CGI::Session CGISESSID Cookie值目录遍历漏洞

BUGTRAQ ID: 30267 CGI::Session是一个Perl5库，可提供可靠易用的模块化会话管理系统。 CGI::Session没有充分的过滤CGISESSID cookie值便将其用在了File驱动中创建会话数据文件的文件名。如果远程攻击者在cookie值中注入了目录遍历序列，就会导致File驱动从配置的会话数据目录以外的任意文件读取会话数据。 仅在满足了所有以下条件的情况下才可以利用这个漏洞： 1 Web应用使用了CGI::Session中的File驱动管理会话。 2 Web应用部署于基于Windows的系统。 3...

Security Update for Flash Player (KB923789)

Security issues have been identified in Macromedia Flash Player from Adobe that could allow an attacker to compromise a Windows-based system and gain control over it. You can help protect your system by installing this update from Microsoft. After you install this item, you may have to restart yo...

Security Update for Flash Player (KB923789)

Security issues have been identified in Macromedia Flash Player from Adobe that could allow an attacker to compromise a Windows-based system and gain control over it. You can help protect your system by installing this update from Microsoft. After you install this item, you may have to restart yo...

Security Update for Flash Player (KB913433)

A security issue has been identified that could allow an attacker to remotely compromise your Windows-based system with a vulnerable version of the Flash Player and gain control over it. You can help protect your computer by installing this update from Microsoft. After you install this item, you...

Security Update for Flash Player (KB913433)

A security issue has been identified that could allow an attacker to remotely compromise your Windows-based system with a vulnerable version of the Flash Player and gain control over it. You can help protect your computer by installing this update from Microsoft. After you install this item, you...

Security Update for Microsoft XML Core Services 4.0 Service Pack 2 (KB936181)

A security issue has been identified in Microsoft XML Core Services MSXML that could allow an attacker to compromise your Windows-based system and gain control over it. You can help protect your computer by installing this update from Microsoft. After you install this item, you may have to restar...

Security Update for Microsoft XML Core Services 6.0 and Microsoft XML Core Services 6.0 Service Pack 1 (KB933579)

A security issue has been identified in Microsoft XML Core Services MSXML that could allow an attacker to compromise your Windows-based system and gain control over it. You can help protect your computer by installing this update from Microsoft. After you install this item, you may have to restar...

Security Update for Microsoft .NET Framework, Version 1.0 SP3, Portuguese (Portugal) (KB886906)

A security issue has been identified that could allow an attacker to compromise your Windows-based system running the Microsoft .NET Framework and gain access to restricted data. You can help protect your computer by installing this update from Microsoft. After you install this item, you may have...

Security Update for Microsoft .NET Framework, Version 2.0 (KB917283)

A security issue has been identified that could allow an attacker to compromise your Windows-based system running the Microsoft .NET Framework and gain access to restricted data. You can help protect your computer by installing this update from Microsoft. After you install this item, you may have...

Security Update for Microsoft XML Core Services 6.0 Service Pack 2 for x64-based Systems (KB2758696)

A security issue has been identified in Microsoft XML Core Services MSXML that could allow an attacker to compromise your Windows-based system and gain control over it. You can help protect your computer by installing this update from Microsoft. After you install this item, you may have to restar...

Security Update for Microsoft XML Core Services 4.0 Service Pack 2 for Itanium-based Systems (KB954430)

A security issue has been identified in Microsoft XML Core Services MSXML that could allow an attacker to compromise your Windows-based system and gain control over it. You can help protect your computer by installing this update from Microsoft. After you install this item, you may have to restar...

Security Update for Microsoft .NET Framework, Version 1.1 Service Pack 1 (KB886903)

A security issue has been identified that could allow an attacker to compromise your Windows-based system running the Microsoft .NET Framework and gain access to restricted data. You can help protect your computer by installing this update from Microsoft. After you install this item, you may have...

Security Update for Microsoft Visual Studio 2005 Service Pack 1 (KB937061)

A security issue has been identified that could allow an attacker to compromise your Windows-based system running Microsoft Visual Studio 2005 Service Pack 1 and gain complete control over it. You can help protect your computer by installing this update from Microsoft. After you install this item...

Security Update for Microsoft .NET Framework, Version 1.0 SP3, Russian (KB886906)

A security issue has been identified that could allow an attacker to compromise your Windows-based system running the Microsoft .NET Framework and gain access to restricted data. You can help protect your computer by installing this update from Microsoft. After you install this item, you may have...

Security Update for Microsoft XML Core Services 4.0 Service Pack 3 (KB2758694)

A security issue has been identified in Microsoft XML Core Services MSXML that could allow an attacker to compromise your Windows-based system and gain control over it. You can help protect your computer by installing this update from Microsoft. After you install this item, you may have to restar...

Security Update for Microsoft .NET Framework, Version 1.0 SP3, Japanese (KB886906)

A security issue has been identified that could allow an attacker to compromise your Windows-based system running the Microsoft .NET Framework and gain access to restricted data. You can help protect your computer by installing this update from Microsoft. After you install this item, you may have...

Security Update for Microsoft Visual Studio 2005 (KB937060)

A security issue has been identified that could allow an attacker to compromise your Windows-based system running the Microsoft Visual Studio 2005 and gain complete control over it. You can help protect your computer by installing this update from Microsoft. After you install this item, you may...

Security Update for Report Viewer Redistributable 2008 Service Pack 1 (KB971119)

A security issue has been identified that could allow an attacker to compromise your Windows-based system with the Report Viewer Redistributable 2008 Service Pack 1 and gain complete control over it. You can help protect your computer by installing this update from Microsoft. After you install th...

Security Update for .NET Framework 3.5 SP1 and Windows Server 2008 SP2 for Itanium-based Systems (KB2518866)

A security issue has been identified that could allow an attacker to compromise your Windows-based system that is running the Microsoft .NET Framework and gain complete control over it. You can help protect your computer by installing this update from Microsoft. After you install this item, you m...

Security Update for Microsoft Data Access Components 2.8 Service Pack 1 (KB927779)

A security issue has been identified in Microsoft Data Access Components MDAC that could allow an attacker to compromise your Windows-based system and gain control over it. You can help protect your computer by installing this update from Microsoft. After you install this item, you may have to...