Showing 1 - 10 of 10

Files Date: 2007-01-30

ohh-indirect-privilege-escalation.pdf: Posted Jan 30, 2007; Authored by David Litchfield | Site ngssoftware.com; Defeating Virtual Private Databases, a chapter from the Oracle Hacker's Handbook.; tags | paper; SHA-256 | 7cf148e1ab70f4357ff232e00ce6a5f24bef89a12e5de8bc87246be02511702f; Download | Favorite | View

ohh-defeating-vpd.pdf: Posted Jan 30, 2007; Authored by David Litchfield | Site ngssoftware.com; Indirect Privilege Escalation, a chapter from the Oracle Hacker's Handbook.; tags | paper; SHA-256 | 7f8124fe32864ca4771a493debdf86f128eba3b844b6479d4bfc1da1fee9ff8a; Download | Favorite | View

OpenPKG Security Advisory 2007.8: Posted Jan 30, 2007; Authored by OpenPKG Foundation | Site openpkg.com; OpenPKG Security Advisory - Ralf S. Engelschall from OpenPKG GmbH discovered a Denial of Service (DoS) vulnerability in the CVS/Subversion/Git Version Control System (VCS) frontend CVSTrac, version 2.0.0.; tags | advisory, denial of service; advisories | CVE-2007-0347; SHA-256 | 1db2c81b325a11b28837a0856dc30080a87ebbd7a7462ccc43a328ae1aaabdf4; Download | Favorite | View

cvstrac200-dos.txt: Posted Jan 30, 2007; Authored by Ralf S. Engelschall | Site engelschall.com; A denial of service vulnerability exists in CVSTrac version 2.0.0.; tags | advisory, denial of service; advisories | CVE-2007-0347; SHA-256 | c3e819ccb3c01d6ba451eb4cc93f2bda4fecfbbdbff2faf373697b773a92b7c7; Download | Favorite | View

Universal_printer_provider_exploit.zip: Posted Jan 30, 2007; Authored by Andres Tarasco | Site 514.es; Universal exploit for vulnerable EnumPrintersW() calls related to the spooler service. Allows code execution with SYSTEM privileges. Affected includes DiskAccess NFS Client (dapcnfsd.dll version 0.6.4.0), Citrix Metaframe - cpprov.dll, and Novell - nwspool.dll.; tags | exploit, code execution; advisories | CVE-2006-5854; SHA-256 | 2b62efa9f7692468c57fd5ccfb6faa392631ea515d577bee9c4b44042069ea68; Download | Favorite | View

mdpro-sql.txt: Posted Jan 30, 2007; Authored by adexior; MDPro version 1.0.76 suffers from multiple SQL injection vulnerabilities.; tags | exploit, vulnerability, sql injection; SHA-256 | 67b93c40bf535eae6b65f8d736d5676b8f99e6ee8e43003bae1bc46428309adb; Download | Favorite | View

phorum-xss.txt: Posted Jan 30, 2007; Authored by DoZ | Site hackerscenter.com; Phorum version 5.1.18 is susceptible to cross site scripting attacks.; tags | advisory, xss; SHA-256 | d7d2b47d9dbdca9ea9a6793b7db5dbf6d0f4a006257debc2f52d2fc35f2f5eee; Download | Favorite | View

VIINCIS-CFP2007.txt: Posted Jan 30, 2007; Site acis.org.co; Call for papers for the VII National Computer and Information Security Conference ACIS 2007.; tags | paper, conference; SHA-256 | dd0782f05bae52eecf61023092cd375013e530fc91712ed24047b14d4a4fcd1b; Download | Favorite | View

OpenPKG Security Advisory 2007.7: Posted Jan 30, 2007; Authored by OpenPKG Foundation | Site openpkg.com; OpenPKG Security Advisory - As confirmed by vendor security advisories, two security issues exist in the DNS server BIND, versions up to 9.3.4. The first issue is a "use after free" vulnerability which allows remote attackers to cause a Denial of Service (DoS) via unspecified vectors that cause BIND to "dereference (read) a freed fetch context". The second issue allows remote attackers to cause a Denial of Service (DoS) via a type "*" (ANY) DNS query response that contains multiple resource record (RR) sets in the answer section, which triggers an assertion error. To be vulnerable you need to have enabled DNSSEC validation in the configuration by specifying "trusted-keys".; tags | advisory, remote, denial of service; advisories | CVE-2007-0493, CVE-2007-0494; SHA-256 | efdefa323f0250b7bbccf97b1808ac633e806735791adbf26f360bd1575549c6; Download | Favorite | View

Debian Linux Security Advisory 1254-1: Posted Jan 30, 2007; Authored by Debian | Site debian.org; Debian Security Advisory 1254-1 - It was discovered that the Bind name server daemon is vulnerable to denial of service by triggering an assertion through a crafted DNS query. This only affects installations which use the DNSSEC extensions. Please note that the CVE listed in this advisory is incorrect.; tags | advisory, denial of service; systems | linux, debian; SHA-256 | 6cd0b28f7a592d03c87e7a76555f16a04e17f15468171c11f59095f9b4adf432; Download | Favorite | View

Page 1 of 1 Back 1 Next

Top Authors In Last 30 Days