Format string and buffer-overflow in Lst Network Print Server 9.4.2 build 105

 ( 648 days 11 hours ago)

Luigi Auriemma Application: Larson Software Technology Network Print Server Versions: <= 9.4.2 build 105 Platforms: Windows Bugs: A] format string in logging B] license buffer-overflow Exploitation: remote Date: 11 Feb 2008 Author: Luigi Auriemma e-mail: aluigiatautistici.org web: aluigi.org 1) Introduction 2) Bugs ...

Format string and DoS in Opium OPI and cyanPrintIP servers 4.10.x

 ( 648 days 11 hours ago)

Luigi Auriemma Applications: Opium OPI Server cyanPrintIP Easy OPI cyanPrintIP Versions: Opium OPI Server <= 4.10.1028 cyanPrintIP Easy OPI <= 4.10.1030 cyanPrintIP Professional <= 4.10.1030 cyanPrintIP Workstation <= 4.10.836 cyanPrintIP Standard <= 4.10.940 cyanPrintIP Basic <= 4.10.1030 Platforms: Windows ...

Directory traversal in SafeNet Sentinel Protection and Key Server 7.4.1.0

 ( 648 days 11 hours ago)

Luigi Auriemma Application: SafeNet Sentinel Protection Server SafeNet Sentinel Keys Server Versions: <= 7.4.1.0 (aka SPI740SecurityPatch) Platforms: Windows Bug: directory traversal Exploitation: remote Date: 10 Feb 2008 Author: Luigi Auriemma e-mail: aluigiatautistici.org web: aluigi.org 1) Introduction 2) Bug 3) The Code 4) Fix ...

Multiple vulnerabilities in EztremeZ-IP File and Printer Server 5.1.2x15

 ( 648 days 11 hours ago)

Luigi Auriemma Application: EztremeZ-IP File and Printer Server Versions: <= 5.1.2x15 Platforms: Windows Bugs: A] crash through the SLP service B] crash through the AFP service C] limited directory traversal in Zidget/HTTP Exploitation: remote Date: 10 Feb 2008 Author: Luigi Auriemma e-mail: aluigiatautistici.org ...

ExtraOutlook 1.2 Released

 ( 648 days 11 hours ago)

ExtraOutlook 1.2 has been released and is available at: 1.2 adds support for Outlook 2003 (thx to Jason Geffner), bringing current support to Outlook 2007 and 2003 on both XP and Vista. The ExtraOutlook tool allows you to run multiple instances of Outlook with different profiles simultaneously. t ...

[SECURITY] [DSA 1494-1] New linux-2.6 packages fix privilege escalation

 ( 648 days 11 hours ago)

- Debian Security Advisory DSA-1494-1 securityatdebian.org Florian Weimer February 11, 2008 - Package : linux-2.6 Vulnerability : missing access checks Problem type : local Debian-specific: no CVE Id(s) : CVE-2008-0010 CVE-2008-0163 CVE-2008-0600 The vmsplice system call did not properly verify address arguments ...

aliboard Beta Upload Shell From ControlPanel

 ( 648 days 11 hours ago)

# Name : aliboard Beta Upload Shell From ControlPanel # Download From : # Found By : RoMaNcYxHaCkEr [RoMaNTiC-TeaM] # Home Page : WwW.4RxH.CoM # Google Dork : Powered by aliboard © 2006, 2007 alilg web-based software # Exploit : ...

Mercury v1.1.5 Send Message Cross-Site Scripting

 ( 648 days 11 hours ago)

Aria-Security Team (Persian Security Network) Greetz: Aura, imm02tal, iM4n, Mormoroth, Mercury v1.1.5 Send Message Cross-Site Scripting In order to make this vuln work you need to place your code in the "message text" area and press preview Examples: Regards, The-0utl4w Aria-Security.Net ...

Simple Machines Forum "SMF Shoutbox" Mod Persistent XSS

 ( 648 days 11 hours ago)

Simple Machines Forum "SMF Shoutbox" Mod 1.16b-1.14 Reference: Bug:Persistent XSS ...

[SECURITY] [DSA 1493-1] New sdl-image1.2 packages fix arbitrary code execution

 ( 648 days 11 hours ago)

- Debian Security Advisory DSA-1493-1 securityatdebian.org Moritz Muehlenhoff February 10, 2008 - Package : sdl-image1.2 Vulnerability : buffer overflows Problem type : local(remote) Debian-specific: no CVE Id(s) : CVE-2007-6697 CVE-2008-0554 Several local/remote vulnerabilities have been discovered in the image ...

[SECURITY] [DSA 1490-1] New tk8.3 packages fix arbitrary code execution

 ( 648 days 11 hours ago)

- Debian Security Advisory DSA-1490-1 securityatdebian.org Moritz Muehlenhoff February 10, 2008 - Package : tk8.3 Vulnerability : buffer overflow Problem type : local(remote) Debian-specific: no CVE Id(s) : CVE-2008-0553 It was discovered that a buffer overflow in the GIF image parsing code ...

[SECURITY] [DSA 1491-1] New tk8.4 packages fix arbitrary code execution

 ( 648 days 11 hours ago)

- Debian Security Advisory DSA-1491-1 securityatdebian.org Moritz Muehlenhoff February 10, 2008 - Package : tk8.4 Vulnerability : buffer overflow Problem type : local(remote) Debian-specific: no CVE Id(s) : CVE-2008-0553 It was discovered that a buffer overflow in the GIF image parsing code ...

[SECURITY] [DSA 1492-1] New wml packages fix denial of service

 ( 648 days 11 hours ago)

- Debian Security Advisory DSA-1492-1 securityatdebian.org Moritz Muehlenhoff February 10, 2008 - Package : wml Vulnerability : insecure temporary files Problem type : local Debian-specific: no CVE Id(s) : CVE-2008-0665 CVE-2008-0666 Debian Bug : 463907 Frank Lichtenheld and Nico Golde discovered that WML, an off-line HTML ...

[SECURITY] [DSA 1489-1] New iceweasel packages fix several vulnerabilities

 ( 648 days 11 hours ago)

- Debian Security Advisory DSA-1489-1 securityatdebian.org Moritz Muehlenhoff February 10, 2008 - Package : iceweasel Vulnerability : several Problem type : remote Debian-specific: no CVE Id(s) : CVE-2008-0412 CVE-2008-0413 CVE-2008-0414 CVE-2008-0415 CVE-2008-0416 CVE-2008-0417 CVE-2008-0418 CVE-2008-0419 CVE-2008-0591 CVE-2008-0592 CVE-2008-0593 CVE-2008-0594 ...

[SECURITY] [DSA 1484-1] New xulrunner packages fix several vulnerabilities

 ( 648 days 11 hours ago)

- Debian Security Advisory DSA-1484-1 securityatdebian.org Moritz Muehlenhoff February 10, 2008 - Package : xulrunner Vulnerability : several Problem type : remote Debian-specific: no CVE Id(s) : CVE-2008-0412 CVE-2008-0413 CVE-2008-0414 CVE-2008-0415 CVE-2008-0416 CVE-2008-0417 CVE-2008-0418 CVE-2008-0419 CVE-2008-0591 CVE-2008-0592 CVE-2008-0593 CVE-2008-0594 ...

Debian: New sdl-image1.2 packages fix arbitrary code execution

 ( 648 days 23 hours ago)

LinuxSecurity.com: Gynvael Coldwind discovered a buffer overflow in GIF image parsing, which could result in denial of service and potentially the execution of arbitrary code.

Debian: New wml packages fix denial of service

 ( 648 days 23 hours ago)

LinuxSecurity.com: Frank Lichtenheld and Nico Golde discovered that WML, an off-line HTML generation toolkit, creates insecure temporary files in the eperl and ipp backends and in the wmg.cgi script, which could lead to local denial of service by overwriting files.

Debian: New tk8.4 packages fix arbitrary code execution

 ( 648 days 23 hours ago)

LinuxSecurity.com: It was discovered that a buffer overflow in the GIF image parsing code of Tk, a cross-platform graphical toolkit, could lead to denial of service and potentially the execution of arbitrary code.

Debian: New tk8.3 packages fix arbitrary code execution

 ( 648 days 23 hours ago)

LinuxSecurity.com: It was discovered that a buffer overflow in the GIF image parsing code of Tk, a cross-platform graphical toolkit, could lead to denial of service and potentially the execution of arbitrary code.

Debian: New iceweasel packages fix several vulnerabilities

 ( 648 days 23 hours ago)

LinuxSecurity.com: Several remote vulnerabilities have been discovered in the Iceweasel web browser, an unbranded version of the Firefox browser. Jesse Ruderman, Kai Engert, Martijn Wargers, Mats Palmgren and Paul Nickerson discovered crashes in the layout engine, which might allow the execution of arbitrary code.

Debian: New icedove packages fix several vulnerabilities

 ( 648 days 23 hours ago)

LinuxSecurity.com: Several remote vulnerabilities have been discovered in the Icedove mail client, an unbranded version of the Thunderbird client. Jesse Ruderman, Kai Engert, Martijn Wargers, Mats Palmgren and Paul Nickerson discovered crashes in the layout engine, which might allow the execution of arbitrary code.