samba: Race condition by mount (mount.cifs) operations

client/mount.cifs.c in mount.cifs in smbfs in Samba 3.0.22, 3.0.28a, 3.2.3, 3.3.2, 3.4.0, and 3.4.5 allows local users to mount a CIFS share on an arbitrary mountpoint, and gain privileges, via a symlink attack on the mountpoint directory file...

CVE-2010-3912: Undefined Security Weakness

The supportconfig script in supportutils in SUSE Linux Enterprise 11 SP1 and 10 SP3 does not "disguise passwords" in configuration files, which has unknown impact and attack vectors...

SSH password weakness

Added: 01/05/2011 CVE: CVE-1999-0502 Background Passwords are the most commonly used method of authenticating users to a server. The combination of a login name and password is used to verify the identity of a user requesting access, and to determine what parts of the server the user has permissi...

Debian DSA-2136-1 : tor - buffer overflow

Willem Pinckaers discovered that Tor, a tool to enable online anonymity, does not correctly handle all data read from the network. By supplying specially crafted packets a remote attacker can cause Tor to overflow its heap, crashing the process. Arbitrary code execution has not been confirmed but...

BlackBerry Desktop Software < 6.0.1 Database Backup File Password Brute Force Weakness

The version of BlackBerry Desktop Software installed on the remote host is older than version 6.0.1. Such versions use a weak password to encrypt backup files, which makes it possible for a local user to decrypt backup files via a brute-force attack. C Tenable Network Security, Inc...

Mozilla accidentally publishes user IDs and passwords hashes !

On Monday, Mozilla, the developer of popular open source applications like Firefox and Thunderbird, announced that a database containing usernames and password hashes belonging to users of addons.mozilla.org had been posted publicly by accident. If you registered for an account on...

DSA-2136-1 tor - potential code execution

Bulletin has no description...

CVE-2010-4509: Undefined Security Weakness

Multiple unspecified vulnerabilities in Movable Type 4.x before 4.35 and 5.x before 5.04 have unknown impact and attack vectors related to the 1 mt:AssetProperty and 2 mt:EntryFlag tags...

CVE-2010-4511: Undefined Security Weakness

Unspecified vulnerability in Movable Type 4.x before 4.35 and 5.x before 5.04 has unknown impact and attack vectors related to the "dynamic publishing error message."...

PT-2010-5338 · Red Hat · Condor +1

Name of the Vulnerable Software and Affected Versions: Red Hat Enterprise Messaging, Realtime and Grid MRG version 1.3 Description: The installation documentation for Red Hat Enterprise Messaging, Realtime and Grid MRG recommends a configuration that creates a trusted channel with insufficient...

Debian DSA-2129-1 : krb5 - checksum verification weakness

A vulnerability has been found in krb5, the MIT implementation of Kerberos. MIT krb5 clients incorrectly accept unkeyed checksums in the SAM-2 preauthentication challenge: an unauthenticated remote attacker could alter a SAM-2 challenge, affecting the prompt text seen by the user or the kind of...

DSA-2129-1 krb5 - checksum verification weakness

Bulletin has no description...

WebKit - Insufficient Entropy Random Number Generator (1)

WebKit - Insufficient Entropy Random Number Generator 1 source: https://www.securityfocus.com/bid/44952/info WebKit is prone to a random-number-generator weakness. Attackers can exploit this issue by enticing an unsuspecting user into visiting a malicious webpage. Successful attacks will allow...

WebKit - Insufficient Entropy Random Number Generator (1)

source: https://www.securityfocus.com/bid/44952/info WebKit is prone to a random-number-generator weakness. Attackers can exploit this issue by enticing an unsuspecting user into visiting a malicious webpage. Successful attacks will allow attackers to track user sessions and obtain personal...

WebKit - Insufficient Entropy Random Number Generator (2)

source: https://www.securityfocus.com/bid/44952/info WebKit is prone to a random-number-generator weakness. Attackers can exploit this issue by enticing an unsuspecting user into visiting a malicious webpage. Successful attacks will allow attackers to track user sessions and obtain personal...

Installation Path Disclosure Weakness in CLANSPHERE

High-Tech Bridge SA Security Research Lab has discovered a weakness in CLANSPHERE which could be exploited to gain access to potentially sensitive information. 1 Installation path disclosure weakness in CLANSPHERE The weakness exists due to application reveals the full path to installation...

CVE-2010-4039: Undefined Security Weakness

Google Chrome before 7.0.517.41 on Linux does not properly set the PATH environment variable, which has unspecified impact and attack vectors...

Mozilla Firefox 3.5.x < 3.5.14 Multiple Vulnerabilities

Binary data 5681.prm...

Installation Path Disclosure Weakness in MyBB

High-Tech Bridge SA Security Research Lab has discovered a weakness in MyBB which could be exploited to gain access to potentially sensitive information. 1 Installation path disclosure weakness in MyBB The weakness exists due to application reveals the full path to installation directory in an...

CVE-2010-3398: Undefined Security Weakness

Unspecified vulnerability in the webcontainer implementation in IBM Lotus Sametime Connect 8.5.1 before CF1 has unknown impact and attack vectors, aka SPRs LXUU87S57H and LXUU87S93W...