SInAR Solaris rootkit that was released at the 21st Chaos Communication Congress.
2717af8649c7509bb5077c18ad3c6e759f11b3a129606742c0091ecb9c593e26Secunia Security Advisory - Multiple vulnerabilities in GRASS can be exploited by malicious, local users to perform certain actions on a vulnerable system with escalated privileges. The vulnerabilities are caused due to multiple scripts creating temporary files insecurely. This can be exploited via symlink attacks to overwrite arbitrary files with the privileges of the user running a vulnerable script.
8033178f40f0ae97a3231851cc137b66b42ac5fcf28f368c277b23a8440617afLimbo CMS version 1.0.2 does not properly check for malformed input in multiple core functions of the Content Management System. This lack of input sanitation creates a vulnerable state that allows potential attackers to inject scripts within core functions of Limbo.
128e6966252a732ca02469effeb97dd49a495dca758b03a00475ba1e21a3b3bcSecunia Security Advisory - Michael Krax has reported some vulnerabilities CVSTrac, which can be exploited by malicious people to conduct cross-site scripting attacks.
55b2a8fb19485f07525b74a171c91a0f5cbdc43e7c7863fd4334eec28b0c085bThe Macallan mail solution 4.0.6.8 (Build 786) contains several vulnerabilities allowing for web interface authentication bypass and denial of service.
eba6ebe05afca905adfe01028c39883dfb61c6ad5ac934ef188cae4f97e9452aDebian Security Advisory 622-1 - Multiple insecure uses of temporary files could lead to overwriting arbitrary files via a symlink attack in htmlheadline.
8cf0bc19a987e22b8c067d5f8e43771297c01ca41d36d583dfc5121c3fa0e1a2CSIS Security Advisory - A remote denial of service condition exists in GFI MailEssentials due to a bug in Microsoft HTML parser.
93a62c307daaa9ca746db431d7b8fb66de75b06bc9da6b585f7af7c6cb25c7fdCodebug Labs Advisory 06 - Flat-nuke version 2.5.1 suffers from multiple vulnerabilities.
7ac13ab1351773506c8b6ef3fb4ed4785756f1f822a44d430c9fc7897d9426e2STG Security Advisory: An input validation flaw in GNUBoard versions 3.40 and below can allow malicious attackers to run arbitrary commands with the privilege of the HTTPD process, which is typically run as the nobody user.
0674fe2e63dd885cf61091b49ab28998e954b3c5f795450425d58823dc711640
© 2022 Packet Storm. All rights reserved.
%7Cutmcsr%3D(direct)%7Cutmcmd%3D(none)){kind=small}
Follow us on Twitter
Follow us on Facebook
Subscribe to an RSS Feed