.:[ packet storm ]:.
                             
security threats. uncensored.
security threats. uncensored.

 Section:  .. / 0611-advisories  /

Page 2 of 27
<< 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 >> Files 25 - 50 of 670
Currently sorted by: File NameSort By: Last Modified, File Size

 ///  File Name: DMA-2006-1115a.txt
Description:
 Kerio WebSTAR versions 5.4.2 and below suffer from a local privilege escalation vulnerability due to an improper loading of a library.
Author:Kevin Finisterre
Homepage:http://www.digitalmunition.com/
Related Exploit:kerio_WebSTAR_pwn.pl.txt
File Size:4589
Last Modified:Nov 16 12:31:22 2006
MD5 Checksum:09885700e3cb27238d5f117272966e65

 ///  File Name: dovecotOverflow.txt
Description:
 Versions 1.0test53 through 1.0.rc14 of the Dovecot IMAP/POP3 server are susceptible to a buffer overflow.
Author:Timo Sirainen
File Size:1632
Last Modified:Nov 21 00:20:55 2006
MD5 Checksum:290b6732fbb82748170ccac780d2593a

 ///  File Name: dragonflybsd-firewire.txt
Description:
 The Firewire device enabled by default in the GENERIC kernel for DragonFlyBSD defines an IOCTL function which can be malicious called passing a negative buffer length value. This value will bypass the length check (because the value is negative) and will be used in a copyout operation. This is a kernel bug and the system can be compromised by local users and important system information can be disclosed.
Author:Rodrigo Rubira Branco
Homepage:http://www.kernelhacking.com/rodrigo
Related File:bsd.patch
File Size:3423
Last Modified:Nov 16 12:15:20 2006
MD5 Checksum:e1730287e3cb0a8eb2886226197ccde0

 ///  File Name: dsa-1201-1.txt
Description:
 Debian Security Advisory 1201-1: Several remote vulnerabilities have been discovered in the Ethereal network scanner.
Homepage:http://www.debian.org/security
File Size:10184
Last Modified:Nov 1 17:18:03 2006
MD5 Checksum:49cfc528c40ca38b06d5c3e94c60160f

 ///  File Name: dsa-1202-1.txt
Description:
 Debian Security Advisory 1202-1: "cstone" and Rich Felker discovered that specially crafted UTF-8 sequences may lead an out of bands memory write when displayed inside the screen terminal multiplexer, allowing denial of service and potentially the execution of arbitrary code.
Homepage:http://www.debian.org/security
File Size:5168
Last Modified:Nov 1 17:18:08 2006
MD5 Checksum:3447b885b6a2db3b8b950df5e7b44d5b

 ///  File Name: dsa-1203-1.txt
Description:
 Debian Security Advisory 1203-1: Steve Rigler discovered that the PAM module for authentication against LDAP servers processes PasswordPolicyReponse control messages incorrectly, which might lead to an attacker being able to login into a suspended system account.
Homepage:http://www.debian.org/security
File Size:5066
Last Modified:Nov 3 17:27:49 2006
MD5 Checksum:f08f02aa45cdfb41ca5dc772176ff0bd

 ///  File Name: dsa-1204-1.txt
Description:
 Debian Security Advisory 1204-1: It was discovered that the Ingo email filter rules manager performs insufficient escaping of user-provided data in created procmail rules files, which allows the execution of arbitrary shell commands.
Homepage:http://www.debian.org/security
File Size:3063
Last Modified:Nov 3 17:29:51 2006
MD5 Checksum:d7f92e70dfd583defd9d1766db2a7c6c

 ///  File Name: dsa-1205-1.txt
Description:
 Debian Security Advisory 1205-1: Marco d'Itri discovered that thttpd, a small, fast and secure webserver, makes use of insecure temporary files when its logfiles are rotated, which might lead to a denial of service through a symlink attack.
Homepage:http://www.debian.org/security
File Size:7138
Last Modified:Nov 3 18:04:53 2006
MD5 Checksum:3d170dd83d52348a9de5a1ebf06ee65d

 ///  File Name: dsa-1206-1.txt
Description:
 Debian Security Advisory 1206-1 - Several remote vulnerabilities have been discovered in PHP, a server-side, HTML-embedded scripting language, which may lead to the execution of arbitrary code.
Homepage:http://www.debian.org/security
File Size:33337
Related CVE(s):CVE-2005-3353, CVE-2006-3017, CVE-2006-4482, CVE-2006-5465
Last Modified:Nov 7 00:49:55 2006
MD5 Checksum:d5d1d1fa1ff861d912404c9e5ded2584

 ///  File Name: dsa-1207-1.txt
Description:
 Debian Security Advisory 1207-1 - Several remote vulnerabilities have been discovered in phpMyAdmin that allow for everything from CRLF injection to cross site scripting.
Homepage:http://www.debian.org/security
File Size:3855
Related CVE(s):CVE-2006-1678, CVE-2006-2418, CVE-2005-3621, CVE-2005-3665, CVE-2006-5116
Last Modified:Nov 13 10:36:34 2006
MD5 Checksum:fea33ade215c7ca57bfc1b0749162d30

 ///  File Name: dsa-1207-2.txt
Description:
 Debian Security Advisory 1207-2 - The phpmyadmin update in DSA 1207 introduced a regression. This update corrects this flaw.
Homepage:http://www.debian.org/security
File Size:4201
Related CVE(s):CVE-2006-1678, CVE-2006-2418, CVE-2005-3621, CVE-2005-3665, CVE-2006-5116
Last Modified:Nov 20 11:15:03 2006
MD5 Checksum:ca0b5598d4fa38f4b8fa69a1747138c3

 ///  File Name: dsa-1208-1.txt
Description:
 Debian Security Advisory 1208-1 - Several remote vulnerabilities have been discovered in the Bugzilla bug tracking system, which may lead to the execution of arbitrary code.
Homepage:http://www.debian.org/security
File Size:3461
Related CVE(s):CVE-2005-4534, CVE-2006-5453
Last Modified:Nov 14 00:38:59 2006
MD5 Checksum:70817affb3085dabfe771ac22e8b1115

 ///  File Name: dsa-1209-1.txt
Description:
 Debian Security Advisory 1209-1 - It was discovered that Trac, a wiki and issue tracking system for software development projects, performs insufficient validation against cross-site request forgery, which might lead to an attacker being able to perform manipulation of a Trac site with the privileges of the attacked Trac user.
Homepage:http://www.debian.org/security
File Size:2885
Last Modified:Nov 14 01:06:12 2006
MD5 Checksum:78617fbff6624b5ac420796972c577af

 ///  File Name: dsa-1210-1.txt
Description:
 Debian Security Advisory 1210-1 - Several security related problems have been discovered in Mozilla and derived products such as Mozilla Firefox.
Homepage:http://www.debian.org/security
File Size:10852
Related CVE(s):CVE-2006-2788, CVE-2006-4340, CVE-2006-4565, CVE-2006-4566, CVE-2006-4568, CVE-2006-4571
Last Modified:Nov 16 10:41:20 2006
MD5 Checksum:178a47e5de2e2447654634cb3949729e

 ///  File Name: dsa-1211-1.txt
Description:
 Debian Security Advisory 1211-1 - It was discovered that malformed TCP packets may lead to denial of service and possibly the execution of arbitrary code if the PowerDNS nameserver acts as a recursive nameserver.
Homepage:http://www.debian.org/security
File Size:16507
Related CVE(s):CVE-2006-4251
Last Modified:Nov 16 11:04:18 2006
MD5 Checksum:7951d6e360d53e1b5ddfa6467350f6c2

 ///  File Name: dsa-1212-1.txt
Description:
 Debian Security Advisory 1212-1 - Two denial of service vulnerabilities have been found in the OpenSSH server. The sshd support for ssh protocol version 1 does not properly handle duplicate incoming blocks. This could allow a remote attacker to cause sshd to consume significant CPU resources leading to a denial of service. A signal handler race condition could potentially allow a remote attacker to crash sshd and could theoretically lead to the ability to execute arbitrary code.
Homepage:http://www.debian.org/security
File Size:11437
Related CVE(s):CVE-2006-4924, CVE-2006-5051
Last Modified:Nov 16 12:20:08 2006
MD5 Checksum:51971b066a8eeebbdfb1d58b79d8767e

 ///  File Name: dsa-1213-1.txt
Description:
 Debian Security Advisory 1213-1 - Several remote vulnerabilities have been discovered in Imagemagick, a collection of image manipulation programs, which may lead to the execution of arbitrary code.
Homepage:http://www.debian.org/security
File Size:15985
Related CVE(s):CVE-2006-0082, CVE-2006-4144, CVE-2006-5456, CVE-2006-5868
Last Modified:Nov 20 11:14:10 2006
MD5 Checksum:8ff43563f8a61e2916980182f1678506

 ///  File Name: dsa-1214-1.txt
Description:
 Debian Security Advisory 1214-1 - Renaud Lifchitz discovered that gv, the PostScript and PDF viewer for X, performs insufficient boundary checks in the Postscript parsing code, which allows the execution of arbitrary code through a buffer overflow.
Homepage:http://www.debian.org/security
File Size:4877
Related CVE(s):CVE-2006-5864
Last Modified:Nov 21 02:17:07 2006
MD5 Checksum:43cf2d2f71ecce2b449a2911da3f44cc

 ///  File Name: dsa-1215-1.txt
Description:
 Debian Security Advisory 1215-1 - Several remote vulnerabilities have been discovered in the Xine multimedia library, which may lead to the execution of arbitrary code.
Homepage:http://www.debian.org/security
File Size:7313
Related CVE(s):CVE-2006-4799, CVE-2006-4800
Last Modified:Nov 21 02:19:50 2006
MD5 Checksum:42521e959ab7bbc8f67f929aca466303

 ///  File Name: dsa-1216-1.txt
Description:
 Debian Security Advisory 1216-1 - Eric Romang discovered that the flexbackup backup tool creates temporary files in an insecure manner, which allows denial of service through a symlink attack.
Homepage:http://www.debian.org/security
File Size:2956
Related CVE(s):CVE-2006-4802
Last Modified:Nov 21 02:18:54 2006
MD5 Checksum:a4d98f65c30a4a5a8c1a0517db5425d8

 ///  File Name: dsa-1217-1.txt
Description:
 Debian Security Advisory 1217-1 - Paul Szabo discovered that the netkit ftp server switches the user id too late, which may lead to the bypass of access restrictions when running on NFS. This update also adds return value checks to setuid() calls, which may fail in some PAM configurations.
Homepage:http://www.debian.org/security
File Size:5073
Related CVE(s):CVE-2006-5778
Last Modified:Nov 21 02:20:33 2006
MD5 Checksum:af3dcf3d5702d191ed500c2a54005f81

 ///  File Name: dsa-1218-1.txt
Description:
 Debian Security Advisory 1218-1 - It was discovered that the proftpd FTP daemon performs insufficient validation of FTP command buffer size limits, which may lead to denial of service.
Homepage:http://www.debian.org/security
File Size:13270
Related CVE(s):CVE-2006-5815
Last Modified:Nov 21 21:32:27 2006
MD5 Checksum:c3381ad5319b7494c53a33d43df063b4

 ///  File Name: dsa-1219-1.txt
Description:
 Debian Security Advisory 1219-1 - The GNU texinfo package has been found susceptible to insecure file handling and buffer overflow flaws.
Homepage:http://www.debian.org/security
File Size:7145
Related CVE(s):CVE-2005-3011, CVE-2006-4810
Last Modified:Nov 29 11:17:26 2006
MD5 Checksum:4801675a34029726bda216edaa28938c

 ///  File Name: dsa-1220-1.txt
Description:
 Debian Security Advisory 1220-1 - Brian May discovered that pstotext, a utility to extract plain text from Postscript and PDF files, performs insufficient quoting of file names, which allows execution of arbitrary shell commands.
Homepage:http://www.debian.org/security
File Size:5132
Related CVE(s):CVE-2006-5869
Last Modified:Nov 28 21:56:18 2006
MD5 Checksum:80450ab65824de103e20e39d5c753acf

 ///  File Name: EEYE-MSWS.txt
Description:
 A flaw exists in a default Windows component called the "Workstation Service" that when exploited allows for remote code execution in SYSTEM context, allowing an attacker to take complete control of affected systems. Systems affected include Windows 2000 (Remote Code Execution), Windows XP SP1 (Local Privilege Escalation).
Author:JeongWook Matt Oh, Derek Soeder
Homepage:http://research.eeye.com/
File Size:3492
Last Modified:Nov 16 11:01:48 2006
MD5 Checksum:ab5e44c09d742521217e98290229c887
 

 ///  Last 10 Files
  1. :· phprs-sql.txt
  2. :· raiden-dos.txt
  3. :· newlife-cookiesql.txt
  4. :· web_vuln-en.txt
  5. :· xmeasy560-dos.txt
  6. :· iltaweb-sql.txt
  7. :· 2008-002-lenovornr.txt
  8. :· guildftpd-dos.txt
  9. :· openca-base-1.0.1.tar.gz
  10. :· emf_MS08-046.rar
[ Last 20 | Last 50 | Last 100 ]

 ///  Last 10 Advisories
  1. :· 2008-002-lenovornr.txt
  2. :· dsa-1652-1.txt
  3. :· dsa-1651-1.txt
  4. :· dsa-1650-1.txt
  5. :· MDVSA-2008-210-1.txt
  6. :· MDVSA-2008-211.txt
  7. :· dsa-1646-2.txt
  8. :· ZDI-08-067.txt
  9. :· CVE-2008-3271.txt
  10. :· USN-651-1.txt
[ Last 20 | Last 50 | Last 100 ]

 ///  Last 10 Exploits
  1. :· phprs-sql.txt
  2. :· raiden-dos.txt
  3. :· newlife-cookiesql.txt
  4. :· xmeasy560-dos.txt
  5. :· iltaweb-sql.txt
  6. :· guildftpd-dos.txt
  7. :· emf_MS08-046.rar
  8. :· minipub03-multi.txt
  9. :· apm-sql.txt
  10. :· cubecartcms-sql.txt
[ Last 20 | Last 50 | Last 100 ]

 ///  Last 10 Tools
  1. :· openca-base-1.0.1.tar.gz
  2. :· scapy-2.0.0.10.tar.gz
  3. :· bf10BETA.tar.gz
  4. :· RFIDIOt-Windows-0.1t.zip
  5. :· RFIDIOt-0.1t.tgz
  6. :· opennhrp-0.8.tar.bz2
  7. :· zfz20BETA.tar.gz
  8. :· fwknop-1.9.8.tar.gz
  9. :· msnshadow-0.3_beta.tar.bz2
  10. :· geoipgen0.2b.tgz
[ Last 20 | Last 50 | Last 100 ]

 ///  Last 10 Misc
  1. :· web_vuln-en.txt
  2. :· metasploitSMB.pdf
  3. :· webapps-attack.txt
  4. :· dirTraversal.txt
  5. :· targeting-voip.pdf
  6. :· oracle-assault.pdf
  7. :· ShellCodeForBeginners.pdf
  8. :· linux-setresuid.txt
  9. :· nufw-2.2.17.tar.gz
  10. :· slackfire-0.65.d-noarch-1.tgz
[ Last 20 | Last 50 | Last 100 ]


 .:. TopPrivacy Statement | Copyright Notice