 临时解决方法： 在Windows...

AIX 530005 : U808599

The remote host is missing AIX PTF U808599 which is related to the security of the package devices.pci.4f11c800.diag You should install this PTF for your system to be up-to-date. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. if ! definedfunc"bnrandom" exit0; include'deprecatednasllevel.inc...

AIX 520009 : U809701

The remote host is missing AIX PTF U809701 which is related to the security of the package devices.pci.14101403.rte You should install this PTF for your system to be up-to-date. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. if ! definedfunc"bnrandom" exit0; include'deprecatednasllevel.inc'...

lightblog-upload.txt

LightBlog 9.5 - REMOTE FILE UPLOAD VULNERABILITY by Omni 1 Infos --------- Date : 2008-01-30 Product : LightBlog Version : v 9.5 Vendor : http://www.publicwarehouse.co.uk/ Vendor Status : 2008-01-31 Informed! 2008-01-31 Patch received from vendor! 2008-02-01 Published! Description : Lightblog...

IBM AIX逻辑卷标管理器多个命令本地缓冲区溢出漏洞

BUGTRAQ ID: 27431 IBM AIX是一款商业性质的UNIX操作系统。 AIX的逻辑卷标管理命令工具集实现上存在缓冲区溢出漏洞，本地攻击者可能利用此漏洞提升自己的权限。 AIX的逻辑卷标管理器提供了一套用于管理逻辑卷标的工具。逻辑卷标管理器的bos.rte.lvm和bos.clvm.enh命令中存在缓冲区溢出漏洞。如果本地攻击者执行了以下bos.rte.lvm命令： /usr/sbin/lchangevg /usr/sbin/ldeletepv /usr/sbin/putlvodm /usr/sbin/lvaryoffvg /usr/sbin/lvgenminor...

iDefense Security Advisory 01.17.08: Multiple Vendor X Server EVI and MIT-SHM Extensions Integer Overflow Vulnerabilities

iDefense Security Advisory 01.17.08 http://labs.idefense.com/intelligence/vulnerabilities/ Jan 17, 2008 I. BACKGROUND The X Window System or X11 is a graphical windowing system used on Unix-like systems. It is based on a client/server model. More information about about The X Window system is...

VLC Media Player sdpplin_parse() RTSP堆溢出漏洞

BUGTRAQ ID: 27221 VLC Media Player是一款免费的媒体播放器。 VLC在处理畸形格式的数据时存在缓冲区溢出漏洞，远程攻击者可能利用此漏洞控制用户系统。 VLC所使用的旧版Xine库在modules/access/rtsp/realsdpplin.c文件中存在堆溢出漏洞： sdpplint sdpplinparsechar data sdpplint desc = mallocsizeofsdpplint; sdpplinstreamt stream; char buf=malloc3200; char decoded=malloc3200; ... whil...

Microsoft Windows TCP/IP实现IGMP及MLD报文远程溢出漏洞（MS08-001）

BUGTRAQ ID: 27100 CVECAN ID: CVE-2007-0069 Microsoft Windows是微软发布的非常流行的操作系统。 Windows内核的TCP/IP实现（tcpip.sys）处理存储IGMPv3和MLDv2查询状态的TCP/IP结构的方式存在缓冲区溢出漏洞，远程攻击者可能利用此漏洞控制服务器。 匿名攻击者可以通过在网络上向计算机发送特制的IGMPv3和MLDv2报文来利用此漏洞。成功利用此漏洞的攻击者可以完全控制受影响的系统。攻击者可随后安装程序；查看、更改或删除数据；或者创建拥有完全用户权限的新帐户。 Microsoft Windows XP SP...

WordPress $_SERVER变量跨站脚本漏洞

BUGTRAQ ID: 26885 WordPress是一款免费的论坛Blog系统。 WordPress处理全局变量时存在漏洞，远程攻击者可能利用此漏洞控制导致跨站脚本执行攻击。 WordPress信任了$SERVER'REQUESTURI'全局变量，因此远程攻击者控制了$SERVER'REQUESTURI'就可以执行跨站脚本攻击。以下是/wp-includes/query.php文件中第34行的有漏洞函数： function isadmin global $wpquery; return $wpquery-isadmin || stripos$SERVER'REQUESTURI',...

ZDI-07-079: Hewlett-Packard HP-UX swagentd Buffer Overflow Vulnerability

ZDI-07-079: Hewlett-Packard HP-UX swagentd Buffer Overflow Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-07-079.html December 17, 2007 -- CVE ID: CVE-2007-6195 -- Affected Vendor: Hewlett-Packard -- Affected Products: HP-UX 11.11 -- TippingPointTM IPS Customer Protection:...

Microsoft DirectX SAMI及WAV/AVI文件解析远程代码执行漏洞（MS07-064）

BUGTRAQ ID: 26804,26789 CVECAN ID: CVE-2007-3901,CVE-2007-3895 Microsoft DirectX是Windows操作系统中的一项功能，流媒体在玩游戏或观看视频时通过这个功能支持图形和声音。 Microsoft DirectX处理畸形格式的媒体文件时存在漏洞，本地攻击者可能利用此漏洞提升自己的权限。 集成DirectX技术的Microsoft DirectShow没有对Synchronized Accessible Media...