jetlib.sec

Feeds

133340 items (0 unread) in 27 feeds

« Expand/Collapse

451 items tagged "attacker"

Skip to page: 1 2

May 23, 2012
19:44
OpenOffice OLE Importer DocumentSummaryInformation Stream Handling Overflow
» ‎ Packet Storm Security Exploits

This Metasploit module exploits a vulnerability in OpenOffice 2.3.1 and 2.3.0 on Microsoft Windows XP SP3. By supplying a OLE file with a malformed DocumentSummaryInformation stream, an attacker can gain control of the execution flow, which results arbitrary code execution under the context of the user.
Tags: ole openoffice documentsummaryinformation arbitrary-code-execution attacker overflow

19:44
OpenOffice OLE Importer DocumentSummaryInformation Stream Handling Overflow
» ‎ Packet Storm Security Recent Files

This Metasploit module exploits a vulnerability in OpenOffice 2.3.1 and 2.3.0 on Microsoft Windows XP SP3. By supplying a OLE file with a malformed DocumentSummaryInformation stream, an attacker can gain control of the execution flow, which results arbitrary code execution under the context of the user.
Tags: ole openoffice documentsummaryinformation arbitrary-code-execution attacker overflow

19:44
OpenOffice OLE Importer DocumentSummaryInformation Stream Handling Overflow
» ‎ Packet Storm Security Misc. Files

This Metasploit module exploits a vulnerability in OpenOffice 2.3.1 and 2.3.0 on Microsoft Windows XP SP3. By supplying a OLE file with a malformed DocumentSummaryInformation stream, an attacker can gain control of the execution flow, which results arbitrary code execution under the context of the user.
Tags: ole openoffice documentsummaryinformation arbitrary-code-execution attacker overflow

May 21, 2012
18:39
Foxit Reader 3.0 Open Execute Action Stack Based Buffer Overflow
» ‎ Packet Storm Security Exploits

This Metasploit module exploits a buffer overflow in Foxit Reader 3.0 builds 1301 and earlier. Due to the way Foxit Reader handles the input from an "Launch" action, it is possible to cause a stack-based buffer overflow, allowing an attacker to gain arbitrary code execution under the context of the user.
Tags: foxit buffer reader arbitrary-code-execution based-buffer-overflow attacker

18:39
Foxit Reader 3.0 Open Execute Action Stack Based Buffer Overflow
» ‎ Packet Storm Security Recent Files

This Metasploit module exploits a buffer overflow in Foxit Reader 3.0 builds 1301 and earlier. Due to the way Foxit Reader handles the input from an "Launch" action, it is possible to cause a stack-based buffer overflow, allowing an attacker to gain arbitrary code execution under the context of the user.
Tags: foxit buffer reader arbitrary-code-execution based-buffer-overflow attacker

18:39
Foxit Reader 3.0 Open Execute Action Stack Based Buffer Overflow
» ‎ Packet Storm Security Misc. Files

This Metasploit module exploits a buffer overflow in Foxit Reader 3.0 builds 1301 and earlier. Due to the way Foxit Reader handles the input from an "Launch" action, it is possible to cause a stack-based buffer overflow, allowing an attacker to gain arbitrary code execution under the context of the user.
Tags: foxit buffer reader arbitrary-code-execution based-buffer-overflow attacker

April 30, 2012
6:59
WebCalendar 1.2.4 Pre-Auth Remote Code Injection
» ‎ Packet Storm Security Exploits

This Metasploit modules exploits a vulnerability found in WebCalendar versions 1.2.4 and below. If not removed, the settings.php script meant for installation can be updated by an attacker with injected code. This allows arbitrary code execution as www-data.
Tags: code pre webcalendar arbitrary-code-execution www-data attacker

6:59
WebCalendar 1.2.4 Pre-Auth Remote Code Injection
» ‎ Packet Storm Security Recent Files

This Metasploit modules exploits a vulnerability found in WebCalendar versions 1.2.4 and below. If not removed, the settings.php script meant for installation can be updated by an attacker with injected code. This allows arbitrary code execution as www-data.
Tags: code pre webcalendar arbitrary-code-execution www-data attacker

6:59
WebCalendar 1.2.4 Pre-Auth Remote Code Injection
» ‎ Packet Storm Security Misc. Files

This Metasploit modules exploits a vulnerability found in WebCalendar versions 1.2.4 and below. If not removed, the settings.php script meant for installation can be updated by an attacker with injected code. This allows arbitrary code execution as www-data.
Tags: code pre webcalendar arbitrary-code-execution www-data attacker

April 23, 2012
16:06
Asterisk Project Security Advisory - AST-2012-005
» ‎ Packet Storm Security Advisories

Asterisk Project Security Advisory - In the Skinny channel driver, KEYPAD_BUTTON_MESSAGE events are queued for processing in a buffer allocated on the heap, where each DTMF value that is received is placed on the end of the buffer. Since the length of the buffer is never checked, an attacker could send sufficient KEYPAD_BUTTON_MESSAGE events such that the buffer is overrun.
Tags: project asterisk buffer project-security security-advisory attacker

16:06
Asterisk Project Security Advisory - AST-2012-005
» ‎ Packet Storm Security Recent Files

Asterisk Project Security Advisory - In the Skinny channel driver, KEYPAD_BUTTON_MESSAGE events are queued for processing in a buffer allocated on the heap, where each DTMF value that is received is placed on the end of the buffer. Since the length of the buffer is never checked, an attacker could send sufficient KEYPAD_BUTTON_MESSAGE events such that the buffer is overrun.
Tags: project asterisk buffer project-security security-advisory attacker

16:06
Asterisk Project Security Advisory - AST-2012-005
» ‎ Packet Storm Security Misc. Files

Asterisk Project Security Advisory - In the Skinny channel driver, KEYPAD_BUTTON_MESSAGE events are queued for processing in a buffer allocated on the heap, where each DTMF value that is received is placed on the end of the buffer. Since the length of the buffer is never checked, an attacker could send sufficient KEYPAD_BUTTON_MESSAGE events such that the buffer is overrun.
Tags: project asterisk buffer project-security security-advisory attacker

April 20, 2012
12:59
Liferay JSON Request Control Takeover
» ‎ Packet Storm Security Exploits

Liferay Portal suffers from a takeover vulnerability due to a single HTTP request allowing an attacker to reconfigure which memcached to use. Proof of concept code included. Version 6.1 ce is confirmed vulnerable.
Tags: proof-of-concept attacker version-6

12:59
Liferay JSON Request Control Takeover
» ‎ Packet Storm Security Recent Files

Liferay Portal suffers from a takeover vulnerability due to a single HTTP request allowing an attacker to reconfigure which memcached to use. Proof of concept code included. Version 6.1 ce is confirmed vulnerable.
Tags: request takeover liferay proof-of-concept attacker version-6

12:59
Liferay JSON Request Control Takeover
» ‎ Packet Storm Security Misc. Files

Liferay Portal suffers from a takeover vulnerability due to a single HTTP request allowing an attacker to reconfigure which memcached to use. Proof of concept code included. Version 6.1 ce is confirmed vulnerable.
Tags: request takeover liferay proof-of-concept attacker version-6

April 11, 2012
7:22
Ubuntu Security Notice USN-1419-1
» ‎ Packet Storm Security Advisories

Ubuntu Security Notice 1419-1 - It was discovered that Puppet used a predictable filename when downloading Mac OS X package files. A local attacker could exploit this to overwrite arbitrary files. It was discovered that Puppet incorrectly handled filebucket retrieval requests. A local attacker could exploit this to read arbitrary files. It was discovered that Puppet incorrectly handled filebucket store requests. A local attacker could exploit this to perform a denial of service via resource exhaustion. Various other issues were also addressed.
Tags: attacker ubuntu puppet mac-os resource-exhaustion mac-os-x retrieval-requests

7:22
Ubuntu Security Notice USN-1419-1
» ‎ Packet Storm Security Recent Files

Ubuntu Security Notice 1419-1 - It was discovered that Puppet used a predictable filename when downloading Mac OS X package files. A local attacker could exploit this to overwrite arbitrary files. It was discovered that Puppet incorrectly handled filebucket retrieval requests. A local attacker could exploit this to read arbitrary files. It was discovered that Puppet incorrectly handled filebucket store requests. A local attacker could exploit this to perform a denial of service via resource exhaustion. Various other issues were also addressed.
Tags: attacker ubuntu puppet mac-os resource-exhaustion mac-os-x retrieval-requests

7:22
Ubuntu Security Notice USN-1419-1
» ‎ Packet Storm Security Misc. Files

Ubuntu Security Notice 1419-1 - It was discovered that Puppet used a predictable filename when downloading Mac OS X package files. A local attacker could exploit this to overwrite arbitrary files. It was discovered that Puppet incorrectly handled filebucket retrieval requests. A local attacker could exploit this to read arbitrary files. It was discovered that Puppet incorrectly handled filebucket store requests. A local attacker could exploit this to perform a denial of service via resource exhaustion. Various other issues were also addressed.
Tags: attacker ubuntu puppet mac-os resource-exhaustion mac-os-x retrieval-requests

April 03, 2012
17:25
NetOp Remote Control Client 9.5 Buffer Overflow
» ‎ Packet Storm Security Exploits

This Metasploit module exploits a stack-based buffer overflow in NetOp Remote Control 9.5. When opening a .dws file containing a specially crafted string longer then 520 characters will allow an attacker to execute arbitrary code.
Tags: control netop remote based-buffer-overflow arbitrary-code attacker

April 02, 2012
18:26
Ubuntu Security Notice USN-1414-1
» ‎ Packet Storm Security Advisories

Ubuntu Security Notice 1414-1 - It was discovered that Aptdaemon incorrectly handled installing packages without performing a transaction simulation. An attacker could possibly use this flaw to install altered packages.
Tags: ubuntu notice security security-notice attacker usn

18:26
Ubuntu Security Notice USN-1414-1
» ‎ Packet Storm Security Recent Files

Ubuntu Security Notice 1414-1 - It was discovered that Aptdaemon incorrectly handled installing packages without performing a transaction simulation. An attacker could possibly use this flaw to install altered packages.
Tags: security-notice attacker usn

18:26
Ubuntu Security Notice USN-1414-1
» ‎ Packet Storm Security Misc. Files

Ubuntu Security Notice 1414-1 - It was discovered that Aptdaemon incorrectly handled installing packages without performing a transaction simulation. An attacker could possibly use this flaw to install altered packages.
Tags: ubuntu notice security security-notice attacker usn

March 28, 2012
21:46
Cisco Security Advisory 20120328-mace
» ‎ Packet Storm Security Advisories

Cisco Security Advisory - Cisco IOS Software contains a denial of service (DoS) vulnerability in the Wide Area Application Services (WAAS) Express feature that could allow an unauthenticated, remote attacker to cause the router to leak memory or to reload. Cisco IOS Software also contains a DoS vulnerability in the Measurement, Aggregation, and Correlation Engine (MACE) feature that could allow an unauthenticated, remote attacker to cause the router to reload. An attacker could exploit these vulnerabilities by sending transit traffic through a router configured with WAAS Express or MACE. Successful exploitation of these vulnerabilities could allow an unauthenticated, remote attacker to cause the router to leak memory or to reload. Repeated exploits could allow a sustained DoS condition. Cisco has released free software updates that address these vulnerabilities.
Tags: attacker router Software mace cisco-ios cisco-security cisco-ios-software cisco-security-advisory free-software-updates

21:46
Cisco Security Advisory 20120328-mace
» ‎ Packet Storm Security Recent Files

Cisco Security Advisory - Cisco IOS Software contains a denial of service (DoS) vulnerability in the Wide Area Application Services (WAAS) Express feature that could allow an unauthenticated, remote attacker to cause the router to leak memory or to reload. Cisco IOS Software also contains a DoS vulnerability in the Measurement, Aggregation, and Correlation Engine (MACE) feature that could allow an unauthenticated, remote attacker to cause the router to reload. An attacker could exploit these vulnerabilities by sending transit traffic through a router configured with WAAS Express or MACE. Successful exploitation of these vulnerabilities could allow an unauthenticated, remote attacker to cause the router to leak memory or to reload. Repeated exploits could allow a sustained DoS condition. Cisco has released free software updates that address these vulnerabilities.
Tags: attacker router Software mace cisco-ios cisco-security cisco-ios-software cisco-security-advisory free-software-updates

21:46
Cisco Security Advisory 20120328-mace
» ‎ Packet Storm Security Misc. Files

Cisco Security Advisory - Cisco IOS Software contains a denial of service (DoS) vulnerability in the Wide Area Application Services (WAAS) Express feature that could allow an unauthenticated, remote attacker to cause the router to leak memory or to reload. Cisco IOS Software also contains a DoS vulnerability in the Measurement, Aggregation, and Correlation Engine (MACE) feature that could allow an unauthenticated, remote attacker to cause the router to reload. An attacker could exploit these vulnerabilities by sending transit traffic through a router configured with WAAS Express or MACE. Successful exploitation of these vulnerabilities could allow an unauthenticated, remote attacker to cause the router to leak memory or to reload. Repeated exploits could allow a sustained DoS condition. Cisco has released free software updates that address these vulnerabilities.
Tags: attacker router Software mace cisco-ios cisco-security cisco-ios-software cisco-security-advisory free-software-updates

March 27, 2012
19:06
Red Hat Security Advisory 2012-0427-01
» ‎ Packet Storm Security Advisories

Red Hat Security Advisory 2012-0427-01 - libtasn1 is a library developed for ASN.1 structures management that includes DER encoding and decoding. A flaw was found in the way libtasn1 decoded DER data. An attacker could create carefully-crafted DER encoded input that, when parsed by an application that uses libtasn1, could cause the application to crash.
Tags: libtasn red der red-hat-security security-advisory attacker

19:06
Red Hat Security Advisory 2012-0427-01
» ‎ Packet Storm Security Recent Files

Red Hat Security Advisory 2012-0427-01 - libtasn1 is a library developed for ASN.1 structures management that includes DER encoding and decoding. A flaw was found in the way libtasn1 decoded DER data. An attacker could create carefully-crafted DER encoded input that, when parsed by an application that uses libtasn1, could cause the application to crash.
Tags: libtasn red der red-hat-security security-advisory attacker

19:06
Red Hat Security Advisory 2012-0427-01
» ‎ Packet Storm Security Misc. Files

Red Hat Security Advisory 2012-0427-01 - libtasn1 is a library developed for ASN.1 structures management that includes DER encoding and decoding. A flaw was found in the way libtasn1 decoded DER data. An attacker could create carefully-crafted DER encoded input that, when parsed by an application that uses libtasn1, could cause the application to crash.
Tags: libtasn red der red-hat-security security-advisory attacker

March 23, 2012
16:38
Ubuntu Security Notice USN-1401-2
» ‎ Packet Storm Security Advisories

Ubuntu Security Notice 1401-2 - USN-1401-1 fixed vulnerabilities in Xulrunner. This update provides the corresponding fixes for Thunderbird. It was discovered that a flaw in the Mozilla SVG implementation could result in an out-of-bounds memory access if SVG elements were removed during a DOMAttrModified event handler. If the user were tricked into opening a specially crafted page, an attacker could exploit this to cause a denial of service via application crash. Atte Kettunen discovered a use-after-free vulnerability in the Gecko Rendering Engine's handling of SVG animations. An attacker could potentially exploit this to execute arbitrary code with the privileges of the user invoking the Xulrunner based application. Atte Kettunen discovered an out of bounds read vulnerability in the Gecko Rendering Engine's handling of SVG Filters. An attacker could potentially exploit this to make data from the user's memory accessible to the page content. Soroush Dalili discovered that the Gecko Rendering Engine did not adequately protect against dropping JavaScript links onto a frame. A remote attacker could, through cross-site scripting (XSS), exploit this to modify the contents of the frame or steal confidential data. Mariusz Mlynski discovered that the Home button accepted JavaScript links to set the browser Home page. An attacker could use this vulnerability to get the script URL loaded in the privileged about:sessionrestore context. Bob Clary, Vincenzo Iozzo, and Willem Pinckaers discovered memory safety issues affecting Firefox. If the user were tricked into opening a specially crafted page, an attacker could exploit these to cause a denial of service via application crash, or potentially execute code with the privileges of the user invoking Firefox. Various other issues were also addressed.
Tags: user attacker svg dalili bob-clary willem-pinckaers svg-animations application-crash memory-safety

16:38
Ubuntu Security Notice USN-1401-2
» ‎ Packet Storm Security Recent Files

Ubuntu Security Notice 1401-2 - USN-1401-1 fixed vulnerabilities in Xulrunner. This update provides the corresponding fixes for Thunderbird. It was discovered that a flaw in the Mozilla SVG implementation could result in an out-of-bounds memory access if SVG elements were removed during a DOMAttrModified event handler. If the user were tricked into opening a specially crafted page, an attacker could exploit this to cause a denial of service via application crash. Atte Kettunen discovered a use-after-free vulnerability in the Gecko Rendering Engine's handling of SVG animations. An attacker could potentially exploit this to execute arbitrary code with the privileges of the user invoking the Xulrunner based application. Atte Kettunen discovered an out of bounds read vulnerability in the Gecko Rendering Engine's handling of SVG Filters. An attacker could potentially exploit this to make data from the user's memory accessible to the page content. Soroush Dalili discovered that the Gecko Rendering Engine did not adequately protect against dropping JavaScript links onto a frame. A remote attacker could, through cross-site scripting (XSS), exploit this to modify the contents of the frame or steal confidential data. Mariusz Mlynski discovered that the Home button accepted JavaScript links to set the browser Home page. An attacker could use this vulnerability to get the script URL loaded in the privileged about:sessionrestore context. Bob Clary, Vincenzo Iozzo, and Willem Pinckaers discovered memory safety issues affecting Firefox. If the user were tricked into opening a specially crafted page, an attacker could exploit these to cause a denial of service via application crash, or potentially execute code with the privileges of the user invoking Firefox. Various other issues were also addressed.
Tags: user attacker svg dalili bob-clary willem-pinckaers svg-animations application-crash memory-safety

16:38
Ubuntu Security Notice USN-1401-2
» ‎ Packet Storm Security Misc. Files

Ubuntu Security Notice 1401-2 - USN-1401-1 fixed vulnerabilities in Xulrunner. This update provides the corresponding fixes for Thunderbird. It was discovered that a flaw in the Mozilla SVG implementation could result in an out-of-bounds memory access if SVG elements were removed during a DOMAttrModified event handler. If the user were tricked into opening a specially crafted page, an attacker could exploit this to cause a denial of service via application crash. Atte Kettunen discovered a use-after-free vulnerability in the Gecko Rendering Engine's handling of SVG animations. An attacker could potentially exploit this to execute arbitrary code with the privileges of the user invoking the Xulrunner based application. Atte Kettunen discovered an out of bounds read vulnerability in the Gecko Rendering Engine's handling of SVG Filters. An attacker could potentially exploit this to make data from the user's memory accessible to the page content. Soroush Dalili discovered that the Gecko Rendering Engine did not adequately protect against dropping JavaScript links onto a frame. A remote attacker could, through cross-site scripting (XSS), exploit this to modify the contents of the frame or steal confidential data. Mariusz Mlynski discovered that the Home button accepted JavaScript links to set the browser Home page. An attacker could use this vulnerability to get the script URL loaded in the privileged about:sessionrestore context. Bob Clary, Vincenzo Iozzo, and Willem Pinckaers discovered memory safety issues affecting Firefox. If the user were tricked into opening a specially crafted page, an attacker could exploit these to cause a denial of service via application crash, or potentially execute code with the privileges of the user invoking Firefox. Various other issues were also addressed.
Tags: user attacker svg dalili bob-clary willem-pinckaers svg-animations application-crash memory-safety

March 21, 2012
20:18
Ubuntu Security Notice USN-1400-3
» ‎ Packet Storm Security Advisories

Ubuntu Security Notice 1400-3 - USN-1400-1 fixed vulnerabilities in Firefox. This update provides the corresponding fixes for Thunderbird. Soroush Dalili discovered that Firefox did not adequately protect against dropping JavaScript links onto a frame. A remote attacker could, through cross-site scripting (XSS), exploit this to modify the contents or steal confidential data. Atte Kettunen discovered a use-after-free vulnerability in Firefox's handling of SVG animations. An attacker could potentially exploit this to execute arbitrary code with the privileges of the user invoking Firefox. Atte Kettunen discovered an out of bounds read vulnerability in Firefox's handling of SVG Filters. An attacker could potentially exploit this to make data from the user's memory accessible to the page content. Various other issues have also been addressed.
Tags: attacker ubuntu firefox dalili svg-animations soroush

20:18
Ubuntu Security Notice USN-1400-3
» ‎ Packet Storm Security Recent Files

Ubuntu Security Notice 1400-3 - USN-1400-1 fixed vulnerabilities in Firefox. This update provides the corresponding fixes for Thunderbird. Soroush Dalili discovered that Firefox did not adequately protect against dropping JavaScript links onto a frame. A remote attacker could, through cross-site scripting (XSS), exploit this to modify the contents or steal confidential data. Atte Kettunen discovered a use-after-free vulnerability in Firefox's handling of SVG animations. An attacker could potentially exploit this to execute arbitrary code with the privileges of the user invoking Firefox. Atte Kettunen discovered an out of bounds read vulnerability in Firefox's handling of SVG Filters. An attacker could potentially exploit this to make data from the user's memory accessible to the page content. Various other issues have also been addressed.
Tags: attacker ubuntu firefox dalili svg-animations soroush

20:18
Ubuntu Security Notice USN-1400-3
» ‎ Packet Storm Security Misc. Files

Ubuntu Security Notice 1400-3 - USN-1400-1 fixed vulnerabilities in Firefox. This update provides the corresponding fixes for Thunderbird. Soroush Dalili discovered that Firefox did not adequately protect against dropping JavaScript links onto a frame. A remote attacker could, through cross-site scripting (XSS), exploit this to modify the contents or steal confidential data. Atte Kettunen discovered a use-after-free vulnerability in Firefox's handling of SVG animations. An attacker could potentially exploit this to execute arbitrary code with the privileges of the user invoking Firefox. Atte Kettunen discovered an out of bounds read vulnerability in Firefox's handling of SVG Filters. An attacker could potentially exploit this to make data from the user's memory accessible to the page content. Various other issues have also been addressed.
Tags: attacker ubuntu firefox dalili svg-animations soroush

March 20, 2012
18:23
CA ARCserve Backup Denial Of Service
» ‎ Packet Storm Security Advisories

CA Technologies Support is alerting customers to a potential risk with CA ARCserve Backup for Windows. A vulnerability exists that can allow a remote attacker to cause a denial of service condition. CA Technologies has issued fixes to address the vulnerability. The vulnerability occurs due to insufficient validation of certain network requests. An attacker can potentially use the vulnerability to disable network services.
Tags: vulnerability denial arcserve denial-of-service network-requests attacker

18:23
CA ARCserve Backup Denial Of Service
» ‎ Packet Storm Security Recent Files

CA Technologies Support is alerting customers to a potential risk with CA ARCserve Backup for Windows. A vulnerability exists that can allow a remote attacker to cause a denial of service condition. CA Technologies has issued fixes to address the vulnerability. The vulnerability occurs due to insufficient validation of certain network requests. An attacker can potentially use the vulnerability to disable network services.
Tags: vulnerability denial arcserve denial-of-service network-requests attacker

18:23
CA ARCserve Backup Denial Of Service
» ‎ Packet Storm Security Misc. Files

CA Technologies Support is alerting customers to a potential risk with CA ARCserve Backup for Windows. A vulnerability exists that can allow a remote attacker to cause a denial of service condition. CA Technologies has issued fixes to address the vulnerability. The vulnerability occurs due to insufficient validation of certain network requests. An attacker can potentially use the vulnerability to disable network services.
Tags: vulnerability denial arcserve denial-of-service network-requests attacker

March 19, 2012
15:21
Ubuntu Security Notice USN-1401-1
» ‎ Packet Storm Security Advisories

Ubuntu Security Notice 1401-1 - It was discovered that a flaw in the Mozilla SVG implementation could result in an out-of-bounds memory access if SVG elements were removed during a DOMAttrModified event handler. If the user were tricked into opening a specially crafted page, an attacker could exploit this to cause a denial of service via application crash. Atte Kettunen discovered a use-after-free vulnerability in the Gecko Rendering Engine's handling of SVG animations. An attacker could potentially exploit this to execute arbitrary code with the privileges of the user invoking the Xulrunner based application. Atte Kettunen discovered an out of bounds read vulnerability in the Gecko Rendering Engine's handling of SVG Filters. An attacker could potentially exploit this to make data from the user's memory accessible to the page content. Various other issues were also addressed.
Tags: user attacker svg svg-animations application-crash denial-of-service

15:21
Ubuntu Security Notice USN-1401-1
» ‎ Packet Storm Security Recent Files

Ubuntu Security Notice 1401-1 - It was discovered that a flaw in the Mozilla SVG implementation could result in an out-of-bounds memory access if SVG elements were removed during a DOMAttrModified event handler. If the user were tricked into opening a specially crafted page, an attacker could exploit this to cause a denial of service via application crash. Atte Kettunen discovered a use-after-free vulnerability in the Gecko Rendering Engine's handling of SVG animations. An attacker could potentially exploit this to execute arbitrary code with the privileges of the user invoking the Xulrunner based application. Atte Kettunen discovered an out of bounds read vulnerability in the Gecko Rendering Engine's handling of SVG Filters. An attacker could potentially exploit this to make data from the user's memory accessible to the page content. Various other issues were also addressed.
Tags: user attacker svg svg-animations application-crash denial-of-service

15:21
Ubuntu Security Notice USN-1401-1
» ‎ Packet Storm Security Misc. Files

Ubuntu Security Notice 1401-1 - It was discovered that a flaw in the Mozilla SVG implementation could result in an out-of-bounds memory access if SVG elements were removed during a DOMAttrModified event handler. If the user were tricked into opening a specially crafted page, an attacker could exploit this to cause a denial of service via application crash. Atte Kettunen discovered a use-after-free vulnerability in the Gecko Rendering Engine's handling of SVG animations. An attacker could potentially exploit this to execute arbitrary code with the privileges of the user invoking the Xulrunner based application. Atte Kettunen discovered an out of bounds read vulnerability in the Gecko Rendering Engine's handling of SVG Filters. An attacker could potentially exploit this to make data from the user's memory accessible to the page content. Various other issues were also addressed.
Tags: user attacker svg svg-animations application-crash denial-of-service

March 16, 2012
14:38
Ubuntu Security Notice USN-1400-2
» ‎ Packet Storm Security Advisories

Ubuntu Security Notice 1400-2 - USN-1400-1 fixed vulnerabilities in Firefox. This update provides an updated ubufox package for use with the latest Firefox. Soroush Dalili discovered that Firefox did not adequately protect against dropping JavaScript links onto a frame. A remote attacker could, through cross-site scripting (XSS), exploit this to modify the contents or steal confidential data. Atte Kettunen discovered a use-after-free vulnerability in Firefox's handling of SVG animations. An attacker could potentially exploit this to execute arbitrary code with the privileges of the user invoking Firefox. Atte Kettunen discovered an out of bounds read vulnerability in Firefox's handling of SVG Filters. An attacker could potentially exploit this to make data from the user's memory accessible to the page content. Various other issues were also addressed.
Tags: attacker ubuntu firefox dalili svg-animations javascript-links confidential-data
March 08, 2012
19:45
Ubuntu Security Notice USN-1395-1
» ‎ Packet Storm Security Advisories

Ubuntu Security Notice 1395-1 - Markus Vervier discovered that PyPAM incorrectly handled passwords containing NULL bytes. An attacker could exploit this to cause applications using PyPAM to crash, or possibly execute arbitrary code.
Tags: ubuntu notice security markus-vervier arbitrary-code security-notice attacker

19:45
Ubuntu Security Notice USN-1395-1
» ‎ Packet Storm Security Recent Files

Ubuntu Security Notice 1395-1 - Markus Vervier discovered that PyPAM incorrectly handled passwords containing NULL bytes. An attacker could exploit this to cause applications using PyPAM to crash, or possibly execute arbitrary code.
Tags: ubuntu notice security markus-vervier arbitrary-code security-notice attacker

19:45
Ubuntu Security Notice USN-1395-1
» ‎ Packet Storm Security Misc. Files

Ubuntu Security Notice 1395-1 - Markus Vervier discovered that PyPAM incorrectly handled passwords containing NULL bytes. An attacker could exploit this to cause applications using PyPAM to crash, or possibly execute arbitrary code.
Tags: ubuntu notice security markus-vervier arbitrary-code security-notice attacker

March 07, 2012
17:39
Drupal Read More Link 6.x Cross Site Scripting
» ‎ Packet Storm Security Advisories

The Read More Link module version 6.x in Drupal allows you to move the "Read more" link from the node's links area to the end of the teaser text. A user could inject java script into pages affecting other site users. This vulnerability is mitigated by the fact that an attacker must have a role with the permission "access administration pages."
Tags: drupal site link read-more read permission-access attacker java-script

17:39
Drupal Read More Link 6.x Cross Site Scripting
» ‎ Packet Storm Security Recent Files

The Read More Link module version 6.x in Drupal allows you to move the "Read more" link from the node's links area to the end of the teaser text. A user could inject java script into pages affecting other site users. This vulnerability is mitigated by the fact that an attacker must have a role with the permission "access administration pages."
Tags: drupal site link read-more read permission-access attacker java-script

17:39
Drupal Read More Link 6.x Cross Site Scripting
» ‎ Packet Storm Security Misc. Files

The Read More Link module version 6.x in Drupal allows you to move the "Read more" link from the node's links area to the end of the teaser text. A user could inject java script into pages affecting other site users. This vulnerability is mitigated by the fact that an attacker must have a role with the permission "access administration pages."
Tags: drupal site link read-more read permission-access attacker java-script

February 29, 2012
8:05
Ubuntu Security Notice USN-1378-1
» ‎ Packet Storm Security Advisories

Ubuntu Security Notice 1378-1 - It was discovered that PostgreSQL incorrectly checked permissions on functions called by a trigger. An attacker could attach a trigger to a table they owned and possibly escalate privileges. It was discovered that PostgreSQL incorrectly truncated SSL certificate name checks to 32 characters. If a host name was exactly 32 characters, this issue could be exploited by an attacker to spoof the SSL certificate. This issue affected Ubuntu 10.04 LTS, Ubuntu 10.10, Ubuntu 11.04 and Ubuntu 11.10. Various other issues were also addressed.
Tags: ubuntu notice security certificate-name security-notice attacker

8:05
Ubuntu Security Notice USN-1378-1
» ‎ Packet Storm Security Recent Files

Ubuntu Security Notice 1378-1 - It was discovered that PostgreSQL incorrectly checked permissions on functions called by a trigger. An attacker could attach a trigger to a table they owned and possibly escalate privileges. It was discovered that PostgreSQL incorrectly truncated SSL certificate name checks to 32 characters. If a host name was exactly 32 characters, this issue could be exploited by an attacker to spoof the SSL certificate. This issue affected Ubuntu 10.04 LTS, Ubuntu 10.10, Ubuntu 11.04 and Ubuntu 11.10. Various other issues were also addressed.
Tags: certificate-name security-notice attacker

8:05
Ubuntu Security Notice USN-1378-1
» ‎ Packet Storm Security Misc. Files

Ubuntu Security Notice 1378-1 - It was discovered that PostgreSQL incorrectly checked permissions on functions called by a trigger. An attacker could attach a trigger to a table they owned and possibly escalate privileges. It was discovered that PostgreSQL incorrectly truncated SSL certificate name checks to 32 characters. If a host name was exactly 32 characters, this issue could be exploited by an attacker to spoof the SSL certificate. This issue affected Ubuntu 10.04 LTS, Ubuntu 10.10, Ubuntu 11.04 and Ubuntu 11.10. Various other issues were also addressed.
Tags: certificate-name security-notice attacker

February 14, 2012
15:59
Ubuntu Security Notice USN-1365-1
» ‎ Packet Storm Security Advisories

Ubuntu Security Notice 1365-1 - It was discovered that Puppet would allow remote ralsh under certain circumstances. An attacker on an authenticated puppet node could exploit this to view or manipulate resources on other Puppet nodes.
Tags: ubuntu puppet security security-notice attacker

15:59
Ubuntu Security Notice USN-1365-1
» ‎ Packet Storm Security Recent Files

Ubuntu Security Notice 1365-1 - It was discovered that Puppet would allow remote ralsh under certain circumstances. An attacker on an authenticated puppet node could exploit this to view or manipulate resources on other Puppet nodes.
Tags: ubuntu puppet security security-notice attacker

15:59
Ubuntu Security Notice USN-1365-1
» ‎ Packet Storm Security Misc. Files

Ubuntu Security Notice 1365-1 - It was discovered that Puppet would allow remote ralsh under certain circumstances. An attacker on an authenticated puppet node could exploit this to view or manipulate resources on other Puppet nodes.
Tags: ubuntu puppet security security-notice attacker

January 26, 2012
13:17
Ubuntu Security Notice USN-1349-1
» ‎ Packet Storm Security Recent Files

Ubuntu Security Notice 1349-1 - It was discovered that the X wrapper incorrectly checked certain console permissions when launched by unprivileged users. An attacker connected remotely could use this flaw to start X, bypassing the console permissions check.
Tags: ubuntu notice security unprivileged-users security-notice attacker

13:17
Ubuntu Security Notice USN-1349-1
» ‎ Packet Storm Security Misc. Files

Ubuntu Security Notice 1349-1 - It was discovered that the X wrapper incorrectly checked certain console permissions when launched by unprivileged users. An attacker connected remotely could use this flaw to start X, bypassing the console permissions check.
Tags: ubuntu notice security unprivileged-users security-notice attacker

January 25, 2012
22:28
Ubuntu Security Notice USN-1342-1
» ‎ Packet Storm Security Recent Files

Ubuntu Security Notice 1342-1 - J. Aedla discovered that the kernel incorrectly handled /proc//mem permissions. A local attacker could exploit this and gain root privileges.
Tags: ubuntu notice security j.-aedla gain-root-privileges security-notice attacker

22:28
Ubuntu Security Notice USN-1342-1
» ‎ Packet Storm Security Misc. Files

Ubuntu Security Notice 1342-1 - J. Aedla discovered that the kernel incorrectly handled /proc//mem permissions. A local attacker could exploit this and gain root privileges.
Tags: ubuntu notice security j.-aedla gain-root-privileges security-notice attacker

January 19, 2012
15:46
Wvdial / usb_modeswitch File Overwrite
» ‎ Packet Storm Security Exploits

When using usb_modeswitch and invoking pppd from wvdial in -detach mode. a /tmp/debug file is created. A local Attacker could overwrite arbitrary files.
Tags: usb wvdial modeswitch pppd arbitrary-files attacker

15:46
Wvdial / usb_modeswitch File Overwrite
» ‎ Packet Storm Security Recent Files

When using usb_modeswitch and invoking pppd from wvdial in -detach mode. a /tmp/debug file is created. A local Attacker could overwrite arbitrary files.
Tags: usb wvdial modeswitch pppd arbitrary-files attacker

15:46
Wvdial / usb_modeswitch File Overwrite
» ‎ Packet Storm Security Misc. Files

When using usb_modeswitch and invoking pppd from wvdial in -detach mode. a /tmp/debug file is created. A local Attacker could overwrite arbitrary files.
Tags: pppd arbitrary-files attacker

January 18, 2012
15:35
Reflection Scan: An Off-Path Attack On TCP
» ‎ Packet Storm Security Recent Files

The paper demonstrates how traffic load of a shared packet queue can be exploited as a side channel through which protected information leaks to an off-path attacker. The attacker sends to a victim a sequence of identical spoofed segments. The victim responds to each segment in the sequence (the sequence is reflected by the victim) if the segments satisfy a certain condition tested by the attacker. The responses do not reach the attacker directly, but induce extra load on a routing queue shared between the victim and the attacker. Increased processing time of packets traversing the queue reveal that the tested condition was true. The paper concentrates on the TCP, but the approach is generic and can be effective against other protocols that allow to construct requests which are conditionally answered by the victim.
Tags: attacker victim queue information-leaks traffic-load

15:35
Reflection Scan: An Off-Path Attack On TCP
» ‎ Packet Storm Security Misc. Files

The paper demonstrates how traffic load of a shared packet queue can be exploited as a side channel through which protected information leaks to an off-path attacker. The attacker sends to a victim a sequence of identical spoofed segments. The victim responds to each segment in the sequence (the sequence is reflected by the victim) if the segments satisfy a certain condition tested by the attacker. The responses do not reach the attacker directly, but induce extra load on a routing queue shared between the victim and the attacker. Increased processing time of packets traversing the queue reveal that the tested condition was true. The paper concentrates on the TCP, but the approach is generic and can be effective against other protocols that allow to construct requests which are conditionally answered by the victim.
Tags: attacker victim queue information-leaks traffic-load

January 15, 2012
17:35
phpMyAdmin 3.3.x / 3.4.x Local File Inclusion Via XXE Injection
» ‎ Packet Storm Security Exploits

phpMyAdmin versions 3.3.x and 3.4.x suffer from a local file inclusion vulnerability via XXE injection. The attacker must be logged in to MySQL via phpMyAdmin.
Tags: inclusion phpmyadmin file attacker vulnerability

17:35
phpMyAdmin 3.3.x / 3.4.x Local File Inclusion Via XXE Injection
» ‎ Packet Storm Security Recent Files

phpMyAdmin versions 3.3.x and 3.4.x suffer from a local file inclusion vulnerability via XXE injection. The attacker must be logged in to MySQL via phpMyAdmin.
Tags: inclusion phpmyadmin file attacker vulnerability

17:35
phpMyAdmin 3.3.x / 3.4.x Local File Inclusion Via XXE Injection
» ‎ Packet Storm Security Misc. Files

phpMyAdmin versions 3.3.x and 3.4.x suffer from a local file inclusion vulnerability via XXE injection. The attacker must be logged in to MySQL via phpMyAdmin.
Tags: inclusion phpmyadmin file attacker vulnerability

December 19, 2011
14:57
Ubuntu Security Notice USN-1312-1
» ‎ Packet Storm Security Advisories

Ubuntu Security Notice 1312-1 - A bug was discovered in the XFS filesystem's handling of pathnames. A local attacker could exploit this to crash the system, leading to a denial of service, or gain root privileges. Nick Bowler discovered the kernel GHASH message digest algorithm incorrectly handled error conditions. A local attacker could exploit this to cause a kernel oops. A flaw was found in the Journaling Block Device (JBD). A local attacker able to mount ext3 or ext4 file systems could exploit this to crash the system, leading to a denial of service. Various other issues were also addressed.
Tags: attacker ubuntu security nick-bowler gain-root-privileges message-digest-algorithm denial-of-service

14:57
Ubuntu Security Notice USN-1312-1
» ‎ Packet Storm Security Recent Files

Ubuntu Security Notice 1312-1 - A bug was discovered in the XFS filesystem's handling of pathnames. A local attacker could exploit this to crash the system, leading to a denial of service, or gain root privileges. Nick Bowler discovered the kernel GHASH message digest algorithm incorrectly handled error conditions. A local attacker could exploit this to cause a kernel oops. A flaw was found in the Journaling Block Device (JBD). A local attacker able to mount ext3 or ext4 file systems could exploit this to crash the system, leading to a denial of service. Various other issues were also addressed.
Tags: attacker ubuntu security nick-bowler gain-root-privileges message-digest-algorithm denial-of-service

14:57
Ubuntu Security Notice USN-1312-1
» ‎ Packet Storm Security Misc. Files

Ubuntu Security Notice 1312-1 - A bug was discovered in the XFS filesystem's handling of pathnames. A local attacker could exploit this to crash the system, leading to a denial of service, or gain root privileges. Nick Bowler discovered the kernel GHASH message digest algorithm incorrectly handled error conditions. A local attacker could exploit this to cause a kernel oops. A flaw was found in the Journaling Block Device (JBD). A local attacker able to mount ext3 or ext4 file systems could exploit this to crash the system, leading to a denial of service. Various other issues were also addressed.
Tags: attacker ubuntu security nick-bowler gain-root-privileges message-digest-algorithm denial-of-service

December 18, 2011
21:36
[Slides] NX: How Well Does It Say NO to Attacker’s eXecution Attempts?
» ‎ SecDocs

Authors: David Maynor
Tags: exploiting
Event: Black Hat USA 2005

Tags: execution authors attacker david-maynor usa maynor black-hat

December 13, 2011
8:18
Ubuntu Security Notice USN-1304-1
» ‎ Packet Storm Security Advisories

Ubuntu Security Notice 1304-1 - A bug was discovered in the XFS filesystem's handling of pathnames. A local attacker could exploit this to crash the system, leading to a denial of service, or gain root privileges. Nick Bowler discovered the kernel GHASH message digest algorithm incorrectly handled error conditions. A local attacker could exploit this to cause a kernel oops. Scot Doyle discovered that the bridge networking interface incorrectly handled certain network packets. A remote attacker could exploit this to crash the system, leading to a denial of service. Various other issues were also addressed.
Tags: attacker ubuntu security scot-doyle nick-bowler gain-root-privileges message-digest-algorithm denial-of-service

8:18
Ubuntu Security Notice USN-1304-1
» ‎ Packet Storm Security Recent Files

Ubuntu Security Notice 1304-1 - A bug was discovered in the XFS filesystem's handling of pathnames. A local attacker could exploit this to crash the system, leading to a denial of service, or gain root privileges. Nick Bowler discovered the kernel GHASH message digest algorithm incorrectly handled error conditions. A local attacker could exploit this to cause a kernel oops. Scot Doyle discovered that the bridge networking interface incorrectly handled certain network packets. A remote attacker could exploit this to crash the system, leading to a denial of service. Various other issues were also addressed.
Tags: attacker ubuntu security scot-doyle nick-bowler gain-root-privileges message-digest-algorithm denial-of-service

8:18
Ubuntu Security Notice USN-1304-1
» ‎ Packet Storm Security Misc. Files

Ubuntu Security Notice 1304-1 - A bug was discovered in the XFS filesystem's handling of pathnames. A local attacker could exploit this to crash the system, leading to a denial of service, or gain root privileges. Nick Bowler discovered the kernel GHASH message digest algorithm incorrectly handled error conditions. A local attacker could exploit this to cause a kernel oops. Scot Doyle discovered that the bridge networking interface incorrectly handled certain network packets. A remote attacker could exploit this to crash the system, leading to a denial of service. Various other issues were also addressed.
Tags: attacker ubuntu security scot-doyle nick-bowler gain-root-privileges message-digest-algorithm denial-of-service

7:55
Ubuntu Security Notice USN-1302-1
» ‎ Packet Storm Security Advisories

Ubuntu Security Notice 1302-1 - A bug was discovered in the XFS filesystem's handling of pathnames. A local attacker could exploit this to crash the system, leading to a denial of service, or gain root privileges. Nick Bowler discovered the kernel GHASH message digest algorithm incorrectly handled error conditions. A local attacker could exploit this to cause a kernel oops. A flaw was found in the Journaling Block Device (JBD). A local attacker able to mount ext3 or ext4 file systems could exploit this to crash the system, leading to a denial of service. Various other issues were also addressed.
Tags: attacker ubuntu security nick-bowler gain-root-privileges message-digest-algorithm denial-of-service

7:55
Ubuntu Security Notice USN-1302-1
» ‎ Packet Storm Security Recent Files

Ubuntu Security Notice 1302-1 - A bug was discovered in the XFS filesystem's handling of pathnames. A local attacker could exploit this to crash the system, leading to a denial of service, or gain root privileges. Nick Bowler discovered the kernel GHASH message digest algorithm incorrectly handled error conditions. A local attacker could exploit this to cause a kernel oops. A flaw was found in the Journaling Block Device (JBD). A local attacker able to mount ext3 or ext4 file systems could exploit this to crash the system, leading to a denial of service. Various other issues were also addressed.
Tags: attacker ubuntu security nick-bowler gain-root-privileges message-digest-algorithm denial-of-service

7:55
Ubuntu Security Notice USN-1302-1
» ‎ Packet Storm Security Misc. Files

Ubuntu Security Notice 1302-1 - A bug was discovered in the XFS filesystem's handling of pathnames. A local attacker could exploit this to crash the system, leading to a denial of service, or gain root privileges. Nick Bowler discovered the kernel GHASH message digest algorithm incorrectly handled error conditions. A local attacker could exploit this to cause a kernel oops. A flaw was found in the Journaling Block Device (JBD). A local attacker able to mount ext3 or ext4 file systems could exploit this to crash the system, leading to a denial of service. Various other issues were also addressed.
Tags: attacker ubuntu security nick-bowler gain-root-privileges message-digest-algorithm denial-of-service

7:46
Ubuntu Security Notice USN-1301-1
» ‎ Packet Storm Security Advisories

Ubuntu Security Notice 1301-1 - A bug was discovered in the XFS filesystem's handling of pathnames. A local attacker could exploit this to crash the system, leading to a denial of service, or gain root privileges. Nick Bowler discovered the kernel GHASH message digest algorithm incorrectly handled error conditions. A local attacker could exploit this to cause a kernel oops. A flaw was found in the Journaling Block Device (JBD). A local attacker able to mount ext3 or ext4 file systems could exploit this to crash the system, leading to a denial of service. Various other issues were also addressed.
Tags: attacker ubuntu security nick-bowler gain-root-privileges message-digest-algorithm denial-of-service

7:46
Ubuntu Security Notice USN-1301-1
» ‎ Packet Storm Security Recent Files

Ubuntu Security Notice 1301-1 - A bug was discovered in the XFS filesystem's handling of pathnames. A local attacker could exploit this to crash the system, leading to a denial of service, or gain root privileges. Nick Bowler discovered the kernel GHASH message digest algorithm incorrectly handled error conditions. A local attacker could exploit this to cause a kernel oops. A flaw was found in the Journaling Block Device (JBD). A local attacker able to mount ext3 or ext4 file systems could exploit this to crash the system, leading to a denial of service. Various other issues were also addressed.
Tags: attacker ubuntu security nick-bowler gain-root-privileges message-digest-algorithm denial-of-service

7:46
Ubuntu Security Notice USN-1301-1
» ‎ Packet Storm Security Misc. Files

Ubuntu Security Notice 1301-1 - A bug was discovered in the XFS filesystem's handling of pathnames. A local attacker could exploit this to crash the system, leading to a denial of service, or gain root privileges. Nick Bowler discovered the kernel GHASH message digest algorithm incorrectly handled error conditions. A local attacker could exploit this to cause a kernel oops. A flaw was found in the Journaling Block Device (JBD). A local attacker able to mount ext3 or ext4 file systems could exploit this to crash the system, leading to a denial of service. Various other issues were also addressed.
Tags: attacker ubuntu security nick-bowler gain-root-privileges message-digest-algorithm denial-of-service

December 12, 2011
18:23
Ubuntu Security Notice USN-1298-1
» ‎ Packet Storm Security Advisories

Ubuntu Security Notice 1298-1 - Wilfried Weissmann discovered that Apache Commons Daemon incorrectly dropped capabilities after starting. A remote attacker could possibly use this flaw to read certain files, bypassing the intended permissions.
Tags: ubuntu notice security wilfried-weissmann security-notice wilfried attacker

18:23
Ubuntu Security Notice USN-1298-1
» ‎ Packet Storm Security Recent Files

Ubuntu Security Notice 1298-1 - Wilfried Weissmann discovered that Apache Commons Daemon incorrectly dropped capabilities after starting. A remote attacker could possibly use this flaw to read certain files, bypassing the intended permissions.
Tags: ubuntu notice security wilfried-weissmann security-notice wilfried attacker

18:23
Ubuntu Security Notice USN-1298-1
» ‎ Packet Storm Security Misc. Files

Ubuntu Security Notice 1298-1 - Wilfried Weissmann discovered that Apache Commons Daemon incorrectly dropped capabilities after starting. A remote attacker could possibly use this flaw to read certain files, bypassing the intended permissions.
Tags: ubuntu notice security wilfried-weissmann security-notice wilfried attacker

December 08, 2011
8:38
Ubuntu Security Notice USN-1293-1
» ‎ Packet Storm Security Advisories

Ubuntu Security Notice 1293-1 - A bug was discovered in the XFS filesystem's handling of pathnames. A local attacker could exploit this to crash the system, leading to a denial of service, or gain root privileges. Nick Bowler discovered the kernel GHASH message digest algorithm incorrectly handled error conditions. A local attacker could exploit this to cause a kernel oops. A flaw was found in the Journaling Block Device (JBD). A local attacker able to mount ext3 or ext4 file systems could exploit this to crash the system, leading to a denial of service. Various other issues were also addressed.
Tags: attacker ubuntu security nick-bowler gain-root-privileges message-digest-algorithm denial-of-service

8:38
Ubuntu Security Notice USN-1293-1
» ‎ Packet Storm Security Recent Files

Ubuntu Security Notice 1293-1 - A bug was discovered in the XFS filesystem's handling of pathnames. A local attacker could exploit this to crash the system, leading to a denial of service, or gain root privileges. Nick Bowler discovered the kernel GHASH message digest algorithm incorrectly handled error conditions. A local attacker could exploit this to cause a kernel oops. A flaw was found in the Journaling Block Device (JBD). A local attacker able to mount ext3 or ext4 file systems could exploit this to crash the system, leading to a denial of service. Various other issues were also addressed.
Tags: attacker ubuntu security nick-bowler gain-root-privileges message-digest-algorithm denial-of-service

8:38
Ubuntu Security Notice USN-1293-1
» ‎ Packet Storm Security Misc. Files

Ubuntu Security Notice 1293-1 - A bug was discovered in the XFS filesystem's handling of pathnames. A local attacker could exploit this to crash the system, leading to a denial of service, or gain root privileges. Nick Bowler discovered the kernel GHASH message digest algorithm incorrectly handled error conditions. A local attacker could exploit this to cause a kernel oops. A flaw was found in the Journaling Block Device (JBD). A local attacker able to mount ext3 or ext4 file systems could exploit this to crash the system, leading to a denial of service. Various other issues were also addressed.
Tags: attacker ubuntu security nick-bowler gain-root-privileges message-digest-algorithm denial-of-service

8:37
Ubuntu Security Notice USN-1292-1
» ‎ Packet Storm Security Recent Files

Ubuntu Security Notice 1292-1 - A bug was discovered in the XFS filesystem's handling of pathnames. A local attacker could exploit this to crash the system, leading to a denial of service, or gain root privileges. Nick Bowler discovered the kernel GHASH message digest algorithm incorrectly handled error conditions. A local attacker could exploit this to cause a kernel oops. A flaw was found in the Journaling Block Device (JBD). A local attacker able to mount ext3 or ext4 file systems could exploit this to crash the system, leading to a denial of service. Various other issues were also addressed.
Tags: attacker ubuntu security nick-bowler gain-root-privileges message-digest-algorithm denial-of-service

8:37
Ubuntu Security Notice USN-1292-1
» ‎ Packet Storm Security Misc. Files

Ubuntu Security Notice 1292-1 - A bug was discovered in the XFS filesystem's handling of pathnames. A local attacker could exploit this to crash the system, leading to a denial of service, or gain root privileges. Nick Bowler discovered the kernel GHASH message digest algorithm incorrectly handled error conditions. A local attacker could exploit this to cause a kernel oops. A flaw was found in the Journaling Block Device (JBD). A local attacker able to mount ext3 or ext4 file systems could exploit this to crash the system, leading to a denial of service. Various other issues were also addressed.
Tags: attacker ubuntu security nick-bowler gain-root-privileges message-digest-algorithm denial-of-service

December 07, 2011
19:58
Ubuntu Security Notice USN-1289-1
» ‎ Packet Storm Security Advisories

Ubuntu Security Notice 1289-1 - It was discovered that colord incorrectly handled certain SQL queries. A local attacker could exploit this to modify arbitrary sqlite databases. On Ubuntu, colord runs as its own user by default, so standard file permissions would limit which databases could be altered.
Tags: ubuntu notice security security-notice attacker usn

19:58
Ubuntu Security Notice USN-1289-1
» ‎ Packet Storm Security Recent Files

Ubuntu Security Notice 1289-1 - It was discovered that colord incorrectly handled certain SQL queries. A local attacker could exploit this to modify arbitrary sqlite databases. On Ubuntu, colord runs as its own user by default, so standard file permissions would limit which databases could be altered.
Tags: ubuntu notice security security-notice attacker usn

19:58
Ubuntu Security Notice USN-1289-1
» ‎ Packet Storm Security Misc. Files

Ubuntu Security Notice 1289-1 - It was discovered that colord incorrectly handled certain SQL queries. A local attacker could exploit this to modify arbitrary sqlite databases. On Ubuntu, colord runs as its own user by default, so standard file permissions would limit which databases could be altered.
Tags: ubuntu notice security security-notice attacker usn

December 03, 2011
10:56
Ubuntu Security Notice USN-1286-1
» ‎ Packet Storm Security Advisories

Ubuntu Security Notice 1286-1 - Vasily Averin discovered that the NFS Lock Manager (NLM) incorrectly handled unlock requests. A local attacker could exploit this to cause a denial of service. Robert Swiecki discovered that mapping extensions were incorrectly handled. A local attacker could exploit this to crash the system, leading to a denial of service. It was discovered that the wireless stack incorrectly verified SSID lengths. A local attacker could exploit this to cause a denial of service or gain root privileges. Various other issues were also addressed.
Tags: denial attacker service robert-swiecki gain-root-privileges denial-of-service vasily

10:56
Ubuntu Security Notice USN-1286-1
» ‎ Packet Storm Security Recent Files

Ubuntu Security Notice 1286-1 - Vasily Averin discovered that the NFS Lock Manager (NLM) incorrectly handled unlock requests. A local attacker could exploit this to cause a denial of service. Robert Swiecki discovered that mapping extensions were incorrectly handled. A local attacker could exploit this to crash the system, leading to a denial of service. It was discovered that the wireless stack incorrectly verified SSID lengths. A local attacker could exploit this to cause a denial of service or gain root privileges. Various other issues were also addressed.
Tags: denial attacker service robert-swiecki gain-root-privileges denial-of-service vasily

10:56
Ubuntu Security Notice USN-1286-1
» ‎ Packet Storm Security Misc. Files

Ubuntu Security Notice 1286-1 - Vasily Averin discovered that the NFS Lock Manager (NLM) incorrectly handled unlock requests. A local attacker could exploit this to cause a denial of service. Robert Swiecki discovered that mapping extensions were incorrectly handled. A local attacker could exploit this to crash the system, leading to a denial of service. It was discovered that the wireless stack incorrectly verified SSID lengths. A local attacker could exploit this to cause a denial of service or gain root privileges. Various other issues were also addressed.
Tags: denial attacker service robert-swiecki gain-root-privileges denial-of-service vasily

November 29, 2011
17:00
Ubuntu Security Notice USN-1285-1
» ‎ Packet Storm Security Advisories

Ubuntu Security Notice 1285-1 - Andrea Righi discovered a race condition in the KSM memory merging support. If KSM was being used, a local attacker could exploit this to crash the system, leading to a denial of service. Vasily Averin discovered that the NFS Lock Manager (NLM) incorrectly handled unlock requests. A local attacker could exploit this to cause a denial of service. Vasiliy Kulikov discovered that taskstats did not enforce access restrictions. A local attacker could exploit this to read certain information, leading to a loss of privacy. Various other issues were also addressed.
Tags: attacker ubuntu security andrea-righi vasiliy-kulikov denial-of-service kulikov righi

17:00
Ubuntu Security Notice USN-1285-1
» ‎ Packet Storm Security Misc. Files

Ubuntu Security Notice 1285-1 - Andrea Righi discovered a race condition in the KSM memory merging support. If KSM was being used, a local attacker could exploit this to crash the system, leading to a denial of service. Vasily Averin discovered that the NFS Lock Manager (NLM) incorrectly handled unlock requests. A local attacker could exploit this to cause a denial of service. Vasiliy Kulikov discovered that taskstats did not enforce access restrictions. A local attacker could exploit this to read certain information, leading to a loss of privacy. Various other issues were also addressed.
Tags: attacker ubuntu security andrea-righi vasiliy-kulikov denial-of-service kulikov righi

November 27, 2011
4:12
Ubuntu Security Notice USN-1281-1
» ‎ Packet Storm Security Advisories

Ubuntu Security Notice 1281-1 - Andrea Righi discovered a race condition in the KSM memory merging support. If KSM was being used, a local attacker could exploit this to crash the system, leading to a denial of service. It was discovered that an mmap() call with the MAP_PRIVATE flag on "/dev/zero" was incorrectly handled. A local attacker could exploit this to crash the system, leading to a denial of service. Vasily Averin discovered that the NFS Lock Manager (NLM) incorrectly handled unlock requests. A local attacker could exploit this to cause a denial of service. Various other issues were also addressed.
Tags: denial attacker service andrea-righi denial-of-service righi vasily

4:12
Ubuntu Security Notice USN-1281-1
» ‎ Packet Storm Security Recent Files

Ubuntu Security Notice 1281-1 - Andrea Righi discovered a race condition in the KSM memory merging support. If KSM was being used, a local attacker could exploit this to crash the system, leading to a denial of service. It was discovered that an mmap() call with the MAP_PRIVATE flag on "/dev/zero" was incorrectly handled. A local attacker could exploit this to crash the system, leading to a denial of service. Vasily Averin discovered that the NFS Lock Manager (NLM) incorrectly handled unlock requests. A local attacker could exploit this to cause a denial of service. Various other issues were also addressed.
Tags: denial attacker service andrea-righi denial-of-service righi vasily

4:12
Ubuntu Security Notice USN-1281-1
» ‎ Packet Storm Security Misc. Files

Ubuntu Security Notice 1281-1 - Andrea Righi discovered a race condition in the KSM memory merging support. If KSM was being used, a local attacker could exploit this to crash the system, leading to a denial of service. It was discovered that an mmap() call with the MAP_PRIVATE flag on "/dev/zero" was incorrectly handled. A local attacker could exploit this to crash the system, leading to a denial of service. Vasily Averin discovered that the NFS Lock Manager (NLM) incorrectly handled unlock requests. A local attacker could exploit this to cause a denial of service. Various other issues were also addressed.
Tags: denial attacker service andrea-righi denial-of-service righi vasily

November 21, 2011
17:13
Ubuntu Security Notice USN-1275-1
» ‎ Packet Storm Security Advisories

Ubuntu Security Notice 1275-1 - Vasiliy Kulikov discovered that taskstats did not enforce access restrictions. A local attacker could exploit this to read certain information, leading to a loss of privacy.
Tags: ubuntu notice security vasiliy-kulikov security-notice attacker usn

17:13
Ubuntu Security Notice USN-1275-1
» ‎ Packet Storm Security Recent Files

Ubuntu Security Notice 1275-1 - Vasiliy Kulikov discovered that taskstats did not enforce access restrictions. A local attacker could exploit this to read certain information, leading to a loss of privacy.
Tags: ubuntu notice security vasiliy-kulikov security-notice attacker usn

17:13
Ubuntu Security Notice USN-1275-1
» ‎ Packet Storm Security Misc. Files

Ubuntu Security Notice 1275-1 - Vasiliy Kulikov discovered that taskstats did not enforce access restrictions. A local attacker could exploit this to read certain information, leading to a loss of privacy.
Tags: ubuntu notice security vasiliy-kulikov security-notice attacker usn

17:12
Ubuntu Security Notice USN-1274-1
» ‎ Packet Storm Security Advisories

Ubuntu Security Notice 1274-1 - Vasily Averin discovered that the NFS Lock Manager (NLM) incorrectly handled unlock requests. A local attacker could exploit this to cause a denial of service. Robert Swiecki discovered that mapping extensions were incorrectly handled. A local attacker could exploit this to crash the system, leading to a denial of service. It was discovered that the wireless stack incorrectly verified SSID lengths. A local attacker could exploit this to cause a denial of service or gain root privileges. Various other issues were also addressed.
Tags: denial attacker service robert-swiecki gain-root-privileges denial-of-service vasily

17:12
Ubuntu Security Notice USN-1274-1
» ‎ Packet Storm Security Recent Files

Ubuntu Security Notice 1274-1 - Vasily Averin discovered that the NFS Lock Manager (NLM) incorrectly handled unlock requests. A local attacker could exploit this to cause a denial of service. Robert Swiecki discovered that mapping extensions were incorrectly handled. A local attacker could exploit this to crash the system, leading to a denial of service. It was discovered that the wireless stack incorrectly verified SSID lengths. A local attacker could exploit this to cause a denial of service or gain root privileges. Various other issues were also addressed.
Tags: denial attacker service robert-swiecki gain-root-privileges denial-of-service vasily

November 17, 2011
15:30
Ubuntu Security Notice USN-1266-1
» ‎ Packet Storm Security Advisories

Ubuntu Security Notice 1266-1 - It was discovered that slapd contained an off-by-one error. An authenticated attacker could potentially exploit this by sending a crafted LDIF entry containing an empty postalAddress.
Tags: ubuntu notice security security-notice attacker usn

15:30
Ubuntu Security Notice USN-1266-1
» ‎ Packet Storm Security Recent Files

Ubuntu Security Notice 1266-1 - It was discovered that slapd contained an off-by-one error. An authenticated attacker could potentially exploit this by sending a crafted LDIF entry containing an empty postalAddress.
Tags: ubuntu notice security security-notice attacker usn

15:30
Ubuntu Security Notice USN-1266-1
» ‎ Packet Storm Security Misc. Files

Ubuntu Security Notice 1266-1 - It was discovered that slapd contained an off-by-one error. An authenticated attacker could potentially exploit this by sending a crafted LDIF entry containing an empty postalAddress.
Tags: ubuntu notice security security-notice attacker usn

November 16, 2011
18:44
Ubuntu Security Notice USN-1264-1
» ‎ Packet Storm Security Advisories

Ubuntu Security Notice 1264-1 - It was discovered that Bind incorrectly handled certain specially crafted packets. A remote attacker could use this flaw to cause Bind to crash, resulting in a denial of service.
Tags: ubuntu notice security denial-of-service security-notice attacker

18:44
Ubuntu Security Notice USN-1264-1
» ‎ Packet Storm Security Recent Files

Ubuntu Security Notice 1264-1 - It was discovered that Bind incorrectly handled certain specially crafted packets. A remote attacker could use this flaw to cause Bind to crash, resulting in a denial of service.
Tags: ubuntu notice security denial-of-service security-notice attacker

18:44
Ubuntu Security Notice USN-1264-1
» ‎ Packet Storm Security Misc. Files

Ubuntu Security Notice 1264-1 - It was discovered that Bind incorrectly handled certain specially crafted packets. A remote attacker could use this flaw to cause Bind to crash, resulting in a denial of service.
Tags: ubuntu notice security denial-of-service security-notice attacker

18:35
CA Directory Insufficient Bounds Checking
» ‎ Packet Storm Security Advisories

CA Technologies Support is alerting customers to a potential risk with CA Directory. A vulnerability exists that can allow a remote attacker to cause a denial of service condition. Remediation is available to address the vulnerability. The vulnerability occurs due to insufficient bounds checking. A remote attacker can send a SNMP packet that can cause a crash.
Tags: directory vulnerability checking ca-directory denial-of-service attacker

18:35
CA Directory Insufficient Bounds Checking
» ‎ Packet Storm Security Recent Files

CA Technologies Support is alerting customers to a potential risk with CA Directory. A vulnerability exists that can allow a remote attacker to cause a denial of service condition. Remediation is available to address the vulnerability. The vulnerability occurs due to insufficient bounds checking. A remote attacker can send a SNMP packet that can cause a crash.
Tags: ca-directory denial-of-service attacker

18:35
CA Directory Insufficient Bounds Checking
» ‎ Packet Storm Security Misc. Files

CA Technologies Support is alerting customers to a potential risk with CA Directory. A vulnerability exists that can allow a remote attacker to cause a denial of service condition. Remediation is available to address the vulnerability. The vulnerability occurs due to insufficient bounds checking. A remote attacker can send a SNMP packet that can cause a crash.
Tags: directory vulnerability checking ca-directory denial-of-service attacker

November 14, 2011
21:38
Ubuntu Security Notice USN-1260-1
» ‎ Packet Storm Security Advisories

Ubuntu Security Notice 1260-1 - Vasiliy Kulikov discovered that taskstats did not enforce access restrictions. A local attacker could exploit this to read certain information, leading to a loss of privacy.
Tags: security-notice attacker usn

21:38
Ubuntu Security Notice USN-1260-1
» ‎ Packet Storm Security Recent Files

Ubuntu Security Notice 1260-1 - Vasiliy Kulikov discovered that taskstats did not enforce access restrictions. A local attacker could exploit this to read certain information, leading to a loss of privacy.
Tags: ubuntu notice security vasiliy-kulikov security-notice attacker usn

21:38
Ubuntu Security Notice USN-1260-1
» ‎ Packet Storm Security Misc. Files

Ubuntu Security Notice 1260-1 - Vasiliy Kulikov discovered that taskstats did not enforce access restrictions. A local attacker could exploit this to read certain information, leading to a loss of privacy.
Tags: ubuntu notice security vasiliy-kulikov security-notice attacker usn

November 02, 2011
15:49
SetSeed CMS 5.8.20 SQL Injection
» ‎ Packet Storm Security Exploits

SetSeed CMS version 5.8.20 is vulnerable to SQL injection. A remote attacker could send specially-crafted SQL statements to the vulnerable script using the cookie input 'loggedInUser', which could allow the attacker to view, add, modify or delete information in the back-end database.
Tags: setseed sql cms attacker

15:49
SetSeed CMS 5.8.20 SQL Injection
» ‎ Packet Storm Security Recent Files

SetSeed CMS version 5.8.20 is vulnerable to SQL injection. A remote attacker could send specially-crafted SQL statements to the vulnerable script using the cookie input 'loggedInUser', which could allow the attacker to view, add, modify or delete information in the back-end database.
Tags: setseed sql cms attacker

15:49
SetSeed CMS 5.8.20 SQL Injection
» ‎ Packet Storm Security Misc. Files

SetSeed CMS version 5.8.20 is vulnerable to SQL injection. A remote attacker could send specially-crafted SQL statements to the vulnerable script using the cookie input 'loggedInUser', which could allow the attacker to view, add, modify or delete information in the back-end database.
Tags: setseed sql cms attacker

November 01, 2011
8:55
Anatomy Of A Pass Back Attack
» ‎ Packet Storm Security Recent Files

Brief whitepaper discussing how to trick a printer into passing LDAP or SMB credentials back to an attacker in plain text.
Tags: anatomy pass attack attacker credentials

8:55
Anatomy Of A Pass Back Attack
» ‎ Packet Storm Security Misc. Files

Brief whitepaper discussing how to trick a printer into passing LDAP or SMB credentials back to an attacker in plain text.
Tags: anatomy pass attack attacker credentials

October 27, 2011
7:45
GTA SA-MP server.cfg Buffer Overflow
» ‎ Packet Storm Security Exploits

This Metasploit module exploits a stack-based buffer overflow in GTA SA-MP Server. This buffer overflow occurs when the application attempts to open a malformed server.cfg file. To exploit this vulnerability, an attacker must send the victim a server.cfg file and have them run samp-server.exe.
Tags: buffer cfg server mp-server based-buffer-overflow attacker gta-sa

7:45
GTA SA-MP server.cfg Buffer Overflow
» ‎ Packet Storm Security Recent Files

This Metasploit module exploits a stack-based buffer overflow in GTA SA-MP Server. This buffer overflow occurs when the application attempts to open a malformed server.cfg file. To exploit this vulnerability, an attacker must send the victim a server.cfg file and have them run samp-server.exe.
Tags: buffer cfg server mp-server based-buffer-overflow attacker gta-sa

7:45
GTA SA-MP server.cfg Buffer Overflow
» ‎ Packet Storm Security Misc. Files

This Metasploit module exploits a stack-based buffer overflow in GTA SA-MP Server. This buffer overflow occurs when the application attempts to open a malformed server.cfg file. To exploit this vulnerability, an attacker must send the victim a server.cfg file and have them run samp-server.exe.
Tags: buffer cfg server mp-server based-buffer-overflow attacker gta-sa

October 25, 2011
12:56
Gentoo Linux Security Advisory 201110-23
» ‎ Packet Storm Security Advisories

Gentoo Linux Security Advisory 201110-23 - An input sanitation flaw in mod_authnz_external allows remote attacker to conduct SQL injection. Versions prior to 3.2.6 are affected.
Tags: gentoo security linux gentoo-linux-security security-advisory attacker

12:56
Gentoo Linux Security Advisory 201110-23
» ‎ Packet Storm Security Recent Files

Gentoo Linux Security Advisory 201110-23 - An input sanitation flaw in mod_authnz_external allows remote attacker to conduct SQL injection. Versions prior to 3.2.6 are affected.
Tags: gentoo security linux gentoo-linux-security security-advisory attacker

12:56
Gentoo Linux Security Advisory 201110-23
» ‎ Packet Storm Security Misc. Files

Gentoo Linux Security Advisory 201110-23 - An input sanitation flaw in mod_authnz_external allows remote attacker to conduct SQL injection. Versions prior to 3.2.6 are affected.
Tags: gentoo security linux gentoo-linux-security security-advisory attacker

12:55
Ubuntu Security Notice USN-1244-1
» ‎ Packet Storm Security Advisories

Ubuntu Security Notice 1244-1 - Dan Rosenberg discovered that the Linux kernel X.25 implementation incorrectly parsed facilities. A remote attacker could exploit this to crash the kernel, leading to a denial of service. Andrea Righi discovered a race condition in the KSM memory merging support. If KSM was being used, a local attacker could exploit this to crash the system, leading to a denial of service. Vasily Averin discovered that the NFS Lock Manager (NLM) incorrectly handled unlock requests. A local attacker could exploit this to cause a denial of service. Various other issues were also addressed.
Tags: denial attacker service andrea-righi dan-rosenberg linux-kernel denial-of-service righi

12:55
Ubuntu Security Notice USN-1244-1
» ‎ Packet Storm Security Recent Files

Ubuntu Security Notice 1244-1 - Dan Rosenberg discovered that the Linux kernel X.25 implementation incorrectly parsed facilities. A remote attacker could exploit this to crash the kernel, leading to a denial of service. Andrea Righi discovered a race condition in the KSM memory merging support. If KSM was being used, a local attacker could exploit this to crash the system, leading to a denial of service. Vasily Averin discovered that the NFS Lock Manager (NLM) incorrectly handled unlock requests. A local attacker could exploit this to cause a denial of service. Various other issues were also addressed.
Tags: denial attacker service andrea-righi dan-rosenberg linux-kernel denial-of-service righi

12:55
Ubuntu Security Notice USN-1244-1
» ‎ Packet Storm Security Misc. Files

Ubuntu Security Notice 1244-1 - Dan Rosenberg discovered that the Linux kernel X.25 implementation incorrectly parsed facilities. A remote attacker could exploit this to crash the kernel, leading to a denial of service. Andrea Righi discovered a race condition in the KSM memory merging support. If KSM was being used, a local attacker could exploit this to crash the system, leading to a denial of service. Vasily Averin discovered that the NFS Lock Manager (NLM) incorrectly handled unlock requests. A local attacker could exploit this to cause a denial of service. Various other issues were also addressed.
Tags: denial attacker service andrea-righi dan-rosenberg linux-kernel denial-of-service righi

12:54
Ubuntu Security Notice USN-1243-1
» ‎ Packet Storm Security Advisories

Ubuntu Security Notice 1243-1 - It was discovered that the security fix for CVE-2010-4250 introduced a regression. A remote attacker could exploit this to crash the system, leading to a denial of service. Vasiliy Kulikov discovered that taskstats did not enforce access restrictions. A local attacker could exploit this to read certain information, leading to a loss of privacy. Vasiliy Kulikov discovered that /proc/PID/io did not enforce access restrictions. A local attacker could exploit this to read certain information, leading to a loss of privacy. Various other issues were also addressed.
Tags: attacker ubuntu security vasiliy-kulikov kulikov denial-of-service security-notice

12:54
Ubuntu Security Notice USN-1243-1
» ‎ Packet Storm Security Recent Files

Ubuntu Security Notice 1243-1 - It was discovered that the security fix for CVE-2010-4250 introduced a regression. A remote attacker could exploit this to crash the system, leading to a denial of service. Vasiliy Kulikov discovered that taskstats did not enforce access restrictions. A local attacker could exploit this to read certain information, leading to a loss of privacy. Vasiliy Kulikov discovered that /proc/PID/io did not enforce access restrictions. A local attacker could exploit this to read certain information, leading to a loss of privacy. Various other issues were also addressed.
Tags: attacker ubuntu security vasiliy-kulikov kulikov denial-of-service security-notice

12:54
Ubuntu Security Notice USN-1243-1
» ‎ Packet Storm Security Misc. Files

Ubuntu Security Notice 1243-1 - It was discovered that the security fix for CVE-2010-4250 introduced a regression. A remote attacker could exploit this to crash the system, leading to a denial of service. Vasiliy Kulikov discovered that taskstats did not enforce access restrictions. A local attacker could exploit this to read certain information, leading to a loss of privacy. Vasiliy Kulikov discovered that /proc/PID/io did not enforce access restrictions. A local attacker could exploit this to read certain information, leading to a loss of privacy. Various other issues were also addressed.
Tags: attacker ubuntu security vasiliy-kulikov kulikov denial-of-service security-notice

12:53
Ubuntu Security Notice USN-1242-1
» ‎ Packet Storm Security Advisories

Ubuntu Security Notice 1242-1 - It was discovered that the security fix for CVE-2010-4250 introduced a regression. A remote attacker could exploit this to crash the system, leading to a denial of service. Vasiliy Kulikov discovered that taskstats did not enforce access restrictions. A local attacker could exploit this to read certain information, leading to a loss of privacy. Vasiliy Kulikov discovered that /proc/PID/io did not enforce access restrictions. A local attacker could exploit this to read certain information, leading to a loss of privacy. Various other issues were also addressed.
Tags: attacker ubuntu security vasiliy-kulikov kulikov denial-of-service security-notice

12:53
Ubuntu Security Notice USN-1242-1
» ‎ Packet Storm Security Recent Files

Ubuntu Security Notice 1242-1 - It was discovered that the security fix for CVE-2010-4250 introduced a regression. A remote attacker could exploit this to crash the system, leading to a denial of service. Vasiliy Kulikov discovered that taskstats did not enforce access restrictions. A local attacker could exploit this to read certain information, leading to a loss of privacy. Vasiliy Kulikov discovered that /proc/PID/io did not enforce access restrictions. A local attacker could exploit this to read certain information, leading to a loss of privacy. Various other issues were also addressed.
Tags: attacker ubuntu security vasiliy-kulikov kulikov denial-of-service security-notice

12:53
Ubuntu Security Notice USN-1242-1
» ‎ Packet Storm Security Misc. Files

Ubuntu Security Notice 1242-1 - It was discovered that the security fix for CVE-2010-4250 introduced a regression. A remote attacker could exploit this to crash the system, leading to a denial of service. Vasiliy Kulikov discovered that taskstats did not enforce access restrictions. A local attacker could exploit this to read certain information, leading to a loss of privacy. Vasiliy Kulikov discovered that /proc/PID/io did not enforce access restrictions. A local attacker could exploit this to read certain information, leading to a loss of privacy. Various other issues were also addressed.
Tags: attacker ubuntu security vasiliy-kulikov kulikov denial-of-service security-notice

October 20, 2011
16:01
Ubuntu Security Notice USN-1234-1
» ‎ Packet Storm Security Advisories

Ubuntu Security Notice 1234-1 - Vasiliy Kulikov discovered that acpid did not properly handle connections from poorly behaving clients. A local attacker could potentially exploit this to cause a denial of service.
Tags: ubuntu notice security vasiliy-kulikov denial-of-service security-notice attacker

16:01
Ubuntu Security Notice USN-1234-1
» ‎ Packet Storm Security Recent Files

Ubuntu Security Notice 1234-1 - Vasiliy Kulikov discovered that acpid did not properly handle connections from poorly behaving clients. A local attacker could potentially exploit this to cause a denial of service.
Tags: ubuntu notice security vasiliy-kulikov denial-of-service security-notice attacker

16:01
Ubuntu Security Notice USN-1234-1
» ‎ Packet Storm Security Misc. Files

Ubuntu Security Notice 1234-1 - Vasiliy Kulikov discovered that acpid did not properly handle connections from poorly behaving clients. A local attacker could potentially exploit this to cause a denial of service.
Tags: ubuntu notice security vasiliy-kulikov denial-of-service security-notice attacker

October 13, 2011
22:54
iDefense Security Advisory 10.12.11 - MobileSafari
» ‎ Packet Storm Security Advisories

iDefense Security Advisory 10.12.11 - Remote exploitation of a cross site scripting vulnerability in Apple Inc.'s MobileSafari could allow an attacker to view sensitive information in the context of the targeted domain. iOS versions prior to 5 are vulnerable.
Tags: advisory idefense security idefense-security-advisory attacker vulnerability

22:54
iDefense Security Advisory 10.12.11 - MobileSafari
» ‎ Packet Storm Security Recent Files

iDefense Security Advisory 10.12.11 - Remote exploitation of a cross site scripting vulnerability in Apple Inc.'s MobileSafari could allow an attacker to view sensitive information in the context of the targeted domain. iOS versions prior to 5 are vulnerable.
Tags: advisory idefense security idefense-security-advisory attacker vulnerability

22:54
iDefense Security Advisory 10.12.11 - MobileSafari
» ‎ Packet Storm Security Misc. Files

iDefense Security Advisory 10.12.11 - Remote exploitation of a cross site scripting vulnerability in Apple Inc.'s MobileSafari could allow an attacker to view sensitive information in the context of the targeted domain. iOS versions prior to 5 are vulnerable.
Tags: advisory idefense security idefense-security-advisory attacker vulnerability

October 05, 2011
18:54
Ubuntu Security Notice USN-1223-2
» ‎ Packet Storm Security Advisories

Ubuntu Security Notice 1223-2 - USN-1223-1 fixed vulnerabilities in Puppet. A regression was found on Ubuntu 10.04 LTS that caused permission denied errors when managing SSH authorized_keys files with Puppet. This update fixes the problem. It was discovered that Puppet unsafely opened files when the k5login type is used to manage files. A local attacker could exploit this to overwrite arbitrary files which could be used to escalate privileges. Ricky Zhou discovered that Puppet did not drop privileges when creating SSH authorized_keys files. A local attacker could exploit this to overwrite arbitrary files as root. It was discovered that Puppet used a predictable filename when using the --edit resource. A local attacker could exploit this to edit arbitrary files or run arbitrary code as the user invoking the program, typically root. Various other issues were also addressed.
Tags: attacker ubuntu puppet ricky-zhou keys-files arbitrary-files arbitrary-code

18:54
Ubuntu Security Notice USN-1223-2
» ‎ Packet Storm Security Recent Files

Ubuntu Security Notice 1223-2 - USN-1223-1 fixed vulnerabilities in Puppet. A regression was found on Ubuntu 10.04 LTS that caused permission denied errors when managing SSH authorized_keys files with Puppet. This update fixes the problem. It was discovered that Puppet unsafely opened files when the k5login type is used to manage files. A local attacker could exploit this to overwrite arbitrary files which could be used to escalate privileges. Ricky Zhou discovered that Puppet did not drop privileges when creating SSH authorized_keys files. A local attacker could exploit this to overwrite arbitrary files as root. It was discovered that Puppet used a predictable filename when using the --edit resource. A local attacker could exploit this to edit arbitrary files or run arbitrary code as the user invoking the program, typically root. Various other issues were also addressed.
Tags: attacker ubuntu puppet ricky-zhou keys-files arbitrary-files arbitrary-code

18:54
Ubuntu Security Notice USN-1223-2
» ‎ Packet Storm Security Misc. Files

Ubuntu Security Notice 1223-2 - USN-1223-1 fixed vulnerabilities in Puppet. A regression was found on Ubuntu 10.04 LTS that caused permission denied errors when managing SSH authorized_keys files with Puppet. This update fixes the problem. It was discovered that Puppet unsafely opened files when the k5login type is used to manage files. A local attacker could exploit this to overwrite arbitrary files which could be used to escalate privileges. Ricky Zhou discovered that Puppet did not drop privileges when creating SSH authorized_keys files. A local attacker could exploit this to overwrite arbitrary files as root. It was discovered that Puppet used a predictable filename when using the --edit resource. A local attacker could exploit this to edit arbitrary files or run arbitrary code as the user invoking the program, typically root. Various other issues were also addressed.
Tags: attacker ubuntu puppet ricky-zhou keys-files arbitrary-files arbitrary-code

October 04, 2011
14:34
Ubuntu Security Notice USN-1226-2
» ‎ Packet Storm Security Advisories

Ubuntu Security Notice 1226-2 - Dan Rosenberg discovered that cifs-utils incorrectly handled changes to the mtab file. A local attacker could use this issue to corrupt the mtab file, possibly leading to a denial of service. Jan Lieskovsky discovered that cifs-utils incorrectly filtered certain strings being added to the mtab file. A local attacker could use this issue to corrupt the mtab file, possibly leading to a denial of service. Various other issues were also addressed.
Tags: denial-of-service security-notice attacker

14:34
Ubuntu Security Notice USN-1226-2
» ‎ Packet Storm Security Recent Files

Ubuntu Security Notice 1226-2 - Dan Rosenberg discovered that cifs-utils incorrectly handled changes to the mtab file. A local attacker could use this issue to corrupt the mtab file, possibly leading to a denial of service. Jan Lieskovsky discovered that cifs-utils incorrectly filtered certain strings being added to the mtab file. A local attacker could use this issue to corrupt the mtab file, possibly leading to a denial of service. Various other issues were also addressed.
Tags: ubuntu file mtab jan-lieskovsky dan-rosenberg denial-of-service security-notice attacker

14:34
Ubuntu Security Notice USN-1226-2
» ‎ Packet Storm Security Misc. Files

Ubuntu Security Notice 1226-2 - Dan Rosenberg discovered that cifs-utils incorrectly handled changes to the mtab file. A local attacker could use this issue to corrupt the mtab file, possibly leading to a denial of service. Jan Lieskovsky discovered that cifs-utils incorrectly filtered certain strings being added to the mtab file. A local attacker could use this issue to corrupt the mtab file, possibly leading to a denial of service. Various other issues were also addressed.
Tags: denial-of-service security-notice attacker

14:33
Ubuntu Security Notice USN-1226-1
» ‎ Packet Storm Security Advisories

Ubuntu Security Notice 1226-1 - Dan Rosenberg discovered that Samba incorrectly handled changes to the mtab file. A local attacker could use this issue to corrupt the mtab file, possibly leading to a denial of service. Jan Lieskovsky discovered that Samba incorrectly filtered certain strings being added to the mtab file. A local attacker could use this issue to corrupt the mtab file, possibly leading to a denial of service. This issue only affected Ubuntu 10.04 LTS. Various other issues were also addressed.
Tags: denial-of-service security-notice attacker

14:33
Ubuntu Security Notice USN-1226-1
» ‎ Packet Storm Security Recent Files

Ubuntu Security Notice 1226-1 - Dan Rosenberg discovered that Samba incorrectly handled changes to the mtab file. A local attacker could use this issue to corrupt the mtab file, possibly leading to a denial of service. Jan Lieskovsky discovered that Samba incorrectly filtered certain strings being added to the mtab file. A local attacker could use this issue to corrupt the mtab file, possibly leading to a denial of service. This issue only affected Ubuntu 10.04 LTS. Various other issues were also addressed.
Tags: ubuntu file mtab jan-lieskovsky dan-rosenberg denial-of-service security-notice attacker

14:33
Ubuntu Security Notice USN-1226-1
» ‎ Packet Storm Security Misc. Files

Ubuntu Security Notice 1226-1 - Dan Rosenberg discovered that Samba incorrectly handled changes to the mtab file. A local attacker could use this issue to corrupt the mtab file, possibly leading to a denial of service. Jan Lieskovsky discovered that Samba incorrectly filtered certain strings being added to the mtab file. A local attacker could use this issue to corrupt the mtab file, possibly leading to a denial of service. This issue only affected Ubuntu 10.04 LTS. Various other issues were also addressed.
Tags: denial-of-service security-notice attacker

September 30, 2011
11:18
Ubuntu Security Notice USN-1223-1
» ‎ Packet Storm Security Advisories

Ubuntu Security Notice 1223-1 - It was discovered that Puppet unsafely opened files when the k5login type is used to manage files. A local attacker could exploit this to overwrite arbitrary files which could be used to escalate privileges. Ricky Zhou discovered that Puppet did not drop privileges when creating SSH authorized_keys files. A local attacker could exploit this to overwrite arbitrary files as root. It was discovered that Puppet used a predictable filename when using the --edit resource. A local attacker could exploit this to edit arbitrary files or run arbitrary code as the user invoking the program, typically root. Various other issues were also addressed.
Tags: attacker ubuntu puppet ricky-zhou arbitrary-files arbitrary-code security-notice

11:18
Ubuntu Security Notice USN-1223-1
» ‎ Packet Storm Security Recent Files

Ubuntu Security Notice 1223-1 - It was discovered that Puppet unsafely opened files when the k5login type is used to manage files. A local attacker could exploit this to overwrite arbitrary files which could be used to escalate privileges. Ricky Zhou discovered that Puppet did not drop privileges when creating SSH authorized_keys files. A local attacker could exploit this to overwrite arbitrary files as root. It was discovered that Puppet used a predictable filename when using the --edit resource. A local attacker could exploit this to edit arbitrary files or run arbitrary code as the user invoking the program, typically root. Various other issues were also addressed.
Tags: attacker ubuntu puppet ricky-zhou arbitrary-files arbitrary-code security-notice

11:18
Ubuntu Security Notice USN-1223-1
» ‎ Packet Storm Security Misc. Files

Ubuntu Security Notice 1223-1 - It was discovered that Puppet unsafely opened files when the k5login type is used to manage files. A local attacker could exploit this to overwrite arbitrary files which could be used to escalate privileges. Ricky Zhou discovered that Puppet did not drop privileges when creating SSH authorized_keys files. A local attacker could exploit this to overwrite arbitrary files as root. It was discovered that Puppet used a predictable filename when using the --edit resource. A local attacker could exploit this to edit arbitrary files or run arbitrary code as the user invoking the program, typically root. Various other issues were also addressed.
Tags: attacker ubuntu puppet ricky-zhou arbitrary-files arbitrary-code security-notice

September 23, 2011
9:22
Ubuntu Security Notice USN-1215-1
» ‎ Packet Storm Security Advisories

Ubuntu Security Notice 1215-1 - It was discovered that the apt-key utility incorrectly verified GPG keys when downloaded via the net-update option. If a remote attacker were able to perform a man-in-the-middle attack, this flaw could potentially be used to install altered packages. This update corrects the issue by disabling the net-update option completely. A future update will re-enable the option with corrected verification.
Tags: option ubuntu security man-in-the-middle-attack security-notice attacker

9:22
Ubuntu Security Notice USN-1215-1
» ‎ Packet Storm Security Recent Files

Ubuntu Security Notice 1215-1 - It was discovered that the apt-key utility incorrectly verified GPG keys when downloaded via the net-update option. If a remote attacker were able to perform a man-in-the-middle attack, this flaw could potentially be used to install altered packages. This update corrects the issue by disabling the net-update option completely. A future update will re-enable the option with corrected verification.
Tags: option ubuntu security man-in-the-middle-attack security-notice attacker

9:22
Ubuntu Security Notice USN-1215-1
» ‎ Packet Storm Security Misc. Files

Ubuntu Security Notice 1215-1 - It was discovered that the apt-key utility incorrectly verified GPG keys when downloaded via the net-update option. If a remote attacker were able to perform a man-in-the-middle attack, this flaw could potentially be used to install altered packages. This update corrects the issue by disabling the net-update option completely. A future update will re-enable the option with corrected verification.
Tags: option ubuntu security man-in-the-middle-attack security-notice attacker

September 22, 2011
8:56
Ubuntu Security Notice USN-1214-1
» ‎ Packet Storm Security Advisories

Ubuntu Security Notice 1214-1 - Tomas Hoger discovered that GIMP incorrectly handled malformed LZW streams. If a user were tricked into opening a specially crafted GIF image file, an attacker could cause GIMP to crash, or possibly execute arbitrary code with the user's privileges.
Tags: ubuntu notice security tomas-hoger arbitrary-code security-notice attacker

8:56
Ubuntu Security Notice USN-1214-1
» ‎ Packet Storm Security Recent Files

Ubuntu Security Notice 1214-1 - Tomas Hoger discovered that GIMP incorrectly handled malformed LZW streams. If a user were tricked into opening a specially crafted GIF image file, an attacker could cause GIMP to crash, or possibly execute arbitrary code with the user's privileges.
Tags: ubuntu notice security tomas-hoger arbitrary-code security-notice attacker

8:56
Ubuntu Security Notice USN-1214-1
» ‎ Packet Storm Security Misc. Files

Ubuntu Security Notice 1214-1 - Tomas Hoger discovered that GIMP incorrectly handled malformed LZW streams. If a user were tricked into opening a specially crafted GIF image file, an attacker could cause GIMP to crash, or possibly execute arbitrary code with the user's privileges.
Tags: ubuntu notice security tomas-hoger arbitrary-code security-notice attacker

September 15, 2011
11:59
SAP WebAS Malicious SAP Shortcut Generation
» ‎ Packet Storm Security Advisories

Onapsis Security Advisory - Weaknesses in the SAP WebAS system allow for malicious shortcut generation. Upon a successful exploitation, an attacker would be able to obtain sensitive information from legitimate users through social engineering attacks and/or exploit vulnerabilities in their systems in order to take control of them.
Tags: shortcut webas sap legitimate-users social-engineering attacker

11:59
SAP WebAS Malicious SAP Shortcut Generation
» ‎ Packet Storm Security Recent Files

Onapsis Security Advisory - Weaknesses in the SAP WebAS system allow for malicious shortcut generation. Upon a successful exploitation, an attacker would be able to obtain sensitive information from legitimate users through social engineering attacks and/or exploit vulnerabilities in their systems in order to take control of them.
Tags: shortcut webas sap legitimate-users social-engineering attacker

11:59
SAP WebAS Malicious SAP Shortcut Generation
» ‎ Packet Storm Security Misc. Files

Onapsis Security Advisory - Weaknesses in the SAP WebAS system allow for malicious shortcut generation. Upon a successful exploitation, an attacker would be able to obtain sensitive information from legitimate users through social engineering attacks and/or exploit vulnerabilities in their systems in order to take control of them.
Tags: shortcut webas sap legitimate-users social-engineering attacker

11:57
SAP WebAS webrfc Cross Site Scripting
» ‎ Packet Storm Security Advisories

Onapsis Security Advisory - SAP WebAS suffers from a cross site scripting vulnerability. Upon a successful exploitation, an attacker would be able to obtain sensitive information from legitimate users through social engineering attacks and/or exploit vulnerabilities in their systems in order to take control of them.
Tags: cross webas sap legitimate-users social-engineering attacker

11:57
SAP WebAS webrfc Cross Site Scripting
» ‎ Packet Storm Security Recent Files

Onapsis Security Advisory - SAP WebAS suffers from a cross site scripting vulnerability. Upon a successful exploitation, an attacker would be able to obtain sensitive information from legitimate users through social engineering attacks and/or exploit vulnerabilities in their systems in order to take control of them.
Tags: cross webas sap legitimate-users social-engineering attacker

11:57
SAP WebAS webrfc Cross Site Scripting
» ‎ Packet Storm Security Misc. Files

Onapsis Security Advisory - SAP WebAS suffers from a cross site scripting vulnerability. Upon a successful exploitation, an attacker would be able to obtain sensitive information from legitimate users through social engineering attacks and/or exploit vulnerabilities in their systems in order to take control of them.
Tags: cross webas sap legitimate-users social-engineering attacker

September 06, 2011
12:42
[Paper] Bad Memories
» ‎ SecDocs

Authors: Baptiste Gourdin Elie Bursztein Gustav Rydstedt
Tags: cryptography
Event: Black Hat USA 2010
Abstract: No matter which kind of cryptography you are using to defend your network, , sooner or later to make it work you will have to store somewhere a password, a key or a certificate. If the attacker is able to tamper with its storage mechanism then even the strongest encryption mechanism became irrelevant. In this talk we will show how to attack storage mechanisms to tampers with SSL session and break into Wifi network that use WPA encryption. For SSL we will show how to exploit warning inconsistency and caching mechanisms to trick the user into accepting a bad cert and gets his credential stolen. For Wifi network we will demonstrate how to use clickjacking, CSRF, and XSS to steal from routers the two piece of information that an attacker needs to geo-localize and break into it, namely the WPA key and the mac address. Finally we will discuss how to discuss what frame busting defense are used by the Alexa top 100 website and how we were able to break them using standard and not so standard tricks. This is a join work with Dan Boneh and Collin Jackson.
Tags: network cryptography attacker baptiste-gourdin dan-boneh collin-jackson gustav-rydstedt alexa usa storage-mechanisms storage-mechanism

August 29, 2011
10:22
Axway SecureTransport /icons/ Directory Traversal
» ‎ Packet Storm Security Advisories

The Axway SecureTransport device contains a directory traversal in the '/icons/' directory. An unauthenticated remote attacker can use this vulnerability to obtain arbitrary files from the root file system of the vulnerable host.
Tags: directory axway securetransport directory-traversal arbitrary-files attacker

10:22
Axway SecureTransport /icons/ Directory Traversal
» ‎ Packet Storm Security Recent Files

The Axway SecureTransport device contains a directory traversal in the '/icons/' directory. An unauthenticated remote attacker can use this vulnerability to obtain arbitrary files from the root file system of the vulnerable host.
Tags: directory axway securetransport directory-traversal arbitrary-files attacker

10:22
Axway SecureTransport /icons/ Directory Traversal
» ‎ Packet Storm Security Misc. Files

The Axway SecureTransport device contains a directory traversal in the '/icons/' directory. An unauthenticated remote attacker can use this vulnerability to obtain arbitrary files from the root file system of the vulnerable host.
Tags: directory axway securetransport directory-traversal arbitrary-files attacker

August 19, 2011
17:04
Ubuntu Security Notice USN-1193-1
» ‎ Packet Storm Security Advisories

Ubuntu Security Notice 1193-1 - Timo Warns discovered that the GUID partition parsing routines did not correctly validate certain structures. A local attacker with physical access could plug in a specially crafted block device to crash the system, leading to a denial of service. Phil Oester discovered that the network bonding system did not correctly handle large queues. On some systems, a remote attacker could send specially crafted traffic to crash the system, leading to a denial of service. Various other issues were also addressed.
Tags: ubuntu system security phil-oester timo-warns denial-of-service security-notice attacker

17:04
Ubuntu Security Notice USN-1193-1
» ‎ Packet Storm Security Recent Files

Ubuntu Security Notice 1193-1 - Timo Warns discovered that the GUID partition parsing routines did not correctly validate certain structures. A local attacker with physical access could plug in a specially crafted block device to crash the system, leading to a denial of service. Phil Oester discovered that the network bonding system did not correctly handle large queues. On some systems, a remote attacker could send specially crafted traffic to crash the system, leading to a denial of service. Various other issues were also addressed.
Tags: ubuntu system security phil-oester timo-warns denial-of-service security-notice attacker

17:04
Ubuntu Security Notice USN-1193-1
» ‎ Packet Storm Security Misc. Files

Ubuntu Security Notice 1193-1 - Timo Warns discovered that the GUID partition parsing routines did not correctly validate certain structures. A local attacker with physical access could plug in a specially crafted block device to crash the system, leading to a denial of service. Phil Oester discovered that the network bonding system did not correctly handle large queues. On some systems, a remote attacker could send specially crafted traffic to crash the system, leading to a denial of service. Various other issues were also addressed.
Tags: ubuntu system security phil-oester timo-warns denial-of-service security-notice attacker

August 18, 2011
18:07
EZ-ShoPwner 0.1
» ‎ Packet Storm Security Exploits

EZ-ShoPwner version 0.1 is a pwning tool for EZ-Shop. It allows an attacker to extraction various data from the database and spawns shells through netcat and metasploit.
Tags: version ez-shopwner tool metasploit netcat attacker

18:07
EZ-ShoPwner 0.1
» ‎ Packet Storm Security Recent Files

EZ-ShoPwner version 0.1 is a pwning tool for EZ-Shop. It allows an attacker to extraction various data from the database and spawns shells through netcat and metasploit.
Tags: version ez-shopwner tool metasploit netcat attacker

18:07
EZ-ShoPwner 0.1
» ‎ Packet Storm Security Misc. Files

EZ-ShoPwner version 0.1 is a pwning tool for EZ-Shop. It allows an attacker to extraction various data from the database and spawns shells through netcat and metasploit.
Tags: version ez-shopwner tool metasploit netcat attacker

0:45
Zero Day Initiative Advisory 11-272
» ‎ Packet Storm Security Advisories

Zero Day Initiative Advisory 11-272 - This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Flexnet License Server. Authentication is not required to exploit this vulnerability. The specific flaw exists within the license server manager which listens on TCP port 27000. There are multiple problems that allow an attacker to influence the saving and loading of log files on the server. By utilizing a directory traversal issue and some file renaming bugs, an attacker can leverage these vulnerabilities would allow the attacker to execute arbitrary code under the user context running the license server manager/vendor daemon.
Tags: server attacker license vendor-daemon server-authentication license-server

0:45
Zero Day Initiative Advisory 11-272
» ‎ Packet Storm Security Recent Files

Zero Day Initiative Advisory 11-272 - This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Flexnet License Server. Authentication is not required to exploit this vulnerability. The specific flaw exists within the license server manager which listens on TCP port 27000. There are multiple problems that allow an attacker to influence the saving and loading of log files on the server. By utilizing a directory traversal issue and some file renaming bugs, an attacker can leverage these vulnerabilities would allow the attacker to execute arbitrary code under the user context running the license server manager/vendor daemon.
Tags: server attacker license vendor-daemon server-authentication license-server

0:45
Zero Day Initiative Advisory 11-272
» ‎ Packet Storm Security Misc. Files

Zero Day Initiative Advisory 11-272 - This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Flexnet License Server. Authentication is not required to exploit this vulnerability. The specific flaw exists within the license server manager which listens on TCP port 27000. There are multiple problems that allow an attacker to influence the saving and loading of log files on the server. By utilizing a directory traversal issue and some file renaming bugs, an attacker can leverage these vulnerabilities would allow the attacker to execute arbitrary code under the user context running the license server manager/vendor daemon.
Tags: server attacker license vendor-daemon server-authentication license-server

0:42
Ubuntu Security Notice USN-1192-1
» ‎ Packet Storm Security Advisories

Ubuntu Security Notice 1192-1 - Aral Yaman discovered a vulnerability in the WebGL engine. An attacker could potentially use this to crash Firefox or execute arbitrary code with the privileges of the user invoking Firefox. Vivekanand Bolajwar discovered a vulnerability in the JavaScript engine. An attacker could potentially use this to crash Firefox or execute arbitrary code with the privileges of the user invoking Firefox. Bert Hubert and Theo Snelleman discovered a vulnerability in the Ogg reader. An attacker could potentially use this to crash Firefox or execute arbitrary code with the privileges of the user invoking Firefox. Various other issues were also addressed.
Tags: vulnerability attacker firefox bert-hubert theo-snelleman javascript-engine arbitrary-code

0:42
Ubuntu Security Notice USN-1192-1
» ‎ Packet Storm Security Recent Files

Ubuntu Security Notice 1192-1 - Aral Yaman discovered a vulnerability in the WebGL engine. An attacker could potentially use this to crash Firefox or execute arbitrary code with the privileges of the user invoking Firefox. Vivekanand Bolajwar discovered a vulnerability in the JavaScript engine. An attacker could potentially use this to crash Firefox or execute arbitrary code with the privileges of the user invoking Firefox. Bert Hubert and Theo Snelleman discovered a vulnerability in the Ogg reader. An attacker could potentially use this to crash Firefox or execute arbitrary code with the privileges of the user invoking Firefox. Various other issues were also addressed.
Tags: vulnerability attacker firefox bert-hubert theo-snelleman javascript-engine arbitrary-code

0:42
Ubuntu Security Notice USN-1192-1
» ‎ Packet Storm Security Misc. Files

Ubuntu Security Notice 1192-1 - Aral Yaman discovered a vulnerability in the WebGL engine. An attacker could potentially use this to crash Firefox or execute arbitrary code with the privileges of the user invoking Firefox. Vivekanand Bolajwar discovered a vulnerability in the JavaScript engine. An attacker could potentially use this to crash Firefox or execute arbitrary code with the privileges of the user invoking Firefox. Bert Hubert and Theo Snelleman discovered a vulnerability in the Ogg reader. An attacker could potentially use this to crash Firefox or execute arbitrary code with the privileges of the user invoking Firefox. Various other issues were also addressed.
Tags: vulnerability attacker firefox bert-hubert theo-snelleman javascript-engine arbitrary-code

August 15, 2011
8:32
Ubuntu Security Notice USN-1191-1
» ‎ Packet Storm Security Advisories

Ubuntu Security Notice 1191-1 - Tomas Hoger discovered that libXfont incorrectly handled certain malformed compressed fonts. An attacker could use a specially crafted font file to cause libXfont to crash, or possibly execute arbitrary code in order to gain privileges.
Tags: ubuntu notice security tomas-hoger arbitrary-code security-notice attacker

8:32
Ubuntu Security Notice USN-1191-1
» ‎ Packet Storm Security Recent Files

Ubuntu Security Notice 1191-1 - Tomas Hoger discovered that libXfont incorrectly handled certain malformed compressed fonts. An attacker could use a specially crafted font file to cause libXfont to crash, or possibly execute arbitrary code in order to gain privileges.
Tags: ubuntu notice security tomas-hoger arbitrary-code security-notice attacker

8:32
Ubuntu Security Notice USN-1191-1
» ‎ Packet Storm Security Misc. Files

Ubuntu Security Notice 1191-1 - Tomas Hoger discovered that libXfont incorrectly handled certain malformed compressed fonts. An attacker could use a specially crafted font file to cause libXfont to crash, or possibly execute arbitrary code in order to gain privileges.
Tags: ubuntu notice security tomas-hoger arbitrary-code security-notice attacker

8:32
Ubuntu Security Notice USN-1190-1
» ‎ Packet Storm Security Advisories

Ubuntu Security Notice 1190-1 - David Zych discovered that DHCP incorrectly handled certain malformed packets. A remote attacker could use this issue to cause DHCP to crash, resulting in a denial of service.
Tags: ubuntu notice security david-zych denial-of-service security-notice attacker

8:32
Ubuntu Security Notice USN-1190-1
» ‎ Packet Storm Security Recent Files

Ubuntu Security Notice 1190-1 - David Zych discovered that DHCP incorrectly handled certain malformed packets. A remote attacker could use this issue to cause DHCP to crash, resulting in a denial of service.
Tags: ubuntu notice security david-zych denial-of-service security-notice attacker

8:32
Ubuntu Security Notice USN-1190-1
» ‎ Packet Storm Security Misc. Files

Ubuntu Security Notice 1190-1 - David Zych discovered that DHCP incorrectly handled certain malformed packets. A remote attacker could use this issue to cause DHCP to crash, resulting in a denial of service.
Tags: ubuntu notice security david-zych denial-of-service security-notice attacker

August 10, 2011
20:57
CA ARCserve D2D Command Execution
» ‎ Packet Storm Security Advisories

CA Technologies support is alerting customers to a security risk associated with CA ARCserve D2D. A vulnerability exists that can allow a remote attacker to access credentials and execute arbitrary commands. CA Technologies has issued a patch to address the vulnerability. The vulnerability is due to improper session handling. A remote attacker can access credentials and execute arbitrary commands.
Tags: vulnerability attacker arcserve d.-a ca-arcserve command-execution d2d

20:57
CA ARCserve D2D Command Execution
» ‎ Packet Storm Security Recent Files

CA Technologies support is alerting customers to a security risk associated with CA ARCserve D2D. A vulnerability exists that can allow a remote attacker to access credentials and execute arbitrary commands. CA Technologies has issued a patch to address the vulnerability. The vulnerability is due to improper session handling. A remote attacker can access credentials and execute arbitrary commands.
Tags: vulnerability attacker arcserve d.-a ca-arcserve command-execution d2d

20:57
CA ARCserve D2D Command Execution
» ‎ Packet Storm Security Misc. Files

CA Technologies support is alerting customers to a security risk associated with CA ARCserve D2D. A vulnerability exists that can allow a remote attacker to access credentials and execute arbitrary commands. CA Technologies has issued a patch to address the vulnerability. The vulnerability is due to improper session handling. A remote attacker can access credentials and execute arbitrary commands.
Tags: vulnerability attacker arcserve d.-a ca-arcserve command-execution d2d

August 09, 2011
6:57
Ubuntu Security Notice USN-1187-1
» ‎ Packet Storm Security Advisories

Ubuntu Security Notice 1187-1 - It was discovered that KVM did not correctly initialize certain CPU registers. A local attacker could exploit this to crash the system, leading to a denial of service. Thomas Pollet discovered that the RDS network protocol did not check certain iovec buffers. A local attacker could exploit this to crash the system or possibly execute arbitrary code as the root user. Vasiliy Kulikov discovered that the Linux kernel X.25 implementation did not correctly clear kernel memory. A local attacker could exploit this to read kernel stack memory, leading to a loss of privacy. Various other issues were also addressed.
Tags: kernel attacker ubuntu vasiliy-kulikov thomas-pollet kernel-stack kernel-memory linux-kernel

6:57
Ubuntu Security Notice USN-1187-1
» ‎ Packet Storm Security Recent Files

Ubuntu Security Notice 1187-1 - It was discovered that KVM did not correctly initialize certain CPU registers. A local attacker could exploit this to crash the system, leading to a denial of service. Thomas Pollet discovered that the RDS network protocol did not check certain iovec buffers. A local attacker could exploit this to crash the system or possibly execute arbitrary code as the root user. Vasiliy Kulikov discovered that the Linux kernel X.25 implementation did not correctly clear kernel memory. A local attacker could exploit this to read kernel stack memory, leading to a loss of privacy. Various other issues were also addressed.
Tags: kernel attacker ubuntu vasiliy-kulikov thomas-pollet kernel-stack kernel-memory linux-kernel

6:57
Ubuntu Security Notice USN-1187-1
» ‎ Packet Storm Security Misc. Files

Ubuntu Security Notice 1187-1 - It was discovered that KVM did not correctly initialize certain CPU registers. A local attacker could exploit this to crash the system, leading to a denial of service. Thomas Pollet discovered that the RDS network protocol did not check certain iovec buffers. A local attacker could exploit this to crash the system or possibly execute arbitrary code as the root user. Vasiliy Kulikov discovered that the Linux kernel X.25 implementation did not correctly clear kernel memory. A local attacker could exploit this to read kernel stack memory, leading to a loss of privacy. Various other issues were also addressed.
Tags: kernel attacker ubuntu vasiliy-kulikov thomas-pollet kernel-stack kernel-memory linux-kernel

6:56
Ubuntu Security Notice USN-1186-1
» ‎ Packet Storm Security Advisories

Ubuntu Security Notice 1186-1 - Dan Rosenberg discovered that IPC structures were not correctly initialized on 64bit systems. A local attacker could exploit this to read kernel stack memory, leading to a loss of privacy. Steve Chen discovered that setsockopt did not correctly check MSS values. A local attacker could make a specially crafted socket call to crash the system, leading to a denial of service. Vladymyr Denysov discovered that Xen virtual CD-ROM devices were not handled correctly. A local attacker in a guest could make crafted blkback requests that would crash the host, leading to a denial of service. Various other issues were also addressed.
Tags: attacker ubuntu security steve-chen dan-rosenberg virtual-cd-rom kernel-stack

6:56
Ubuntu Security Notice USN-1186-1
» ‎ Packet Storm Security Recent Files

Ubuntu Security Notice 1186-1 - Dan Rosenberg discovered that IPC structures were not correctly initialized on 64bit systems. A local attacker could exploit this to read kernel stack memory, leading to a loss of privacy. Steve Chen discovered that setsockopt did not correctly check MSS values. A local attacker could make a specially crafted socket call to crash the system, leading to a denial of service. Vladymyr Denysov discovered that Xen virtual CD-ROM devices were not handled correctly. A local attacker in a guest could make crafted blkback requests that would crash the host, leading to a denial of service. Various other issues were also addressed.
Tags: attacker ubuntu security steve-chen dan-rosenberg virtual-cd-rom kernel-stack

6:56
Ubuntu Security Notice USN-1186-1
» ‎ Packet Storm Security Misc. Files

Ubuntu Security Notice 1186-1 - Dan Rosenberg discovered that IPC structures were not correctly initialized on 64bit systems. A local attacker could exploit this to read kernel stack memory, leading to a loss of privacy. Steve Chen discovered that setsockopt did not correctly check MSS values. A local attacker could make a specially crafted socket call to crash the system, leading to a denial of service. Vladymyr Denysov discovered that Xen virtual CD-ROM devices were not handled correctly. A local attacker in a guest could make crafted blkback requests that would crash the host, leading to a denial of service. Various other issues were also addressed.
Tags: attacker ubuntu security steve-chen dan-rosenberg virtual-cd-rom kernel-stack

July 31, 2011
7:15
Digital Scribe 1.5 Cross Site Scripting
» ‎ Packet Storm Security Exploits

Digital Scribe version 1.5 suffers from multiple post cross site scripting vulnerabilities. Input thru the POST parameters 'title', 'last' and 'email' in register.php is not sanitized allowing the attacker to execute HTML code into user's browser session on the affected site.
Tags: digital scribe site browser-session attacker

7:15
Digital Scribe 1.5 Cross Site Scripting
» ‎ Packet Storm Security Recent Files

Digital Scribe version 1.5 suffers from multiple post cross site scripting vulnerabilities. Input thru the POST parameters 'title', 'last' and 'email' in register.php is not sanitized allowing the attacker to execute HTML code into user's browser session on the affected site.
Tags: digital scribe site browser-session attacker

7:15
Digital Scribe 1.5 Cross Site Scripting
» ‎ Packet Storm Security Misc. Files

Digital Scribe version 1.5 suffers from multiple post cross site scripting vulnerabilities. Input thru the POST parameters 'title', 'last' and 'email' in register.php is not sanitized allowing the attacker to execute HTML code into user's browser session on the affected site.
Tags: digital scribe site browser-session attacker

July 28, 2011
19:41
Ubuntu Security Notice USN-1181-1
» ‎ Packet Storm Security Advisories

Ubuntu Security Notice 1181-1 - It was discovered that libsoup did not properly validate its input when processing SoupServer requests. A remote attacker could exploit this to access files via directory traversal.
Tags: ubuntu notice security directory-traversal security-notice attacker

19:41
Ubuntu Security Notice USN-1181-1
» ‎ Packet Storm Security Recent Files

Ubuntu Security Notice 1181-1 - It was discovered that libsoup did not properly validate its input when processing SoupServer requests. A remote attacker could exploit this to access files via directory traversal.
Tags: ubuntu notice security directory-traversal security-notice attacker

19:41
Ubuntu Security Notice USN-1181-1
» ‎ Packet Storm Security Misc. Files

Ubuntu Security Notice 1181-1 - It was discovered that libsoup did not properly validate its input when processing SoupServer requests. A remote attacker could exploit this to access files via directory traversal.
Tags: ubuntu notice security directory-traversal security-notice attacker

July 27, 2011
14:18
Ubuntu Security Notice USN-1177-1
» ‎ Packet Storm Security Advisories

Ubuntu Security Notice 1177-1 - Andrew Griffiths discovered that QEMU did not correctly drop privileges when using the 'runas' argument. Under certain circumstances a local attacker could exploit this to escalate privileges.
Tags: ubuntu notice security andrew-griffiths security-notice attacker

14:18
Ubuntu Security Notice USN-1177-1
» ‎ Packet Storm Security Recent Files

Ubuntu Security Notice 1177-1 - Andrew Griffiths discovered that QEMU did not correctly drop privileges when using the 'runas' argument. Under certain circumstances a local attacker could exploit this to escalate privileges.
Tags: ubuntu notice security andrew-griffiths security-notice attacker

14:18
Ubuntu Security Notice USN-1177-1
» ‎ Packet Storm Security Misc. Files

Ubuntu Security Notice 1177-1 - Andrew Griffiths discovered that QEMU did not correctly drop privileges when using the 'runas' argument. Under certain circumstances a local attacker could exploit this to escalate privileges.
Tags: ubuntu notice security andrew-griffiths security-notice attacker

July 20, 2011
8:19
Ubuntu Security Notice USN-1171-1
» ‎ Packet Storm Security Advisories

Ubuntu Security Notice 1171-1 - It was discovered that an SQL injection vulnerability exists in the Likewise Security Authority (lsass) local authentication provider. A local attacker could use this to gain elevated privileges.
Tags: ubuntu notice security sql-injection security-notice attacker

8:19
Ubuntu Security Notice USN-1171-1
» ‎ Packet Storm Security Recent Files

Ubuntu Security Notice 1171-1 - It was discovered that an SQL injection vulnerability exists in the Likewise Security Authority (lsass) local authentication provider. A local attacker could use this to gain elevated privileges.
Tags: ubuntu notice security sql-injection security-notice attacker

8:19
Ubuntu Security Notice USN-1171-1
» ‎ Packet Storm Security Misc. Files

Ubuntu Security Notice 1171-1 - It was discovered that an SQL injection vulnerability exists in the Likewise Security Authority (lsass) local authentication provider. A local attacker could use this to gain elevated privileges.
Tags: ubuntu notice security sql-injection security-notice attacker

July 07, 2011
7:15
Coolplayer 2.19.2 (M3U File) Stack Buffer Overflow
» ‎ Packet Storm Security Exploits

This Metasploit module exploits a stack-based buffer overflow in Coolplayer 2.19.2. An attacker must send the file to the victim and the victim must open the file.
Tags: coolplayer buffer overflow u-file based-buffer-overflow stack-buffer attacker

7:15
Coolplayer 2.19.2 (M3U File) Stack Buffer Overflow
» ‎ Packet Storm Security Recent Files

This Metasploit module exploits a stack-based buffer overflow in Coolplayer 2.19.2. An attacker must send the file to the victim and the victim must open the file.
Tags: coolplayer buffer overflow u-file based-buffer-overflow stack-buffer attacker

7:15
Coolplayer 2.19.2 (M3U File) Stack Buffer Overflow
» ‎ Packet Storm Security Misc. Files

This Metasploit module exploits a stack-based buffer overflow in Coolplayer 2.19.2. An attacker must send the file to the victim and the victim must open the file.
Tags: coolplayer buffer overflow u-file based-buffer-overflow stack-buffer attacker

July 05, 2011
12:55
Ubuntu Security Notice USN-1163-1
» ‎ Packet Storm Security Advisories

Ubuntu Security Notice 1163-1 - It was discovered that Bind incorrectly handled certain specially crafted packets. A remote attacker could use this flaw to cause Bind to stop responding, resulting in a denial of service.
Tags: ubuntu notice security denial-of-service security-notice attacker

12:55
Ubuntu Security Notice USN-1163-1
» ‎ Packet Storm Security Recent Files

Ubuntu Security Notice 1163-1 - It was discovered that Bind incorrectly handled certain specially crafted packets. A remote attacker could use this flaw to cause Bind to stop responding, resulting in a denial of service.
Tags: ubuntu notice security denial-of-service security-notice attacker

12:55
Ubuntu Security Notice USN-1163-1
» ‎ Packet Storm Security Misc. Files

Ubuntu Security Notice 1163-1 - It was discovered that Bind incorrectly handled certain specially crafted packets. A remote attacker could use this flaw to cause Bind to stop responding, resulting in a denial of service.
Tags: ubuntu notice security denial-of-service security-notice attacker

7:12
WordTrainer v3.0 (ORD File) Stack Buffer Overflow
» ‎ Packet Storm Security Exploits

This Metasploit module exploits a stack-based buffer overflow in WordTrainer v3.0. An attacker must send the file to the victim and the victim must open the file.
Tags: buffer file wordtrainer based-buffer-overflow stack-buffer attacker

7:12
WordTrainer v3.0 (ORD File) Stack Buffer Overflow
» ‎ Packet Storm Security Recent Files

This Metasploit module exploits a stack-based buffer overflow in WordTrainer v3.0. An attacker must send the file to the victim and the victim must open the file.
Tags: based-buffer-overflow stack-buffer attacker

7:12
WordTrainer v3.0 (ORD File) Stack Buffer Overflow
» ‎ Packet Storm Security Misc. Files

This Metasploit module exploits a stack-based buffer overflow in WordTrainer v3.0. An attacker must send the file to the victim and the victim must open the file.
Tags: based-buffer-overflow stack-buffer attacker

July 02, 2011
4:47
HP OmniInet.exe Opcode 27 Buffer Overflow
» ‎ Packet Storm Security Exploits

This Metasploit module exploits a buffer overflow in the Hewlett-Packard OmniInet NT Service. By sending a specially crafted opcode 27 packet, a remote attacker may be able to execute arbitrary code.
Tags: buffer opcode omniinet buffer-overflow arbitrary-code attacker

4:47
HP OmniInet.exe Opcode 27 Buffer Overflow
» ‎ Packet Storm Security Recent Files

This Metasploit module exploits a buffer overflow in the Hewlett-Packard OmniInet NT Service. By sending a specially crafted opcode 27 packet, a remote attacker may be able to execute arbitrary code.
Tags: buffer opcode omniinet buffer-overflow arbitrary-code attacker

4:47
HP OmniInet.exe Opcode 27 Buffer Overflow
» ‎ Packet Storm Security Misc. Files

This Metasploit module exploits a buffer overflow in the Hewlett-Packard OmniInet NT Service. By sending a specially crafted opcode 27 packet, a remote attacker may be able to execute arbitrary code.
Tags: buffer opcode omniinet buffer-overflow arbitrary-code attacker

June 28, 2011
12:14
Ubuntu Security Notice USN-1160-1
» ‎ Packet Storm Security Advisories

Ubuntu Security Notice 1160-1 - Dan Rosenberg discovered that IRDA did not correctly check the size of buffers. On non-x86 systems, a local attacker could exploit this to read kernel heap memory, leading to a loss of privacy. Dan Rosenburg discovered that the CAN subsystem leaked kernel addresses into the /proc filesystem. A local attacker could use this to increase the chances of a successful memory corruption exploit. Kees Cook discovered that the IOWarrior USB device driver did not correctly check certain size fields. A local attacker with physical access could plug in a specially crafted USB device to crash the system or potentially gain root privileges. Various other issues were also addressed.
Tags: attacker ubuntu security dan-rosenburg dan-rosenberg heap-memory memory-corruption root-privileges

12:14
Ubuntu Security Notice USN-1160-1
» ‎ Packet Storm Security Recent Files

Ubuntu Security Notice 1160-1 - Dan Rosenberg discovered that IRDA did not correctly check the size of buffers. On non-x86 systems, a local attacker could exploit this to read kernel heap memory, leading to a loss of privacy. Dan Rosenburg discovered that the CAN subsystem leaked kernel addresses into the /proc filesystem. A local attacker could use this to increase the chances of a successful memory corruption exploit. Kees Cook discovered that the IOWarrior USB device driver did not correctly check certain size fields. A local attacker with physical access could plug in a specially crafted USB device to crash the system or potentially gain root privileges. Various other issues were also addressed.
Tags: attacker ubuntu security dan-rosenburg dan-rosenberg heap-memory memory-corruption root-privileges

12:14
Ubuntu Security Notice USN-1160-1
» ‎ Packet Storm Security Misc. Files

Ubuntu Security Notice 1160-1 - Dan Rosenberg discovered that IRDA did not correctly check the size of buffers. On non-x86 systems, a local attacker could exploit this to read kernel heap memory, leading to a loss of privacy. Dan Rosenburg discovered that the CAN subsystem leaked kernel addresses into the /proc filesystem. A local attacker could use this to increase the chances of a successful memory corruption exploit. Kees Cook discovered that the IOWarrior USB device driver did not correctly check certain size fields. A local attacker with physical access could plug in a specially crafted USB device to crash the system or potentially gain root privileges. Various other issues were also addressed.
Tags: attacker ubuntu security dan-rosenburg dan-rosenberg heap-memory memory-corruption root-privileges

June 22, 2011
23:19
Ubuntu Security Notice USN-1157-2
» ‎ Packet Storm Security Advisories

Ubuntu Security Notice 1157-2 - USN-1157-1 fixed vulnerabilities in Firefox. This update provides updated packages for use with Firefox 5. Bob Clary, Kevin Brosnan, Gary Kwong, Jesse Ruderman, Christian Biesinger, Bas Schouten, Igor Bukanov, Bill McCloskey, Olli Pettay, Daniel Veditz and Marcia Knous discovered multiple memory vulnerabilities in the browser rendering engine. An attacker could possibly execute arbitrary code with the privileges of the user invoking Firefox. Martin Barbella discovered that under certain conditions, viewing a XUL document while JavaScript was disabled caused deleted memory to be accessed. An attacker could potentially use this to crash Firefox or execute arbitrary code with the privileges of the user invoking Firefox. Jordi Chancel discovered a vulnerability on multipart/x-mixed-replace images due to memory corruption. An attacker could potentially use this to crash Firefox or execute arbitrary code with the privileges of the user invoking Firefox. Chris Rohlf and Yan Ivnitskiy discovered an integer overflow vulnerability in JavaScript Arrays. An attacker could potentially use this to execute arbitrary code with the privileges of the user invoking Firefox. It was discovered that Firefox's WebGL textures did not honor same-origin policy. If a user were tricked into viewing a malicious site, an attacker could potentially view image data from a different site. Christoph Diehl discovered an out-of-bounds read vulnerability in WebGL code. An attacker could potentially read data that other processes had stored in the GPU. Christoph Diehl discovered an invalid write vulnerability in WebGL code. An attacker could potentially use this to execute arbitrary code with the privileges of the user invoking Firefox. It was discovered that an unauthorized site could trigger an installation dialog for addons and themes. If a user were tricked into viewing a malicious site, an attacker could possibly trick the user into installing a malicious addon or theme. Mario Heiderich discovered a vulnerability in displaying decoded HTML-encoded entities inside SVG elements. An attacker could utilize this to perform cross-site scripting attacks. Various other issues were also addressed.
Tags: user attacker firefox christian-biesinger igor-bukanov jordi-chancel martin-barbella kevin-brosnan jesse-ruderman christoph-diehl daniel-veditz

23:19
Ubuntu Security Notice USN-1157-2
» ‎ Packet Storm Security Recent Files

Ubuntu Security Notice 1157-2 - USN-1157-1 fixed vulnerabilities in Firefox. This update provides updated packages for use with Firefox 5. Bob Clary, Kevin Brosnan, Gary Kwong, Jesse Ruderman, Christian Biesinger, Bas Schouten, Igor Bukanov, Bill McCloskey, Olli Pettay, Daniel Veditz and Marcia Knous discovered multiple memory vulnerabilities in the browser rendering engine. An attacker could possibly execute arbitrary code with the privileges of the user invoking Firefox. Martin Barbella discovered that under certain conditions, viewing a XUL document while JavaScript was disabled caused deleted memory to be accessed. An attacker could potentially use this to crash Firefox or execute arbitrary code with the privileges of the user invoking Firefox. Jordi Chancel discovered a vulnerability on multipart/x-mixed-replace images due to memory corruption. An attacker could potentially use this to crash Firefox or execute arbitrary code with the privileges of the user invoking Firefox. Chris Rohlf and Yan Ivnitskiy discovered an integer overflow vulnerability in JavaScript Arrays. An attacker could potentially use this to execute arbitrary code with the privileges of the user invoking Firefox. It was discovered that Firefox's WebGL textures did not honor same-origin policy. If a user were tricked into viewing a malicious site, an attacker could potentially view image data from a different site. Christoph Diehl discovered an out-of-bounds read vulnerability in WebGL code. An attacker could potentially read data that other processes had stored in the GPU. Christoph Diehl discovered an invalid write vulnerability in WebGL code. An attacker could potentially use this to execute arbitrary code with the privileges of the user invoking Firefox. It was discovered that an unauthorized site could trigger an installation dialog for addons and themes. If a user were tricked into viewing a malicious site, an attacker could possibly trick the user into installing a malicious addon or theme. Mario Heiderich discovered a vulnerability in displaying decoded HTML-encoded entities inside SVG elements. An attacker could utilize this to perform cross-site scripting attacks. Various other issues were also addressed.
Tags: user attacker firefox christian-biesinger igor-bukanov jordi-chancel martin-barbella kevin-brosnan jesse-ruderman christoph-diehl daniel-veditz

23:19
Ubuntu Security Notice USN-1157-2
» ‎ Packet Storm Security Misc. Files

Ubuntu Security Notice 1157-2 - USN-1157-1 fixed vulnerabilities in Firefox. This update provides updated packages for use with Firefox 5. Bob Clary, Kevin Brosnan, Gary Kwong, Jesse Ruderman, Christian Biesinger, Bas Schouten, Igor Bukanov, Bill McCloskey, Olli Pettay, Daniel Veditz and Marcia Knous discovered multiple memory vulnerabilities in the browser rendering engine. An attacker could possibly execute arbitrary code with the privileges of the user invoking Firefox. Martin Barbella discovered that under certain conditions, viewing a XUL document while JavaScript was disabled caused deleted memory to be accessed. An attacker could potentially use this to crash Firefox or execute arbitrary code with the privileges of the user invoking Firefox. Jordi Chancel discovered a vulnerability on multipart/x-mixed-replace images due to memory corruption. An attacker could potentially use this to crash Firefox or execute arbitrary code with the privileges of the user invoking Firefox. Chris Rohlf and Yan Ivnitskiy discovered an integer overflow vulnerability in JavaScript Arrays. An attacker could potentially use this to execute arbitrary code with the privileges of the user invoking Firefox. It was discovered that Firefox's WebGL textures did not honor same-origin policy. If a user were tricked into viewing a malicious site, an attacker could potentially view image data from a different site. Christoph Diehl discovered an out-of-bounds read vulnerability in WebGL code. An attacker could potentially read data that other processes had stored in the GPU. Christoph Diehl discovered an invalid write vulnerability in WebGL code. An attacker could potentially use this to execute arbitrary code with the privileges of the user invoking Firefox. It was discovered that an unauthorized site could trigger an installation dialog for addons and themes. If a user were tricked into viewing a malicious site, an attacker could possibly trick the user into installing a malicious addon or theme. Mario Heiderich discovered a vulnerability in displaying decoded HTML-encoded entities inside SVG elements. An attacker could utilize this to perform cross-site scripting attacks. Various other issues were also addressed.
Tags: user attacker firefox christian-biesinger igor-bukanov jordi-chancel martin-barbella kevin-brosnan jesse-ruderman christoph-diehl daniel-veditz

June 21, 2011
12:52
IBM Web Application Firewall Bypass
» ‎ Packet Storm Security Exploits

The IBM Web Application Firewall can be evaded, allowing an attacker to exploit web vulnerabilities that the product intends to protect. The issue occurs when an attacker submits repeated occurrences of the same parameter.
Tags: application ibm web attacker web-application occurrences

12:52
IBM Web Application Firewall Bypass
» ‎ Packet Storm Security Recent Files

The IBM Web Application Firewall can be evaded, allowing an attacker to exploit web vulnerabilities that the product intends to protect. The issue occurs when an attacker submits repeated occurrences of the same parameter.
Tags: application ibm web attacker web-application occurrences

12:52
IBM Web Application Firewall Bypass
» ‎ Packet Storm Security Misc. Files

The IBM Web Application Firewall can be evaded, allowing an attacker to exploit web vulnerabilities that the product intends to protect. The issue occurs when an attacker submits repeated occurrences of the same parameter.
Tags: application ibm web attacker web-application occurrences

June 07, 2011
8:38
Cisco AnyConnect VPN Client ActiveX URL Property Download and Execute
» ‎ Packet Storm Security Exploits

This Metasploit module exploits a vulnerability in the Cisco AnyConnect VPN client vpnweb.ocx ActiveX control. This control is typically used to install the VPN client. An attacker can set the 'url' property which is where the control tries to locate the files needed to install the client. The control tries to download two files from the site specified within the 'url' property. One of these files it will be stored in a temporary directory and executed.
Tags: client vpn control cisco-anyconnect vpn-client activex-control attacker

8:38
Cisco AnyConnect VPN Client ActiveX URL Property Download and Execute
» ‎ Packet Storm Security Recent Files

This Metasploit module exploits a vulnerability in the Cisco AnyConnect VPN client vpnweb.ocx ActiveX control. This control is typically used to install the VPN client. An attacker can set the 'url' property which is where the control tries to locate the files needed to install the client. The control tries to download two files from the site specified within the 'url' property. One of these files it will be stored in a temporary directory and executed.
Tags: client vpn control cisco-anyconnect vpn-client activex-control attacker

8:38
Cisco AnyConnect VPN Client ActiveX URL Property Download and Execute
» ‎ Packet Storm Security Misc. Files

This Metasploit module exploits a vulnerability in the Cisco AnyConnect VPN client vpnweb.ocx ActiveX control. This control is typically used to install the VPN client. An attacker can set the 'url' property which is where the control tries to locate the files needed to install the client. The control tries to download two files from the site specified within the 'url' property. One of these files it will be stored in a temporary directory and executed.
Tags: client vpn control cisco-anyconnect vpn-client activex-control attacker

June 01, 2011
17:29
Ubuntu Security Notice USN-1142-1
» ‎ Packet Storm Security Advisories

Ubuntu Security Notice 1142-1 - Henne Vogelsang discovered that under certain PolicyKit configurations, GDM could be made to launch a browser. A local attacker could exploit this to gain access to files with the privileges of the gdm user. PolicyKit is not configured in this manner in Ubuntu by default.
Tags: ubuntu notice security security-notice attacker usn

17:29
Ubuntu Security Notice USN-1142-1
» ‎ Packet Storm Security Recent Files

Ubuntu Security Notice 1142-1 - Henne Vogelsang discovered that under certain PolicyKit configurations, GDM could be made to launch a browser. A local attacker could exploit this to gain access to files with the privileges of the gdm user. PolicyKit is not configured in this manner in Ubuntu by default.
Tags: ubuntu notice security security-notice attacker usn

17:29
Ubuntu Security Notice USN-1142-1
» ‎ Packet Storm Security Misc. Files

Ubuntu Security Notice 1142-1 - Henne Vogelsang discovered that under certain PolicyKit configurations, GDM could be made to launch a browser. A local attacker could exploit this to gain access to files with the privileges of the gdm user. PolicyKit is not configured in this manner in Ubuntu by default.
Tags: ubuntu notice security security-notice attacker usn

May 31, 2011
23:00
Ubuntu Security Notice USN-1140-2
» ‎ Packet Storm Security Advisories

Ubuntu Security Notice 1140-2 - USN-1140-1 fixed vulnerabilities in PAM. A regression was found that caused cron to stop working with a "Module is unknown" error. As a result, systems configured with automatic updates will not receive updates until cron is restarted, these updates are installed or the system is rebooted. This update fixes the problem. Marcus Granado discovered that PAM incorrectly handled configuration files with non-ASCII usernames. A remote attacker could use this flaw to cause a denial of service, or possibly obtain login access with a different users username. This issue only affected Ubuntu 8.04 LTS. It was discovered that the PAM pam_xauth, pam_env and pam_mail modules incorrectly handled dropping privileges when performing operations. A local attacker could use this flaw to read certain arbitrary files, and access other sensitive information. It was discovered that the PAM pam_namespace module incorrectly cleaned the environment during execution of the namespace.init script. A local attacker could use this flaw to possibly gain privileges. It was discovered that the PAM pam_xauth module incorrectly handled certain failures. A local attacker could use this flaw to delete certain unintended files. It was discovered that the PAM pam_xauth module incorrectly verified certain file properties. A local attacker could use this flaw to cause a denial of service.
Tags: pam attacker flaw marcus-granado pam-pam xauth denial-of-service

23:00
Ubuntu Security Notice USN-1140-2
» ‎ Packet Storm Security Recent Files

Ubuntu Security Notice 1140-2 - USN-1140-1 fixed vulnerabilities in PAM. A regression was found that caused cron to stop working with a "Module is unknown" error. As a result, systems configured with automatic updates will not receive updates until cron is restarted, these updates are installed or the system is rebooted. This update fixes the problem. Marcus Granado discovered that PAM incorrectly handled configuration files with non-ASCII usernames. A remote attacker could use this flaw to cause a denial of service, or possibly obtain login access with a different users username. This issue only affected Ubuntu 8.04 LTS. It was discovered that the PAM pam_xauth, pam_env and pam_mail modules incorrectly handled dropping privileges when performing operations. A local attacker could use this flaw to read certain arbitrary files, and access other sensitive information. It was discovered that the PAM pam_namespace module incorrectly cleaned the environment during execution of the namespace.init script. A local attacker could use this flaw to possibly gain privileges. It was discovered that the PAM pam_xauth module incorrectly handled certain failures. A local attacker could use this flaw to delete certain unintended files. It was discovered that the PAM pam_xauth module incorrectly verified certain file properties. A local attacker could use this flaw to cause a denial of service.
Tags: pam attacker flaw marcus-granado pam-pam xauth denial-of-service

23:00
Ubuntu Security Notice USN-1140-2
» ‎ Packet Storm Security Misc. Files

Ubuntu Security Notice 1140-2 - USN-1140-1 fixed vulnerabilities in PAM. A regression was found that caused cron to stop working with a "Module is unknown" error. As a result, systems configured with automatic updates will not receive updates until cron is restarted, these updates are installed or the system is rebooted. This update fixes the problem. Marcus Granado discovered that PAM incorrectly handled configuration files with non-ASCII usernames. A remote attacker could use this flaw to cause a denial of service, or possibly obtain login access with a different users username. This issue only affected Ubuntu 8.04 LTS. It was discovered that the PAM pam_xauth, pam_env and pam_mail modules incorrectly handled dropping privileges when performing operations. A local attacker could use this flaw to read certain arbitrary files, and access other sensitive information. It was discovered that the PAM pam_namespace module incorrectly cleaned the environment during execution of the namespace.init script. A local attacker could use this flaw to possibly gain privileges. It was discovered that the PAM pam_xauth module incorrectly handled certain failures. A local attacker could use this flaw to delete certain unintended files. It was discovered that the PAM pam_xauth module incorrectly verified certain file properties. A local attacker could use this flaw to cause a denial of service.
Tags: pam attacker flaw marcus-granado pam-pam xauth denial-of-service

May 30, 2011
8:35
Ubuntu Security Notice USN-1140-1
» ‎ Packet Storm Security Advisories

Ubuntu Security Notice 1140-1 - Marcus Granado discovered that PAM incorrectly handled configuration files with non-ASCII usernames. A remote attacker could use this flaw to cause a denial of service, or possibly obtain login access with a different users username. This issue only affected Ubuntu 8.04 LTS. It was discovered that the PAM pam_xauth, pam_env and pam_mail modules incorrectly handled dropping privileges when performing operations. A local attacker could use this flaw to read certain arbitrary files, and access other sensitive information. It was discovered that the PAM pam_namespace module incorrectly cleaned the environment during execution of the namespace.init script. A local attacker could use this flaw to possibly gain privileges. It was discovered that the PAM pam_xauth module incorrectly handled certain failures. A local attacker could use this flaw to delete certain unintended files. It was discovered that the PAM pam_xauth module incorrectly verified certain file properties. A local attacker could use this flaw to cause a denial of service.
Tags: pam attacker flaw marcus-granado pam-pam xauth denial-of-service

8:35
Ubuntu Security Notice USN-1140-1
» ‎ Packet Storm Security Recent Files

Ubuntu Security Notice 1140-1 - Marcus Granado discovered that PAM incorrectly handled configuration files with non-ASCII usernames. A remote attacker could use this flaw to cause a denial of service, or possibly obtain login access with a different users username. This issue only affected Ubuntu 8.04 LTS. It was discovered that the PAM pam_xauth, pam_env and pam_mail modules incorrectly handled dropping privileges when performing operations. A local attacker could use this flaw to read certain arbitrary files, and access other sensitive information. It was discovered that the PAM pam_namespace module incorrectly cleaned the environment during execution of the namespace.init script. A local attacker could use this flaw to possibly gain privileges. It was discovered that the PAM pam_xauth module incorrectly handled certain failures. A local attacker could use this flaw to delete certain unintended files. It was discovered that the PAM pam_xauth module incorrectly verified certain file properties. A local attacker could use this flaw to cause a denial of service.
Tags: pam attacker flaw marcus-granado pam-pam xauth denial-of-service

8:35
Ubuntu Security Notice USN-1140-1
» ‎ Packet Storm Security Misc. Files

Ubuntu Security Notice 1140-1 - Marcus Granado discovered that PAM incorrectly handled configuration files with non-ASCII usernames. A remote attacker could use this flaw to cause a denial of service, or possibly obtain login access with a different users username. This issue only affected Ubuntu 8.04 LTS. It was discovered that the PAM pam_xauth, pam_env and pam_mail modules incorrectly handled dropping privileges when performing operations. A local attacker could use this flaw to read certain arbitrary files, and access other sensitive information. It was discovered that the PAM pam_namespace module incorrectly cleaned the environment during execution of the namespace.init script. A local attacker could use this flaw to possibly gain privileges. It was discovered that the PAM pam_xauth module incorrectly handled certain failures. A local attacker could use this flaw to delete certain unintended files. It was discovered that the PAM pam_xauth module incorrectly verified certain file properties. A local attacker could use this flaw to cause a denial of service.
Tags: pam attacker flaw marcus-granado pam-pam xauth denial-of-service

May 27, 2011
6:57
Ubuntu Security Notice USN-1138-1
» ‎ Packet Storm Security Advisories

Ubuntu Security Notice 1138-1 - It was discovered that DBus-GLib did not properly verify the access flag of exported GObject properties under certain circumstances. A local attacker could exploit this to bypass intended access restrictions or possibly cause a denial of service.
Tags: ubuntu notice security denial-of-service security-notice attacker

6:57
Ubuntu Security Notice USN-1138-1
» ‎ Packet Storm Security Recent Files

Ubuntu Security Notice 1138-1 - It was discovered that DBus-GLib did not properly verify the access flag of exported GObject properties under certain circumstances. A local attacker could exploit this to bypass intended access restrictions or possibly cause a denial of service.
Tags: ubuntu notice security denial-of-service security-notice attacker

6:57
Ubuntu Security Notice USN-1138-1
» ‎ Packet Storm Security Misc. Files

Ubuntu Security Notice 1138-1 - It was discovered that DBus-GLib did not properly verify the access flag of exported GObject properties under certain circumstances. A local attacker could exploit this to bypass intended access restrictions or possibly cause a denial of service.
Tags: ubuntu notice security denial-of-service security-notice attacker

May 25, 2011
18:46
Ubuntu Security Notice USN-1135-1
» ‎ Packet Storm Security Advisories

Ubuntu Security Notice 1135-1 - It was discovered that the Exim daemon did not correctly handle certain DKIM identities. A remote attacker could send specially crafted email to run arbitrary code as the Exim user.
Tags: ubuntu notice security arbitrary-code security-notice attacker

18:46
Ubuntu Security Notice USN-1135-1
» ‎ Packet Storm Security Recent Files

Ubuntu Security Notice 1135-1 - It was discovered that the Exim daemon did not correctly handle certain DKIM identities. A remote attacker could send specially crafted email to run arbitrary code as the Exim user.
Tags: ubuntu notice security arbitrary-code security-notice attacker

18:46
Ubuntu Security Notice USN-1135-1
» ‎ Packet Storm Security Misc. Files

Ubuntu Security Notice 1135-1 - It was discovered that the Exim daemon did not correctly handle certain DKIM identities. A remote attacker could send specially crafted email to run arbitrary code as the Exim user.
Tags: ubuntu notice security arbitrary-code security-notice attacker

May 23, 2011
7:25
Homepages Admin SQL Injection
» ‎ Packet Storm Security Exploits

Homepages Admin suffers from a remote SQL injection vulnerability that allows for authentication bypass. An attacker can then upload a php shell.
Tags: admin homepages sql php-shell sql-injection attacker

7:25
Homepages Admin SQL Injection
» ‎ Packet Storm Security Recent Files

Homepages Admin suffers from a remote SQL injection vulnerability that allows for authentication bypass. An attacker can then upload a php shell.
Tags: admin homepages sql php-shell sql-injection attacker

7:25
Homepages Admin SQL Injection
» ‎ Packet Storm Security Misc. Files

Homepages Admin suffers from a remote SQL injection vulnerability that allows for authentication bypass. An attacker can then upload a php shell.
Tags: admin homepages sql php-shell sql-injection attacker

May 16, 2011
19:26
Ubuntu Security Notice USN-1132-1
» ‎ Packet Storm Security Advisories

Ubuntu Security Notice 1132-1 - It was discovered that apturl incorrectly handled certain long URLs. If a user were tricked into opening a very long URL, an attacker could cause their desktop session to crash, leading to a denial of service.
Tags: ubuntu notice security denial-of-service security-notice attacker

Skip to page: 1 2

TOP RSS Atom Tentatively valid XHTML1.0, CSS2.0 Last Update: Fri 25 May 2012 05:04:15 AM PDT Jetlib

jetlib.sec » Tags » attacker

Feeds

451 items tagged "attacker"

Tags: ole openoffice documentsummaryinformation arbitrary-code-execution attacker overflow

Tags: ole openoffice documentsummaryinformation arbitrary-code-execution attacker overflow

Tags: ole openoffice documentsummaryinformation arbitrary-code-execution attacker overflow

Tags: foxit buffer reader arbitrary-code-execution based-buffer-overflow attacker

Tags: foxit buffer reader arbitrary-code-execution based-buffer-overflow attacker

Tags: foxit buffer reader arbitrary-code-execution based-buffer-overflow attacker

Tags: code pre webcalendar arbitrary-code-execution www-data attacker

Tags: code pre webcalendar arbitrary-code-execution www-data attacker

Tags: code pre webcalendar arbitrary-code-execution www-data attacker

Tags: project asterisk buffer project-security security-advisory attacker

Tags: project asterisk buffer project-security security-advisory attacker

Tags: project asterisk buffer project-security security-advisory attacker

Tags: proof-of-concept attacker version-6

Tags: request takeover liferay proof-of-concept attacker version-6

Tags: request takeover liferay proof-of-concept attacker version-6

Tags: attacker ubuntu puppet mac-os resource-exhaustion mac-os-x retrieval-requests

Tags: attacker ubuntu puppet mac-os resource-exhaustion mac-os-x retrieval-requests

Tags: attacker ubuntu puppet mac-os resource-exhaustion mac-os-x retrieval-requests

Tags: control netop remote based-buffer-overflow arbitrary-code attacker

Tags: ubuntu notice security security-notice attacker usn

Tags: security-notice attacker usn

Tags: ubuntu notice security security-notice attacker usn

Tags: attacker router Software mace cisco-ios cisco-security cisco-ios-software cisco-security-advisory free-software-updates

Tags: attacker router Software mace cisco-ios cisco-security cisco-ios-software cisco-security-advisory free-software-updates

Tags: attacker router Software mace cisco-ios cisco-security cisco-ios-software cisco-security-advisory free-software-updates

Tags: libtasn red der red-hat-security security-advisory attacker

Tags: libtasn red der red-hat-security security-advisory attacker

Tags: libtasn red der red-hat-security security-advisory attacker

Tags: user attacker svg dalili bob-clary willem-pinckaers svg-animations application-crash memory-safety

Tags: user attacker svg dalili bob-clary willem-pinckaers svg-animations application-crash memory-safety

Tags: user attacker svg dalili bob-clary willem-pinckaers svg-animations application-crash memory-safety

Tags: attacker ubuntu firefox dalili svg-animations soroush

Tags: attacker ubuntu firefox dalili svg-animations soroush

Tags: attacker ubuntu firefox dalili svg-animations soroush

Tags: vulnerability denial arcserve denial-of-service network-requests attacker

Tags: vulnerability denial arcserve denial-of-service network-requests attacker

Tags: vulnerability denial arcserve denial-of-service network-requests attacker

Tags: user attacker svg svg-animations application-crash denial-of-service

Tags: user attacker svg svg-animations application-crash denial-of-service

Tags: user attacker svg svg-animations application-crash denial-of-service

Tags: attacker ubuntu firefox dalili svg-animations javascript-links confidential-data

Tags: ubuntu notice security markus-vervier arbitrary-code security-notice attacker

Tags: ubuntu notice security markus-vervier arbitrary-code security-notice attacker

Tags: ubuntu notice security markus-vervier arbitrary-code security-notice attacker

Tags: drupal site link read-more read permission-access attacker java-script

Tags: drupal site link read-more read permission-access attacker java-script

Tags: drupal site link read-more read permission-access attacker java-script

Tags: ubuntu notice security certificate-name security-notice attacker

Tags: certificate-name security-notice attacker

Tags: certificate-name security-notice attacker

Tags: ubuntu puppet security security-notice attacker

Tags: ubuntu puppet security security-notice attacker

Tags: ubuntu puppet security security-notice attacker

Tags: ubuntu notice security unprivileged-users security-notice attacker

Tags: ubuntu notice security unprivileged-users security-notice attacker

Tags: ubuntu notice security j.-aedla gain-root-privileges security-notice attacker

Tags: ubuntu notice security j.-aedla gain-root-privileges security-notice attacker

Tags: usb wvdial modeswitch pppd arbitrary-files attacker

Tags: usb wvdial modeswitch pppd arbitrary-files attacker

Tags: pppd arbitrary-files attacker

Tags: attacker victim queue information-leaks traffic-load

Tags: attacker victim queue information-leaks traffic-load

Tags: inclusion phpmyadmin file attacker vulnerability

Tags: inclusion phpmyadmin file attacker vulnerability

Tags: inclusion phpmyadmin file attacker vulnerability

Tags: attacker ubuntu security nick-bowler gain-root-privileges message-digest-algorithm denial-of-service

Tags: attacker ubuntu security nick-bowler gain-root-privileges message-digest-algorithm denial-of-service

Tags: attacker ubuntu security nick-bowler gain-root-privileges message-digest-algorithm denial-of-service

Tags: execution authors attacker david-maynor usa maynor black-hat

Tags: attacker ubuntu security scot-doyle nick-bowler gain-root-privileges message-digest-algorithm denial-of-service

Tags: attacker ubuntu security scot-doyle nick-bowler gain-root-privileges message-digest-algorithm denial-of-service

Tags: attacker ubuntu security scot-doyle nick-bowler gain-root-privileges message-digest-algorithm denial-of-service

Tags: attacker ubuntu security nick-bowler gain-root-privileges message-digest-algorithm denial-of-service