jetlib.sec » Tags » function

Feeds

133354 items (0 unread) in 27 feeds

• 1337day (was: Inj3ct0r, 1337db)
• OSVDB Vulnerabilities
• Exploit-DB
• SecurityFocus Vulnerabilities
• Bugtraq
• Full Disclosure
• XSSed
• Packet Storm Security Headlines
• Packet Storm Security Advisories
• Packet Storm Security Exploits
• Packet Storm Security Recent Files
• Packet Storm Security Tools
• Packet Storm Security Misc. Files
• Sophos security news
• Sophos product advisories
• Penetration Testing
• SecuriTeam
• BackTrack Linux Forums
• Threatpost
• SecDocs
• carnal0wnage.attackresearch.com
• Carnal0wnage
• Kernel Fun
• Darknet
• The Exploitant
• Hack a Day
• Wirevolution

162 items tagged "function"

Related tags: socket [+], privilege escalation vulnerability [+], null pointer dereference [+], local privilege escalation [+], information disclosure vulnerability [+], ghostscript [+], libxslt [+], cups [+], rsyslog [+], pointer [+], png image [+], png format [+], parselegacysyslogmsg [+], mandriva [+], logrotate [+], information [+], hacks [+], function buffer overflow [+], david koblas [+], wordpress [+], type [+], postgresql [+], null pointer [+], integer overflow [+], index function [+], index [+], code [+], buffer overflows [+], arbitrary code execution [+], virdomaingetvcpus [+], ssl [+], sql [+], remote buffer overflow vulnerability [+], remote buffer overflow [+], openssl [+], libvirt [+], kssl [+], heap corruption [+], cupsfileopen [+], zero [+], x linux [+], writestate [+], userland [+], tgkill [+], spoof [+], sigqueue [+], shred file [+], shell metacharacters [+], pointer control [+], pointer array [+], pcvue [+], mac osx [+], mac os x [+], mac os [+], lzw [+], linux [+], libc [+], ldap [+], kerberos 5 [+], joe damato [+], idefense security advisory [+], hooking [+], getsymbol [+], filter image [+], filename [+], errprintf [+], enterprise authentication [+], dword value [+], buffer overflow [+], arbitrary code [+], adaptive server enterprise [+], buffer overflow vulnerability [+], zlib [+], winscard [+], validate [+], uninitialized pointer [+], tool [+], tiff image [+], tiff [+], sun jvm [+], stream length [+], strcut [+], segmentation fault [+], r. okajima [+], python [+], pdf [+], msgfunctiondemarshall [+], module [+], modrdn [+], message data [+], memory consumption [+], memory [+], mario mikocevic [+], invalid parameters [+], image [+], hash values [+], gfs [+], generator [+], gdip [+], function generators [+], function generator [+], data protector [+], dan rosenberg [+], clamav [+], chunk data [+], chris guo [+], call [+], buffer [+], brad spengler [+], bmp image [+], beta [+], attiny [+], apache http server [+], andre osterhues [+], agentx [+], adobe shockwave player [+], mandriva linux [+], vulnerability [+], xsltgenerateidfunction [+], xml [+], xcftools [+], xallocid [+], x.org [+], webkit [+], wave function [+], water droplets [+], water [+], video function [+], video [+], unexpected value [+], ulseterror [+], traq [+], style machines [+], sql injection [+], signal generators [+], signal [+], setsymbol [+], security weakness [+], security issue [+], security [+], sbin directory [+], root [+], remote [+], radiation detector [+], question [+], popen [+], plib [+], pip boy [+], pip [+], pidgin [+], phpdocumentor [+], php versions [+], php 5 [+], peripherals [+], mops [+], misc [+], message [+], memory information [+], memory corruption [+], memory copy [+], machine [+], logic function [+], logic [+], log message [+], log [+], lock key [+], lock [+], location [+], libxext [+], len [+], keyboard [+], java runtime environment [+], issue [+], ipwraw [+], invalid pointer [+], interruption [+], information leak [+], implicit declaration of function [+], html elements [+], home [+], heap memory [+], handy piece [+], gps sensor [+], glsa [+], gd extension [+], functiongenerator [+], format string [+], form [+], for [+], falling objects [+], extension [+], execcommand [+], error array [+], error [+], ergonomic keyboard [+], entertainment [+], drupal [+], dll [+], denial of service attacks [+], day [+], daniel [+], code execution [+], clipboard [+], clayout [+], bench [+], authors [+], authenticate [+], audio [+], array type [+], arpspoof [+], arp cache [+], arp [+], api [+], Software [+], Related [+], Newbie [+], Issues [+], BackTrack [+], Area [+], based buffer overflow [+], php [+], integer overflow vulnerability [+], integer [+], denial of service [+], bzip2 [+], bzip [+], stack buffer [+], png [+], libpng [+], service vulnerability [+]

• May 18, 2012
• 0:00

  Vuln: pidgin-otr 'log_message_cb()' Function Format String Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  pidgin-otr 'log_message_cb()' Function Format String Vulnerability

  Tags:  log function message pidgin format-string log-message  

• April 24, 2012
• 14:03

  PiP-Boy 2000 build goes for function over form

   » ‎ Hack a Day
    [Daniel] wrote in to tell us about his PIP-Boy 2000 prototype. While most PIP-Boy remakes we’ve seen tend to be focusing more on the aesthetic side, like a prop, [Daniel] is attempting to make a functional one. He has included a GPS sensor, RFID reader,  and radiation detector in his build but did choose [...]

  Tags:  function pip-boy form daniel pip radiation-detector gps-sensor home entertainment hacks  

• April 17, 2012
• 0:00

  Vuln: PHP 'socket_connect()' Function Stack Buffer Overflow Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  PHP 'socket_connect()' Function Stack Buffer Overflow Vulnerability

  Tags:  socket function php buffer-overflow-vulnerability stack-buffer  

• April 16, 2012
• 0:00

  Vuln: libpng 'png_inflate()' Function Heap Based Buffer Overflow Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  libpng 'png_inflate()' Function Heap Based Buffer Overflow Vulnerability

  Tags:  function libpng png buffer-overflow-vulnerability based-buffer-overflow  

• April 04, 2012
• 0:00

  Vuln: libpng 'png_inflate()' Function Heap Based Buffer Overflow Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  libpng 'png_inflate()' Function Heap Based Buffer Overflow Vulnerability

  Tags:  function libpng png buffer-overflow-vulnerability based-buffer-overflow  

• April 02, 2012
• 0:00

  Vuln: libpng 'png_inflate()' Function Heap Based Buffer Overflow Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  libpng 'png_inflate()' Function Heap Based Buffer Overflow Vulnerability

  Tags:  function libpng png buffer-overflow-vulnerability based-buffer-overflow  

• March 26, 2012
• 0:00

  Vuln: libpng 'png_inflate()' Function Heap Based Buffer Overflow Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  libpng 'png_inflate()' Function Heap Based Buffer Overflow Vulnerability

  Tags:  function libpng png buffer-overflow-vulnerability based-buffer-overflow  

• March 23, 2012
• 0:00

  Vuln: libpng 'png_inflate()' Function Heap Based Buffer Overflow Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  libpng 'png_inflate()' Function Heap Based Buffer Overflow Vulnerability

  Tags:  function libpng png buffer-overflow-vulnerability based-buffer-overflow  

• March 22, 2012
• 0:00

  Vuln: libpng 'png_inflate()' Function Heap Based Buffer Overflow Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  libpng 'png_inflate()' Function Heap Based Buffer Overflow Vulnerability

  Tags:  function libpng png buffer-overflow-vulnerability based-buffer-overflow  

• March 21, 2012
• 0:00

  Vuln: libpng 'png_inflate()' Function Heap Based Buffer Overflow Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  libpng 'png_inflate()' Function Heap Based Buffer Overflow Vulnerability

  Tags:  function libpng png buffer-overflow-vulnerability based-buffer-overflow  

• March 16, 2012
• 0:00

  Vuln: libpng 'png_inflate()' Function Heap Based Buffer Overflow Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  libpng 'png_inflate()' Function Heap Based Buffer Overflow Vulnerability

  Tags:  function libpng png buffer-overflow-vulnerability based-buffer-overflow  

• March 13, 2012
• 0:00

  Vuln: libpng 'png_inflate()' Function Heap Based Buffer Overflow Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  libpng 'png_inflate()' Function Heap Based Buffer Overflow Vulnerability

  Tags:  function libpng png buffer-overflow-vulnerability based-buffer-overflow  

• March 05, 2012
• 0:00

  Vuln: PLIB 'ulSetError()' Function Remote Buffer Overflow Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  PLIB 'ulSetError()' Function Remote Buffer Overflow Vulnerability

  Tags:  function ulseterror plib buffer-overflow-vulnerability remote-buffer-overflow-vulnerability remote-buffer-overflow  

• February 27, 2012
• 12:01

  Cheap and easy logic signal generator

   » ‎ Hack a Day
  While function generators or analog signal generators are ubiquitous in their utility, we haven’t seen much of logic function generators on Hack a Day. Luckily, [Dilshan] sent in a really neat 8-channel signal injector that is amazingly simple to build and comes with a great front end for editing patterns from your computer. The hardware portion of [...]

  Tags:  function logic signal function-generators signal-generators logic-function tool hacks  

• February 08, 2012
• 14:01

  Attiny25 Based Function Generator Causes a Wave

   » ‎ Hack a Day
  Function generators are a handy bench tool to have around, and while you can usually cobble something together that works, it is much more handy to grab a device when you need it. Thats where this function generator sent to us by [Mohonri]comes in. Based around a ATTiny25 and a rail to rail op amp [...]

  Tags:  generator function attiny function-generators function-generator wave-function attiny hacks  

• February 07, 2012
• 0:00

  Vuln: Ghostscript 'gs_type2_interpret()' Function NULL Pointer Dereference Denial of Service Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  Ghostscript 'gs_type2_interpret()' Function NULL Pointer Dereference Denial of Service Vulnerability

  Tags:  ghostscript type function service-vulnerability null-pointer denial-of-service  

• February 06, 2012
• 0:00

  Vuln: Ghostscript 'gs_type2_interpret()' Function NULL Pointer Dereference Denial of Service Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  Ghostscript 'gs_type2_interpret()' Function NULL Pointer Dereference Denial of Service Vulnerability

  Tags:  ghostscript type function service-vulnerability null-pointer denial-of-service  

• February 03, 2012
• 0:00

  Vuln: Ghostscript 'gs_type2_interpret()' Function NULL Pointer Dereference Denial of Service Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  Ghostscript 'gs_type2_interpret()' Function NULL Pointer Dereference Denial of Service Vulnerability

  Tags:  ghostscript type function service-vulnerability null-pointer denial-of-service  

• January 31, 2012
• 0:00

  Vuln: PHP 'socket_connect()' Function Stack Buffer Overflow Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  PHP 'socket_connect()' Function Stack Buffer Overflow Vulnerability

  Tags:  socket function php buffer-overflow-vulnerability stack-buffer  

• January 07, 2012
• 8:01

  Remove Function Lock Key with a 4016 and a 555

   » ‎ Hack a Day
  Many companies today try to simplify life by over complicating the keyboard. Microsoft has been doing it since 2001. If you love your ergonomic keyboard, but hate that “function lock” key, there are plenty of options out there for you to try. The least complicated way is to either modify some XML or just set [...]

  Tags:  lock function keyboard ergonomic-keyboard lock-key xml peripherals hacks  

• January 04, 2012
• 0:00

  Vuln: Ghostscript 'gs_type2_interpret()' Function NULL Pointer Dereference Denial of Service Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  Ghostscript 'gs_type2_interpret()' Function NULL Pointer Dereference Denial of Service Vulnerability

  Tags:  ghostscript type function service-vulnerability null-pointer denial-of-service  

• December 20, 2011
• 0:00

  Vuln: PHP 'socket_connect()' Function Stack Buffer Overflow Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  PHP 'socket_connect()' Function Stack Buffer Overflow Vulnerability

  Tags:  socket function php buffer-overflow-vulnerability stack-buffer  

• December 13, 2011
• 0:00

  Vuln: Traq 'authenticate()' Function Remote Code Execution Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  Traq 'authenticate()' Function Remote Code Execution Vulnerability

  Tags:  traq function authenticate code-execution vulnerability  

• November 14, 2011
• 13:00

  Bugtraq: [ GLSA 201111-04 ] phpDocumentor: Function call injection

   » ‎ SecurityFocus Vulnerabilities
  [ GLSA 201111-04 ] phpDocumentor: Function call injection

  Tags:  phpdocumentor function glsa  

• November 04, 2011
• 14:06

  Mandriva Linux Security Advisory 2011-167

   » ‎ Packet Storm Security Advisories
  Mandriva Linux Security Advisory 2011-167 - A vulnerability has been discovered and corrected in gimp. The LZW decompressor in the LWZReadByte function in giftoppm.c in the David Koblas GIF decoder in PBMPLUS, as used in the gif_read_lzw function in filter/image-gif.c in CUPS before 1.4.7, the LZWReadByte function in plug-ins/common/file-gif-load.c in GIMP 2.6.11 and earlier, the LZWReadByte function in img/gifread.c in XPCE in SWI-Prolog 5.10.4 and earlier, and other products, does not properly handle code words that are absent from the decompression table when encountered, which allows remote attackers to trigger an infinite loop or a heap-based buffer overflow, and possibly execute arbitrary code, via a crafted compressed stream. The updated packages have been patched to correct these issues.

  Tags:  function mandriva linux david-koblas based-buffer-overflow mandriva-linux  

• 14:06

  Mandriva Linux Security Advisory 2011-167

   » ‎ Packet Storm Security Recent Files
  Mandriva Linux Security Advisory 2011-167 - A vulnerability has been discovered and corrected in gimp. The LZW decompressor in the LWZReadByte function in giftoppm.c in the David Koblas GIF decoder in PBMPLUS, as used in the gif_read_lzw function in filter/image-gif.c in CUPS before 1.4.7, the LZWReadByte function in plug-ins/common/file-gif-load.c in GIMP 2.6.11 and earlier, the LZWReadByte function in img/gifread.c in XPCE in SWI-Prolog 5.10.4 and earlier, and other products, does not properly handle code words that are absent from the decompression table when encountered, which allows remote attackers to trigger an infinite loop or a heap-based buffer overflow, and possibly execute arbitrary code, via a crafted compressed stream. The updated packages have been patched to correct these issues.

  Tags:  function mandriva linux david-koblas based-buffer-overflow mandriva-linux  

• 14:06

  Mandriva Linux Security Advisory 2011-167

   » ‎ Packet Storm Security Misc. Files
  Mandriva Linux Security Advisory 2011-167 - A vulnerability has been discovered and corrected in gimp. The LZW decompressor in the LWZReadByte function in giftoppm.c in the David Koblas GIF decoder in PBMPLUS, as used in the gif_read_lzw function in filter/image-gif.c in CUPS before 1.4.7, the LZWReadByte function in plug-ins/common/file-gif-load.c in GIMP 2.6.11 and earlier, the LZWReadByte function in img/gifread.c in XPCE in SWI-Prolog 5.10.4 and earlier, and other products, does not properly handle code words that are absent from the decompression table when encountered, which allows remote attackers to trigger an infinite loop or a heap-based buffer overflow, and possibly execute arbitrary code, via a crafted compressed stream. The updated packages have been patched to correct these issues.

  Tags:  function mandriva linux david-koblas based-buffer-overflow mandriva-linux  

• November 03, 2011
• 0:00

  Vuln: PHP 'socket_connect()' Function Stack Buffer Overflow Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  PHP 'socket_connect()' Function Stack Buffer Overflow Vulnerability

  Tags:  socket function php buffer-overflow-vulnerability stack-buffer  

• October 24, 2011
• 0:00

  Vuln: bzip2 'BZ2_decompress' Function Integer Overflow Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  bzip2 'BZ2_decompress' Function Integer Overflow Vulnerability

  Tags:  integer function bzip integer-overflow-vulnerability bzip2  

• October 22, 2011
• 19:59

  Mandriva Linux Security Advisory 2011-160

   » ‎ Packet Storm Security Advisories
  Mandriva Linux Security Advisory 2011-160 - The krb5_ldap_lockout_audit function in the Key Distribution Center 1.8 through 1.8.4 and 1.9 through 1.9.1, when the LDAP back end is used, allows remote attackers to cause a denial of service via unspecified vectors, related to the locked_check_p function. The lookup_lockout_policy function in the Key Distribution Center in MIT Kerberos 5 1.8 through 1.8.4 and 1.9 through 1.9.1, when the db2 or LDAP back end is used, allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via vectors that trigger certain process_as_req errors. The updated packages have been patched to correct these issues.

  Tags:  function mandriva ldap null-pointer-dereference kerberos-5 mandriva-linux  

• 19:59

  Mandriva Linux Security Advisory 2011-160

   » ‎ Packet Storm Security Recent Files
  Mandriva Linux Security Advisory 2011-160 - The krb5_ldap_lockout_audit function in the Key Distribution Center 1.8 through 1.8.4 and 1.9 through 1.9.1, when the LDAP back end is used, allows remote attackers to cause a denial of service via unspecified vectors, related to the locked_check_p function. The lookup_lockout_policy function in the Key Distribution Center in MIT Kerberos 5 1.8 through 1.8.4 and 1.9 through 1.9.1, when the db2 or LDAP back end is used, allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via vectors that trigger certain process_as_req errors. The updated packages have been patched to correct these issues.

  Tags:  function mandriva ldap null-pointer-dereference kerberos-5 mandriva-linux  

• 19:59

  Mandriva Linux Security Advisory 2011-160

   » ‎ Packet Storm Security Misc. Files
  Mandriva Linux Security Advisory 2011-160 - The krb5_ldap_lockout_audit function in the Key Distribution Center 1.8 through 1.8.4 and 1.9 through 1.9.1, when the LDAP back end is used, allows remote attackers to cause a denial of service via unspecified vectors, related to the locked_check_p function. The lookup_lockout_policy function in the Key Distribution Center in MIT Kerberos 5 1.8 through 1.8.4 and 1.9 through 1.9.1, when the db2 or LDAP back end is used, allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via vectors that trigger certain process_as_req errors. The updated packages have been patched to correct these issues.

  Tags:  function mandriva ldap null-pointer-dereference kerberos-5 mandriva-linux  

• October 17, 2011
• 7:52

  Mandriva Linux Security Advisory 2011-151

   » ‎ Packet Storm Security Advisories
  Mandriva Linux Security Advisory 2011-151 - Multiple vulnerabilities has been discovered and corrected in libpng. The png_format_buffer function in pngerror.c in libpng allows remote attackers to cause a denial of service via a crafted PNG image that triggers an out-of-bounds read during the copying of error-message data. Buffer overflow in libpng, when used by an application that calls the png_rgb_to_gray function but not the png_set_expand function, allows remote attackers to overwrite memory with an arbitrary amount of data, and possibly have unspecified other impact, via a crafted PNG image. Various other issues were also addressed.

  Tags:  function libpng png mandriva-linux png-image png-format  

• 7:52

  Mandriva Linux Security Advisory 2011-151

   » ‎ Packet Storm Security Advisories
  Mandriva Linux Security Advisory 2011-151 - Multiple vulnerabilities has been discovered and corrected in libpng. The png_format_buffer function in pngerror.c in libpng allows remote attackers to cause a denial of service via a crafted PNG image that triggers an out-of-bounds read during the copying of error-message data. Buffer overflow in libpng, when used by an application that calls the png_rgb_to_gray function but not the png_set_expand function, allows remote attackers to overwrite memory with an arbitrary amount of data, and possibly have unspecified other impact, via a crafted PNG image. Various other issues were also addressed.

  Tags:  function libpng png mandriva-linux png-image png-format  

• 7:52

  Mandriva Linux Security Advisory 2011-151

   » ‎ Packet Storm Security Recent Files
  Mandriva Linux Security Advisory 2011-151 - Multiple vulnerabilities has been discovered and corrected in libpng. The png_format_buffer function in pngerror.c in libpng allows remote attackers to cause a denial of service via a crafted PNG image that triggers an out-of-bounds read during the copying of error-message data. Buffer overflow in libpng, when used by an application that calls the png_rgb_to_gray function but not the png_set_expand function, allows remote attackers to overwrite memory with an arbitrary amount of data, and possibly have unspecified other impact, via a crafted PNG image. Various other issues were also addressed.

  Tags:  function libpng png mandriva-linux png-image png-format  

• 7:52

  Mandriva Linux Security Advisory 2011-151

   » ‎ Packet Storm Security Recent Files
  Mandriva Linux Security Advisory 2011-151 - Multiple vulnerabilities has been discovered and corrected in libpng. The png_format_buffer function in pngerror.c in libpng allows remote attackers to cause a denial of service via a crafted PNG image that triggers an out-of-bounds read during the copying of error-message data. Buffer overflow in libpng, when used by an application that calls the png_rgb_to_gray function but not the png_set_expand function, allows remote attackers to overwrite memory with an arbitrary amount of data, and possibly have unspecified other impact, via a crafted PNG image. Various other issues were also addressed.

  Tags:  function libpng png mandriva-linux png-image png-format  

• 7:52

  Mandriva Linux Security Advisory 2011-151

   » ‎ Packet Storm Security Misc. Files
  Mandriva Linux Security Advisory 2011-151 - Multiple vulnerabilities has been discovered and corrected in libpng. The png_format_buffer function in pngerror.c in libpng allows remote attackers to cause a denial of service via a crafted PNG image that triggers an out-of-bounds read during the copying of error-message data. Buffer overflow in libpng, when used by an application that calls the png_rgb_to_gray function but not the png_set_expand function, allows remote attackers to overwrite memory with an arbitrary amount of data, and possibly have unspecified other impact, via a crafted PNG image. Various other issues were also addressed.

  Tags:  function libpng png mandriva-linux png-image png-format  

• 7:52

  Mandriva Linux Security Advisory 2011-151

   » ‎ Packet Storm Security Misc. Files
  Mandriva Linux Security Advisory 2011-151 - Multiple vulnerabilities has been discovered and corrected in libpng. The png_format_buffer function in pngerror.c in libpng allows remote attackers to cause a denial of service via a crafted PNG image that triggers an out-of-bounds read during the copying of error-message data. Buffer overflow in libpng, when used by an application that calls the png_rgb_to_gray function but not the png_set_expand function, allows remote attackers to overwrite memory with an arbitrary amount of data, and possibly have unspecified other impact, via a crafted PNG image. Various other issues were also addressed.

  Tags:  function libpng png mandriva-linux png-image png-format  

• October 13, 2011
• 23:31

  PcVue 10.0 Function Pointer Overwrite

   » ‎ Packet Storm Security Exploits
  This Metasploit module exploits a function pointer control within SVUIGrd.ocx of PcVue 10.0. By setting a dword value for the SaveObject() or LoadObject(), an attacker can overwrite a function pointer and execute arbitrary code.

  Tags:  pointer function pcvue pointer-control dword-value arbitrary-code  

• 23:31

  PcVue 10.0 Function Pointer Overwrite

   » ‎ Packet Storm Security Exploits
  This Metasploit module exploits a function pointer control within SVUIGrd.ocx of PcVue 10.0. By setting a dword value for the SaveObject() or LoadObject(), an attacker can overwrite a function pointer and execute arbitrary code.

  Tags:  pointer function pcvue pointer-control dword-value arbitrary-code  

• 23:31

  PcVue 10.0 Function Pointer Overwrite

   » ‎ Packet Storm Security Misc. Files
  This Metasploit module exploits a function pointer control within SVUIGrd.ocx of PcVue 10.0. By setting a dword value for the SaveObject() or LoadObject(), an attacker can overwrite a function pointer and execute arbitrary code.

  Tags:  pointer function pcvue pointer-control dword-value arbitrary-code  

• October 10, 2011
• 15:39

  Mandriva Linux Security Advisory 2011-146

   » ‎ Packet Storm Security Advisories
  Mandriva Linux Security Advisory 2011-146 - The cupsDoAuthentication function in auth.c in the client in CUPS before 1.4.4, when HAVE_GSSAPI is omitted, does not properly handle a demand for authorization, which allows remote CUPS servers to cause a denial of service via HTTP_UNAUTHORIZED responses. The LZW decompressor in the LWZReadByte function in giftoppm.c in the David Koblas GIF decoder in PBMPLUS, as used in the gif_read_lzw function in filter/image-gif.c in CUPS before 1.4.7, the LZWReadByte function in plug-ins/common/file-gif-load.c in GIMP 2.6.11 and earlier, the LZWReadByte function in img/gifread.c in XPCE in SWI-Prolog 5.10.4 and earlier, and other products, does not properly handle code words that are absent from the decompression table when encountered, which allows remote attackers to trigger an infinite loop or a heap-based buffer overflow, and possibly execute arbitrary code, via a crafted compressed stream, a related issue to and CVE-2011-2895. The gif_read_lzw function in filter/image-gif.c in CUPS 1.4.8 and earlier does not properly handle the first code word in an LZW stream, which allows remote attackers to trigger a heap-based buffer overflow, and possibly execute arbitrary code, via a crafted stream, a different vulnerability than CVE-2011-2896.

  Tags:  function cups lzw david-koblas based-buffer-overflow mandriva-linux filter-image  

• 15:39

  Mandriva Linux Security Advisory 2011-146

   » ‎ Packet Storm Security Recent Files
  Mandriva Linux Security Advisory 2011-146 - The cupsDoAuthentication function in auth.c in the client in CUPS before 1.4.4, when HAVE_GSSAPI is omitted, does not properly handle a demand for authorization, which allows remote CUPS servers to cause a denial of service via HTTP_UNAUTHORIZED responses. The LZW decompressor in the LWZReadByte function in giftoppm.c in the David Koblas GIF decoder in PBMPLUS, as used in the gif_read_lzw function in filter/image-gif.c in CUPS before 1.4.7, the LZWReadByte function in plug-ins/common/file-gif-load.c in GIMP 2.6.11 and earlier, the LZWReadByte function in img/gifread.c in XPCE in SWI-Prolog 5.10.4 and earlier, and other products, does not properly handle code words that are absent from the decompression table when encountered, which allows remote attackers to trigger an infinite loop or a heap-based buffer overflow, and possibly execute arbitrary code, via a crafted compressed stream, a related issue to and CVE-2011-2895. The gif_read_lzw function in filter/image-gif.c in CUPS 1.4.8 and earlier does not properly handle the first code word in an LZW stream, which allows remote attackers to trigger a heap-based buffer overflow, and possibly execute arbitrary code, via a crafted stream, a different vulnerability than CVE-2011-2896.

  Tags:  function cups lzw david-koblas based-buffer-overflow mandriva-linux filter-image  

• 15:39

  Mandriva Linux Security Advisory 2011-146

   » ‎ Packet Storm Security Misc. Files
  Mandriva Linux Security Advisory 2011-146 - The cupsDoAuthentication function in auth.c in the client in CUPS before 1.4.4, when HAVE_GSSAPI is omitted, does not properly handle a demand for authorization, which allows remote CUPS servers to cause a denial of service via HTTP_UNAUTHORIZED responses. The LZW decompressor in the LWZReadByte function in giftoppm.c in the David Koblas GIF decoder in PBMPLUS, as used in the gif_read_lzw function in filter/image-gif.c in CUPS before 1.4.7, the LZWReadByte function in plug-ins/common/file-gif-load.c in GIMP 2.6.11 and earlier, the LZWReadByte function in img/gifread.c in XPCE in SWI-Prolog 5.10.4 and earlier, and other products, does not properly handle code words that are absent from the decompression table when encountered, which allows remote attackers to trigger an infinite loop or a heap-based buffer overflow, and possibly execute arbitrary code, via a crafted compressed stream, a related issue to and CVE-2011-2895. The gif_read_lzw function in filter/image-gif.c in CUPS 1.4.8 and earlier does not properly handle the first code word in an LZW stream, which allows remote attackers to trigger a heap-based buffer overflow, and possibly execute arbitrary code, via a crafted stream, a different vulnerability than CVE-2011-2896.

  Tags:  function cups lzw david-koblas based-buffer-overflow mandriva-linux filter-image  

• October 03, 2011
• 0:00

  Vuln: RSyslog 'parseLegacySyslogMsg()' Function Buffer Overflow Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  RSyslog 'parseLegacySyslogMsg()' Function Buffer Overflow Vulnerability

  Tags:  rsyslog function parselegacysyslogmsg buffer-overflow-vulnerability function-buffer-overflow  

• September 26, 2011
• 0:00

  Vuln: RSyslog 'parseLegacySyslogMsg()' Function Buffer Overflow Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  RSyslog 'parseLegacySyslogMsg()' Function Buffer Overflow Vulnerability

  Tags:  rsyslog function parselegacysyslogmsg buffer-overflow-vulnerability function-buffer-overflow  

• September 23, 2011
• 12:02

  Bugtraq: Security issue is_a function in PHP 5.3.7+

   » ‎ SecurityFocus Vulnerabilities
  Security issue is_a function in PHP 5.3.7+

  Tags:  function issue security security-issue php-5  

• September 19, 2011
• 0:00

  Vuln: PHP 'socket_connect()' Function Stack Buffer Overflow Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  PHP 'socket_connect()' Function Stack Buffer Overflow Vulnerability

  Tags:  socket function php buffer-overflow-vulnerability stack-buffer  

• 0:00

  Vuln: RSyslog 'parseLegacySyslogMsg()' Function Buffer Overflow Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  RSyslog 'parseLegacySyslogMsg()' Function Buffer Overflow Vulnerability

  Tags:  rsyslog function parselegacysyslogmsg buffer-overflow-vulnerability function-buffer-overflow  

• September 15, 2011
• 0:00

  Vuln: RSyslog 'parseLegacySyslogMsg()' Function Buffer Overflow Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  RSyslog 'parseLegacySyslogMsg()' Function Buffer Overflow Vulnerability

  Tags:  rsyslog function parselegacysyslogmsg buffer-overflow-vulnerability function-buffer-overflow  

• September 13, 2011
• 0:00

  Vuln: RSyslog 'parseLegacySyslogMsg()' Function Buffer Overflow Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  RSyslog 'parseLegacySyslogMsg()' Function Buffer Overflow Vulnerability

  Tags:  rsyslog function parselegacysyslogmsg buffer-overflow-vulnerability function-buffer-overflow  

• September 09, 2011
• 0:00

  Vuln: RSyslog 'parseLegacySyslogMsg()' Function Buffer Overflow Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  RSyslog 'parseLegacySyslogMsg()' Function Buffer Overflow Vulnerability

  Tags:  rsyslog function parselegacysyslogmsg buffer-overflow-vulnerability function-buffer-overflow  

• August 25, 2011
• 0:00

  Vuln: libvirt 'VirDomainGetVcpus()' Function Remote Integer Overflow Heap Corruption Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  libvirt 'VirDomainGetVcpus()' Function Remote Integer Overflow Heap Corruption Vulnerability

  Tags:  virdomaingetvcpus function libvirt heap-corruption integer-overflow vulnerability  

• 0:00

  Vuln: PHP 'socket_connect()' Function Stack Buffer Overflow Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  PHP 'socket_connect()' Function Stack Buffer Overflow Vulnerability

  Tags:  socket function php buffer-overflow-vulnerability stack-buffer  

• August 18, 2011
• 0:00

  Vuln: PHP 'socket_connect()' Function Stack Buffer Overflow Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  PHP 'socket_connect()' Function Stack Buffer Overflow Vulnerability

  Tags:  socket function php buffer-overflow-vulnerability stack-buffer  

• July 29, 2011
• 19:45

  Zero Day Initiative Advisory 11-245

   » ‎ Packet Storm Security Advisories
  Zero Day Initiative Advisory 11-245 - This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Sybase Adaptive Server Enterprise. Authentication is not required to exploit this vulnerability. The specific flaw exists within the way Sybase Backup and Monitor servers handle certain data in the login packets. Malformed packets can cause the service in question to lookup a function pointer outside a predefined function pointer array. It is possible to set this function pointer to an address where user controlled data exists and this will result in code execution under the rights of the user running the Monitor Server.

  Tags:  function zero pointer adaptive-server-enterprise pointer-array enterprise-authentication  

• 19:45

  Zero Day Initiative Advisory 11-245

   » ‎ Packet Storm Security Recent Files
  Zero Day Initiative Advisory 11-245 - This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Sybase Adaptive Server Enterprise. Authentication is not required to exploit this vulnerability. The specific flaw exists within the way Sybase Backup and Monitor servers handle certain data in the login packets. Malformed packets can cause the service in question to lookup a function pointer outside a predefined function pointer array. It is possible to set this function pointer to an address where user controlled data exists and this will result in code execution under the rights of the user running the Monitor Server.

  Tags:  function zero pointer adaptive-server-enterprise pointer-array enterprise-authentication  

• 19:45

  Zero Day Initiative Advisory 11-245

   » ‎ Packet Storm Security Misc. Files
  Zero Day Initiative Advisory 11-245 - This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Sybase Adaptive Server Enterprise. Authentication is not required to exploit this vulnerability. The specific flaw exists within the way Sybase Backup and Monitor servers handle certain data in the login packets. Malformed packets can cause the service in question to lookup a function pointer outside a predefined function pointer array. It is possible to set this function pointer to an address where user controlled data exists and this will result in code execution under the rights of the user running the Monitor Server.

  Tags:  function zero pointer adaptive-server-enterprise pointer-array enterprise-authentication  

• July 28, 2011
• 0:00

  Vuln: libvirt 'VirDomainGetVcpus()' Function Remote Integer Overflow Heap Corruption Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  libvirt 'VirDomainGetVcpus()' Function Remote Integer Overflow Heap Corruption Vulnerability

  Tags:  virdomaingetvcpus function libvirt heap-corruption integer-overflow vulnerability  

• July 22, 2011
• 0:00

  Vuln: bzip2 'BZ2_decompress' Function Integer Overflow Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  bzip2 'BZ2_decompress' Function Integer Overflow Vulnerability

  Tags:  integer function bzip integer-overflow-vulnerability bzip2  

• 0:00

  Vuln: libvirt 'VirDomainGetVcpus()' Function Remote Integer Overflow Heap Corruption Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  libvirt 'VirDomainGetVcpus()' Function Remote Integer Overflow Heap Corruption Vulnerability

  Tags:  virdomaingetvcpus function libvirt heap-corruption integer-overflow vulnerability  

• July 21, 2011
• 0:00

  Vuln: libxslt 'generate-id()' Function Information Disclosure Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  libxslt 'generate-id()' Function Information Disclosure Vulnerability

  Tags:  function libxslt information information-disclosure-vulnerability  

• 0:00

  Vuln: logrotate 'writeState()' Function Logfile Name Local Denial of Service Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  logrotate 'writeState()' Function Logfile Name Local Denial of Service Vulnerability

  Tags:  writestate function logrotate service-vulnerability denial-of-service  

• July 19, 2011
• 0:00

  Vuln: libvirt 'VirDomainGetVcpus()' Function Remote Integer Overflow Heap Corruption Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  libvirt 'VirDomainGetVcpus()' Function Remote Integer Overflow Heap Corruption Vulnerability

  Tags:  virdomaingetvcpus function libvirt heap-corruption integer-overflow vulnerability  

• June 27, 2011
• 0:00

  Vuln: libxslt 'generate-id()' Function Information Disclosure Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  libxslt 'generate-id()' Function Information Disclosure Vulnerability

  Tags:  function libxslt information information-disclosure-vulnerability  

• June 21, 2011
• 0:00

  Vuln: PHP 'socket_connect()' Function Stack Buffer Overflow Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  PHP 'socket_connect()' Function Stack Buffer Overflow Vulnerability

  Tags:  socket function php buffer-overflow-vulnerability stack-buffer  

• June 08, 2011
• 11:01

  Machine precisely, methodically arranges water droplets

   » ‎ Hack a Day
  While some projects we feature are meant to perform a useful function or make life easier, others such as this art installation by [Pe Lang] are far less functional, but amazing nonetheless. Taking a cue from CNC-style machines, his creation is an experiment in falling objects and the properties of water. The machine methodically moves [...]

  Tags:  function machine water water-droplets style-machines falling-objects misc hacks  

• May 31, 2011
• 0:00

  Vuln: logrotate 'writeState()' Function Logfile Name Local Denial of Service Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  logrotate 'writeState()' Function Logfile Name Local Denial of Service Vulnerability

  Tags:  writestate function logrotate service-vulnerability denial-of-service  

• May 25, 2011
• 0:00

  Vuln: PHP 'socket_connect()' Function Stack Buffer Overflow Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  PHP 'socket_connect()' Function Stack Buffer Overflow Vulnerability

  Tags:  socket function php buffer-overflow-vulnerability stack-buffer  

• May 11, 2011
• 0:00

  Vuln: libxslt 'generate-id()' Function Information Disclosure Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  libxslt 'generate-id()' Function Information Disclosure Vulnerability

  Tags:  function libxslt information information-disclosure-vulnerability  

• May 10, 2011
• 0:00

  Vuln: libxslt 'generate-id()' Function Information Disclosure Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  libxslt 'generate-id()' Function Information Disclosure Vulnerability

  Tags:  function libxslt information information-disclosure-vulnerability  

• May 05, 2011
• 0:00

  Vuln: libxslt 'generate-id()' Function Information Disclosure Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  libxslt 'generate-id()' Function Information Disclosure Vulnerability

  Tags:  function libxslt information information-disclosure-vulnerability  

• May 03, 2011
• 0:00

  Vuln: libxslt 'generate-id()' Function Information Disclosure Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  libxslt 'generate-id()' Function Information Disclosure Vulnerability

  Tags:  function libxslt information information-disclosure-vulnerability  

• April 14, 2011
• 0:00

  Vuln: libxslt 'xsltGenerateIdFunction()' Function Heap Memory Information Disclosure Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  libxslt 'xsltGenerateIdFunction()' Function Heap Memory Information Disclosure Vulnerability

  Tags:  function xsltgenerateidfunction libxslt information-disclosure-vulnerability heap-memory memory-information  

• April 11, 2011
• 0:00

  Vuln: logrotate 'writeState()' Function Logfile Name Local Denial of Service Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  logrotate 'writeState()' Function Logfile Name Local Denial of Service Vulnerability

  Tags:  writestate function logrotate service-vulnerability denial-of-service  

• April 05, 2011
• 18:19

  Mandriva Linux Security Advisory 2011-065

   » ‎ Packet Storm Security Advisories
  Mandriva Linux Security Advisory 2011-065 - Race condition in the createOutputFile function in logrotate.c in logrotate 3.7.9 and earlier allows local users to read log data by opening a file before the intended permissions are in place. The shred_file function in logrotate.c in logrotate 3.7.9 and earlier might allow context-dependent attackers to execute arbitrary commands via shell metacharacters in a log filename, as demonstrated by a filename that is automatically constructed on the basis of a hostname or virtual machine name. The writeState function in logrotate.c in logrotate 3.7.9 and earlier might allow context-dependent attackers to cause a denial of service character in a log filename, as demonstrated by a filename that is automatically constructed on the basis of a hostname or virtual machine name.

  Tags:  function filename logrotate shred-file mandriva-linux shell-metacharacters  

• 18:19

  Mandriva Linux Security Advisory 2011-065

   » ‎ Packet Storm Security Recent Files
  Mandriva Linux Security Advisory 2011-065 - Race condition in the createOutputFile function in logrotate.c in logrotate 3.7.9 and earlier allows local users to read log data by opening a file before the intended permissions are in place. The shred_file function in logrotate.c in logrotate 3.7.9 and earlier might allow context-dependent attackers to execute arbitrary commands via shell metacharacters in a log filename, as demonstrated by a filename that is automatically constructed on the basis of a hostname or virtual machine name. The writeState function in logrotate.c in logrotate 3.7.9 and earlier might allow context-dependent attackers to cause a denial of service character in a log filename, as demonstrated by a filename that is automatically constructed on the basis of a hostname or virtual machine name.

  Tags:  function filename logrotate shred-file mandriva-linux shell-metacharacters  

• 18:19

  Mandriva Linux Security Advisory 2011-065

   » ‎ Packet Storm Security Misc. Files
  Mandriva Linux Security Advisory 2011-065 - Race condition in the createOutputFile function in logrotate.c in logrotate 3.7.9 and earlier allows local users to read log data by opening a file before the intended permissions are in place. The shred_file function in logrotate.c in logrotate 3.7.9 and earlier might allow context-dependent attackers to execute arbitrary commands via shell metacharacters in a log filename, as demonstrated by a filename that is automatically constructed on the basis of a hostname or virtual machine name. The writeState function in logrotate.c in logrotate 3.7.9 and earlier might allow context-dependent attackers to cause a denial of service character in a log filename, as demonstrated by a filename that is automatically constructed on the basis of a hostname or virtual machine name.

  Tags:  function filename logrotate shred-file mandriva-linux shell-metacharacters  

• March 31, 2011
• 0:00

  Vuln: bzip2 'BZ2_decompress' Function Integer Overflow Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  bzip2 'BZ2_decompress' Function Integer Overflow Vulnerability

  Tags:  integer function bzip integer-overflow-vulnerability bzip2  

• March 27, 2011
• 12:00

  Function generator built and mounted inside electronics bench

   » ‎ Hack a Day
  A function generator is a handy piece of test equipment to have on-site. [Kammenos] designed and built his own function generator, using the bench itself as the enclosure. You can see above that the control panel presents a clean finished look. To achieve it, [Kammenos] designed and printed the panel labels on a sheet of paper, [...]

  Tags:  generator function bench handy-piece function-generator functiongenerator tool hacks  

• March 22, 2011
• 22:33

  Libc sigqueue() Function TGKILL si_code Spoof

   » ‎ Packet Storm Security Advisories
  Libc's sigqueue() function has not been updated to mitigate spoofing of the TGKILL si_code. Because of this, userland is unable to trust the pid and uid information of a TKILL signal.

  Tags:  sigqueue function libc spoof userland tgkill  

• 22:33

  Libc sigqueue() Function TGKILL si_code Spoof

   » ‎ Packet Storm Security Recent Files
  Libc's sigqueue() function has not been updated to mitigate spoofing of the TGKILL si_code. Because of this, userland is unable to trust the pid and uid information of a TKILL signal.

  Tags:  sigqueue function libc spoof userland tgkill  

• 22:33

  Libc sigqueue() Function TGKILL si_code Spoof

   » ‎ Packet Storm Security Misc. Files
  Libc's sigqueue() function has not been updated to mitigate spoofing of the TGKILL si_code. Because of this, userland is unable to trust the pid and uid information of a TKILL signal.

  Tags:  sigqueue function libc spoof userland tgkill  

• March 17, 2011
• 0:00

  Vuln: CUPS 'cupsFileOpen' function Symlink Attack Local Privilege Escalation Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  CUPS 'cupsFileOpen' function Symlink Attack Local Privilege Escalation Vulnerability

  Tags:  function cupsfileopen cups privilege-escalation-vulnerability local-privilege-escalation  

• March 02, 2011
• 0:00

  Vuln: WebKit 'execCommand()' Function Clipboard Overwrite Security Weakness

   » ‎ SecurityFocus Vulnerabilities
  WebKit 'execCommand()' Function Clipboard Overwrite Security Weakness

  Tags:  webkit execcommand function security-weakness clipboard  

• February 09, 2011
• 0:00

  Vuln: PHP GD Extension 'imagepstext()' Function Stack Buffer Overflow Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  PHP GD Extension 'imagepstext()' Function Stack Buffer Overflow Vulnerability

  Tags:  function php extension buffer-overflow-vulnerability stack-buffer gd-extension  

• February 03, 2011
• 0:00

  Vuln: PHP 'mb_strcut()' Function Information Disclosure Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  PHP 'mb_strcut()' Function Information Disclosure Vulnerability

  Tags:  function strcut php information-disclosure-vulnerability  

• February 01, 2011
• 0:00

  Vuln: bzip2 'BZ2_decompress' Function Integer Overflow Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  bzip2 'BZ2_decompress' Function Integer Overflow Vulnerability

  Tags:  integer function bzip integer-overflow-vulnerability bzip2  

• January 31, 2011
• 21:25

  [Audio] Function Hooking for Mac OSX and Linux

   » ‎ SecDocs
  Authors: Joe Damato
  Tags: exploiting internals Mac OS X Linux
  Event: DEFCON 18
  

  Tags:  audio function hooking joe-damato x-linux mac-os mac-osx mac-os-x  

• 21:25

  [Video] Function Hooking for Mac OSX and Linux

   » ‎ SecDocs
  Authors: Joe Damato
  Tags: exploiting internals Mac OS X Linux
  Event: DEFCON 18
  

  Tags:  video function hooking joe-damato x-linux mac-os mac-osx mac-os-x video-function  

• 21:25

  [Slides] Function Hooking for Mac OSX and Linux

   » ‎ SecDocs
  Authors: Joe Damato
  Tags: exploiting internals Mac OS X Linux
  Event: DEFCON 18
  

  Tags:  authors function hooking joe-damato x-linux mac-os mac-osx mac-os-x  

• January 24, 2011
• 0:00

  Vuln: WordPress 'do_trackbacks()' Function SQL Injection Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  WordPress 'do_trackbacks()' Function SQL Injection Vulnerability

  Tags:  wordpress function sql vulnerability  

• January 12, 2011
• 0:00

  Vuln: PHP 'getSymbol()' Function Denial of Service Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  PHP 'getSymbol()' Function Denial of Service Vulnerability

  Tags:  getsymbol function php service-vulnerability denial-of-service  

• January 10, 2011
• 0:00

  Vuln: WordPress 'do_trackbacks()' Function SQL Injection Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  WordPress 'do_trackbacks()' Function SQL Injection Vulnerability

  Tags:  wordpress function sql vulnerability  

• January 06, 2011
• 0:00

  Vuln: WordPress 'do_trackbacks()' Function SQL Injection Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  WordPress 'do_trackbacks()' Function SQL Injection Vulnerability

  Tags:  wordpress function sql vulnerability  

• December 29, 2010
• 0:00

  Vuln: WordPress 'do_trackbacks()' Function SQL Injection Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  WordPress 'do_trackbacks()' Function SQL Injection Vulnerability

  Tags:  wordpress function sql vulnerability  

• December 15, 2010
• 0:00

  Vuln: PHP 'getSymbol()' Function Denial of Service Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  PHP 'getSymbol()' Function Denial of Service Vulnerability

  Tags:  getsymbol function php service-vulnerability denial-of-service  

• December 14, 2010
• 6:22

  iDEFENSE Security Advisory 2010-12-14.1

   » ‎ Packet Storm Security Advisories
  iDefense Security Advisory 12.14.10 - Remote exploitation of a memory corruption vulnerability in Microsoft Corp.'s Internet Explorer could allow an attacker to execute arbitrary code with the privileges of the current user. The vulnerability exists due to an uninitialized variable in the "CLayout::EnsureDispNode" method. This method is called to recalculate the location of various HTML elements within the page. This function passes a "CDispNodeInfo" object to another function, "CLayout::GetDispNodeInfo," which is supposed to initialize the object passed in; however, the function fails to properly initialize a flag's value that is used later to determine how many "extra" bytes to allocate for a heap buffer. This eventually leads to an undersized buffer being allocated to hold a "CDispClipNode" object in the "CLayout::EnsureDispNodeCore" function. The vulnerability manifests itself when the "CDispNode::SetUserClip" function attempts to use the invalid "extra size" to calculate an offset into the object and manipulate a bit at this location. This corrupts the objects VTABLE by setting the second bit to 1, which can lead to the execution of arbitrary code when this pointer is accessed later. Microsoft Internet Explorer 6, 7 and 8 are vulnerable.

  Tags:  function vulnerability clayout idefense-security-advisory memory-corruption html-elements  

• December 08, 2010
• 0:00

  Vuln: PHP 'setSymbol()' Function Denial of Service Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  PHP 'setSymbol()' Function Denial of Service Vulnerability

  Tags:  setsymbol function php service-vulnerability denial-of-service  

• December 07, 2010
• 0:00

  Vuln: bzip2 'BZ2_decompress' Function Integer Overflow Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  bzip2 'BZ2_decompress' Function Integer Overflow Vulnerability

  Tags:  integer function bzip integer-overflow-vulnerability bzip2  

• 0:00

  Vuln: PHP 'getSymbol()' Function Denial of Service Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  PHP 'getSymbol()' Function Denial of Service Vulnerability

  Tags:  getsymbol function php service-vulnerability denial-of-service  

• December 05, 2010
• 14:00

  [webapps / 0day] - Wordpress function do_trackbacks() SQL Injection Vulnerability

   » ‎ 1337day (was: Inj3ct0r, 1337db)
  [webapps / 0day] - Wordpress function do_trackbacks() SQL Injection Vulnerability

  Tags:  function day wordpress sql-injection vulnerability  

• November 29, 2010
• 0:00

  Vuln: bzip2 'BZ2_decompress' Function Integer Overflow Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  bzip2 'BZ2_decompress' Function Integer Overflow Vulnerability

  Tags:  integer function bzip integer-overflow-vulnerability bzip2  

• November 23, 2010
• 0:00

  Vuln: bzip2 'BZ2_decompress' Function Integer Overflow Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  bzip2 'BZ2_decompress' Function Integer Overflow Vulnerability

  Tags:  integer function bzip integer-overflow-vulnerability bzip2  

• November 22, 2010
• 0:00

  Vuln: bzip2 'BZ2_decompress' Function Integer Overflow Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  bzip2 'BZ2_decompress' Function Integer Overflow Vulnerability

  Tags:  integer function bzip integer-overflow-vulnerability bzip2  

• November 19, 2010
• 0:00

  Vuln: CUPS 'cupsFileOpen' function Symlink Attack Local Privilege Escalation Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  CUPS 'cupsFileOpen' function Symlink Attack Local Privilege Escalation Vulnerability

  Tags:  function cupsfileopen cups privilege-escalation-vulnerability local-privilege-escalation  

• November 09, 2010
• 0:00

  Vuln: PHP 'mb_strcut()' Function Information Disclosure Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  PHP 'mb_strcut()' Function Information Disclosure Vulnerability

  Tags:  function strcut php information-disclosure-vulnerability  

• November 08, 2010
• 0:00

  Vuln: Xcftools 'flattenIncrementally()' Function Remote Stack Buffer Overflow Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  Xcftools 'flattenIncrementally()' Function Remote Stack Buffer Overflow Vulnerability

  Tags:  function remote xcftools buffer-overflow-vulnerability stack-buffer  

• November 01, 2010
• 22:00

  MDVSA-2010-215.txt

   » ‎ Packet Storm Security Advisories
  Mandriva Linux Security Advisory 2010-215 - Buffer underflow in the rgbimg module in Python 2.5 allows remote attackers to cause a denial of service via a large ZSIZE value in a black-and-white RGB image that triggers an invalid pointer dereference. Integer overflow in rgbimgmodule.c in the rgbimg module in Python 2.5 allows remote attackers to have an unspecified impact via a large image that triggers a buffer overflow. Multiple buffer overflows in the RLE decoder in the rgbimg module in Python 2.5 allow remote attackers to have an unspecified impact via an image file containing crafted data that triggers improper processing within the expandrow function. The asyncore module in Python before 3.2 does not properly handle unsuccessful calls to the accept function, and does not have accompanying documentation describing how daemon applications should handle unsuccessful calls to the accept function, which makes it easier for remote attackers to conduct denial of service attacks that terminate these applications via network connections. Multiple race conditions in smtpd.py in the smtpd module in Python 2.6, 2.7, 3.1, and 3.2 alpha allow remote attackers to cause a denial of service by establishing and then immediately closing a TCP connection, leading to the accept function having an unexpected return value of None, an unexpected value of None for the address, or an ECONNABORTED, EAGAIN, or EWOULDBLOCK error, or the getpeername function having an ENOTCONN error, a related issue to CVE-2010-3492.

  Tags:  function python module invalid-pointer integer-overflow buffer-overflows  

• 22:00

  MDVSA-2010-216.txt

   » ‎ Packet Storm Security Advisories
  Mandriva Linux Security Advisory 2010-216 - The asyncore module in Python before 3.2 does not properly handle unsuccessful calls to the accept function, and does not have accompanying documentation describing how daemon applications should handle unsuccessful calls to the accept function, which makes it easier for remote attackers to conduct denial of service attacks that terminate these applications via network connections. Multiple race conditions in smtpd.py in the smtpd module in Python 2.6, 2.7, 3.1, and 3.2 alpha allow remote attackers to cause a denial of service by establishing and then immediately closing a TCP connection, leading to the accept function having an unexpected return value of None, an unexpected value of None for the address, or an ECONNABORTED, EAGAIN, or EWOULDBLOCK error, or the getpeername function having an ENOTCONN error, a related issue to CVE-2010-3492. The updated packages have been patched to correct these issues.

  Tags:  function python module denial-of-service-attacks unexpected-value denial-of-service  

• October 29, 2010
• 10:01

  secunia-aspdemx.txt

   » ‎ Packet Storm Security Recent Files
  Secunia Research has discovered a vulnerability in Adobe Shockwave Player, which may be exploited by malicious people to compromise a user's system. The vulnerability is caused by a logic error in TextXtra.x32 when parsing DEMX chunks. This can be exploited to cause a heap-based buffer overflow via a specially crafted Director file as a function does not reallocate a buffer to contain a section of data as expected, but another function to still copy chunk data into the insufficiently sized buffer. Successful exploitation allows execution of arbitrary code.

  Tags:  function vulnerability buffer adobe-shockwave-player based-buffer-overflow chunk-data  

• 10:01

  secunia-aspdemx.txt

   » ‎ Packet Storm Security Advisories
  Secunia Research has discovered a vulnerability in Adobe Shockwave Player, which may be exploited by malicious people to compromise a user's system. The vulnerability is caused by a logic error in TextXtra.x32 when parsing DEMX chunks. This can be exploited to cause a heap-based buffer overflow via a specially crafted Director file as a function does not reallocate a buffer to contain a section of data as expected, but another function to still copy chunk data into the insufficiently sized buffer. Successful exploitation allows execution of arbitrary code.

  Tags:  function vulnerability buffer adobe-shockwave-player based-buffer-overflow chunk-data  

• 0:00

  Vuln: CUPS 'cupsFileOpen' function Symlink Attack Local Privilege Escalation Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  CUPS 'cupsFileOpen' function Symlink Attack Local Privilege Escalation Vulnerability

  Tags:  function cupsfileopen cups privilege-escalation-vulnerability local-privilege-escalation  

• 0:00

  Vuln: bzip2 'BZ2_decompress' Function Integer Overflow Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  bzip2 'BZ2_decompress' Function Integer Overflow Vulnerability

  Tags:  integer function bzip integer-overflow-vulnerability bzip2  

• October 26, 2010
• 0:00

  Vuln: Ghostscript 'gs_type2_interpret()' Function NULL Pointer Dereference Denial of Service Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  Ghostscript 'gs_type2_interpret()' Function NULL Pointer Dereference Denial of Service Vulnerability

  Tags:  ghostscript type function service-vulnerability null-pointer denial-of-service  

• October 18, 2010
• 0:00

  Vuln: bzip2 'BZ2_decompress' Function Integer Overflow Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  bzip2 'BZ2_decompress' Function Integer Overflow Vulnerability

  Tags:  integer function bzip integer-overflow-vulnerability bzip2  

• October 06, 2010
• 0:00

  Vuln: bzip2 'BZ2_decompress' Function Integer Overflow Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  bzip2 'BZ2_decompress' Function Integer Overflow Vulnerability

  Tags:  integer function bzip integer-overflow-vulnerability bzip2  

• September 29, 2010
• 0:00

  Vuln: bzip2 'BZ2_decompress' Function Integer Overflow Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  bzip2 'BZ2_decompress' Function Integer Overflow Vulnerability

  Tags:  integer function bzip integer-overflow-vulnerability bzip2  

• September 27, 2010
• 0:00

  Vuln: bzip2 'BZ2_decompress' Function Integer Overflow Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  bzip2 'BZ2_decompress' Function Integer Overflow Vulnerability

  Tags:  integer function bzip integer-overflow-vulnerability bzip2  

• September 25, 2010
• 14:00

  MDVSA-2010-189.txt

   » ‎ Packet Storm Security Advisories
  Mandriva Linux Security Advisory 2010-189 - The MSGFunctionDemarshall function in winscard_svc.c in the PC/SC Smart Card daemon in MUSCLE PCSC-Lite before 1.5.4 might allow local users to cause a denial of service via crafted SCARD_SET_ATTRIB message data, which is improperly demarshalled and triggers a buffer over-read, a related issue to CVE-2010-0407. Buffer overflow in the MSGFunctionDemarshall function in winscard_svc.c in the PC/SC Smart Card daemon in MUSCLE PCSC-Lite 1.5.4 and earlier might allow local users to gain privileges via crafted this vulnerability exists because of an incorrect fix for CVE-2010-0407. Multiple buffer overflows in the MSGFunctionDemarshall function in winscard_svc.c in the PC/SC Smart Card daemon in MUSCLE PCSC-Lite before 1.5.4 allow local users to gain privileges via crafted message data, which is improperly demarshalled.

  Tags:  function msgfunctiondemarshall winscard buffer-overflows buffer-overflow message-data  

• 14:00

  MDVSA-2010-189-1.txt

   » ‎ Packet Storm Security Advisories
  Mandriva Linux Security Advisory 2010-189 - The MSGFunctionDemarshall function in winscard_svc.c in the PC/SC Smart Card daemon in MUSCLE PCSC-Lite before 1.5.4 might allow local users to cause a denial of service via crafted SCARD_SET_ATTRIB message data, which is improperly demarshalled and triggers a buffer over-read, a related issue to CVE-2010-0407. Buffer overflow in the MSGFunctionDemarshall function in winscard_svc.c in the PC/SC Smart Card daemon in MUSCLE PCSC-Lite 1.5.4 and earlier might allow local users to gain privileges via crafted this vulnerability exists because of an incorrect fix for CVE-2010-0407. Multiple buffer overflows in the MSGFunctionDemarshall function in winscard_svc.c in the PC/SC Smart Card daemon in MUSCLE PCSC-Lite before 1.5.4 allow local users to gain privileges via crafted message data, which is improperly demarshalled.

  Tags:  function msgfunctiondemarshall winscard buffer-overflows buffer-overflow message-data  

• September 24, 2010
• 0:00

  Vuln: bzip2 'BZ2_decompress' Function Integer Overflow Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  bzip2 'BZ2_decompress' Function Integer Overflow Vulnerability

  Tags:  integer function bzip integer-overflow-vulnerability bzip2  

• September 21, 2010
• 0:00

  Vuln: bzip2 'BZ2_decompress' Function Integer Overflow Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  bzip2 'BZ2_decompress' Function Integer Overflow Vulnerability

  Tags:  integer function bzip integer-overflow-vulnerability bzip2  

• September 20, 2010
• 0:00

  Vuln: bzip2 'BZ2_decompress' Function Integer Overflow Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  bzip2 'BZ2_decompress' Function Integer Overflow Vulnerability

  Tags:  integer function bzip integer-overflow-vulnerability bzip2  

• September 13, 2010
• 19:01

  ZDI-10-174.txt

   » ‎ Packet Storm Security Recent Files
  Zero Day Initiative Advisory 10-174 - This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Hewlett-Packard Data Protector. Authentication is not required to exploit this vulnerability. The specific flaw exists within the function DtbClsLogin defined in the module dpwindtb.dll on Windows and libdplindtb.so on Linux. This function takes user supplied input and copies it directly to a stack buffer. By providing a large enough string this buffer can be overrun and may result in arbitrary code execution dependent on the underlying operating system.

  Tags:  function code vulnerability arbitrary-code-execution stack-buffer data-protector  

• 19:00

  ZDI-10-174.txt

   » ‎ Packet Storm Security Advisories
  Zero Day Initiative Advisory 10-174 - This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Hewlett-Packard Data Protector. Authentication is not required to exploit this vulnerability. The specific flaw exists within the function DtbClsLogin defined in the module dpwindtb.dll on Windows and libdplindtb.so on Linux. This function takes user supplied input and copies it directly to a stack buffer. By providing a large enough string this buffer can be overrun and may result in arbitrary code execution dependent on the underlying operating system.

  Tags:  function code vulnerability arbitrary-code-execution stack-buffer data-protector  

• August 31, 2010
• 12:01

  MDVSA-2010-166.txt

   » ‎ Packet Storm Security Recent Files
  Mandriva Linux Security Advisory 2010-166 - Multiple integer overflows in libgdiplus 2.6.7, as used in Mono, allow attackers to execute arbitrary code via a crafted TIFF file, related to the gdip_load_tiff_image function in tiffcodec.c; a crafted JPEG file, related to the gdip_load_jpeg_image_internal function in jpegcodec.c; or a crafted BMP file, related to the gdip_read_bmp_image function in bmpcodec.c, leading to heap-based buffer overflows. The updated packages have been patched to correct this issue.

  Tags:  function image gdip tiff bmp-image buffer-overflows tiff-image  

• 12:00

  MDVSA-2010-166.txt

   » ‎ Packet Storm Security Advisories
  Mandriva Linux Security Advisory 2010-166 - Multiple integer overflows in libgdiplus 2.6.7, as used in Mono, allow attackers to execute arbitrary code via a crafted TIFF file, related to the gdip_load_tiff_image function in tiffcodec.c; a crafted JPEG file, related to the gdip_load_jpeg_image_internal function in jpegcodec.c; or a crafted BMP file, related to the gdip_read_bmp_image function in bmpcodec.c, leading to heap-based buffer overflows. The updated packages have been patched to correct this issue.

  Tags:  function image gdip tiff bmp-image buffer-overflows tiff-image  

• August 06, 2010
• 10:02

  USN-966-1.txt

   » ‎ Packet Storm Security Recent Files
  Ubuntu Security Notice 966-1 - Junjiro R. Okajima discovered that knfsd did not correctly handle strict overcommit. Chris Guo, Jukka Taimisto, and Olli Jarva discovered that SCTP did not correctly handle invalid parameters. A remote attacker could send specially crafted traffic that could crash the system, leading to a denial of service. Mario Mikocevic discovered that GFS2 did not correctly handle certain quota structures. Toshiyuki Okajima discovered that the kernel keyring did not correctly handle dead keyrings. Brad Spengler discovered that Sparc did not correctly implement non-executable stacks. This made userspace applications vulnerable to exploits that would have been otherwise blocked due to non-executable memory protections. Dan Rosenberg discovered that the btrfs clone function did not correctly validate permissions. Dan Rosenberg discovered that GFS2 set_flags function did not correctly validate permissions. Shi Weihua discovered that btrfs xattr_set_acl function did not correctly validate permissions. Andre Osterhues discovered that eCryptfs did not correctly calculate hash values.

  Tags:  function validate gfs brad-spengler andre-osterhues mario-mikocevic r.-okajima chris-guo dan-rosenberg invalid-parameters hash-values  

• 10:00

  USN-966-1.txt

   » ‎ Packet Storm Security Advisories
  Ubuntu Security Notice 966-1 - Junjiro R. Okajima discovered that knfsd did not correctly handle strict overcommit. Chris Guo, Jukka Taimisto, and Olli Jarva discovered that SCTP did not correctly handle invalid parameters. A remote attacker could send specially crafted traffic that could crash the system, leading to a denial of service. Mario Mikocevic discovered that GFS2 did not correctly handle certain quota structures. Toshiyuki Okajima discovered that the kernel keyring did not correctly handle dead keyrings. Brad Spengler discovered that Sparc did not correctly implement non-executable stacks. This made userspace applications vulnerable to exploits that would have been otherwise blocked due to non-executable memory protections. Dan Rosenberg discovered that the btrfs clone function did not correctly validate permissions. Dan Rosenberg discovered that GFS2 set_flags function did not correctly validate permissions. Shi Weihua discovered that btrfs xattr_set_acl function did not correctly validate permissions. Andre Osterhues discovered that eCryptfs did not correctly calculate hash values.

  Tags:  function validate gfs brad-spengler andre-osterhues mario-mikocevic r.-okajima chris-guo dan-rosenberg invalid-parameters hash-values  

• July 28, 2010
• 16:00

  MDVSA-2010-142.txt

   » ‎ Packet Storm Security Recent Files
  Mandriva Linux Security Advisory 2010-142 - The slap_modrdn2mods function in modrdn.c in OpenLDAP 2.4.22 does not check the return value of a call to the smr_normalize function, which allows remote attackers to cause a denial of service (segmentation fault) and possibly execute arbitrary code via a modrdn call with an RDN string containing invalid UTF-8 sequences, which triggers a free of an invalid, uninitialized pointer in the slap_mods_free function, as demonstrated using the Codenomicon LDAPv3 test suite. OpenLDAP 2.4.22 allows remote attackers to cause a denial of service via a modrdn call with a zero-length RDN destination string, which is not properly handled by the smr_normalize function and triggers a NULL pointer dereference in the IA5StringNormalize function in schema_init.c, as demonstrated using the Codenomicon LDAPv3 test suite.

  Tags:  function modrdn call null-pointer-dereference uninitialized-pointer segmentation-fault  

• 16:00

  MDVSA-2010-142.txt

   » ‎ Packet Storm Security Advisories
  Mandriva Linux Security Advisory 2010-142 - The slap_modrdn2mods function in modrdn.c in OpenLDAP 2.4.22 does not check the return value of a call to the smr_normalize function, which allows remote attackers to cause a denial of service (segmentation fault) and possibly execute arbitrary code via a modrdn call with an RDN string containing invalid UTF-8 sequences, which triggers a free of an invalid, uninitialized pointer in the slap_mods_free function, as demonstrated using the Codenomicon LDAPv3 test suite. OpenLDAP 2.4.22 allows remote attackers to cause a denial of service via a modrdn call with a zero-length RDN destination string, which is not properly handled by the smr_normalize function and triggers a NULL pointer dereference in the IA5StringNormalize function in schema_init.c, as demonstrated using the Codenomicon LDAPv3 test suite.

  Tags:  function modrdn call null-pointer-dereference uninitialized-pointer segmentation-fault  

• July 20, 2010
• 0:00

  Vuln: PostgreSQL Index Function Session State Modification Local Privilege Escalation Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  PostgreSQL Index Function Session State Modification Local Privilege Escalation Vulnerability

  Tags:  function index postgresql privilege-escalation-vulnerability index-function local-privilege-escalation  

• July 16, 2010
• 0:00

  Vuln: Ghostscript 'errprintf()' Function PDF Handling Remote Buffer Overflow Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  Ghostscript 'errprintf()' Function PDF Handling Remote Buffer Overflow Vulnerability

  Tags:  ghostscript errprintf function buffer-overflow-vulnerability remote-buffer-overflow remote-buffer-overflow-vulnerability  

• July 14, 2010
• 0:00

  Vuln: Ghostscript 'errprintf()' Function PDF Handling Remote Buffer Overflow Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  Ghostscript 'errprintf()' Function PDF Handling Remote Buffer Overflow Vulnerability

  Tags:  ghostscript errprintf function buffer-overflow-vulnerability remote-buffer-overflow remote-buffer-overflow-vulnerability  

• July 08, 2010
• 0:00

  Vuln: CUPS 'cupsFileOpen' function Symlink Attack Local Privilege Escalation Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  CUPS 'cupsFileOpen' function Symlink Attack Local Privilege Escalation Vulnerability

  Tags:  function cupsfileopen cups privilege-escalation-vulnerability local-privilege-escalation  

• June 03, 2010
• 0:00

  Vuln: PostgreSQL Index Function Session State Modification Local Privilege Escalation Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  PostgreSQL Index Function Session State Modification Local Privilege Escalation Vulnerability

  Tags:  function index postgresql privilege-escalation-vulnerability index-function local-privilege-escalation  

• May 30, 2010
• 1:00

  IP2location.dll v1.0.0.1 Function Initialize() Buffer Overflow

   » ‎ 1337day (was: Inj3ct0r, 1337db)
  IP2location.dll v1.0.0.1 Function Initialize() Buffer Overflow

  Tags:  dll function location buffer-overflow  

• May 27, 2010
• 19:01

  MDVSA-2010-110.txt

   » ‎ Packet Storm Security Recent Files
  Mandriva Linux Security Advisory 2010-110 - The cli_pdf function in libclamav/pdf.c in ClamAV before 0.96.1 allows remote attackers to cause a denial of service (crash) via a malformed PDF file, related to an inconsistency in the calculated stream length and the real stream length. Off-by-one error in the parseicon function in libclamav/pe_icons.c in ClamAV 0.96 allows remote attackers to cause a denial of service (crash) via a crafted PE icon that triggers an out-of-bounds read, related to improper rounding during scaling. This update provides clamav 0.96.1 which is not vulnerable to these issues.

  Tags:  function clamav pdf stream-length denial-of-service  

• 19:00

  MDVSA-2010-110.txt

   » ‎ Packet Storm Security Advisories
  Mandriva Linux Security Advisory 2010-110 - The cli_pdf function in libclamav/pdf.c in ClamAV before 0.96.1 allows remote attackers to cause a denial of service (crash) via a malformed PDF file, related to an inconsistency in the calculated stream length and the real stream length. Off-by-one error in the parseicon function in libclamav/pe_icons.c in ClamAV 0.96 allows remote attackers to cause a denial of service (crash) via a crafted PE icon that triggers an out-of-bounds read, related to improper rounding during scaling. This update provides clamav 0.96.1 which is not vulnerable to these issues.

  Tags:  function clamav pdf stream-length denial-of-service  

• May 25, 2010
• 22:01

  MOPS-2010-040.pdf

   » ‎ Packet Storm Security Recent Files
  Month Of PHP Security - PHP's strtr() function can be abused for information leak attacks, similar to all the other interruption exploits. However the interruption is not triggered inside the zend_parse_parameters() function and therefore another fix is required. PHP versions 5.2.13 and below and 5.3.2 and below are affected.

  Tags:  function php interruption information-leak php-versions mops  

• May 19, 2010
• 0:00

  Vuln: PostgreSQL Index Function Session State Modification Local Privilege Escalation Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  PostgreSQL Index Function Session State Modification Local Privilege Escalation Vulnerability

  Tags:  function index postgresql privilege-escalation-vulnerability index-function local-privilege-escalation  

• May 13, 2010
• 0:00

  Vuln: X.Org 'libxext' '_XAllocID' Function Denial of Service Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  X.Org 'libxext' '_XAllocID' Function Denial of Service Vulnerability

  Tags:  xallocid function libxext x.org service-vulnerability denial-of-service  

• April 20, 2010
• 9:00

  MDVSA-2010-076-1.txt

   » ‎ Packet Storm Security Recent Files
  Mandriva Linux Security Advisory 2010-076 - The ssl3_get_record function in ssl/s3_pkt.c in OpenSSL 0.9.8f through 0.9.8m allows remote attackers to cause a denial of service (crash) via a malformed record in a TLS connection. OpenSSL before 0.9.8m does not check for a NULL return value from bn_wexpand function calls which has unspecified impact and context-dependent attack vectors. The kssl_keytab_is_available function in ssl/kssl.c in OpenSSL before 0.9.8n, when Kerberos is enabled but Kerberos configuration files cannot be opened, could allow remote attackers to cause a denial of service (NULL pointer dereference and daemon crash). Finally, this update provides support for secure renegotiation, preventing men-in-the-middle attacks. Packages for 2008.0 and 2009.0 are provided due to the Extended Maintenance Program for those products. Packages for 2009.0 are provided due to the Extended Maintenance Program.

  Tags:  function openssl ssl null-pointer-dereference mandriva-linux kssl  

• 9:00

  MDVSA-2010-076-1.txt

   » ‎ Packet Storm Security Advisories
  Mandriva Linux Security Advisory 2010-076 - The ssl3_get_record function in ssl/s3_pkt.c in OpenSSL 0.9.8f through 0.9.8m allows remote attackers to cause a denial of service (crash) via a malformed record in a TLS connection. OpenSSL before 0.9.8m does not check for a NULL return value from bn_wexpand function calls which has unspecified impact and context-dependent attack vectors. The kssl_keytab_is_available function in ssl/kssl.c in OpenSSL before 0.9.8n, when Kerberos is enabled but Kerberos configuration files cannot be opened, could allow remote attackers to cause a denial of service (NULL pointer dereference and daemon crash). Finally, this update provides support for secure renegotiation, preventing men-in-the-middle attacks. Packages for 2008.0 and 2009.0 are provided due to the Extended Maintenance Program for those products. Packages for 2009.0 are provided due to the Extended Maintenance Program.

  Tags:  function openssl ssl null-pointer-dereference mandriva-linux kssl  

• April 19, 2010
• 14:00

  MDVSA-2010-076.txt

   » ‎ Packet Storm Security Recent Files
  Mandriva Linux Security Advisory 2010-076 - The ssl3_get_record function in ssl/s3_pkt.c in OpenSSL 0.9.8f through 0.9.8m allows remote attackers to cause a denial of service (crash) via a malformed record in a TLS connection. OpenSSL before 0.9.8m does not check for a NULL return value from bn_wexpand function calls which has unspecified impact and context-dependent attack vectors. The kssl_keytab_is_available function in ssl/kssl.c in OpenSSL before 0.9.8n, when Kerberos is enabled but Kerberos configuration files cannot be opened, could allow remote attackers to cause a denial of service (NULL pointer dereference and daemon crash). Finally, this update provides support for secure renegotiation, preventing men-in-the-middle attacks. Packages for 2008.0 and 2009.0 are provided due to the Extended Maintenance Program for those products.

  Tags:  function openssl ssl null-pointer-dereference mandriva-linux kssl  

• 14:00

  MDVSA-2010-076.txt

   » ‎ Packet Storm Security Advisories
  Mandriva Linux Security Advisory 2010-076 - The ssl3_get_record function in ssl/s3_pkt.c in OpenSSL 0.9.8f through 0.9.8m allows remote attackers to cause a denial of service (crash) via a malformed record in a TLS connection. OpenSSL before 0.9.8m does not check for a NULL return value from bn_wexpand function calls which has unspecified impact and context-dependent attack vectors. The kssl_keytab_is_available function in ssl/kssl.c in OpenSSL before 0.9.8n, when Kerberos is enabled but Kerberos configuration files cannot be opened, could allow remote attackers to cause a denial of service (NULL pointer dereference and daemon crash). Finally, this update provides support for secure renegotiation, preventing men-in-the-middle attacks. Packages for 2008.0 and 2009.0 are provided due to the Extended Maintenance Program for those products.

  Tags:  function openssl ssl null-pointer-dereference mandriva-linux kssl  

• April 16, 2010
• 20:00

  04.15.10-1.txt

   » ‎ Packet Storm Security Recent Files
  iDefense Security Advisory 04.15.10 - Remote exploitation of a stack-based buffer overflow vulnerability within AgentX++, as distributed with multiple vendors' products, allows attackers to execute arbitrary code with the privileges of the AgentX master process. This vulnerability exists within the AgentX::receive_agentx function. By sending multiple blocks of data to the vulnerable function, an attacker could overwrite the data following the stack buffer, including the saved return address.

  Tags:  function agentx vulnerability buffer-overflow-vulnerability based-buffer-overflow idefense-security-advisory  

• 20:00

  04.15.10-1.txt

   » ‎ Packet Storm Security Advisories
  iDefense Security Advisory 04.15.10 - Remote exploitation of a stack-based buffer overflow vulnerability within AgentX++, as distributed with multiple vendors' products, allows attackers to execute arbitrary code with the privileges of the AgentX master process. This vulnerability exists within the AgentX::receive_agentx function. By sending multiple blocks of data to the vulnerable function, an attacker could overwrite the data following the stack buffer, including the saved return address.

  Tags:  function agentx vulnerability buffer-overflow-vulnerability based-buffer-overflow idefense-security-advisory  

• April 15, 2010
• 0:00

  Vuln: PostgreSQL Index Function Session State Modification Local Privilege Escalation Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  PostgreSQL Index Function Session State Modification Local Privilege Escalation Vulnerability

  Tags:  function index postgresql privilege-escalation-vulnerability index-function local-privilege-escalation  

• April 05, 2010
• 19:52

  ZDI-10-061.txt

   » ‎ Packet Storm Security Recent Files
  Zero Day Initiative Advisory 10-061 - This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Sun's Java Runtime. User interaction is required to exploit this vulnerability in that the target must visit a malicious page. The specific flaw exists within the CMM module of the Sun JVM. This module contains a function readMabCurveData. An applet can indirectly call this function and provide it with a malicious curv object. The function trusts the size of the curv element implicitly and copies the data into a fixed-length stack buffer. Exploitation of this issue can lead to arbitrary code execution under the context of the user invoking the applet.

  Tags:  function code vulnerability arbitrary-code-execution stack-buffer sun-jvm  

• 19:52

  ZDI-10-059.txt

   » ‎ Packet Storm Security Advisories
  Zero Day Initiative Advisory 10-059 - This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Sun's Java Runtime Environment. User interaction is required to exploit this vulnerability in that the target must visit a malicious page. The specific flaw exists within a function responsible for creating a JPEG image encoder. The function makes an invalid assignment based on the value of the num_components element of a comp_info structure while parsing a JPEG file. It then improperly uses the original value while performing memory copy operations. By specifying certain values as the num_components field this can be exploited to gain arbitrary code execution by overflowing an undersized buffer on the heap.

  Tags:  function code vulnerability arbitrary-code-execution java-runtime-environment memory-copy  

• 19:52

  ZDI-10-061.txt

   » ‎ Packet Storm Security Advisories
  Zero Day Initiative Advisory 10-061 - This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Sun's Java Runtime. User interaction is required to exploit this vulnerability in that the target must visit a malicious page. The specific flaw exists within the CMM module of the Sun JVM. This module contains a function readMabCurveData. An applet can indirectly call this function and provide it with a malicious curv object. The function trusts the size of the curv element implicitly and copies the data into a fixed-length stack buffer. Exploitation of this issue can lead to arbitrary code execution under the context of the user invoking the applet.

  Tags:  function code vulnerability arbitrary-code-execution stack-buffer sun-jvm  

• March 31, 2010
• 0:17

  error in install ipwraw driver

   » ‎ remote-exploit & backtrack
  hey, i get some error when i try to install ipwraw driver
  i follow this tutorial:
  hxxp://aircrack-ng.org/doku.php?id=ipw3945&DokuWiki=fb9bdd44074999cc911a4 ec5f1bc5341
  
  (change it to "http")
  
  this is the error massage:
  [CODE]root@bt:~# cd ipwraw-ng
  root@bt:~/ipwraw-ng# make
  make -C /lib/modules/2.6.30.9/build M=/root/ipwraw-ng modules
  make[1]: Entering directory `/usr/src/linux-source-2.6.30.9'
  
  WARNING: Symbol version dump /usr/src/linux-source-2.6.30.9/Module.symvers
  is missing; modules will have no dependencies and modversions.
  
  CC [M] /root/ipwraw-ng/ipwraw.o
  /root/ipwraw-ng/ipwraw.c:43:27: error: net/ieee80211.h: No such file or director
  y
  In file included from /root/ipwraw-ng/ipwraw.h:51,
  from /root/ipwraw-ng/ipwraw.c:48:
  /root/ipwraw-ng/iwlwifi_hw.h:525: error: array type has incomplete element type
  /root/ipwraw-ng/iwlwifi_hw.h:847: error: array type has incomplete element type
  In file included from /root/ipwraw-ng/ipwraw.c:48:
  /root/ipwraw-ng/ipwraw.h:531: error: field ‘frame’ has incomplete type
  /root/ipwraw-ng/ipwraw.h:532: error: ‘IEEE80211_FRAME_LEN’ undeclared here (not
  in a function)
  /root/ipwraw-ng/ipwraw.c: In function ‘frame_get_hdrlen’:
  /root/ipwraw-ng/ipwraw.c:52: error: ‘IEEE80211_3ADDR_LEN’ undeclared (first use
  in this function)
  /root/ipwraw-ng/ipwraw.c:52: error: (Each undeclared identifier is reported only
  once
  /root/ipwraw-ng/ipwraw.c:52: error: for each function it appears in.)
  /root/ipwraw-ng/ipwraw.c:53: error: implicit declaration of function ‘WLAN_FC_GE
  T_STYPE’
  /root/ipwraw-ng/ipwraw.c:55: error: implicit declaration of function ‘WLAN_FC_GE
  T_TYPE’
  /root/ipwraw-ng/ipwraw.c:56: error: ‘IEEE80211_FTYPE_DATA’ undeclared (first use
  in this function)
  /root/ipwraw-ng/ipwraw.c:57: error: ‘IEEE80211_FCTL_FROMDS’ undeclared (first us
  e in this function)
  /root/ipwraw-ng/ipwraw.c:57: error: ‘IEEE80211_FCTL_TODS’ undeclared (first use
  in this function)
  /root/ipwraw-ng/ipwraw.c:58: error: ‘IEEE80211_4ADDR_LEN’ undeclared (first use
  in this function)
  /root/ipwraw-ng/ipwraw.c:59: error: ‘IEEE80211_STYPE_QOS_DATA’ undeclared (first
  use in this function)
  /root/ipwraw-ng/ipwraw.c:62: error: ‘IEEE80211_FTYPE_CTL’ undeclared (first use
  in this function)
  /root/ipwraw-ng/ipwraw.c:64: error: ‘IEEE80211_STYPE_CTS’ undeclared (first use
  in this function)
  /root/ipwraw-ng/ipwraw.c:65: error: ‘IEEE80211_STYPE_ACK’ undeclared (first use
  in this function)
  /root/ipwraw-ng/ipwraw.c:66: error: ‘IEEE80211_1ADDR_LEN’ undeclared (first use
  in this function)
  /root/ipwraw-ng/ipwraw.c:69: error: ‘IEEE80211_2ADDR_LEN’ undeclared (first use
  in this function)
  /root/ipwraw-ng/ipwraw.c: In function ‘is_channel_a_band’:
  /root/ipwraw-ng/ipwraw.c:1709: error: ‘IEEE80211_52GHZ_BAND’ undeclared (first u
  se in this function)
  /root/ipwraw-ng/ipwraw.c: In function ‘is_channel_bg_band’:
  /root/ipwraw-ng/ipwraw.c:1714: error: ‘IEEE80211_24GHZ_BAND’ undeclared (first u
  se in this function)
  /root/ipwraw-ng/ipwraw.c: In function ‘store_channel’:
  /root/ipwraw-ng/ipwraw.c:1878: error: ‘IEEE80211_52GHZ_BAND’ undeclared (first u
  se in this function)
  /root/ipwraw-ng/ipwraw.c:1884: error: ‘IEEE80211_24GHZ_BAND’ undeclared (first u
  se in this function)
  /root/ipwraw-ng/ipwraw.c: In function ‘store_band’:
  /root/ipwraw-ng/ipwraw.c:1926: error: ‘IEEE80211_24GHZ_BAND’ undeclared (first u
  se in this function)
  /root/ipwraw-ng/ipwraw.c:1927: error: ‘IEEE80211_52GHZ_BAND’ undeclared (first u
  se in this function)
  /root/ipwraw-ng/ipwraw.c: In function ‘ipw_get_channel_info’:
  /root/ipwraw-ng/ipwraw.c:3284: error: ‘IEEE80211_24GHZ_BAND’ undeclared (first u
  se in this function)
  /root/ipwraw-ng/ipwraw.c:3294: error: ‘IEEE80211_52GHZ_BAND’ undeclared (first u
  se in this function)
  /root/ipwraw-ng/ipwraw.c: In function ‘reg_get_chnl_grp_index’:
  /root/ipwraw-ng/ipwraw.c:3489: error: ‘IEEE80211_52GHZ_BAND’ undeclared (first u
  se in this function)
  /root/ipwraw-ng/ipwraw.c: In function ‘ipw_init_channel_map’:
  /root/ipwraw-ng/ipwraw.c:4111: error: ‘IEEE80211_24GHZ_BAND’ undeclared (first u
  se in this function)
  /root/ipwraw-ng/ipwraw.c:4112: error: ‘IEEE80211_52GHZ_BAND’ undeclared (first u
  se in this function)
  /root/ipwraw-ng/ipwraw.c: In function ‘ipw_post_alive_work’:
  /root/ipwraw-ng/ipwraw.c:4248: error: ‘IEEE80211_OFDM_DEFAULT_RATES_MASK’ undecl
  ared (first use in this function)
  /root/ipwraw-ng/ipwraw.c:4249: error: ‘IEEE80211_OFDM_BASIC_RATES_MASK’ undeclar
  ed (first use in this function)
  /root/ipwraw-ng/ipwraw.c:4250: error: ‘IEEE80211_CCK_DEFAULT_RATES_MASK’ undecla
  red (first use in this function)
  /root/ipwraw-ng/ipwraw.c:4251: error: ‘IEEE80211_CCK_BASIC_RATES_MASK’ undeclare
  d (first use in this function)
  /root/ipwraw-ng/ipwraw.c: In function ‘ipw_queue_tx_free_tfd’:
  /root/ipwraw-ng/ipwraw.c:5974: error: implicit declaration of function ‘ieee8021
  1_get_hdrlen’
  /root/ipwraw-ng/ipwraw.c:5974: error: dereferencing pointer to incomplete type
  /root/ipwraw-ng/ipwraw.c: In function ‘raw_rx’:
  /root/ipwraw-ng/ipwraw.c:6396: error: dereferencing pointer to incomplete type
  /root/ipwraw-ng/ipwraw.c:6406: error: ‘ETH_P_80211_RAW’ undeclared (first use in
  this function)
  /root/ipwraw-ng/ipwraw.c: At top level:
  /root/ipwraw-ng/ipwraw.c:6416: warning: ‘struct ieee80211_rx_stats’ declared ins
  ide parameter list
  /root/ipwraw-ng/ipwraw.c:6416: warning: its scope is only this definition or dec
  laration, which is probably not what you want
  /root/ipwraw-ng/ipwraw.c: In function ‘ipw_handle_data_packet’:
  /root/ipwraw-ng/ipwraw.c:6441: error: dereferencing pointer to incomplete type
  /root/ipwraw-ng/ipwraw.c: At top level:
  /root/ipwraw-ng/ipwraw.c:6456: warning: ‘struct ieee80211_hdr_4addr’ declared in
  side parameter list
  /root/ipwraw-ng/ipwraw.c: In function ‘is_duplicate_packet’:
  /root/ipwraw-ng/ipwraw.c:6458: error: dereferencing pointer to incomplete type
  /root/ipwraw-ng/ipwraw.c:6459: error: implicit declaration of function ‘WLAN_GET
  _SEQ_SEQ’
  /root/ipwraw-ng/ipwraw.c:6460: error: implicit declaration of function ‘WLAN_GET
  _SEQ_FRAG’
  /root/ipwraw-ng/ipwraw.c: In function ‘ipw_handle_promiscuous_tx’:
  /root/ipwraw-ng/ipwraw.c:6504: error: dereferencing pointer to incomplete type
  /root/ipwraw-ng/ipwraw.c:6504: error: ‘IEEE80211_FCTL_FTYPE’ undeclared (first u
  se in this function)
  /root/ipwraw-ng/ipwraw.c:6504: error: ‘IEEE80211_FTYPE_MGMT’ undeclared (first u
  se in this function)
  /root/ipwraw-ng/ipwraw.c:6509: error: dereferencing pointer to incomplete type
  /root/ipwraw-ng/ipwraw.c:6509: error: ‘IEEE80211_FTYPE_CTL’ undeclared (first us
  e in this function)
  /root/ipwraw-ng/ipwraw.c:6514: error: dereferencing pointer to incomplete type
  /root/ipwraw-ng/ipwraw.c:6514: error: ‘IEEE80211_FTYPE_DATA’ undeclared (first u
  se in this function)
  /root/ipwraw-ng/ipwraw.c:6522: error: dereferencing pointer to incomplete type
  /root/ipwraw-ng/ipwraw.c:6526: error: ‘IEEE80211_RADIOTAP_HDRLEN’ undeclared (fi
  rst use in this function)
  /root/ipwraw-ng/ipwraw.c:6540: error: ‘IEEE80211_52GHZ_BAND’ undeclared (first u
  se in this function)
  /root/ipwraw-ng/ipwraw.c: At top level:
  /root/ipwraw-ng/ipwraw.c:6563: warning: ‘struct ieee80211_rx_stats’ declared ins
  ide parameter list
  /root/ipwraw-ng/ipwraw.c: In function ‘ipw_handle_promiscuous_rx’:
  /root/ipwraw-ng/ipwraw.c:6618: error: dereferencing pointer to incomplete type
  /root/ipwraw-ng/ipwraw.c:6618: error: ‘IEEE80211_FCTL_FTYPE’ undeclared (first u
  se in this function)
  /root/ipwraw-ng/ipwraw.c:6618: error: ‘IEEE80211_FTYPE_MGMT’ undeclared (first u
  se in this function)
  /root/ipwraw-ng/ipwraw.c:6623: error: dereferencing pointer to incomplete type
  /root/ipwraw-ng/ipwraw.c:6623: error: ‘IEEE80211_FTYPE_CTL’ undeclared (first us
  e in this function)
  /root/ipwraw-ng/ipwraw.c:6628: error: dereferencing pointer to incomplete type
  /root/ipwraw-ng/ipwraw.c:6628: error: ‘IEEE80211_FTYPE_DATA’ undeclared (first u
  se in this function)
  /root/ipwraw-ng/ipwraw.c:6646: error: dereferencing pointer to incomplete type
  /root/ipwraw-ng/ipwraw.c: In function ‘ipw_handle_reply_rx’:
  /root/ipwraw-ng/ipwraw.c:6852: error: variable ‘stats’ has initializer but incom
  plete type
  /root/ipwraw-ng/ipwraw.c:6853: error: unknown field ‘rssi’ specified in initiali
  zer
  /root/ipwraw-ng/ipwraw.c:6853: warning: excess elements in struct initializer
  /root/ipwraw-ng/ipwraw.c:6853: warning: (near initialization for ‘stats’)
  /root/ipwraw-ng/ipwraw.c:6854: error: unknown field ‘signal’ specified in initia
  lizer
  /root/ipwraw-ng/ipwraw.c:6854: warning: excess elements in struct initializer
  /root/ipwraw-ng/ipwraw.c:6854: warning: (near initialization for ‘stats’)
  /root/ipwraw-ng/ipwraw.c:6855: error: unknown field ‘noise’ specified in initial
  izer
  /root/ipwraw-ng/ipwraw.c:6855: warning: excess elements in struct initializer
  /root/ipwraw-ng/ipwraw.c:6855: warning: (near initialization for ‘stats’)
  /root/ipwraw-ng/ipwraw.c:6856: error: unknown field ‘mac_time’ specified in init
  ializer
  /root/ipwraw-ng/ipwraw.c:6856: warning: excess elements in struct initializer
  /root/ipwraw-ng/ipwraw.c:6856: warning: (near initialization for ‘stats’)
  /root/ipwraw-ng/ipwraw.c:6857: error: unknown field ‘rate’ specified in initiali
  zer

  Tags:  function root ipwraw len error-array array-type implicit-declaration-of-function BackTrack Software Related Issues  

• March 08, 2010
• 0:00

  Vuln: PostgreSQL Index Function Session State Modification Local Privilege Escalation Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  PostgreSQL Index Function Session State Modification Local Privilege Escalation Vulnerability

  Tags:  function index postgresql privilege-escalation-vulnerability index-function local-privilege-escalation  

• March 06, 2010
• 15:00

  Drupal 6.15, 5.21 (API function drupal_goto) Open Redirect Vulnerability

   » ‎ 1337day (was: Inj3ct0r, 1337db)
  Drupal 6.15, 5.21 (API function drupal_goto) Open Redirect Vulnerability

  Tags:  function drupal api vulnerability  

• February 27, 2010
• 14:00

  py question for function

   » ‎ darkc0de
  py question for function

  Tags:  function question for  

• February 12, 2010
• 0:00

  Vuln: Ghostscript 'errprintf()' Function PDF Handling Remote Buffer Overflow Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  Ghostscript 'errprintf()' Function PDF Handling Remote Buffer Overflow Vulnerability

  Tags:  ghostscript errprintf function buffer-overflow-vulnerability remote-buffer-overflow remote-buffer-overflow-vulnerability  

• January 27, 2010
• 11:08

  arp.c compiling errors

   » ‎ remote-exploit & backtrack
  I have been trying to get the arpspoof working, instead of ettercap, on my eeepc 4g which I have installed Backtrack 3 on. I understand that the line for the interface in the arp.c file needs to be changed to ath0 instead of eth0. When using gcc to compile the arp.c to arp I receive several errors and a few warnings. I would like to correct these errors myself. As I have not done a lot of programming in C some of these errors are not clear to me how to resolve.
  
  I would appreciate any help with this, especially if you can point me in the right direction to learn how to fix the errors.
  
  I downloaded the current dsniff package on another machine and put the arp.c source file in the /sbin/ directory.
  
  When I run the command;
  
  >gcc arp.c arp
  
  I receive the following errors & warnings;
  
  arp.c:11:20: error: config.h: No such file or directory
  arp.c: In function 'arp_cache_lookup':
  arp.c:98: warning: incompatible implicit declaration of built-in function 'memset'
  arp.c:100: warning: incompatible implicit declaration of built-in function 'strncpy'
  arp.c:106:25: warning: null characters(s) ignored
  arp.c:106:287: warning: no newline at end of file
  arp.c:37:1: error: unterminated #else
  arp.c:106: error: 'AF_I' undeclared (first use in this function)
  arp.c:106: error: (Each undeclared identifier is reported only once
  arp.c:106: error: for each function it appears in.)
  arp.c:106: error: expected ')' at end of input
  arp.c:106: error: too few arguments to function 'socket'
  arp.c:106: error: expected declaration or statement at end of input
  
  I was wondering, also, if there was a difference between the source files I downloaded from dsniff and those used for the Backtrack 3 final usb? If so where would I be able to find just the arp.c file so I can change the appropriate line and recompile.
  
  I did download the new arpspoof.c file that supposedly will allow any interface to work. Upon compiling I received even more compiling errors and decided to just try and get arp.c with the corrected line working first.
  
  Thank you in advance for any assistance given.

  Tags:  function arp error arp-cache arpspoof sbin-directory Newbie Area  

• January 22, 2010
• 10:00

  popen function

   » ‎ darkc0de
  popen function

  Tags:  function popen  

• January 21, 2010
• 23:00

  MDVSA-2010-022.txt

   » ‎ Packet Storm Security Recent Files
  Mandriva Linux Security Advisory 2010-022 - Memory leak in the zlib_stateful_finish function in crypto/comp/c_zlib.c in OpenSSL 0.9.8l and earlier and 1.0.0 Beta through Beta 4 allows remote attackers to cause a denial of service (memory consumption) via vectors that trigger incorrect calls to the CRYPTO_free_all_ex_data function, as demonstrated by use of SSLv3 and PHP with the Apache HTTP Server, a related issue to CVE-2008-1678. Packages for 2008.0 are provided for Corporate Desktop 2008.0 customers. The updated packages have been patched to correct thies issue.

  Tags:  function zlib memory beta apache-http-server mandriva-linux memory-consumption  

• 23:00

  MDVSA-2010-022.txt

   » ‎ Packet Storm Security Advisories
  Mandriva Linux Security Advisory 2010-022 - Memory leak in the zlib_stateful_finish function in crypto/comp/c_zlib.c in OpenSSL 0.9.8l and earlier and 1.0.0 Beta through Beta 4 allows remote attackers to cause a denial of service (memory consumption) via vectors that trigger incorrect calls to the CRYPTO_free_all_ex_data function, as demonstrated by use of SSLv3 and PHP with the Apache HTTP Server, a related issue to CVE-2008-1678. Packages for 2008.0 are provided for Corporate Desktop 2008.0 customers. The updated packages have been patched to correct thies issue.

  Tags:  function zlib memory beta apache-http-server mandriva-linux memory-consumption