Zero Day Initiative Advisory 11-027 - This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Novell GroupWise. Authentication is not required to exploit this vulnerability. The specific flaw exists within the gwwww1.dll module responsible for parsing VCALENDAR data within e-mail messages. When the code encounters a TZID variable it allocates up to 0xFFFF bytes for the variable's value. It then proceeds to copy the value into the fixed-length buffer without checking if it will fit. By specifying a large enough string in the e-mail, an attacker can overflow the buffer and execute arbitrary code under the context of the SYSTEM user.
bfadedf31fca2f8d915a1dbc199f76796203e866613a9de193c5458c5eaff791VSR identified multiple memory corruption vulnerabilities in OpenOffice.org. By convincing a victim to open a maliciously crafted RTF or Word document, arbitrary code may be executed on the victim's machine. Versions prior to 3.3 are affected.
76148fa5fbd6a847442ba5146f5992a028c81ea3ce77f8550dd19a9ce932f325phpMyAdmin versions 3.4.x and 3.4.0 beta 2 suffer from a stored cross site scripting vulnerability.
6c62a516dcba43d0e52fddd8b8bbc0b20bf6c067e550603506999902959ff3d8Mandriva Linux Security Advisory 2011-019 - libuser before 0.57 uses a cleartext password value of x for new LDAP user accounts, which makes it easier for remote attackers to obtain access by specifying one of these values.
546b0c47a9e46333710256def46e0756a918cb78d7a25da5f645e1e6d5f04326THC-Hydra is a high quality parallelized login hacker for Samba, Smbnt, Cisco AAA, FTP, POP3, IMAP, Telnet, HTTP Auth, LDAP, NNTP, MySQL, VNC, ICQ, Socks5, PCNFS, Cisco and more. Includes SSL support, parallel scans, and is part of Nessus.
c0d473c29d57fe44c5dd301b3161fdf853b3bbac57c099acf47cffb4d2707e64Cisco Security Advisory - A service policy bypass vulnerability exists in the Cisco Content Services Gateway - Second Generation (CSG2), which runs on the Cisco Service and Application Module for IP (SAMI). Under certain configurations this vulnerability could allow customers to access sites that would normally match a billing policy to be accessed without being charged to the end customer and customers to access sites that would normally be denied based on configured restriction policies.
4432edcfbea1f8eeb942bb6574f8e889322ed7246b94aadebd2bf3cf6b21eb50SimpGB versions 1.49.02 and below suffer from cross site scripting, brute force, insufficient anti-automation, and abuse of functionality vulnerabilities.
9cb4976c249efe8db919a1b089f43b558fc4fcc89e16276cf184713fa3db6958NinkoBB version 1.3RC5 suffers from a stored cross site scripting vulnerability.
fdd928f2d4a74862bfd438ea010c17bdf53d51bdf3ec9be94e314271f040f726MultiPowUpload version 2.1 suffers from a shell upload vulnerability.
fcaaf2e9ceb9240d800edc7ec101f02ad1b4341d7acb5721fc1c07effbbe1251Froxlor version 0.9.15 suffers from a remote file inclusion vulnerability.
8ebcce5b4c99d57ff95d79211a92b229bf99bb5d0ed9f349262716d627c8d152Class.Upload version 0.30 from Verot.net suffers from a shell upload vulnerability.
57e81ecfabfd4c15edb4d0048181da354a8f1ed7f0c0d1146f653dfc78dd81bbDebian Linux Security Advisory 2151-1 - Several security related problems have been discovered in the OpenOffice.org package that allows malformed documents to trick the system into crashes or even the execution of arbitrary code.
17dc16e850b0b68b6eb12c09418a09d62b2bc4ec50d33f8afa018d58fd095e77PRTG version 8.1.2.1809 suffers from reflective cross site scripting vulnerabilities.
5b1f334716c043cde5774b156ffe1d0c1f35148ba2ba81383f236d22db6d6bb9Zero Day Initiative Advisory 11-026 - This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Novell Zenworks Handheld Management. Authentication is not required to exploit this vulnerability. The specific flaw exists within the Access Point process (ZfHIPCnd.exe) which listens by default on TCP port 2400. The problem occurs due to the application copying arbitrary sized data from a packet into a statically sized buffer. Due to the application not accommodating for the variable sized data during initialization of this buffer a buffer overflow will occur. This can lead to code execution under the context of the application.
646c3c9ee7e6a2694f8a45540159142ec7e8ea2d273c445e829eb3daf2f0ac07Google suffers from an open redirect vulnerability.
7cee06e79e16c8193e238d5d12c089fe8d6c5c0c20c538bf2fe35d8204122008AWCM version 2.2 Final suffers from a local file inclusion vulnerability.
c75039683c3cdf0da5418da94bb4cd658ef218c384534c202800a90748494476PHPDirector Game Edition suffers from a remote SQL injection vulnerability.
5859c589749bdb11f8130d7a57c30aa4c661e275cafb9fa13681894a8b0c5ae6EasyPhpAlbum version 1.4.4 suffers from a remote file inclusion vulnerability.
2bae0999d88f5244b8451e4077620bf50cbb209654f694efb49c8232a4aaaeeeTinyWebGallery version 1.8.3 suffers from a remote file inclusion vulnerability.
d9f3d93683b53905922869a87d558455d1ba75adeed903844012614e470490baSecunia Security Advisory - Red Hat has issued an update for webkitgtk. This fixes multiple vulnerabilities, which can be exploited by malicious people to bypass certain access restrictions, conduct spoofing attacks, cause a DoS (Denial of Service), potentially disclose sensitive information, and potentially compromise a user's system.
91022508e1e53838480cb243ae73ca0df5935a43b60599218a28d1c0d618f239Ubuntu Security Notice 1051-1 - Sebastian Krahmer discovered that HPLIP incorrectly handled certain long SNMP responses. A remote attacker could send malicious SNMP replies to certain HPLIP tools and cause them to crash or possibly execute arbitrary code.
a1b87dab348d4d4025c5919e596b01e599a2e532f2995aad0fa3ab38a3d2cd01Secunia Security Advisory - A vulnerability has been discovered in MuPDF, which potentially can be exploited by malicious people to compromise a user's system.
ffc1789730b0a2cd84ad1b666f02d42806c736b38a1951a261052f2abbe232c4Secunia Security Advisory - SUSE has issued an update for java-1_6_0-ibm. This fixes multiple vulnerabilities, which can be exploited by malicious users to cause a DoS (Denial of Service) and by malicious people to disclose potentially sensitive information, manipulate certain data, bypass certain security restrictions, and compromise a vulnerable system.
af5c4f0a2f855e1797390509a0debcbfc44211762650ee4e7372ea7165d86609Secunia Security Advisory - A vulnerability has been discovered in SumatraPDF, which potentially can be exploited by malicious people to compromise a user's system.
3947506974d3b3737c7e201b99d9ab6b5d5454089a9e5092db30a11c6aa574e9Secunia Security Advisory - A vulnerability has been reported in the Media [DAM] extension for TYPO3, which can be exploited by malicious people to conduct cross-site scripting attacks.
caf7785a688efa96af51b0db8ef4df60a56bf4ea53142eee1c5bd78aa61374dd
© 2024 Packet Storm. All rights reserved.
%7Cutmcsr%3D(direct)%7Cutmcmd%3D(none)){kind=small}
Follow us on Twitter
Follow us on Facebook
Subscribe to an RSS Feed