jetlib.sec » Tags » lib

Feeds

250505 items (0 unread) in 27 feeds

• 0day.today (was: 1337day, Inj3ct0r, 1337db)
• OSVDB Vulnerabilities
• Exploit-DB
• SecurityFocus Vulnerabilities
• Bugtraq
• Full Disclosure
• XSSed
• Packet Storm Security Headlines
• Packet Storm Security Advisories
• Packet Storm Security Exploits
• Packet Storm Security Recent Files
• Packet Storm Security Tools
• Packet Storm Security Misc. Files
• Sophos security news
• Sophos product advisories
• Penetration Testing
• SecuriTeam
• BackTrack Linux Forums
• Threatpost
• SecDocs
• carnal0wnage.attackresearch.com
• Carnal0wnage
• Kernel Fun
• Darknet
• The Exploitant
• Hack a Day
• Wirevolution

45 items tagged "lib"

Related tags: font metrics [+], code execution [+], based buffer overflow [+], red hat security [+], denial of service [+], bugtraq [+], xpdf [+], user [+], tex [+], tetex [+], target machine [+], red [+], proftpd [+], live [+], linux version [+], jonathan brossard [+], jon larimer [+], integer [+], heap corruption [+], ftpd [+], freebsd [+], font files [+], chroot [+], brossard [+], arbitrary code [+], viewvc [+], usr [+], ruby [+], mdvsa [+], invalid pointer [+], cross [+], application [+], Newbie [+], Area [+], wpa psk [+], win32 exe [+], type 1 fonts [+], subversion client [+], stack buffer [+], ssa [+], social engineering [+], security [+], scum bag [+], ruby ruby [+], remote file include vulnerability [+], remote [+], player [+], phpadsnew [+], pentest [+], parse [+], openads [+], null pointer [+], mitkrb [+], misc [+], metasploit [+], memory corruption [+], memory [+], library reader [+], language other than english [+], inc [+], hacks [+], gss api [+], framework [+], foreach [+], file [+], eio [+], dsa [+], downside [+], don [+], dmg [+], digital [+], csv [+], crunch crunch [+], core module [+], cmov [+], buffer overflow vulnerability [+], audio [+], asfheader [+], Supporto [+], Software [+], Pentesting [+], font [+], type [+], vulnerability [+]

• August 27, 2012
• 0:00

  Vuln: t1lib Type 1 Font Parsing Remote Code Execution Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  t1lib Type 1 Font Parsing Remote Code Execution Vulnerability

  Tags:  font type lib code-execution vulnerability  

• August 23, 2012
• 18:19

  Red Hat Security Advisory 2012-1201-01

   » ‎ Packet Storm Security Advisories
  Red Hat Security Advisory 2012-1201-01 - teTeX is an implementation of TeX. TeX takes a text file and a set of formatting commands as input, and creates a typesetter-independent DeVice Independent file as output. teTeX embeds a copy of t1lib to rasterize bitmaps from PostScript Type 1 fonts. The following issues affect t1lib code: Two heap-based buffer overflow flaws were found in the way t1lib processed Adobe Font Metrics files. If a specially-crafted font file was opened by teTeX, it could cause teTeX to crash or, potentially, execute arbitrary code with the privileges of the user running teTeX.

  Tags:  tetex red lib based-buffer-overflow font-metrics red-hat-security  

• 18:19

  Red Hat Security Advisory 2012-1201-01

   » ‎ Packet Storm Security Recent Files
  Red Hat Security Advisory 2012-1201-01 - teTeX is an implementation of TeX. TeX takes a text file and a set of formatting commands as input, and creates a typesetter-independent DeVice Independent file as output. teTeX embeds a copy of t1lib to rasterize bitmaps from PostScript Type 1 fonts. The following issues affect t1lib code: Two heap-based buffer overflow flaws were found in the way t1lib processed Adobe Font Metrics files. If a specially-crafted font file was opened by teTeX, it could cause teTeX to crash or, potentially, execute arbitrary code with the privileges of the user running teTeX.

  Tags:  tetex red lib based-buffer-overflow font-metrics red-hat-security  

• 18:19

  Red Hat Security Advisory 2012-1201-01

   » ‎ Packet Storm Security Misc. Files
  Red Hat Security Advisory 2012-1201-01 - teTeX is an implementation of TeX. TeX takes a text file and a set of formatting commands as input, and creates a typesetter-independent DeVice Independent file as output. teTeX embeds a copy of t1lib to rasterize bitmaps from PostScript Type 1 fonts. The following issues affect t1lib code: Two heap-based buffer overflow flaws were found in the way t1lib processed Adobe Font Metrics files. If a specially-crafted font file was opened by teTeX, it could cause teTeX to crash or, potentially, execute arbitrary code with the privileges of the user running teTeX.

  Tags:  tetex red lib based-buffer-overflow font-metrics red-hat-security  

• 17:00

  t1lib Type 1 Font Parsing Multiple Denial of Service Vulnerabilities UPDATED

   » ‎ SecuriTeam
  The 't1lib' library is prone to multiple remote denial-of-service vulnerabilities because it fails to properly parse Type 1 fonts.

  Tags:  font type lib type-1-fonts denial-of-service parse  

• August 16, 2012
• 8:00

  Bugtraq: [slackware-security] t1lib (SSA:2012-228-01)

   » ‎ SecurityFocus Vulnerabilities
  [slackware-security] t1lib (SSA:2012-228-01)

  Tags:  bugtraq ssa lib  

• 0:00

  Vuln: t1lib Type 1 Font Parsing Remote Code Execution Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  t1lib Type 1 Font Parsing Remote Code Execution Vulnerability

  Tags:  font type lib code-execution vulnerability  

• 0:00

  Vuln: t1lib Type 1 Font Parsing Multiple Denial of Service Vulnerabilities

   » ‎ SecurityFocus Vulnerabilities
  t1lib Type 1 Font Parsing Multiple Denial of Service Vulnerabilities

  Tags:  font type lib denial-of-service  

• July 18, 2012
• 5:01

  DMG Lib: Digital Mechanism and Gear Library

   » ‎ Hack a Day
  Reader, [klemens], suggested DMG Lib to us when we posted about a similar site. DMG-Lib is an amazing source of information. It’s primary downside is that a great portion of the text is in a language other than English, though in some ways this is a plus. Latin, Italian, German, and many other languages held the position [...]

  Tags:  digital lib dmg library-reader language-other-than-english downside misc hacks  

• February 17, 2012
• 0:00

  Vuln: t1lib Type 1 Font Parsing Remote Code Execution Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  t1lib Type 1 Font Parsing Remote Code Execution Vulnerability

  Tags:  font type lib code-execution vulnerability  

• February 16, 2012
• 0:00

  Vuln: t1lib Type 1 Font Parsing Remote Code Execution Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  t1lib Type 1 Font Parsing Remote Code Execution Vulnerability

  Tags:  font type lib code-execution vulnerability  

• 0:00

  Vuln: t1lib Type 1 Font Parsing Multiple Denial of Service Vulnerabilities

   » ‎ SecurityFocus Vulnerabilities
  t1lib Type 1 Font Parsing Multiple Denial of Service Vulnerabilities

  Tags:  font type lib denial-of-service  

• February 15, 2012
• 14:45

  Red Hat Security Advisory 2012-0137-01

   » ‎ Packet Storm Security Advisories
  Red Hat Security Advisory 2012-0137-01 - TeX Live is an implementation of TeX. TeX takes a text file and a set of formatting commands as input, and creates a typesetter-independent DeVice Independent file as output. The texlive packages provide a number of utilities, including dvips. TeX Live embeds a copy of t1lib. The t1lib library allows you to rasterize bitmaps from PostScript Type 1 fonts. The following issues affect t1lib code: Two heap-based buffer overflow flaws were found in the way t1lib processed Adobe Font Metrics files. If a specially-crafted font file was opened by a TeX Live utility, it could cause the utility to crash or, potentially, execute arbitrary code with the privileges of the user running the utility.

  Tags:  live lib tex based-buffer-overflow font-metrics red-hat-security  

• 14:45

  Red Hat Security Advisory 2012-0137-01

   » ‎ Packet Storm Security Recent Files
  Red Hat Security Advisory 2012-0137-01 - TeX Live is an implementation of TeX. TeX takes a text file and a set of formatting commands as input, and creates a typesetter-independent DeVice Independent file as output. The texlive packages provide a number of utilities, including dvips. TeX Live embeds a copy of t1lib. The t1lib library allows you to rasterize bitmaps from PostScript Type 1 fonts. The following issues affect t1lib code: Two heap-based buffer overflow flaws were found in the way t1lib processed Adobe Font Metrics files. If a specially-crafted font file was opened by a TeX Live utility, it could cause the utility to crash or, potentially, execute arbitrary code with the privileges of the user running the utility.

  Tags:  live lib tex based-buffer-overflow font-metrics red-hat-security  

• 14:45

  Red Hat Security Advisory 2012-0137-01

   » ‎ Packet Storm Security Misc. Files
  Red Hat Security Advisory 2012-0137-01 - TeX Live is an implementation of TeX. TeX takes a text file and a set of formatting commands as input, and creates a typesetter-independent DeVice Independent file as output. The texlive packages provide a number of utilities, including dvips. TeX Live embeds a copy of t1lib. The t1lib library allows you to rasterize bitmaps from PostScript Type 1 fonts. The following issues affect t1lib code: Two heap-based buffer overflow flaws were found in the way t1lib processed Adobe Font Metrics files. If a specially-crafted font file was opened by a TeX Live utility, it could cause the utility to crash or, potentially, execute arbitrary code with the privileges of the user running the utility.

  Tags:  live lib tex based-buffer-overflow font-metrics red-hat-security  

• January 25, 2012
• 0:00

  Vuln: t1lib Type 1 Font Parsing Remote Code Execution Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  t1lib Type 1 Font Parsing Remote Code Execution Vulnerability

  Tags:  font type lib code-execution vulnerability  

• 0:00

  Vuln: t1lib Type 1 Font Parsing Multiple Denial of Service Vulnerabilities

   » ‎ SecurityFocus Vulnerabilities
  t1lib Type 1 Font Parsing Multiple Denial of Service Vulnerabilities

  Tags:  font type lib denial-of-service  

• January 24, 2012
• 15:59

  Red Hat Security Advisory 2012-0062-01

   » ‎ Packet Storm Security Recent Files
  Red Hat Security Advisory 2012-0062-01 - The t1lib library allows you to rasterize bitmaps from PostScript Type 1 fonts. Two heap-based buffer overflow flaws were found in the way t1lib processed Adobe Font Metrics files. If a specially-crafted font file was opened by an application linked against t1lib, it could cause the application to crash or, potentially, execute arbitrary code with the privileges of the user running the application. An invalid pointer dereference flaw was found in t1lib. A specially-crafted font file could, when opened, cause an application linked against t1lib to crash or, potentially, execute arbitrary code with the privileges of the user running the application.

  Tags:  font lib application based-buffer-overflow font-metrics invalid-pointer  

• 15:59

  Red Hat Security Advisory 2012-0062-01

   » ‎ Packet Storm Security Misc. Files
  Red Hat Security Advisory 2012-0062-01 - The t1lib library allows you to rasterize bitmaps from PostScript Type 1 fonts. Two heap-based buffer overflow flaws were found in the way t1lib processed Adobe Font Metrics files. If a specially-crafted font file was opened by an application linked against t1lib, it could cause the application to crash or, potentially, execute arbitrary code with the privileges of the user running the application. An invalid pointer dereference flaw was found in t1lib. A specially-crafted font file could, when opened, cause an application linked against t1lib to crash or, potentially, execute arbitrary code with the privileges of the user running the application.

  Tags:  font lib application based-buffer-overflow font-metrics invalid-pointer  

• January 19, 2012
• 15:49

  Ubuntu Security Notice USN-1335-1

   » ‎ Packet Storm Security Advisories
  Ubuntu Security Notice 1335-1 - Jon Larimer discovered that t1lib did not properly parse AFM fonts. If a user were tricked into using a specially crafted font file, a remote attacker could cause t1lib to crash or possibly execute arbitrary code with user privileges. Jonathan Brossard discovered that t1lib did not correctly handle certain malformed font files. If a user were tricked into using a specially crafted font file, a remote attacker could cause t1lib to crash. Various other issues were also addressed.

  Tags:  user font lib jonathan-brossard jon-larimer font-files brossard arbitrary-code  

• 15:49

  Ubuntu Security Notice USN-1335-1

   » ‎ Packet Storm Security Recent Files
  Ubuntu Security Notice 1335-1 - Jon Larimer discovered that t1lib did not properly parse AFM fonts. If a user were tricked into using a specially crafted font file, a remote attacker could cause t1lib to crash or possibly execute arbitrary code with user privileges. Jonathan Brossard discovered that t1lib did not correctly handle certain malformed font files. If a user were tricked into using a specially crafted font file, a remote attacker could cause t1lib to crash. Various other issues were also addressed.

  Tags:  user font lib jonathan-brossard jon-larimer font-files brossard arbitrary-code  

• 15:49

  Ubuntu Security Notice USN-1335-1

   » ‎ Packet Storm Security Misc. Files
  Ubuntu Security Notice 1335-1 - Jon Larimer discovered that t1lib did not properly parse AFM fonts. If a user were tricked into using a specially crafted font file, a remote attacker could cause t1lib to crash or possibly execute arbitrary code with user privileges. Jonathan Brossard discovered that t1lib did not correctly handle certain malformed font files. If a user were tricked into using a specially crafted font file, a remote attacker could cause t1lib to crash. Various other issues were also addressed.

  Tags:  user font lib jonathan-brossard jon-larimer font-files brossard arbitrary-code  

• 0:00

  Vuln: t1lib Type 1 Font Parsing Multiple Denial of Service Vulnerabilities

   » ‎ SecurityFocus Vulnerabilities
  t1lib Type 1 Font Parsing Multiple Denial of Service Vulnerabilities

  Tags:  font type lib denial-of-service  

• January 16, 2012
• 8:00

  Bugtraq: [SECURITY] [DSA 2388-1] t1lib security update

   » ‎ SecurityFocus Vulnerabilities
  [SECURITY] [DSA 2388-1] t1lib security update

  Tags:  security dsa lib  

• 0:00

  Vuln: t1lib Type 1 Font Parsing Remote Code Execution Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  t1lib Type 1 Font Parsing Remote Code Execution Vulnerability

  Tags:  font type lib code-execution vulnerability  

• January 12, 2012
• 10:00

  Bugtraq: [ MDVSA-2012:004 ] t1lib

   » ‎ SecurityFocus Vulnerabilities
  [ MDVSA-2012:004 ] t1lib

  Tags:  bugtraq mdvsa lib  

• January 03, 2012
• 8:00

  Bugtraq: [ MDVSA-2012:002 ] t1lib

   » ‎ SecurityFocus Vulnerabilities
  [ MDVSA-2012:002 ] t1lib

  Tags:  bugtraq mdvsa lib  

• January 02, 2012
• 0:00

  Vuln: t1lib Type 1 Font Parsing Remote Code Execution Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  t1lib Type 1 Font Parsing Remote Code Execution Vulnerability

  Tags:  font type lib code-execution vulnerability  

• December 21, 2011
• 0:00

  Vuln: t1lib Type 1 Font Parsing Remote Code Execution Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  t1lib Type 1 Font Parsing Remote Code Execution Vulnerability

  Tags:  font type lib code-execution vulnerability  

• November 30, 2011
• 15:29

  ProFTPd / FreeBSD ftpd Remote Root

   » ‎ Packet Storm Security Exploits
  Remote root exploit for FreeBSD ftpd and ProFTPd on FreeBSD. It leverages the fact that /etc and /lib can be modified inside of the chroot.

  Tags:  ftpd proftpd freebsd chroot lib  

• 15:29

  ProFTPd / FreeBSD ftpd Remote Root

   » ‎ Packet Storm Security Recent Files
  Remote root exploit for FreeBSD ftpd and ProFTPd on FreeBSD. It leverages the fact that /etc and /lib can be modified inside of the chroot.

  Tags:  ftpd proftpd freebsd chroot lib  

• 15:29

  ProFTPd / FreeBSD ftpd Remote Root

   » ‎ Packet Storm Security Misc. Files
  Remote root exploit for FreeBSD ftpd and ProFTPd on FreeBSD. It leverages the fact that /etc and /lib can be modified inside of the chroot.

  Tags:  ftpd proftpd freebsd chroot lib  

• March 27, 2011
• 9:02

  XPDF T1lib Integer Overflows / Heap Corruption

   » ‎ Packet Storm Security Advisories
  The Linux version of xpdf is linked against t1lib, which is vulnerable to multiple vulnerabilities including off by ones, integer overflows and heap corruptions. At least one of those is exploitable and allows arbitrary code to be executed on the target machine when opening a specially crafted pdf file.

  Tags:  integer xpdf lib heap-corruption target-machine linux-version  

• 9:02

  XPDF T1lib Integer Overflows / Heap Corruption

   » ‎ Packet Storm Security Recent Files
  The Linux version of xpdf is linked against t1lib, which is vulnerable to multiple vulnerabilities including off by ones, integer overflows and heap corruptions. At least one of those is exploitable and allows arbitrary code to be executed on the target machine when opening a specially crafted pdf file.

  Tags:  integer xpdf lib heap-corruption target-machine linux-version  

• 9:02

  XPDF T1lib Integer Overflows / Heap Corruption

   » ‎ Packet Storm Security Misc. Files
  The Linux version of xpdf is linked against t1lib, which is vulnerable to multiple vulnerabilities including off by ones, integer overflows and heap corruptions. At least one of those is exploitable and allows arbitrary code to be executed on the target machine when opening a specially crafted pdf file.

  Tags:  integer xpdf lib heap-corruption target-machine linux-version  

• November 25, 2010
• 0:00

  Vuln: xine-lib 'asfheader.c' Remote Memory Corruption Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  xine-lib 'asfheader.c' Remote Memory Corruption Vulnerability

  Tags:  remote asfheader memory memory-corruption vulnerability lib  

• September 24, 2010
• 0:00

  Vuln: Audio Lib Player '.m3u' File Remote Stack Buffer Overflow Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  Audio Lib Player '.m3u' File Remote Stack Buffer Overflow Vulnerability

  Tags:  audio file player buffer-overflow-vulnerability stack-buffer lib  

• July 22, 2010
• 0:00

  Vuln: Openads (phpAdsNew) 'lib-remotehost.inc.php' Remote File Include Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  Openads (phpAdsNew) 'lib-remotehost.inc.php' Remote File Include Vulnerability

  Tags:  openads phpadsnew inc remote-file-include-vulnerability lib  

• May 18, 2010
• 12:00

  Bugtraq: MITKRB5-SA-2010-005 [CVE-2010-1321] GSS-API lib null pointer deref

   » ‎ SecurityFocus Vulnerabilities
  MITKRB5-SA-2010-005 [CVE-2010-1321] GSS-API lib null pointer deref

  Tags:  gss-api mitkrb lib null-pointer bugtraq  

• April 06, 2010
• 6:42

  probema con Social Engineering toolKit

   » ‎ remote-exploit & backtrack
  Salve a tutta la comunità,da un pò di tempo a questa parte,il toolkit social engineering mi da qualke errore e di conseguenza il mancato corretto funzionamento ! cerco di creare un clone di un sito web,iniettando un applet java,quindi scelgo di caricare il payload,poi scelgo il metodo per bypassare le difese di un computer(shingata ganai),ed infine scelgo la porta da mettere in ascolto,subito dopo digitando la porta e dando conferma mi compaiono queste scritte :
  
  /pentest/exploits/framework3/lib/rex/parser/ini.rb:144:in `readlines': Input/output error - /root/.msf3/modcache (Errno::EIO)
  from /pentest/exploits/framework3/lib/rex/parser/ini.rb:144:in `read_groups'
  from /pentest/exploits/framework3/lib/rex/parser/ini.rb:90:in `from_file'
  from /pentest/exploits/framework3/lib/msf/core/module_manager.rb:435:in `set_module_cache_file'
  from /pentest/exploits/framework3/lib/msf/base/simple/framework.rb:102:in `simplify'
  from /pentest/exploits/framework3/lib/msf/base/simple/framework.rb:70:in `create'
  from /pentest/exploits/framework3/msfpayload:36
  
  ciò ke prima non comparivano,vabbè poi vado avanti:
  
  
  [-] Encoding the payload 4 times to get around pesky Anti-Virus. [-]
  
  /pentest/exploits/framework3/lib/rex/parser/ini.rb:144:in `readlines': Input/output error - /root/.msf3/modcache (Errno::EIO)
  from /pentest/exploits/framework3/lib/rex/parser/ini.rb:144:in `read_groups'
  from /pentest/exploits/framework3/lib/rex/parser/ini.rb:90:in `from_file'
  from /pentest/exploits/framework3/lib/msf/core/module_manager.rb:435:in `set_module_cache_file'
  from /pentest/exploits/framework3/lib/msf/base/simple/framework.rb:102:in `simplify'
  from /pentest/exploits/framework3/lib/msf/base/simple/framework.rb:70:in `create'
  from /pentest/exploits/framework3/msfencode:157
  ************************************************** ******
  Do you want to create a Linux/OSX reverse_tcp payload
  in the Java Applet attack as well?
  ************************************************** ******
  
  Enter choice yes or no: no
  
  
  e POI questo :
  
  ************************************************** *
  Web Server Launched. Welcome to the SET Web Attack.
  ************************************************** *
  
  [--] Tested on IE6, IE7, IE8 and FireFox [--]
  [*] Launching MSF Listener...[*] This may take a few to load MSF...[*] Don't tase me bro!
  /pentest/exploits/framework3/lib/rex/parser/ini.rb:144:in `readlines': Input/output error - /root/.msf3/modcache (Errno::EIO)
  from /pentest/exploits/framework3/lib/rex/parser/ini.rb:144:in `read_groups'
  from /pentest/exploits/framework3/lib/rex/parser/ini.rb:90:in `from_file'
  from /pentest/exploits/framework3/lib/msf/core/module_manager.rb:435:in `set_module_cache_file'
  from /pentest/exploits/framework3/lib/msf/base/simple/framework.rb:102:in `simplify'
  from /pentest/exploits/framework3/lib/msf/base/simple/framework.rb:70:in `create'
  from /pentest/exploits/framework3/lib/msf/ui/console/driver.rb:96:in `initialize'
  from /pentest/exploits/framework3/msfconsole:92:in `new'
  from /pentest/exploits/framework3/msfconsole:92
  
  
  in conclusione,il webserver non parte e ritorna automaticamente al menù,ho provato ad aggiornare il toolkit ma niente da fare ! qualcuno ha qualke suggerimento?

  Tags:  framework lib pentest don core-module eio social-engineering Supporto Software  

• March 30, 2010
• 0:00

  Vuln: ViewVC 'lib/viewvc.py' Cross Site Scripting Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  ViewVC 'lib/viewvc.py' Cross Site Scripting Vulnerability

  Tags:  cross viewvc lib vulnerability  

• March 29, 2010
• 5:33

  Metasploit Oracle Login_brute problems - Windows

   » ‎ remote-exploit & backtrack
  Hello,
  
  I am trying to use 'auxiliary/admin/oracle/login_brute' in metasploit 3.3 but I am getting the following error.
  
  ------
  [-] Auxiliary failed: NameError uninitialized constant OCIError [-] Call stack:
  [-]
  /msf3/data/msfweb/vendor/rails/activesupport/lib/active_support/dependencies.rb:434:in
  `load_missing_constant'
  [-]
  /msf3/data/msfweb/vendor/rails/activesupport/lib/active_support/dependencies.rb:80:in
  `const_missing_with_dependencies'
  [-]
  /msf3/data/msfweb/vendor/rails/activesupport/lib/active_support/dependencies.rb:92:in
  `const_missing'
  [-] (eval):55:in `rescue in block in run'
  [-] (eval):52:in `block in run'
  [-] /usr/lib/ruby/1.9.1/csv.rb:1761:in `each'
  [-] /usr/lib/ruby/1.9.1/csv.rb:1197:in `block in foreach'
  [-] /usr/lib/ruby/1.9.1/csv.rb:1335:in `open'
  [-] /usr/lib/ruby/1.9.1/csv.rb:1196:in `foreach'
  [-] (eval):47:in `run'[*] Auxiliary module execution completed
  
  -----
  
  I have tried the below recommendation for Windows Server 2003 environment but it is giving the same problem. Please assist. Thanks.
  
  [1]Install subversion client
  CollabNetSubversion-client-1.6.9-1.win32.exe
  [2]install ruby
  ruby186-27_rc2.exe
  [3]install ruby-oci8
  wget ruby-oci8-1.0.7-mswin32.rb
  ruby ruby-oci8-1.0.7-mswin32.rb
  [4]
  svn co metasploit.com/svn/framework3/trunk/ metasploit
  
  cd metasploit
  ruby msfconsole (I am not able to execute this command successfully)

  Tags:  ruby metasploit lib ruby-ruby win32-exe subversion-client Pentesting  

• March 15, 2010
• 0:00

  Vuln: ViewVC 'lib/viewvc.py' Cross Site Scripting Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  ViewVC 'lib/viewvc.py' Cross Site Scripting Vulnerability

  Tags:  cross viewvc lib vulnerability  

• February 10, 2010
• 21:47

  What am I doing wrong here

   » ‎ remote-exploit & backtrack
  I am at a loss and have searched to no avil
  Any suggestions would be appreciated. Thanks!!
  I keep getting *** buffer overflow detected ***: cowpatty terminated
  No matter what I run
  /pentest/passwords/crunch/crunch 8 8 123456 | pyrit -e SCUM BAG -f
  - passthrough | cowpatty -d - -r dump*.cap -s SCUM BAG
  cowpatty 4.6 - WPA-PSK dictionary attack. <jwright@hasborg.com>
  
  Collected all necessary data to mount crack against WPA/PSK passphrase.
  Starting dictionary attack. Please be patient.
  Using STDIN for hashfile contents.
  *** buffer overflow detected ***: cowpatty terminated
  ======= Backtrace: =========
  /lib/tls/i686/cmov/libc.so.6(__fortify_fail+0x48)[0xb7ebb6d8]
  /lib/tls/i686/cmov/libc.so.6[0xb7eb9800]
  cowpatty[0x804a864]
  cowpatty[0x804ac5a]
  /lib/tls/i686/cmov/libc.so.6(__libc_start_main+0xe5)[0xb7dd7685]
  cowpatty[0x8048cb1]
  ======= Memory map: ========
  08048000-0804d000 r-xp 00000000 00:0f 5876 /usr/local/bin/cowpatty
  0804d000-0804e000 r--p 00004000 00:0f 5876 /usr/local/bin/cowpatty
  0804e000-0804f000 rw-p 00005000 00:0f 5876 /usr/local/bin/cowpatty
  093c2000-093e3000 rw-p 00000000 00:00 0 [heap]
  b7da6000-b7da7000 rw-p 00000000 00:00 0
  b7da7000-b7dbb000 r-xp 00000000 00:0f 512 /usr/lib/libz.so.1.2.3.3
  b7dbb000-b7dbd000 rw-p 00013000 00:0f 512 /usr/lib/libz.so.1.2.3.3
  b7dbd000-b7dbf000 r-xp 00000000 00:0f 33 /lib/tls/i686/cmov/libdl-2.8.90
  .so
  b7dbf000-b7dc0000 r--p 00001000 00:0f 33 /lib/tls/i686/cmov/libdl-2.8.90
  .so
  b7dc0000-b7dc1000 rw-p 00002000 00:0f 33 /lib/tls/i686/cmov/libdl-2.8.90
  .so
  b7dc1000-b7f19000 r-xp 00000000 00:0f 39 /lib/tls/i686/cmov/libc-2.8.90.
  so
  b7f19000-b7f1b000 r--p 00158000 00:0f 39 /lib/tls/i686/cmov/libc-2.8.90.
  so
  b7f1b000-b7f1c000 rw-p 0015a000 00:0f 39 /lib/tls/i686/cmov/libc-2.8.90.
  so
  b7f1c000-b7f1f000 rw-p 00000000 00:00 0
  b7f1f000-b8052000 r-xp 00000000 00:0f 1594 /usr/lib/i686/cmov/libcrypto.so .0.9.8
  b8052000-b805a000 r--p 00132000 00:0f 1594 /usr/lib/i686/cmov/libcrypto.so .0.9.8
  b805a000-b8067000 rw-p 0013a000 00:0f 1594 /usr/lib/i686/cmov/libcrypto.so .0.9.8
  b8067000-b806b000 rw-p 00000000 00:00 0
  b806b000-b8094000 r-xp 00000000 00:0f 5878 /usr/lib/libpcap.so.0.9.8
  b8094000-b8095000 r--p 00028000 00:0f 5878 /usr/lib/libpcap.so.0.9.8
  b8095000-b8096000 rw-p 00029000 00:0f 5878 /usr/lib/libpcap.so.0.9.8
  b8097000-b80a4000 r-xp 00000000 00:0f 1102 /lib/libgcc_s.so.1
  b80a4000-b80a5000 r--p 0000c000 00:0f 1102 /lib/libgcc_s.so.1
  b80a5000-b80a6000 rw-p 0000d000 00:0f 1102 /lib/libgcc_s.so.1
  b80a6000-b80aa000 rw-p 00000000 00:00 0
  b80aa000-b80c4000 r-xp 00000000 00:0f 27 /lib/ld-2.8.90.so
  b80c4000-b80c5000 rw-p 00000000 00:00 0
  b80c5000-b80c6000 r--p 0001a000 00:0f 27 /lib/ld-2.8.90.so
  b80c6000-b80c7000 rw-p 0001b000 00:0f 27 /lib/ld-2.8.90.so
  bf995000-bf9aa000 rw-p 00000000 00:00 0 [stack]
  ffffe000-fffff000 r-xp 00000000 00:00 0 [vdso]
  Aborted

  Tags:  usr lib cmov wpa-psk crunch-crunch scum-bag Newbie Area  

• January 20, 2010
• 7:45

  [Help] failed to run admin/oracle/oracle_login:

   » ‎ remote-exploit & backtrack
  When I tried to run the oracle_login I get the following error:
  
  [-] Auxiliary failed: NameError uninitialized constant OCIError
  [-] Call stack:
  [-] /opt/metasploit3/msf3/data/msfweb/vendor/rails/activesupport/lib/active_support/dependencies.rb:443:in `load_missing_constant'
  [-] /opt/metasploit3/msf3/data/msfweb/vendor/rails/activesupport/lib/active_support/dependencies.rb:80:in `const_missing'
  [-] /opt/metasploit3/msf3/data/msfweb/vendor/rails/activesupport/lib/active_support/dependencies.rb:92:in `const_missing'
  [-] (eval):55:in `run'
  [-] /usr/lib/ruby/1.8/csv.rb:312:in `open_reader'
  [-] /usr/lib/ruby/1.8/csv.rb:532:in `parse'
  [-] /usr/lib/ruby/1.8/csv.rb:560:in `each'
  [-] /usr/lib/ruby/1.8/csv.rb:531:in `parse'
  [-] /usr/lib/ruby/1.8/csv.rb:311:in `open_reader'
  [-] /usr/lib/ruby/1.8/csv.rb:94:in `foreach'
  [-] (eval):47:in `run'[*] Auxiliary module execution completed

  Tags:  usr ruby lib csv foreach Newbie Area