GF-3XPLORER version 2.4 suffers from cross site scripting and local file inclusion vulnerabilities.
37fd286e89a75fc51d6ed0e6c5bcbe284a665ba112b2369a85a5356a053cb444WFTPD Explorer Pro version 1.0 proof of concept remote heap overflow exploit.
387d7811f53450d3dd27624bbd58b40b150526f54534c793e8b8f4f85a22cfacSecunia Security Advisory - A vulnerability has been reported in St. Bernard Open File Manager, which can be exploited by malicious people to compromise a vulnerable system.
e4763249ca664c840bfc40a349f49011583743c32e31b7e361b79057096662b2Gentoo Linux Security Advisory GLSA 200712-14 - Wei Wang (McAfee AVERT Research) discovered an integer underflow in the asn1_get_string() function of the SNMP backend, leading to a stack-based buffer overflow when handling SNMP responses (CVE-2007-5849). Elias Pipping (Gentoo) discovered that the alternate pdftops filter creates temporary files with predictable file names when reading from standard input (CVE-2007-6358). Furthermore, the resolution of a Denial of Service vulnerability covered in GLSA 200703-28 introduced another Denial of Service vulnerability within SSL handling (CVE-2007-4045). Versions less than 1.3.5 are affected.
e011fd7e491b8a5fc40987640696d58b66059540e40b69f7a72cd19ab51fbdf6Gentoo Linux Security Advisory GLSA 200712-13 - Rafal Wojtczuk (McAfee AVERT Research) discovered multiple integer overflows in libext2fs, that are triggered when processing information from within the file system, resulting in heap-based buffer overflows. Versions less than 1.40.3 are affected.
866e971b4563493024e7b10169ebf99b0e82378c7b6183789c237eb34e4d5b9aGoogle Toolbar allows spoofing the information presented in the dialog which is being displayed when adding a new Google Toolbar button.
23840b25b3fcacc6483afac763d595c2faf7a2d138ebdc52d35d1162be1072c7Asterisk Project Security Advisory - Due to the way database-based registrations ("realtime") are processed, IP addresses are not checked when the username is correct and there is no password. An attacker may impersonate any user using host-based authentication without a secret, simply by guessing the username of that user. This is limited in scope to administrators who have set up the registration database ("realtime") for authentication and are using only host-based authentication, not passwords. However, both the SIP and IAX protocols are affected.
8f347c1af72c018f03b4107767873c60b519061e85f1fa9739ca188fc9633316Ubuntu Security Notice 556-1 - Alin Rad Pop discovered that Samba did not correctly check the size of reply packets to mailslot requests. If a server was configured with domain logon enabled, an unauthenticated remote attacker could send a specially crafted domain logon packet and execute arbitrary code or crash the Samba service. By default, domain logon is disabled in Ubuntu.
7689c75bd01559c1a92ce08f5b186dfe92066b3ce27788388d16964c6699d30dRosoft Media Player versions 4.1.7 and below .M3U file stack overflow exploit that binds a shell to port 4444.
8d0500122f4a95c3cd0d982e3acedf81c0a74d0742148e168b19e97e8b055b92iDefense Security Advisory 12.17.07 - Remote exploitation of an integer overflow vulnerability in Clam AntiVirus' ClamAV, as included in various vendors' operating system distributions, allows attackers to execute arbitrary code with the privileges of the affected process. iDefense has confirmed the existence of this vulnerability in ClamAV 0.91.2. Previous versions may also be affected.
c5aa473b49ed2acfeb57cd13577312e73bab4e62c33cba86068e3c637d24d61ciDefense Security Advisory 12.17.07 - Local exploitation of a stack based buffer overflow vulnerability in Apple Inc.'s Mac OS X mount_smbfs utility could allow an attacker to execute arbitrary code with root privileges. iDefense has confirmed the existence of this vulnerability in Mac OS X version 10.4.10, on both the Server and Desktop versions. Previous versions may also be affected.
68e98a688f3efc75abfaeec608bc143f485c893470f9b457f1cead3618eb70d0HP Security Bulletin - Various potential security vulnerabilities have been identified in Microsoft software that is running on the Storage Management Appliance (SMA). Some of these vulnerabilities may be pertinent to the SMA, please check the table in the Resolution section of this Security Bulletin.
72d6f0627356830518082c6fbe3de7598bfcab9747c07c456892949c516b50d2Secunia Security Advisory - Apple has issued a security update for Mac OS X, which fixes multiple vulnerabilities.
76a061fb9a765ba0822274668d99e076d80b11cf5d7f3133b499ad37384fb6c9Secunia Security Advisory - A weakness has been reported in Meridian Prolog Manager, which can be exploited by malicious people to brute force user passwords.
b6ad2154e5ba04949adee78b92ef4fadedc02ce533cd8295a043b664305907e8Secunia Security Advisory - Debian has issued an update for link-grammar. This fixes a vulnerability, which can be exploited by malicious people to compromise a user's system.
39a31211c69cd0dde682e4983f4763b39180e4771b55082202f87784ad717f43Secunia Security Advisory - Michael Brooks has reported some vulnerabilities in Centreon, which can be exploited by malicious people to compromise a vulnerable system.
e8e2a87a1e01b3f964ec936c2f5c52813a5c1f26af5ae26a9bdd69862c0571f0Secunia Security Advisory - Sun has acknowledged some vulnerabilities in Gimp, which can be exploited by malicious people to compromise a user's system.
cb0c03afef93bf142a47958a03a835a65a5648aa4d05dec22bb1d980ff2326e4Secunia Security Advisory - t0pP8uZz & xprog have reported a vulnerability in PHP Real Estate Classifieds, which can be exploited by malicious people to conduct SQL injection attacks.
e195fda1c7afc3a729d0f07a25718098412b9fc8ea70ed291247f97d8131fa20Secunia Security Advisory - Luigi Auriemma has reported a vulnerability in PeerCast, which can be exploited by malicious people to cause a DoS (Denial of Service) or potentially to compromise a vulnerable system.
95b0d3ba8968b9f94a775815e5541ace39b9229d2915a545ad26a7f038e92113Secunia Security Advisory - A vulnerability has been reported in CUPS, which can be exploited by malicious people to cause a DoS (Denial of Service) or potentially compromise a vulnerable system.
50b82f508f36335173104d517027b09b1ece262ead8ea09fed065d8fe4bd6fefSecunia Security Advisory - A vulnerability has been reported in Exiv2, which can be exploited by malicious people to cause a DoS (Denial of Service) or to potentially compromise an application using the library.
b1be5c02feba3847c3bf1868476b42648e67a133aa68295f539ab19136c9fabeSecunia Security Advisory - rgod has discovered a vulnerability in iMesh, which can be exploited by malicious people to compromise a user's system.
5a50e9dc03f2db9da2dd813a3684805844cb6f27bb001bf3812b6a9a843bb99fSecunia Security Advisory - A security issue has been reported in the Alternate pdftops Filter for CUPS, which can be exploited by malicious, local users to perform certain actions with escalated privileges.
80781e750a67d1d03fffc5515e1acb7f798aa80251f011245f82d48979115500Secunia Security Advisory - rgod has discovered a vulnerability in SurgeMail, which can be exploited by malicious people to cause a DoS (Denial of Service).
c7cac452a247bf8ce67d6cf2c1ab0cdac40f020803e4474709f0252625077d71Secunia Security Advisory - rgod has discovered a vulnerability in RaidenHTTPD, which can be exploited by malicious people to disclose sensitive information.
c5d7603e59315b85b1c148033009c7b239f053b6112f6f45fe0e92d331092f8a
© 2024 Packet Storm. All rights reserved.
%7Cutmcsr%3D(direct)%7Cutmcmd%3D(none)){kind=small}
Follow us on Twitter
Follow us on Facebook
Subscribe to an RSS Feed