< Back to JetLib.com

user

Feeds

268060 items (17 unread) in 27 feeds

« Expand/Collapse

769 items tagged "user"

Skip to page: 1 2 3 4

January 04, 2013
0:00
Vuln: WordPress Cimy User Manager Plugin Arbitrary File Disclosure Vulnerability
» ‎ SecurityFocus Vulnerabilities

WordPress Cimy User Manager Plugin Arbitrary File Disclosure Vulnerability
Tags: wordpress cimy user vulnerability disclosure user-manager

December 31, 2012
14:25
Basics of Rails Part 5
» ‎ Carnal0wnage
If you'd like to skip coding this up or are having issues, you can find the application source code here.

To start at the code which represents the completion of Parts 1-5, do the following:

$ git clone git://github.com/cktricky/attackresearch.git

$ cd attackresearch/

$ git reset --hard 3c3003d0b087d64f60446f74bcb2deedca60691f

$ bundle install

$ rake db:create db:migrate unicorn:start[4444]

=========== Part 5 Code and Walkthrough ==============

The first thing we need to do in this post is correct a mistake in the last post.

Type the following to change the model "Users" to it's singular form "User". If you don't, it will cause problems with Rails routing.

$ rails d model Users

$ rails g model User first_name:string last_name:string email:string password_hash:string password_salt:string admin:boolean

$ rake db:drop

$ rake db:create

$ rvmsudo rake db:migrate

Also, a small but important detail, please ensure within your Gemfile you change:

gem 'bcrypt-ruby', '~> 3.0.0'

to

gem 'bcrypt-ruby', '~> 3.0.0', :require => 'bcrypt'

Now........back to the series. So, we last left off where a login page was visible when browsing to your site but it didn't really do anything. Time to rectify that.

Within the Sessions controller, a create method was defined and in it we called the User model's method, "authenticate". We have yet to define this "authenticate" method so let's do that now.

Located at /app/models/user.rb

Also, we are going to add an encrypt method and call it using the "before_save" Rails method. Basically, we are going to instruct the User model to call encrypt_password when the "save" method is called. For example:

me = User.new
me.email = "test@ar.com"
me.password = "test"
me.password_confirmation = "test"
me.save <~ at this point, any "before_save" methods get called

So when you see something like user = User.new and user.save you know that the encrypt_password method will be called by Rails prior to saving the user data because of the "before_save" definition on line 4.

Now we have to add a few more things:

attr_accessor :password

validates_confirmation_of :password
validates_presence_of :password, :on => :create
validates_presence_of :email
validates_uniqueness_of :email

These are basically Rails validation functions that get called when attempting to save the state of an object that represents a User. The exception being "attr_accessor", which is a standard Ruby call that allows an object to be both a getter & setter.

Okay, now let's see what it looks like.

Alright, so now we have a login page that does something but we need to create users. For this application's purpose, we are going to allow user's to signup. Let's provide a link for this purpose on the login page and even further, let's create a navigation bar at the top. We want this navigation bar visible on every page visited by the user. Easiest way to do that is to make it systemic and place it within the application.html.erb file under the layouts folder. Unless overridden, all views will inherit the properties specified in this file (navigation bar, for example).

Located at /app/views/layouts/application.html.erb

Without explaining all of Twitter-Bootstrap, one important thing to note is the class names of the HTML tags (ex: <div class="nav">) are how we associate an HTML element with a Twitter-Bootstrap defined style.

The logic portion, the portion that belongs to Ruby and Rails, are Lines 13 -18. Effectively we are asking if the user (current_user) visiting the page is authenticated (exists), if they are (do exist), show a link to the logout path. Otherwise, render a login and signup path link.

You are probably wondering where link_to and current_user come from. Rails provides built-in methods and you'll notice, in the views, they are typically placed between <%= and %>. So, link_to is a built in method. However, current_user is defined by us within the application controller and is NOT a built-in method.

Located at /app/controllers/application_controller.rb
Notice on line 8 we define a method called current_user. This pulls a user_id value from the Rails session. In order to make the current_user method accessible outside of just this controller and extend it to the view, we have annotated it as a helper_method on line 4.

The next thing we need to do now is actually make the signup page. First, let's modify the attributes that are mass assignable via attr_accessilbe in the user model file.

Next, review the users_controller.rb file and add the methods new & create. When new is called, instantiate a new blank User object (@user). Under the create method, we can modify a new user element leveraging the parameters submitted by the user (email, password, password_confirmation) to create the user.

Explanation of the Intended Flow -
- User clicks "signup" and is sent to /signup (GET request).
- User is routed to the "new" action within the "user" controller and then the HTML content is rendered from - /app/views/users/new.html.erb.
- Upon filling in the form data presented via new.html.erb, the user clicks "submit" and this data is sent off, this time in a POST request, to /users.
- The POST request to /users translates to the "create" action within the "user" controller.
Now, obviously we are missing something.....we need a signup page! Let's code that up under new.html.erb.

/app/views/users/new.html.erb

The internals of Rails and how we are able to treat @user as an enumerable object and create label tags and text field tags might be a little too complicated for this post. That being said, basically, the @user object (defined in the User controller under the new action - ex: @user = User.new) has properties associated with it such as email, password, and password confirmation. When Rails renders the view, it generates the parameter names based off the code in this file. In the end, the parameters will look like something like user[email] and user[password_confirmation], for example. Here is what the actual request looks like in Burp...

Signup form generated by the code within /app/views/users/new.html.erb

Raw request of signup form submission captured.

Okay, so, now we have registered a user. The last piece here is to have a home page to view after successful authentication and also code the logout link logic so that it actually does something.

In order to do this, let's make a quick change in the sessions controller. Under the create method, we change home_path to home_index_path as well as create a destroy method which calls the Rails method "reset_session" and redirects the user back to the root_url. Also, remove the content within the index action under the home controller.

Okay, here is what I mean...

Session Controller - Note changes on Lines 9 and additions on Lines 16-19.

Home Controller - Note that the code contained within the index action has been removed.
You should be able to complete the authentication flow now! Stayed tuned for Part 6.

Note: If you see any security holes in some of the code shown in this series please remember that's kind of the point and refrain from commenting until later.

Tags: nbsp method user ruby rails application-source-code password-method model-users cktricky

December 22, 2012
12:29
Username Anarchy 0.2
» ‎ Packet Storm Security Recent Files

Username-Anarchy is for generating usernames when penetration testing. It is useful for user enumeration and username/password brute forcing. Features include format-style style username formats, common first and lastnames from countries around the world, the facebook names lists, and substitution of common names when details aren't known, e.g. when you know a user's initial. Common aliases or self chosen usernames scraped from forums, and a name extractor are also included.
Tags: user anarchy username common-aliases format-style common-names

12:29
Username Anarchy 0.2
» ‎ Packet Storm Security Tools

Username-Anarchy is for generating usernames when penetration testing. It is useful for user enumeration and username/password brute forcing. Features include format-style style username formats, common first and lastnames from countries around the world, the facebook names lists, and substitution of common names when details aren't known, e.g. when you know a user's initial. Common aliases or self chosen usernames scraped from forums, and a name extractor are also included.
Tags: user anarchy username common-aliases format-style common-names
12:29
Username Anarchy 0.2
» ‎ Packet Storm Security Tools

Username-Anarchy is for generating usernames when penetration testing. It is useful for user enumeration and username/password brute forcing. Features include format-style style username formats, common first and lastnames from countries around the world, the facebook names lists, and substitution of common names when details aren't known, e.g. when you know a user's initial. Common aliases or self chosen usernames scraped from forums, and a name extractor are also included.
Tags: user anarchy username common-aliases format-style common-names

12:29
Username Anarchy 0.2
» ‎ Packet Storm Security Misc. Files

Username-Anarchy is for generating usernames when penetration testing. It is useful for user enumeration and username/password brute forcing. Features include format-style style username formats, common first and lastnames from countries around the world, the facebook names lists, and substitution of common names when details aren't known, e.g. when you know a user's initial. Common aliases or self chosen usernames scraped from forums, and a name extractor are also included.
Tags: user anarchy username common-aliases format-style common-names

December 21, 2012
0:00
Vuln: NetIQ Privileged User Manager Admin Password Change Authentication Bypass Vulnerability
» ‎ SecurityFocus Vulnerabilities

NetIQ Privileged User Manager Admin Password Change Authentication Bypass Vulnerability
Tags: netiq privileged user privileged-user vulnerability authentication

December 17, 2012
9:51
[web applications] - MyBB User Profile Skype ID Plugin 1.0 Stored XSS Vulnerability
» ‎ 0day.today (was: 1337day, Inj3ct0r, 1337db)

[web applications] - MyBB User Profile Skype ID Plugin 1.0 Stored XSS Vulnerability
Tags: mybb web user web-applications vulnerability user-profile
December 16, 2012
8:34
[web applications] - MyBB User Profile Skype ID Plugin - Post SQL Injection Vulnerability
» ‎ 0day.today (was: 1337day, Inj3ct0r, 1337db)

[web applications] - MyBB User Profile Skype ID Plugin - Post SQL Injection Vulnerability
Tags: mybb web user web-applications vulnerability user-profile

December 14, 2012
14:00
[Slides] NuFW firewall : Now User Filtering Works
» ‎ SecDocs

Tags: firewall
Event: CanSecWest 2008

Tags: nufw firewall user slides

December 13, 2012
9:22
MyBB DyMy User Agent SQL Injection
» ‎ Packet Storm Security Exploits

MyBB DyMy User Agent plugin suffers from a remote SQL injection vulnerability.
Tags: mybb dymy user vulnerability user-agent

9:22
MyBB DyMy User Agent SQL Injection
» ‎ Packet Storm Security Recent Files

MyBB DyMy User Agent plugin suffers from a remote SQL injection vulnerability.
Tags: mybb dymy user vulnerability user-agent

9:22
MyBB DyMy User Agent SQL Injection
» ‎ Packet Storm Security Misc. Files

MyBB DyMy User Agent plugin suffers from a remote SQL injection vulnerability.
Tags: mybb dymy user vulnerability user-agent

8:29
[web applications] - Imageshack.us - User Authentication Bypass
» ‎ 0day.today (was: 1337day, Inj3ct0r, 1337db)

[web applications] - Imageshack.us - User Authentication Bypass
Tags: web imageshack user user-authentication web-applications

December 07, 2012
19:55
FreeFloat FTP Server Arbitrary File Upload
» ‎ Packet Storm Security Exploits

This Metasploit module abuses multiple issues in FreeFloat: 1. No credential is actually needed to login; 2. User's default path is in C:\, and this cannot be changed; 3. User can write to anywhere on the server's file system. As a result of these poor implementations, a malicious user can just log in and then upload files, and let WMI (Management Instrumentation service) to execute the payload uploaded.
Tags: server freefloat user instrumentation-service malicious-user default-path

19:55
FreeFloat FTP Server Arbitrary File Upload
» ‎ Packet Storm Security Recent Files

This Metasploit module abuses multiple issues in FreeFloat: 1. No credential is actually needed to login; 2. User's default path is in C:\, and this cannot be changed; 3. User can write to anywhere on the server's file system. As a result of these poor implementations, a malicious user can just log in and then upload files, and let WMI (Management Instrumentation service) to execute the payload uploaded.
Tags: server freefloat user instrumentation-service malicious-user default-path

19:55
FreeFloat FTP Server Arbitrary File Upload
» ‎ Packet Storm Security Misc. Files

This Metasploit module abuses multiple issues in FreeFloat: 1. No credential is actually needed to login; 2. User's default path is in C:\, and this cannot be changed; 3. User can write to anywhere on the server's file system. As a result of these poor implementations, a malicious user can just log in and then upload files, and let WMI (Management Instrumentation service) to execute the payload uploaded.
Tags: server freefloat user instrumentation-service malicious-user default-path

December 02, 2012
18:53
Oracle MySQL User Account Enumeration Utility
» ‎ Packet Storm Security Exploits

Oracle MySQL suffers from a user enumeration vulnerability. This is a utility that demonstrates the issue.
Tags: oracle mysql user vulnerability

18:53
Oracle MySQL User Account Enumeration Utility
» ‎ Packet Storm Security Recent Files

Oracle MySQL suffers from a user enumeration vulnerability. This is a utility that demonstrates the issue.
Tags: oracle mysql user vulnerability

18:53
Oracle MySQL User Account Enumeration Utility
» ‎ Packet Storm Security Misc. Files

Oracle MySQL suffers from a user enumeration vulnerability. This is a utility that demonstrates the issue.
Tags: oracle mysql user vulnerability

November 29, 2012
19:12
Ubuntu Security Notice USN-1642-1
» ‎ Packet Storm Security Advisories

Ubuntu Security Notice 1642-1 - Dan Rosenberg discovered a heap-based buffer overflow in Lynx. If a user were tricked into opening a specially crafted page, a remote attacker could cause a denial of service via application crash, or possibly execute arbitrary code as the user invoking the program. This issue only affected Ubuntu 10.04 LTS. It was discovered that Lynx did not properly verify that an HTTPS certificate was signed by a trusted certificate authority. This could allow an attacker to perform a "man in the middle" (MITM) attack which would make the user believe their connection is secure, but is actually being monitored. This update changes the behavior of Lynx such that self-signed certificates no longer validate. Users requiring the previous behavior can use the 'FORCE_SSL_PROMPT' option in lynx.cfg. Various other issues were also addressed.
Tags: user ubuntu lynx dan-rosenberg based-buffer-overflow application-crash force-ssl

19:12
Ubuntu Security Notice USN-1642-1
» ‎ Packet Storm Security Recent Files

Ubuntu Security Notice 1642-1 - Dan Rosenberg discovered a heap-based buffer overflow in Lynx. If a user were tricked into opening a specially crafted page, a remote attacker could cause a denial of service via application crash, or possibly execute arbitrary code as the user invoking the program. This issue only affected Ubuntu 10.04 LTS. It was discovered that Lynx did not properly verify that an HTTPS certificate was signed by a trusted certificate authority. This could allow an attacker to perform a "man in the middle" (MITM) attack which would make the user believe their connection is secure, but is actually being monitored. This update changes the behavior of Lynx such that self-signed certificates no longer validate. Users requiring the previous behavior can use the 'FORCE_SSL_PROMPT' option in lynx.cfg. Various other issues were also addressed.
Tags: user ubuntu lynx dan-rosenberg based-buffer-overflow application-crash force-ssl

19:12
Ubuntu Security Notice USN-1642-1
» ‎ Packet Storm Security Misc. Files

Ubuntu Security Notice 1642-1 - Dan Rosenberg discovered a heap-based buffer overflow in Lynx. If a user were tricked into opening a specially crafted page, a remote attacker could cause a denial of service via application crash, or possibly execute arbitrary code as the user invoking the program. This issue only affected Ubuntu 10.04 LTS. It was discovered that Lynx did not properly verify that an HTTPS certificate was signed by a trusted certificate authority. This could allow an attacker to perform a "man in the middle" (MITM) attack which would make the user believe their connection is secure, but is actually being monitored. This update changes the behavior of Lynx such that self-signed certificates no longer validate. Users requiring the previous behavior can use the 'FORCE_SSL_PROMPT' option in lynx.cfg. Various other issues were also addressed.
Tags: user ubuntu lynx dan-rosenberg based-buffer-overflow application-crash force-ssl

November 28, 2012
22:43
Network Shutdown Module 3.21 Remote PHP Code Injection
» ‎ Packet Storm Security Exploits

This Metasploit module exploits a vulnerability in lib/dbtools.inc which uses unsanitized user input inside a eval() call. Additionally the base64 encoded user credentials are extracted from the database of the application. Please note that in order to be able to steal credentials, the vulnerable service must have at least one USV module (an entry in the "nodes" table in mgedb.db).
Tags: user module network network-shutdown base64 php-code

22:43
Network Shutdown Module 3.21 Remote PHP Code Injection
» ‎ Packet Storm Security Recent Files

This Metasploit module exploits a vulnerability in lib/dbtools.inc which uses unsanitized user input inside a eval() call. Additionally the base64 encoded user credentials are extracted from the database of the application. Please note that in order to be able to steal credentials, the vulnerable service must have at least one USV module (an entry in the "nodes" table in mgedb.db).
Tags: user module network network-shutdown base64 php-code

22:43
Network Shutdown Module 3.21 Remote PHP Code Injection
» ‎ Packet Storm Security Misc. Files

This Metasploit module exploits a vulnerability in lib/dbtools.inc which uses unsanitized user input inside a eval() call. Additionally the base64 encoded user credentials are extracted from the database of the application. Please note that in order to be able to steal credentials, the vulnerable service must have at least one USV module (an entry in the "nodes" table in mgedb.db).
Tags: user module network network-shutdown base64 php-code

November 22, 2012
0:00
Vuln: NetIQ Privileged User Manager 'ldapagnt_eval()' Remote Code Execution Vulnerability
» ‎ SecurityFocus Vulnerabilities

NetIQ Privileged User Manager 'ldapagnt_eval()' Remote Code Execution Vulnerability
Tags: netiq privileged user code-execution privileged-user vulnerability

November 21, 2012
15:03
Ubuntu Security Notice USN-1638-2
» ‎ Packet Storm Security Advisories

Ubuntu Security Notice 1638-2 - USN-1638-1 fixed vulnerabilities in Firefox. This update provides an updated ubufox package for use with the latest Firefox. Gary Kwong, Jesse Ruderman, Christian Holler, Bob Clary, Kyle Huey, Ed Morley, Chris Lord, Boris Zbarsky, Julian Seward, Bill McCloskey, and Andrew McCreight discovered multiple memory safety issues affecting Firefox. If the user were tricked into opening a specially crafted page, an attacker could possibly exploit these to cause a denial of service via application crash, or potentially execute code with the privileges of the user invoking Firefox. Atte Kettunen discovered a buffer overflow while rendering GIF format images. An attacker could exploit this to possibly execute arbitrary code as the user invoking Firefox. Various other issues were also addressed.
Tags: user ubuntu firefox ed-morley julian-seward boris-zbarsky andrew-mccreight gary-kwong christian-holler chris-lord jesse-ruderman

15:03
Ubuntu Security Notice USN-1638-2
» ‎ Packet Storm Security Recent Files

Ubuntu Security Notice 1638-2 - USN-1638-1 fixed vulnerabilities in Firefox. This update provides an updated ubufox package for use with the latest Firefox. Gary Kwong, Jesse Ruderman, Christian Holler, Bob Clary, Kyle Huey, Ed Morley, Chris Lord, Boris Zbarsky, Julian Seward, Bill McCloskey, and Andrew McCreight discovered multiple memory safety issues affecting Firefox. If the user were tricked into opening a specially crafted page, an attacker could possibly exploit these to cause a denial of service via application crash, or potentially execute code with the privileges of the user invoking Firefox. Atte Kettunen discovered a buffer overflow while rendering GIF format images. An attacker could exploit this to possibly execute arbitrary code as the user invoking Firefox. Various other issues were also addressed.
Tags: user ubuntu firefox ed-morley julian-seward boris-zbarsky andrew-mccreight gary-kwong christian-holler chris-lord jesse-ruderman

15:03
Ubuntu Security Notice USN-1638-2
» ‎ Packet Storm Security Misc. Files

Ubuntu Security Notice 1638-2 - USN-1638-1 fixed vulnerabilities in Firefox. This update provides an updated ubufox package for use with the latest Firefox. Gary Kwong, Jesse Ruderman, Christian Holler, Bob Clary, Kyle Huey, Ed Morley, Chris Lord, Boris Zbarsky, Julian Seward, Bill McCloskey, and Andrew McCreight discovered multiple memory safety issues affecting Firefox. If the user were tricked into opening a specially crafted page, an attacker could possibly exploit these to cause a denial of service via application crash, or potentially execute code with the privileges of the user invoking Firefox. Atte Kettunen discovered a buffer overflow while rendering GIF format images. An attacker could exploit this to possibly execute arbitrary code as the user invoking Firefox. Various other issues were also addressed.
Tags: user ubuntu firefox ed-morley julian-seward boris-zbarsky andrew-mccreight gary-kwong christian-holler chris-lord jesse-ruderman

15:03
Ubuntu Security Notice USN-1636-1
» ‎ Packet Storm Security Advisories

Ubuntu Security Notice 1636-1 - Gary Kwong, Jesse Ruderman, Christian Holler, Bob Clary, Kyle Huey, Ed Morley, Chris Lord, Boris Zbarsky, Julian Seward, Bill McCloskey, and Andrew McCreight discovered several memory corruption flaws in Thunderbird. If a user were tricked into opening a malicious website and had JavaScript enabled, an attacker could exploit these to execute arbitrary JavaScript code within the context of another website or arbitrary code as the user invoking the program. Atte Kettunen discovered a buffer overflow while rendering GIF format images. An attacker could exploit this to possibly execute arbitrary code as the user invoking Thunderbird. Various other issues were also addressed.
Tags: user code ubuntu ed-morley julian-seward boris-zbarsky andrew-mccreight gary-kwong christian-holler chris-lord jesse-ruderman

15:03
Ubuntu Security Notice USN-1636-1
» ‎ Packet Storm Security Recent Files

Ubuntu Security Notice 1636-1 - Gary Kwong, Jesse Ruderman, Christian Holler, Bob Clary, Kyle Huey, Ed Morley, Chris Lord, Boris Zbarsky, Julian Seward, Bill McCloskey, and Andrew McCreight discovered several memory corruption flaws in Thunderbird. If a user were tricked into opening a malicious website and had JavaScript enabled, an attacker could exploit these to execute arbitrary JavaScript code within the context of another website or arbitrary code as the user invoking the program. Atte Kettunen discovered a buffer overflow while rendering GIF format images. An attacker could exploit this to possibly execute arbitrary code as the user invoking Thunderbird. Various other issues were also addressed.
Tags: user code ubuntu ed-morley julian-seward boris-zbarsky andrew-mccreight gary-kwong christian-holler chris-lord jesse-ruderman

15:03
Ubuntu Security Notice USN-1636-1
» ‎ Packet Storm Security Misc. Files

Ubuntu Security Notice 1636-1 - Gary Kwong, Jesse Ruderman, Christian Holler, Bob Clary, Kyle Huey, Ed Morley, Chris Lord, Boris Zbarsky, Julian Seward, Bill McCloskey, and Andrew McCreight discovered several memory corruption flaws in Thunderbird. If a user were tricked into opening a malicious website and had JavaScript enabled, an attacker could exploit these to execute arbitrary JavaScript code within the context of another website or arbitrary code as the user invoking the program. Atte Kettunen discovered a buffer overflow while rendering GIF format images. An attacker could exploit this to possibly execute arbitrary code as the user invoking Thunderbird. Various other issues were also addressed.
Tags: user code ubuntu ed-morley julian-seward boris-zbarsky andrew-mccreight gary-kwong christian-holler chris-lord jesse-ruderman

15:02
Ubuntu Security Notice USN-1638-1
» ‎ Packet Storm Security Advisories

Ubuntu Security Notice 1638-1 - Gary Kwong, Jesse Ruderman, Christian Holler, Bob Clary, Kyle Huey, Ed Morley, Chris Lord, Boris Zbarsky, Julian Seward, Bill McCloskey, and Andrew McCreight discovered multiple memory safety issues affecting Firefox. If the user were tricked into opening a specially crafted page, an attacker could possibly exploit these to cause a denial of service via application crash, or potentially execute code with the privileges of the user invoking Firefox. Atte Kettunen discovered a buffer overflow while rendering GIF format images. An attacker could exploit this to possibly execute arbitrary code as the user invoking Firefox. Various other issues were also addressed.
Tags: user ubuntu firefox ed-morley julian-seward boris-zbarsky andrew-mccreight gary-kwong christian-holler chris-lord jesse-ruderman

15:02
Ubuntu Security Notice USN-1638-1
» ‎ Packet Storm Security Recent Files

Ubuntu Security Notice 1638-1 - Gary Kwong, Jesse Ruderman, Christian Holler, Bob Clary, Kyle Huey, Ed Morley, Chris Lord, Boris Zbarsky, Julian Seward, Bill McCloskey, and Andrew McCreight discovered multiple memory safety issues affecting Firefox. If the user were tricked into opening a specially crafted page, an attacker could possibly exploit these to cause a denial of service via application crash, or potentially execute code with the privileges of the user invoking Firefox. Atte Kettunen discovered a buffer overflow while rendering GIF format images. An attacker could exploit this to possibly execute arbitrary code as the user invoking Firefox. Various other issues were also addressed.
Tags: user ubuntu firefox ed-morley julian-seward boris-zbarsky andrew-mccreight gary-kwong christian-holler chris-lord jesse-ruderman

15:02
Ubuntu Security Notice USN-1638-1
» ‎ Packet Storm Security Misc. Files

Ubuntu Security Notice 1638-1 - Gary Kwong, Jesse Ruderman, Christian Holler, Bob Clary, Kyle Huey, Ed Morley, Chris Lord, Boris Zbarsky, Julian Seward, Bill McCloskey, and Andrew McCreight discovered multiple memory safety issues affecting Firefox. If the user were tricked into opening a specially crafted page, an attacker could possibly exploit these to cause a denial of service via application crash, or potentially execute code with the privileges of the user invoking Firefox. Atte Kettunen discovered a buffer overflow while rendering GIF format images. An attacker could exploit this to possibly execute arbitrary code as the user invoking Firefox. Various other issues were also addressed.
Tags: user ubuntu firefox ed-morley julian-seward boris-zbarsky andrew-mccreight gary-kwong christian-holler chris-lord jesse-ruderman

November 15, 2012
23:07
Ubuntu Security Notice USN-1631-1
» ‎ Packet Storm Security Advisories

Ubuntu Security Notice 1631-1 - It was discovered that LibTIFF incorrectly handled certain malformed images using the PixarLog compression format. If a user or automated system were tricked into opening a specially crafted TIFF image, a remote attacker could crash the application, leading to a denial of service, or possibly execute arbitrary code with user privileges. Huzaifa S. Sidhpurwala discovered that the ppm2tiff tool incorrectly handled certain malformed PPM images. If a user or automated system were tricked into opening a specially crafted PPM image, a remote attacker could crash the application, leading to a denial of service, or possibly execute arbitrary code with user privileges. Various other issues were also addressed.
Tags: user ubuntu ppm huzaifa-s.-sidhpurwala tiff ppm-images tiff-image denial-of-service

23:07
Ubuntu Security Notice USN-1631-1
» ‎ Packet Storm Security Recent Files

Ubuntu Security Notice 1631-1 - It was discovered that LibTIFF incorrectly handled certain malformed images using the PixarLog compression format. If a user or automated system were tricked into opening a specially crafted TIFF image, a remote attacker could crash the application, leading to a denial of service, or possibly execute arbitrary code with user privileges. Huzaifa S. Sidhpurwala discovered that the ppm2tiff tool incorrectly handled certain malformed PPM images. If a user or automated system were tricked into opening a specially crafted PPM image, a remote attacker could crash the application, leading to a denial of service, or possibly execute arbitrary code with user privileges. Various other issues were also addressed.
Tags: user ubuntu ppm huzaifa-s.-sidhpurwala tiff ppm-images tiff-image denial-of-service

23:07
Ubuntu Security Notice USN-1631-1
» ‎ Packet Storm Security Misc. Files

Ubuntu Security Notice 1631-1 - It was discovered that LibTIFF incorrectly handled certain malformed images using the PixarLog compression format. If a user or automated system were tricked into opening a specially crafted TIFF image, a remote attacker could crash the application, leading to a denial of service, or possibly execute arbitrary code with user privileges. Huzaifa S. Sidhpurwala discovered that the ppm2tiff tool incorrectly handled certain malformed PPM images. If a user or automated system were tricked into opening a specially crafted PPM image, a remote attacker could crash the application, leading to a denial of service, or possibly execute arbitrary code with user privileges. Various other issues were also addressed.
Tags: user ubuntu ppm huzaifa-s.-sidhpurwala tiff ppm-images tiff-image denial-of-service

November 14, 2012
18:46
Novell NetIQ Privileged User Manager 2.3.1 auth.dll Code Execution
» ‎ Packet Storm Security Exploits

Novell NetIQ Privileged User Manager version 2.3.1 suffers from a remote code execution vulnerability in pa_modify_accounts() in auth.dll. The secure web interface contains a flaw which allows, without prior authentication, to change the password of the user 'admin'. A remote attacker then could login to the web interface with full privileges and trigger underlying vulnerabilities to write arbitrary files against the target system with SYSTEM privileges. Full exploit included.
Tags: novell netiq user target-system system-privileges code-execution

18:46
Novell NetIQ Privileged User Manager 2.3.1 auth.dll Code Execution
» ‎ Packet Storm Security Misc. Files

Novell NetIQ Privileged User Manager version 2.3.1 suffers from a remote code execution vulnerability in pa_modify_accounts() in auth.dll. The secure web interface contains a flaw which allows, without prior authentication, to change the password of the user 'admin'. A remote attacker then could login to the web interface with full privileges and trigger underlying vulnerabilities to write arbitrary files against the target system with SYSTEM privileges. Full exploit included.
Tags: novell netiq user target-system system-privileges code-execution

10:22
Drupal User Read-Only 6.x / 7.x Access Bypass
» ‎ Packet Storm Security Advisories

User Read-only is a module that allows an administrator to prevent modification of user account/profile fields. The administrator can select which fields will allow or disallow editing. The module can mistakenly assign roles when performing unrelated operations against a user's account such as changing a password. The vulnerability is particular to certain combinations of configuration and the number of roles available on the site (more than 3). Versions 6.x and 7.x are affected.
Tags: administrator module user read account-profile vulnerability combinations

10:22
Drupal User Read-Only 6.x / 7.x Access Bypass
» ‎ Packet Storm Security Recent Files

User Read-only is a module that allows an administrator to prevent modification of user account/profile fields. The administrator can select which fields will allow or disallow editing. The module can mistakenly assign roles when performing unrelated operations against a user's account such as changing a password. The vulnerability is particular to certain combinations of configuration and the number of roles available on the site (more than 3). Versions 6.x and 7.x are affected.
Tags: administrator module user read account-profile vulnerability combinations

10:22
Drupal User Read-Only 6.x / 7.x Access Bypass
» ‎ Packet Storm Security Misc. Files

User Read-only is a module that allows an administrator to prevent modification of user account/profile fields. The administrator can select which fields will allow or disallow editing. The module can mistakenly assign roles when performing unrelated operations against a user's account such as changing a password. The vulnerability is particular to certain combinations of configuration and the number of roles available on the site (more than 3). Versions 6.x and 7.x are affected.
Tags: administrator module user read account-profile vulnerability combinations

November 01, 2012
8:55
MyBB Follower User 1.5 SQL Injection
» ‎ Packet Storm Security Exploits

MyBB Follower User plugin version 1.5 suffers from a remote SQL injection vulnerability.
Tags: mybb follower user plugin-version vulnerability

8:55
MyBB Follower User 1.5 SQL Injection
» ‎ Packet Storm Security Recent Files

MyBB Follower User plugin version 1.5 suffers from a remote SQL injection vulnerability.
Tags: mybb follower user plugin-version vulnerability

8:55
MyBB Follower User 1.5 SQL Injection
» ‎ Packet Storm Security Misc. Files

MyBB Follower User plugin version 1.5 suffers from a remote SQL injection vulnerability.
Tags: mybb follower user plugin-version vulnerability

October 31, 2012
17:00
WordPress Cimy User Manager Plugin Arbitrary File Disclosure Vulnerability
» ‎ SecuriTeam

The Cimy User Manager Plugin for WordPress is prone to an arbitrary file-disclosure vulnerability because it fails to properly sanitize user-supplied input.
Tags: wordpress cimy user manager-plugin vulnerability disclosure user-manager

October 16, 2012
9:01
Storing user data on your FPGA
» ‎ Hack a Day

We’ve seen FPGAs used to recreate everything from classic arcade games to ancient computers, but with each of these builds a common problem arises. Once you’ve got the hardware emulated on an FPGA, you’ve also got to get the ROMs into the project as well. In a very interesting hack, [Mike] figured out that the [...]
Tags: fpga user storing mike classic-arcade-games ancient-computers Hardware

October 12, 2012
16:38
Ubuntu Security Notice USN-1611-1
» ‎ Packet Storm Security Advisories

Ubuntu Security Notice 1611-1 - Henrik Skupin, Jesse Ruderman, Christian Holler, Soroush Dalili and others discovered several memory corruption flaws in Thunderbird. If a user were tricked into opening a malicious website and had JavaScript enabled, an attacker could exploit these to execute arbitrary JavaScript code within the context of another website or arbitrary code as the user invoking the program. CVE-2012-4191) David Bloom and Jordi Chancel discovered that Thunderbird did not always properly handle the element. If a user were tricked into opening a malicious website and had JavaScript enabled, a remote attacker could exploit this to conduct URL spoofing and clickjacking attacks. Various other issues were also addressed.
Tags: javascript user website jordi-chancel christian-holler david-bloom jesse-ruderman dalili henrik-skupin memory-corruption malicious-website

16:38
Ubuntu Security Notice USN-1611-1
» ‎ Packet Storm Security Recent Files

Ubuntu Security Notice 1611-1 - Henrik Skupin, Jesse Ruderman, Christian Holler, Soroush Dalili and others discovered several memory corruption flaws in Thunderbird. If a user were tricked into opening a malicious website and had JavaScript enabled, an attacker could exploit these to execute arbitrary JavaScript code within the context of another website or arbitrary code as the user invoking the program. CVE-2012-4191) David Bloom and Jordi Chancel discovered that Thunderbird did not always properly handle the element. If a user were tricked into opening a malicious website and had JavaScript enabled, a remote attacker could exploit this to conduct URL spoofing and clickjacking attacks. Various other issues were also addressed.
Tags: javascript user website jordi-chancel christian-holler david-bloom jesse-ruderman dalili henrik-skupin memory-corruption malicious-website

16:38
Ubuntu Security Notice USN-1611-1
» ‎ Packet Storm Security Misc. Files

Ubuntu Security Notice 1611-1 - Henrik Skupin, Jesse Ruderman, Christian Holler, Soroush Dalili and others discovered several memory corruption flaws in Thunderbird. If a user were tricked into opening a malicious website and had JavaScript enabled, an attacker could exploit these to execute arbitrary JavaScript code within the context of another website or arbitrary code as the user invoking the program. CVE-2012-4191) David Bloom and Jordi Chancel discovered that Thunderbird did not always properly handle the element. If a user were tricked into opening a malicious website and had JavaScript enabled, a remote attacker could exploit this to conduct URL spoofing and clickjacking attacks. Various other issues were also addressed.
Tags: javascript user website jordi-chancel christian-holler david-bloom jesse-ruderman dalili henrik-skupin memory-corruption malicious-website

October 09, 2012
10:00
Bugtraq: Blender 2.63 Exploitable User Mode Write AV
» ‎ SecurityFocus Vulnerabilities

Blender 2.63 Exploitable User Mode Write AV
Tags: exploitable blender user

September 27, 2012
11:42
Ubuntu Security Notice USN-1586-1
» ‎ Packet Storm Security Advisories

Ubuntu Security Notice 1586-1 - Hiroshi Oota discovered that Emacs incorrectly handled search paths. If a user were tricked into opening a file with Emacs, a local attacker could execute arbitrary Lisp code with the privileges of the user invoking the program. Paul Ling discovered that Emacs incorrectly handled certain eval forms in local-variable sections. If a user were tricked into opening a specially crafted file with Emacs, a remote attacker could execute arbitrary Lisp code with the privileges of the user invoking the program. Various other issues were also addressed.
Tags: user emacs ubuntu hiroshi-oota paul-ling lisp-code search-paths

11:42
Ubuntu Security Notice USN-1586-1
» ‎ Packet Storm Security Recent Files

Ubuntu Security Notice 1586-1 - Hiroshi Oota discovered that Emacs incorrectly handled search paths. If a user were tricked into opening a file with Emacs, a local attacker could execute arbitrary Lisp code with the privileges of the user invoking the program. Paul Ling discovered that Emacs incorrectly handled certain eval forms in local-variable sections. If a user were tricked into opening a specially crafted file with Emacs, a remote attacker could execute arbitrary Lisp code with the privileges of the user invoking the program. Various other issues were also addressed.
Tags: user emacs ubuntu hiroshi-oota paul-ling lisp-code search-paths

11:42
Ubuntu Security Notice USN-1586-1
» ‎ Packet Storm Security Misc. Files

Ubuntu Security Notice 1586-1 - Hiroshi Oota discovered that Emacs incorrectly handled search paths. If a user were tricked into opening a file with Emacs, a local attacker could execute arbitrary Lisp code with the privileges of the user invoking the program. Paul Ling discovered that Emacs incorrectly handled certain eval forms in local-variable sections. If a user were tricked into opening a specially crafted file with Emacs, a remote attacker could execute arbitrary Lisp code with the privileges of the user invoking the program. Various other issues were also addressed.
Tags: user emacs ubuntu hiroshi-oota paul-ling lisp-code search-paths

September 18, 2012
7:44
WordPress 3.4.2 User Enumeration / Path Disclosure
» ‎ Packet Storm Security Exploits

WordPress version 3.4.2 appears to suffer from user enumeration and path disclosure vulnerabilities.
Tags: enumeration wordpress user disclosure

7:44
WordPress 3.4.2 User Enumeration / Path Disclosure
» ‎ Packet Storm Security Recent Files

WordPress version 3.4.2 appears to suffer from user enumeration and path disclosure vulnerabilities.
Tags: enumeration wordpress user disclosure

7:44
WordPress 3.4.2 User Enumeration / Path Disclosure
» ‎ Packet Storm Security Misc. Files

WordPress version 3.4.2 appears to suffer from user enumeration and path disclosure vulnerabilities.
Tags: enumeration wordpress user disclosure

September 14, 2012
14:00
[web applications] - CodeIgniter User Manager Pro CSRF Vulnerability
» ‎ 0day.today (was: 1337day, Inj3ct0r, 1337db)

[web applications] - CodeIgniter User Manager Pro CSRF Vulnerability
Tags: web codeigniter user web-applications vulnerability user-manager

September 11, 2012
12:59
Ubuntu Security Notice USN-1548-2
» ‎ Packet Storm Security Advisories

Ubuntu Security Notice 1548-2 - USN-1548-1 fixed vulnerabilities in Firefox. The new package caused a regression in Private Browsing which could leak sites visited to the browser cache. This update fixes the problem. Gary Kwong, Christian Holler, Jesse Ruderman, Steve Fink, Bob Clary, Andrew Sutherland, Jason Smith, John Schoenick, Vladimir Vukicevic and Daniel Holbert discovered memory safety issues affecting Firefox. If the user were tricked into opening a specially crafted page, an attacker could possibly exploit these to cause a denial of service via application crash, or potentially execute code with the privileges of the user invoking Firefox. Abhishek Arya discovered multiple use-after-free vulnerabilities. If the user were tricked into opening a specially crafted page, an attacker could exploit these to cause a denial of service via application crash, or potentially execute code with the privileges of the user invoking Firefox. Various other issues were also addressed.
Tags: user ubuntu firefox private-browsing jason-smith daniel-holbert gary-kwong steve-fink christian-holler andrew-sutherland jesse-ruderman

12:59
Ubuntu Security Notice USN-1548-2
» ‎ Packet Storm Security Recent Files

Ubuntu Security Notice 1548-2 - USN-1548-1 fixed vulnerabilities in Firefox. The new package caused a regression in Private Browsing which could leak sites visited to the browser cache. This update fixes the problem. Gary Kwong, Christian Holler, Jesse Ruderman, Steve Fink, Bob Clary, Andrew Sutherland, Jason Smith, John Schoenick, Vladimir Vukicevic and Daniel Holbert discovered memory safety issues affecting Firefox. If the user were tricked into opening a specially crafted page, an attacker could possibly exploit these to cause a denial of service via application crash, or potentially execute code with the privileges of the user invoking Firefox. Abhishek Arya discovered multiple use-after-free vulnerabilities. If the user were tricked into opening a specially crafted page, an attacker could exploit these to cause a denial of service via application crash, or potentially execute code with the privileges of the user invoking Firefox. Various other issues were also addressed.
Tags: user ubuntu firefox private-browsing jason-smith daniel-holbert gary-kwong steve-fink christian-holler andrew-sutherland jesse-ruderman

12:59
Ubuntu Security Notice USN-1548-2
» ‎ Packet Storm Security Misc. Files

Ubuntu Security Notice 1548-2 - USN-1548-1 fixed vulnerabilities in Firefox. The new package caused a regression in Private Browsing which could leak sites visited to the browser cache. This update fixes the problem. Gary Kwong, Christian Holler, Jesse Ruderman, Steve Fink, Bob Clary, Andrew Sutherland, Jason Smith, John Schoenick, Vladimir Vukicevic and Daniel Holbert discovered memory safety issues affecting Firefox. If the user were tricked into opening a specially crafted page, an attacker could possibly exploit these to cause a denial of service via application crash, or potentially execute code with the privileges of the user invoking Firefox. Abhishek Arya discovered multiple use-after-free vulnerabilities. If the user were tricked into opening a specially crafted page, an attacker could exploit these to cause a denial of service via application crash, or potentially execute code with the privileges of the user invoking Firefox. Various other issues were also addressed.
Tags: user ubuntu firefox private-browsing jason-smith daniel-holbert gary-kwong steve-fink christian-holler andrew-sutherland jesse-ruderman

8:24
Openfiler 2.x NetworkCard Command Execution
» ‎ Packet Storm Security Exploits

This Metasploit module exploits a vulnerability in Openfiler version 2.x which could be abused to allow authenticated users to execute arbitrary code under the context of the 'openfiler' user. The 'system.html' file uses user controlled data from the 'device' parameter to create a new 'NetworkCard' object. The class constructor in 'network.inc' calls exec() with the supplied data. The 'openfiler' user may 'sudo /bin/bash' without providing a system password.
Tags: openfiler user the command-execution system-password arbitrary-code

8:24
Openfiler 2.x NetworkCard Command Execution
» ‎ Packet Storm Security Recent Files

This Metasploit module exploits a vulnerability in Openfiler version 2.x which could be abused to allow authenticated users to execute arbitrary code under the context of the 'openfiler' user. The 'system.html' file uses user controlled data from the 'device' parameter to create a new 'NetworkCard' object. The class constructor in 'network.inc' calls exec() with the supplied data. The 'openfiler' user may 'sudo /bin/bash' without providing a system password.
Tags: openfiler user the command-execution system-password arbitrary-code

8:24
Openfiler 2.x NetworkCard Command Execution
» ‎ Packet Storm Security Misc. Files

This Metasploit module exploits a vulnerability in Openfiler version 2.x which could be abused to allow authenticated users to execute arbitrary code under the context of the 'openfiler' user. The 'system.html' file uses user controlled data from the 'device' parameter to create a new 'NetworkCard' object. The class constructor in 'network.inc' calls exec() with the supplied data. The 'openfiler' user may 'sudo /bin/bash' without providing a system password.
Tags: openfiler user the command-execution system-password arbitrary-code

September 10, 2012
7:30
Ubuntu Security Notice USN-1559-1
» ‎ Packet Storm Security Advisories

Ubuntu Security Notice 1559-1 - Joseph Sheridan discovered that GIMP incorrectly handled certain malformed headers in FIT files. If a user were tricked into opening a specially crafted FIT image file, an attacker could cause GIMP to crash. Murray McAllister discovered that GIMP incorrectly handled malformed KiSS palette files. If a user were tricked into opening a specially crafted KiSS palette file, an attacker could cause GIMP to crash, or possibly execute arbitrary code with the user's privileges. Various other issues were also addressed.
Tags: user ubuntu gimp joseph-sheridan murray-mcallister palette-files malformed-headers

7:30
Ubuntu Security Notice USN-1559-1
» ‎ Packet Storm Security Recent Files

Ubuntu Security Notice 1559-1 - Joseph Sheridan discovered that GIMP incorrectly handled certain malformed headers in FIT files. If a user were tricked into opening a specially crafted FIT image file, an attacker could cause GIMP to crash. Murray McAllister discovered that GIMP incorrectly handled malformed KiSS palette files. If a user were tricked into opening a specially crafted KiSS palette file, an attacker could cause GIMP to crash, or possibly execute arbitrary code with the user's privileges. Various other issues were also addressed.
Tags: user ubuntu gimp joseph-sheridan murray-mcallister palette-files malformed-headers

7:30
Ubuntu Security Notice USN-1559-1
» ‎ Packet Storm Security Misc. Files

Ubuntu Security Notice 1559-1 - Joseph Sheridan discovered that GIMP incorrectly handled certain malformed headers in FIT files. If a user were tricked into opening a specially crafted FIT image file, an attacker could cause GIMP to crash. Murray McAllister discovered that GIMP incorrectly handled malformed KiSS palette files. If a user were tricked into opening a specially crafted KiSS palette file, an attacker could cause GIMP to crash, or possibly execute arbitrary code with the user's privileges. Various other issues were also addressed.
Tags: user ubuntu gimp joseph-sheridan murray-mcallister palette-files malformed-headers

September 06, 2012
20:07
Ubuntu Security Notice USN-1556-1
» ‎ Packet Storm Security Advisories

Ubuntu Security Notice 1556-1 - Chen Haogang discovered an integer overflow that could result in memory corruption. A local unprivileged user could use this to crash the system. A flaw was found in the Linux kernel's Reliable Datagram Sockets (RDS) protocol implementation. A local, unprivileged user could use this flaw to cause a denial of service. Some errors where discovered in the Linux kernel's UDF file system, which is used to mount some CD-ROMs and DVDs. An unprivileged local user could use these flaws to crash the system. Various other issues were also addressed.
Tags: user ubuntu system chen-haogang udf-file-system datagram-sockets protocol-implementation

20:07
Ubuntu Security Notice USN-1556-1
» ‎ Packet Storm Security Recent Files

Ubuntu Security Notice 1556-1 - Chen Haogang discovered an integer overflow that could result in memory corruption. A local unprivileged user could use this to crash the system. A flaw was found in the Linux kernel's Reliable Datagram Sockets (RDS) protocol implementation. A local, unprivileged user could use this flaw to cause a denial of service. Some errors where discovered in the Linux kernel's UDF file system, which is used to mount some CD-ROMs and DVDs. An unprivileged local user could use these flaws to crash the system. Various other issues were also addressed.
Tags: user ubuntu system chen-haogang udf-file-system datagram-sockets protocol-implementation

20:07
Ubuntu Security Notice USN-1556-1
» ‎ Packet Storm Security Misc. Files

Ubuntu Security Notice 1556-1 - Chen Haogang discovered an integer overflow that could result in memory corruption. A local unprivileged user could use this to crash the system. A flaw was found in the Linux kernel's Reliable Datagram Sockets (RDS) protocol implementation. A local, unprivileged user could use this flaw to cause a denial of service. Some errors where discovered in the Linux kernel's UDF file system, which is used to mount some CD-ROMs and DVDs. An unprivileged local user could use these flaws to crash the system. Various other issues were also addressed.
Tags: user ubuntu system chen-haogang udf-file-system datagram-sockets protocol-implementation

August 29, 2012
17:36
Ubuntu Security Notice USN-1548-1
» ‎ Packet Storm Security Advisories

Ubuntu Security Notice 1548-1 - Gary Kwong, Christian Holler, Jesse Ruderman, Steve Fink, Bob Clary, Andrew Sutherland, Jason Smith, John Schoenick, Vladimir Vukicevic and Daniel Holbert discovered memory safety issues affecting Firefox. If the user were tricked into opening a specially crafted page, an attacker could possibly exploit these to cause a denial of service via application crash, or potentially execute code with the privileges of the user invoking Firefox. Abhishek Arya discovered multiple use-after-free vulnerabilities. If the user were tricked into opening a specially crafted page, an attacker could exploit these to cause a denial of service via application crash, or potentially execute code with the privileges of the user invoking Firefox. Various other issues were also addressed.
Tags: user ubuntu firefox jason-smith daniel-holbert gary-kwong steve-fink christian-holler andrew-sutherland jesse-ruderman abhishek-arya

17:36
Ubuntu Security Notice USN-1548-1
» ‎ Packet Storm Security Recent Files

Ubuntu Security Notice 1548-1 - Gary Kwong, Christian Holler, Jesse Ruderman, Steve Fink, Bob Clary, Andrew Sutherland, Jason Smith, John Schoenick, Vladimir Vukicevic and Daniel Holbert discovered memory safety issues affecting Firefox. If the user were tricked into opening a specially crafted page, an attacker could possibly exploit these to cause a denial of service via application crash, or potentially execute code with the privileges of the user invoking Firefox. Abhishek Arya discovered multiple use-after-free vulnerabilities. If the user were tricked into opening a specially crafted page, an attacker could exploit these to cause a denial of service via application crash, or potentially execute code with the privileges of the user invoking Firefox. Various other issues were also addressed.
Tags: user ubuntu firefox jason-smith daniel-holbert gary-kwong steve-fink christian-holler andrew-sutherland jesse-ruderman abhishek-arya

17:36
Ubuntu Security Notice USN-1548-1
» ‎ Packet Storm Security Misc. Files

Ubuntu Security Notice 1548-1 - Gary Kwong, Christian Holler, Jesse Ruderman, Steve Fink, Bob Clary, Andrew Sutherland, Jason Smith, John Schoenick, Vladimir Vukicevic and Daniel Holbert discovered memory safety issues affecting Firefox. If the user were tricked into opening a specially crafted page, an attacker could possibly exploit these to cause a denial of service via application crash, or potentially execute code with the privileges of the user invoking Firefox. Abhishek Arya discovered multiple use-after-free vulnerabilities. If the user were tricked into opening a specially crafted page, an attacker could exploit these to cause a denial of service via application crash, or potentially execute code with the privileges of the user invoking Firefox. Various other issues were also addressed.
Tags: user ubuntu firefox jason-smith daniel-holbert gary-kwong steve-fink christian-holler andrew-sutherland jesse-ruderman abhishek-arya

7:17
Zero Day Initiative Advisory 12-170
» ‎ Packet Storm Security Advisories

Zero Day Initiative Advisory 12-170 - This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Hewlett-Packard Application Lifecycle Management. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the XGO.ocx ActiveX control. The control exposed two vulnerable functions: 'SetShapeNodeType', which is vulnerable to a type confusion allowing user specified memory to be used as an object; and 'CopyToFile' which allows an attacker to create and overwrite files on the system of the user invoking the control. The attacker can utilize these vulnerabilities to execute remote code under the context of the process.
Tags: zero control user application-lifecycle-management xgo zero-day

7:17
Zero Day Initiative Advisory 12-170
» ‎ Packet Storm Security Recent Files

Zero Day Initiative Advisory 12-170 - This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Hewlett-Packard Application Lifecycle Management. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the XGO.ocx ActiveX control. The control exposed two vulnerable functions: 'SetShapeNodeType', which is vulnerable to a type confusion allowing user specified memory to be used as an object; and 'CopyToFile' which allows an attacker to create and overwrite files on the system of the user invoking the control. The attacker can utilize these vulnerabilities to execute remote code under the context of the process.
Tags: zero control user application-lifecycle-management xgo zero-day

7:17
Zero Day Initiative Advisory 12-170
» ‎ Packet Storm Security Misc. Files

Zero Day Initiative Advisory 12-170 - This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Hewlett-Packard Application Lifecycle Management. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the XGO.ocx ActiveX control. The control exposed two vulnerable functions: 'SetShapeNodeType', which is vulnerable to a type confusion allowing user specified memory to be used as an object; and 'CopyToFile' which allows an attacker to create and overwrite files on the system of the user invoking the control. The attacker can utilize these vulnerabilities to execute remote code under the context of the process.
Tags: zero control user application-lifecycle-management xgo zero-day

August 17, 2012
15:39
Zero Day Initiative Advisory 12-142
» ‎ Packet Storm Security Advisories

Zero Day Initiative Advisory 12-142 - This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Oracle Java. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the BasicService.showDocument Java Webstart function. This function allows additional parameters to be passed to the browser. Depending on which browser the user has set as default browser this could lead to remote code execution under the context of the current user.
Tags: zero browser user java-webstart basicservice oracle-java

15:39
Zero Day Initiative Advisory 12-142
» ‎ Packet Storm Security Recent Files

Zero Day Initiative Advisory 12-142 - This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Oracle Java. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the BasicService.showDocument Java Webstart function. This function allows additional parameters to be passed to the browser. Depending on which browser the user has set as default browser this could lead to remote code execution under the context of the current user.
Tags: zero browser user java-webstart basicservice oracle-java

15:39
Zero Day Initiative Advisory 12-142
» ‎ Packet Storm Security Misc. Files

Zero Day Initiative Advisory 12-142 - This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Oracle Java. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the BasicService.showDocument Java Webstart function. This function allows additional parameters to be passed to the browser. Depending on which browser the user has set as default browser this could lead to remote code execution under the context of the current user.
Tags: zero browser user java-webstart basicservice oracle-java

August 14, 2012
17:38
Ubuntu Security Notice USN-1539-1
» ‎ Packet Storm Security Advisories

Ubuntu Security Notice 1539-1 - An error was discovered in the Linux kernel's network TUN/TAP device implementation. A local user with access to the TUN/TAP interface (which is not available to unprivileged users until granted by a root user) could exploit this flaw to crash the system or potential gain administrative privileges. Ulrich Obergfell discovered an error in the Linux kernel's memory management subsystem on 32 bit PAE systems with more than 4GB of memory installed. A local unprivileged user could exploit this flaw to crash the system. Various other issues were also addressed.
Tags: user ubuntu security ulrich-obergfell memory-management-subsystem linux-kernel administrative-privileges

17:38
Ubuntu Security Notice USN-1539-1
» ‎ Packet Storm Security Recent Files

Ubuntu Security Notice 1539-1 - An error was discovered in the Linux kernel's network TUN/TAP device implementation. A local user with access to the TUN/TAP interface (which is not available to unprivileged users until granted by a root user) could exploit this flaw to crash the system or potential gain administrative privileges. Ulrich Obergfell discovered an error in the Linux kernel's memory management subsystem on 32 bit PAE systems with more than 4GB of memory installed. A local unprivileged user could exploit this flaw to crash the system. Various other issues were also addressed.
Tags: user ubuntu security ulrich-obergfell memory-management-subsystem linux-kernel administrative-privileges

17:38
Ubuntu Security Notice USN-1539-1
» ‎ Packet Storm Security Misc. Files

Ubuntu Security Notice 1539-1 - An error was discovered in the Linux kernel's network TUN/TAP device implementation. A local user with access to the TUN/TAP interface (which is not available to unprivileged users until granted by a root user) could exploit this flaw to crash the system or potential gain administrative privileges. Ulrich Obergfell discovered an error in the Linux kernel's memory management subsystem on 32 bit PAE systems with more than 4GB of memory installed. A local unprivileged user could exploit this flaw to crash the system. Various other issues were also addressed.
Tags: user ubuntu security ulrich-obergfell memory-management-subsystem linux-kernel administrative-privileges

17:38
Ubuntu Security Notice USN-1538-1
» ‎ Packet Storm Security Advisories

Ubuntu Security Notice 1538-1 - An error was discovered in the Linux kernel's network TUN/TAP device implementation. A local user with access to the TUN/TAP interface (which is not available to unprivileged users until granted by a root user) could exploit this flaw to crash the system or potential gain administrative privileges. A flaw was found in the Linux kernel's Reliable Datagram Sockets (RDS) protocol implementation. A local, unprivileged user could use this flaw to cause a denial of service. Various other issues were also addressed.
Tags: user ubuntu flaw datagram-sockets protocol-implementation linux-kernel

17:38
Ubuntu Security Notice USN-1538-1
» ‎ Packet Storm Security Recent Files

Ubuntu Security Notice 1538-1 - An error was discovered in the Linux kernel's network TUN/TAP device implementation. A local user with access to the TUN/TAP interface (which is not available to unprivileged users until granted by a root user) could exploit this flaw to crash the system or potential gain administrative privileges. A flaw was found in the Linux kernel's Reliable Datagram Sockets (RDS) protocol implementation. A local, unprivileged user could use this flaw to cause a denial of service. Various other issues were also addressed.
Tags: user ubuntu flaw datagram-sockets protocol-implementation linux-kernel

17:38
Ubuntu Security Notice USN-1538-1
» ‎ Packet Storm Security Misc. Files

Ubuntu Security Notice 1538-1 - An error was discovered in the Linux kernel's network TUN/TAP device implementation. A local user with access to the TUN/TAP interface (which is not available to unprivileged users until granted by a root user) could exploit this flaw to crash the system or potential gain administrative privileges. A flaw was found in the Linux kernel's Reliable Datagram Sockets (RDS) protocol implementation. A local, unprivileged user could use this flaw to cause a denial of service. Various other issues were also addressed.
Tags: user ubuntu flaw datagram-sockets protocol-implementation linux-kernel

August 13, 2012
8:40
Ubuntu Security Notice USN-1535-1
» ‎ Packet Storm Security Advisories

Ubuntu Security Notice 1535-1 - An error was discovered in the Linux kernel's network TUN/TAP device implementation. A local user with access to the TUN/TAP interface (which is not available to unprivileged users until granted by a root user) could exploit this flaw to crash the system or potential gain administrative privileges. An error was discovered in the Linux kernel's memory subsystem (hugetlb). An unprivileged local user could exploit this flaw to cause a denial of service (crash the system). Various other issues were also addressed.
Tags: user ubuntu security linux-kernel memory-subsystem administrative-privileges

8:40
Ubuntu Security Notice USN-1535-1
» ‎ Packet Storm Security Recent Files

Ubuntu Security Notice 1535-1 - An error was discovered in the Linux kernel's network TUN/TAP device implementation. A local user with access to the TUN/TAP interface (which is not available to unprivileged users until granted by a root user) could exploit this flaw to crash the system or potential gain administrative privileges. An error was discovered in the Linux kernel's memory subsystem (hugetlb). An unprivileged local user could exploit this flaw to cause a denial of service (crash the system). Various other issues were also addressed.
Tags: user ubuntu security linux-kernel memory-subsystem administrative-privileges

8:40
Ubuntu Security Notice USN-1535-1
» ‎ Packet Storm Security Misc. Files

Ubuntu Security Notice 1535-1 - An error was discovered in the Linux kernel's network TUN/TAP device implementation. A local user with access to the TUN/TAP interface (which is not available to unprivileged users until granted by a root user) could exploit this flaw to crash the system or potential gain administrative privileges. An error was discovered in the Linux kernel's memory subsystem (hugetlb). An unprivileged local user could exploit this flaw to cause a denial of service (crash the system). Various other issues were also addressed.
Tags: user ubuntu security linux-kernel memory-subsystem administrative-privileges

8:40
Ubuntu Security Notice USN-1534-1
» ‎ Packet Storm Security Advisories

Ubuntu Security Notice 1534-1 - An error was discovered in the Linux kernel's network TUN/TAP device implementation. A local user with access to the TUN/TAP interface (which is not available to unprivileged users until granted by a root user) could exploit this flaw to crash the system or potential gain administrative privileges. An error was discovered in the Linux kernel's memory subsystem (hugetlb). An unprivileged local user could exploit this flaw to cause a denial of service (crash the system). Various other issues were also addressed.
Tags: user ubuntu security linux-kernel memory-subsystem administrative-privileges

8:40
Ubuntu Security Notice USN-1534-1
» ‎ Packet Storm Security Recent Files

Ubuntu Security Notice 1534-1 - An error was discovered in the Linux kernel's network TUN/TAP device implementation. A local user with access to the TUN/TAP interface (which is not available to unprivileged users until granted by a root user) could exploit this flaw to crash the system or potential gain administrative privileges. An error was discovered in the Linux kernel's memory subsystem (hugetlb). An unprivileged local user could exploit this flaw to cause a denial of service (crash the system). Various other issues were also addressed.
Tags: user ubuntu security linux-kernel memory-subsystem administrative-privileges

8:40
Ubuntu Security Notice USN-1534-1
» ‎ Packet Storm Security Misc. Files

Ubuntu Security Notice 1534-1 - An error was discovered in the Linux kernel's network TUN/TAP device implementation. A local user with access to the TUN/TAP interface (which is not available to unprivileged users until granted by a root user) could exploit this flaw to crash the system or potential gain administrative privileges. An error was discovered in the Linux kernel's memory subsystem (hugetlb). An unprivileged local user could exploit this flaw to cause a denial of service (crash the system). Various other issues were also addressed.
Tags: user ubuntu security linux-kernel memory-subsystem administrative-privileges

8:40
Ubuntu Security Notice USN-1533-1
» ‎ Packet Storm Security Advisories

Ubuntu Security Notice 1533-1 - An error was discovered in the Linux kernel's network TUN/TAP device implementation. A local user with access to the TUN/TAP interface (which is not available to unprivileged users until granted by a root user) could exploit this flaw to crash the system or potential gain administrative privileges. Ulrich Obergfell discovered an error in the Linux kernel's memory management subsystem on 32 bit PAE systems with more than 4GB of memory installed. A local unprivileged user could exploit this flaw to crash the system. Various other issues were also addressed.
Tags: user ubuntu security ulrich-obergfell memory-management-subsystem linux-kernel administrative-privileges

8:40
Ubuntu Security Notice USN-1533-1
» ‎ Packet Storm Security Recent Files

Ubuntu Security Notice 1533-1 - An error was discovered in the Linux kernel's network TUN/TAP device implementation. A local user with access to the TUN/TAP interface (which is not available to unprivileged users until granted by a root user) could exploit this flaw to crash the system or potential gain administrative privileges. Ulrich Obergfell discovered an error in the Linux kernel's memory management subsystem on 32 bit PAE systems with more than 4GB of memory installed. A local unprivileged user could exploit this flaw to crash the system. Various other issues were also addressed.
Tags: user ubuntu security ulrich-obergfell memory-management-subsystem linux-kernel administrative-privileges

8:40
Ubuntu Security Notice USN-1533-1
» ‎ Packet Storm Security Misc. Files

Ubuntu Security Notice 1533-1 - An error was discovered in the Linux kernel's network TUN/TAP device implementation. A local user with access to the TUN/TAP interface (which is not available to unprivileged users until granted by a root user) could exploit this flaw to crash the system or potential gain administrative privileges. Ulrich Obergfell discovered an error in the Linux kernel's memory management subsystem on 32 bit PAE systems with more than 4GB of memory installed. A local unprivileged user could exploit this flaw to crash the system. Various other issues were also addressed.
Tags: user ubuntu security ulrich-obergfell memory-management-subsystem linux-kernel administrative-privileges

8:39
Ubuntu Security Notice USN-1532-1
» ‎ Packet Storm Security Advisories

Ubuntu Security Notice 1532-1 - An error was discovered in the Linux kernel's network TUN/TAP device implementation. A local user with access to the TUN/TAP interface (which is not available to unprivileged users until granted by a root user) could exploit this flaw to crash the system or potential gain administrative privileges. Ulrich Obergfell discovered an error in the Linux kernel's memory management subsystem on 32 bit PAE systems with more than 4GB of memory installed. A local unprivileged user could exploit this flaw to crash the system. Various other issues were also addressed.
Tags: user ubuntu security ulrich-obergfell memory-management-subsystem linux-kernel administrative-privileges

8:39
Ubuntu Security Notice USN-1532-1
» ‎ Packet Storm Security Recent Files

Ubuntu Security Notice 1532-1 - An error was discovered in the Linux kernel's network TUN/TAP device implementation. A local user with access to the TUN/TAP interface (which is not available to unprivileged users until granted by a root user) could exploit this flaw to crash the system or potential gain administrative privileges. Ulrich Obergfell discovered an error in the Linux kernel's memory management subsystem on 32 bit PAE systems with more than 4GB of memory installed. A local unprivileged user could exploit this flaw to crash the system. Various other issues were also addressed.
Tags: user ubuntu security ulrich-obergfell memory-management-subsystem linux-kernel administrative-privileges

8:39
Ubuntu Security Notice USN-1532-1
» ‎ Packet Storm Security Misc. Files

Ubuntu Security Notice 1532-1 - An error was discovered in the Linux kernel's network TUN/TAP device implementation. A local user with access to the TUN/TAP interface (which is not available to unprivileged users until granted by a root user) could exploit this flaw to crash the system or potential gain administrative privileges. Ulrich Obergfell discovered an error in the Linux kernel's memory management subsystem on 32 bit PAE systems with more than 4GB of memory installed. A local unprivileged user could exploit this flaw to crash the system. Various other issues were also addressed.
Tags: user ubuntu security ulrich-obergfell memory-management-subsystem linux-kernel administrative-privileges

8:39
Ubuntu Security Notice USN-1531-1
» ‎ Packet Storm Security Advisories

Ubuntu Security Notice 1531-1 - An error was discovered in the Linux kernel's network TUN/TAP device implementation. A local user with access to the TUN/TAP interface (which is not available to unprivileged users until granted by a root user) could exploit this flaw to crash the system or potential gain administrative privileges. A flaw was found in the Linux kernel's Reliable Datagram Sockets (RDS) protocol implementation. A local, unprivileged user could use this flaw to cause a denial of service. Various other issues were also addressed.
Tags: user ubuntu flaw datagram-sockets protocol-implementation linux-kernel

8:39
Ubuntu Security Notice USN-1531-1
» ‎ Packet Storm Security Recent Files

Ubuntu Security Notice 1531-1 - An error was discovered in the Linux kernel's network TUN/TAP device implementation. A local user with access to the TUN/TAP interface (which is not available to unprivileged users until granted by a root user) could exploit this flaw to crash the system or potential gain administrative privileges. A flaw was found in the Linux kernel's Reliable Datagram Sockets (RDS) protocol implementation. A local, unprivileged user could use this flaw to cause a denial of service. Various other issues were also addressed.
Tags: user ubuntu flaw datagram-sockets protocol-implementation linux-kernel

8:39
Ubuntu Security Notice USN-1531-1
» ‎ Packet Storm Security Misc. Files

Ubuntu Security Notice 1531-1 - An error was discovered in the Linux kernel's network TUN/TAP device implementation. A local user with access to the TUN/TAP interface (which is not available to unprivileged users until granted by a root user) could exploit this flaw to crash the system or potential gain administrative privileges. A flaw was found in the Linux kernel's Reliable Datagram Sockets (RDS) protocol implementation. A local, unprivileged user could use this flaw to cause a denial of service. Various other issues were also addressed.
Tags: user ubuntu flaw datagram-sockets protocol-implementation linux-kernel

8:24
Ubuntu Security Notice USN-1529-1
» ‎ Packet Storm Security Advisories

Ubuntu Security Notice 1529-1 - A flaw was discovered in the Linux kernel's macvtap device driver, which is used in KVM (Kernel-based Virtual Machine) to create a network bridge between host and guest. A privileged user in a guest could exploit this flaw to crash the host, if the vhost_net module is loaded with the experimental_zcopytx option enabled. An error was discovered in the Linux kernel's network TUN/TAP device implementation. A local user with access to the TUN/TAP interface (which is not available to unprivileged users until granted by a root user) could exploit this flaw to crash the system or potential gain administrative privileges. Various other issues were also addressed.
Tags: user ubuntu flaw linux-kernel network-bridge administrative-privileges

8:24
Ubuntu Security Notice USN-1529-1
» ‎ Packet Storm Security Recent Files

Ubuntu Security Notice 1529-1 - A flaw was discovered in the Linux kernel's macvtap device driver, which is used in KVM (Kernel-based Virtual Machine) to create a network bridge between host and guest. A privileged user in a guest could exploit this flaw to crash the host, if the vhost_net module is loaded with the experimental_zcopytx option enabled. An error was discovered in the Linux kernel's network TUN/TAP device implementation. A local user with access to the TUN/TAP interface (which is not available to unprivileged users until granted by a root user) could exploit this flaw to crash the system or potential gain administrative privileges. Various other issues were also addressed.
Tags: user ubuntu flaw linux-kernel network-bridge administrative-privileges

8:24
Ubuntu Security Notice USN-1529-1
» ‎ Packet Storm Security Misc. Files

Ubuntu Security Notice 1529-1 - A flaw was discovered in the Linux kernel's macvtap device driver, which is used in KVM (Kernel-based Virtual Machine) to create a network bridge between host and guest. A privileged user in a guest could exploit this flaw to crash the host, if the vhost_net module is loaded with the experimental_zcopytx option enabled. An error was discovered in the Linux kernel's network TUN/TAP device implementation. A local user with access to the TUN/TAP interface (which is not available to unprivileged users until granted by a root user) could exploit this flaw to crash the system or potential gain administrative privileges. Various other issues were also addressed.
Tags: user ubuntu flaw linux-kernel network-bridge administrative-privileges

8:23
Ubuntu Security Notice USN-1514-1
» ‎ Packet Storm Security Advisories

Ubuntu Security Notice 1514-1 - A flaw was discovered in the Linux kernel's macvtap device driver, which is used in KVM (Kernel-based Virtual Machine) to create a network bridge between host and guest. A privileged user in a guest could exploit this flaw to crash the host, if the vhost_net module is loaded with the experimental_zcopytx option enabled. An error was discovered in the Linux kernel's network TUN/TAP device implementation. A local user with access to the TUN/TAP interface (which is not available to unprivileged users until granted by a root user) could exploit this flaw to crash the system or potential gain administrative privileges. Various other issues were also addressed.
Tags: user ubuntu flaw linux-kernel network-bridge administrative-privileges

8:23
Ubuntu Security Notice USN-1514-1
» ‎ Packet Storm Security Recent Files

Ubuntu Security Notice 1514-1 - A flaw was discovered in the Linux kernel's macvtap device driver, which is used in KVM (Kernel-based Virtual Machine) to create a network bridge between host and guest. A privileged user in a guest could exploit this flaw to crash the host, if the vhost_net module is loaded with the experimental_zcopytx option enabled. An error was discovered in the Linux kernel's network TUN/TAP device implementation. A local user with access to the TUN/TAP interface (which is not available to unprivileged users until granted by a root user) could exploit this flaw to crash the system or potential gain administrative privileges. Various other issues were also addressed.
Tags: user ubuntu flaw linux-kernel network-bridge administrative-privileges

8:23
Ubuntu Security Notice USN-1514-1
» ‎ Packet Storm Security Misc. Files

Ubuntu Security Notice 1514-1 - A flaw was discovered in the Linux kernel's macvtap device driver, which is used in KVM (Kernel-based Virtual Machine) to create a network bridge between host and guest. A privileged user in a guest could exploit this flaw to crash the host, if the vhost_net module is loaded with the experimental_zcopytx option enabled. An error was discovered in the Linux kernel's network TUN/TAP device implementation. A local user with access to the TUN/TAP interface (which is not available to unprivileged users until granted by a root user) could exploit this flaw to crash the system or potential gain administrative privileges. Various other issues were also addressed.
Tags: user ubuntu flaw linux-kernel network-bridge administrative-privileges

0:00
Vuln: Oracle MySQL CVE-2012-2122 User Login Security Bypass Vulnerability
» ‎ SecurityFocus Vulnerabilities

Oracle MySQL CVE-2012-2122 User Login Security Bypass Vulnerability
Tags: oracle mysql user cve vulnerability

August 07, 2012
17:00
WordPress Cimy User Extra Fields Plugin Arbitrary File Upload Vulnerability
» ‎ SecuriTeam

The Cimy User Extra Fields plug-in for WordPress is prone to a vulnerability that lets attackers upload arbitrary files. The issue occurs because the application fails to adequately sanitize user-supplied input..
Tags: wordpress cimy user arbitrary-files file-upload attackers

August 03, 2012
17:38
Yahoo User Sues Over Password Breach
» ‎ Packet Storm Security Headlines

Yahoo User Sues Over Password Breach
Tags: yahoo sues user breach

July 24, 2012
12:46
[Video] How To Design A Decent User Interface
» ‎ SecDocs

Authors: Corinna Habets
Tags: technology
Event: Chaos Communication Congress 23th (23C3) 2006
Abstract: Prepare to be brainwashed! This talk wants you to switch from the developer's perspective to that of an average user to design better UIs. Let's face it, there's a lot of 'hard to use'-software out there. Worse, we're among those who program it. If we now consider that for average users the UI practically _is_ the application (i.e. as much as we may wish to, they don't care whether it's programmed well, only if they can use it) this is a catastrophe. Instead of empowering users, software often leaves them frustrated. This talk wants nothing less than to change your view on software and the way you develop it. The talk will introduce 'user-centered' design and show you how to: Know the user - Know the task - Act accordingly! Disclaimer: This presentation is neither about whether qt or fltk is better, nor about the fancying-up of GUIs.
Tags: talk Software user corinna-habets chaos-communication-congress user-centered-design fltk
12:33
[Paper] How To Design A Decent User Interface
» ‎ SecDocs

Authors: Corinna Habets
Tags: technology
Event: Chaos Communication Congress 23th (23C3) 2006
Abstract: Prepare to be brainwashed! This talk wants you to switch from the developer's perspective to that of an average user to design better UIs. Let's face it, there's a lot of 'hard to use'-software out there. Worse, we're among those who program it. If we now consider that for average users the UI practically _is_ the application (i.e. as much as we may wish to, they don't care whether it's programmed well, only if they can use it) this is a catastrophe. Instead of empowering users, software often leaves them frustrated. This talk wants nothing less than to change your view on software and the way you develop it. The talk will introduce 'user-centered' design and show you how to: Know the user - Know the task - Act accordingly! Disclaimer: This presentation is neither about whether qt or fltk is better, nor about the fancying-up of GUIs.
Tags: talk Software user corinna-habets chaos-communication-congress user-centered-design fltk
12:33
[Slides] How To Design A Decent User Interface
» ‎ SecDocs

Authors: Corinna Habets
Tags: technology
Event: Chaos Communication Congress 23th (23C3) 2006
Abstract: Prepare to be brainwashed! This talk wants you to switch from the developer's perspective to that of an average user to design better UIs. Let's face it, there's a lot of 'hard to use'-software out there. Worse, we're among those who program it. If we now consider that for average users the UI practically _is_ the application (i.e. as much as we may wish to, they don't care whether it's programmed well, only if they can use it) this is a catastrophe. Instead of empowering users, software often leaves them frustrated. This talk wants nothing less than to change your view on software and the way you develop it. The talk will introduce 'user-centered' design and show you how to: Know the user - Know the task - Act accordingly! Disclaimer: This presentation is neither about whether qt or fltk is better, nor about the fancying-up of GUIs.
Tags: talk Software user corinna-habets chaos-communication-congress user-centered-design fltk
12:32
[Audio] How To Design A Decent User Interface
» ‎ SecDocs

Authors: Corinna Habets
Tags: technology
Event: Chaos Communication Congress 23th (23C3) 2006
Abstract: Prepare to be brainwashed! This talk wants you to switch from the developer's perspective to that of an average user to design better UIs. Let's face it, there's a lot of 'hard to use'-software out there. Worse, we're among those who program it. If we now consider that for average users the UI practically _is_ the application (i.e. as much as we may wish to, they don't care whether it's programmed well, only if they can use it) this is a catastrophe. Instead of empowering users, software often leaves them frustrated. This talk wants nothing less than to change your view on software and the way you develop it. The talk will introduce 'user-centered' design and show you how to: Know the user - Know the task - Act accordingly! Disclaimer: This presentation is neither about whether qt or fltk is better, nor about the fancying-up of GUIs.
Tags: talk Software user corinna-habets chaos-communication-congress user-centered-design fltk

July 18, 2012
13:22
WordPress Cimy User Extra Fields 2.3.7 Shell Upload
» ‎ Packet Storm Security Exploits

WordPress Cimy User Extra Fields plugin version 2.3.7 suffers from a remote shell upload vulnerability.
Tags: wordpress cimy user remote-shell vulnerability

13:22
WordPress Cimy User Extra Fields 2.3.7 Shell Upload
» ‎ Packet Storm Security Recent Files

WordPress Cimy User Extra Fields plugin version 2.3.7 suffers from a remote shell upload vulnerability.
Tags: wordpress cimy user remote-shell vulnerability

13:22
WordPress Cimy User Extra Fields 2.3.7 Shell Upload
» ‎ Packet Storm Security Misc. Files

WordPress Cimy User Extra Fields plugin version 2.3.7 suffers from a remote shell upload vulnerability.
Tags: wordpress cimy user remote-shell vulnerability

July 17, 2012
17:37
Ubuntu Security Notice USN-1510-1
» ‎ Packet Storm Security Advisories

Ubuntu Security Notice 1510-1 - Benoit Jacob, Jesse Ruderman, Christian Holler, Bill McCloskey, Brian Smith, Gary Kwong, Christoph Diehl, Chris Jones, Brad Lassey, and Kyle Huey discovered memory safety issues affecting Thunderbird. If the user were tricked into opening a specially crafted page, an attacker could possibly exploit these to cause a denial of service via application crash, or potentially execute code with the privileges of the user invoking Thunderbird. Abhishek Arya discovered four memory safety issues affecting Thunderbird. If the user were tricked into opening a specially crafted page, an attacker could possibly exploit these to cause a denial of service via application crash, or potentially execute code with the privileges of the user invoking Thunderbird. Various other issues were also addressed.
Tags: user ubuntu thunderbird brad-lassey chris-jones brian-smith benoit-jacob gary-kwong christian-holler jesse-ruderman bill-mccloskey

17:37
Ubuntu Security Notice USN-1510-1
» ‎ Packet Storm Security Recent Files

Ubuntu Security Notice 1510-1 - Benoit Jacob, Jesse Ruderman, Christian Holler, Bill McCloskey, Brian Smith, Gary Kwong, Christoph Diehl, Chris Jones, Brad Lassey, and Kyle Huey discovered memory safety issues affecting Thunderbird. If the user were tricked into opening a specially crafted page, an attacker could possibly exploit these to cause a denial of service via application crash, or potentially execute code with the privileges of the user invoking Thunderbird. Abhishek Arya discovered four memory safety issues affecting Thunderbird. If the user were tricked into opening a specially crafted page, an attacker could possibly exploit these to cause a denial of service via application crash, or potentially execute code with the privileges of the user invoking Thunderbird. Various other issues were also addressed.
Tags: user ubuntu thunderbird brad-lassey chris-jones brian-smith benoit-jacob gary-kwong christian-holler jesse-ruderman bill-mccloskey

17:37
Ubuntu Security Notice USN-1510-1
» ‎ Packet Storm Security Misc. Files

Ubuntu Security Notice 1510-1 - Benoit Jacob, Jesse Ruderman, Christian Holler, Bill McCloskey, Brian Smith, Gary Kwong, Christoph Diehl, Chris Jones, Brad Lassey, and Kyle Huey discovered memory safety issues affecting Thunderbird. If the user were tricked into opening a specially crafted page, an attacker could possibly exploit these to cause a denial of service via application crash, or potentially execute code with the privileges of the user invoking Thunderbird. Abhishek Arya discovered four memory safety issues affecting Thunderbird. If the user were tricked into opening a specially crafted page, an attacker could possibly exploit these to cause a denial of service via application crash, or potentially execute code with the privileges of the user invoking Thunderbird. Various other issues were also addressed.
Tags: user ubuntu thunderbird brad-lassey chris-jones brian-smith benoit-jacob gary-kwong christian-holler jesse-ruderman bill-mccloskey

July 11, 2012
7:19
Formspring Disables User Passwords In Security Breach
» ‎ Packet Storm Security Headlines

Formspring Disables User Passwords In Security Breach
Tags: passwords disables user security-breach

0:00
Vuln: Oracle MySQL CVE-2012-2122 User Login Security Bypass Vulnerability
» ‎ SecurityFocus Vulnerabilities

Oracle MySQL CVE-2012-2122 User Login Security Bypass Vulnerability
Tags: oracle mysql user cve vulnerability

July 05, 2012
11:33
Ubuntu Security Notice USN-1498-1
» ‎ Packet Storm Security Advisories

Ubuntu Security Notice 1498-1 - It was discovered that the TIFF library incorrectly handled certain malformed TIFF images. If a user or automated system were tricked into opening a specially crafted TIFF image, a remote attacker could crash the application, leading to a denial of service, or possibly execute arbitrary code with user privileges. It was discovered that the tiff2pdf utility incorrectly handled certain malformed TIFF images. If a user or automated system were tricked into opening a specially crafted TIFF image, a remote attacker could crash the application, leading to a denial of service, or possibly execute arbitrary code with user privileges. Various other issues were also addressed.
Tags: user ubuntu security tiff tiff-library tiff-images tiff-image

11:33
Ubuntu Security Notice USN-1498-1
» ‎ Packet Storm Security Recent Files

Ubuntu Security Notice 1498-1 - It was discovered that the TIFF library incorrectly handled certain malformed TIFF images. If a user or automated system were tricked into opening a specially crafted TIFF image, a remote attacker could crash the application, leading to a denial of service, or possibly execute arbitrary code with user privileges. It was discovered that the tiff2pdf utility incorrectly handled certain malformed TIFF images. If a user or automated system were tricked into opening a specially crafted TIFF image, a remote attacker could crash the application, leading to a denial of service, or possibly execute arbitrary code with user privileges. Various other issues were also addressed.
Tags: user ubuntu security tiff tiff-library tiff-images tiff-image

11:33
Ubuntu Security Notice USN-1498-1
» ‎ Packet Storm Security Misc. Files

Ubuntu Security Notice 1498-1 - It was discovered that the TIFF library incorrectly handled certain malformed TIFF images. If a user or automated system were tricked into opening a specially crafted TIFF image, a remote attacker could crash the application, leading to a denial of service, or possibly execute arbitrary code with user privileges. It was discovered that the tiff2pdf utility incorrectly handled certain malformed TIFF images. If a user or automated system were tricked into opening a specially crafted TIFF image, a remote attacker could crash the application, leading to a denial of service, or possibly execute arbitrary code with user privileges. Various other issues were also addressed.
Tags: user ubuntu security tiff tiff-library tiff-images tiff-image

July 03, 2012
9:27
Ubuntu Security Notice USN-1495-1
» ‎ Packet Storm Security Advisories

Ubuntu Security Notice 1495-1 - Integer overflows were discovered in the graphics loading code of several different image types. If a user were tricked into opening a specially crafted file, an attacker could cause LibreOffice to crash or possibly execute arbitrary code with the privileges of the user invoking the program. Sven Jacobi discovered an integer overflow when processing Escher graphics records. If a user were tricked into opening a specially crafted PowerPoint file, an attacker could cause LibreOffice to crash or possibly execute arbitrary code with the privileges of the user invoking the program. Various other issues were also addressed.
Tags: user code ubuntu sven-jacobi graphics-loading integer-overflow loading-code

9:27
Ubuntu Security Notice USN-1495-1
» ‎ Packet Storm Security Recent Files

Ubuntu Security Notice 1495-1 - Integer overflows were discovered in the graphics loading code of several different image types. If a user were tricked into opening a specially crafted file, an attacker could cause LibreOffice to crash or possibly execute arbitrary code with the privileges of the user invoking the program. Sven Jacobi discovered an integer overflow when processing Escher graphics records. If a user were tricked into opening a specially crafted PowerPoint file, an attacker could cause LibreOffice to crash or possibly execute arbitrary code with the privileges of the user invoking the program. Various other issues were also addressed.
Tags: user code ubuntu sven-jacobi graphics-loading integer-overflow loading-code

9:27
Ubuntu Security Notice USN-1495-1
» ‎ Packet Storm Security Misc. Files

Ubuntu Security Notice 1495-1 - Integer overflows were discovered in the graphics loading code of several different image types. If a user were tricked into opening a specially crafted file, an attacker could cause LibreOffice to crash or possibly execute arbitrary code with the privileges of the user invoking the program. Sven Jacobi discovered an integer overflow when processing Escher graphics records. If a user were tricked into opening a specially crafted PowerPoint file, an attacker could cause LibreOffice to crash or possibly execute arbitrary code with the privileges of the user invoking the program. Various other issues were also addressed.
Tags: user code ubuntu sven-jacobi graphics-loading integer-overflow loading-code

0:00
Vuln: AccountsService 'user_change_icon_file_authorized_cb()' Function File Disclosure Vulnerability
» ‎ SecurityFocus Vulnerabilities

AccountsService 'user_change_icon_file_authorized_cb()' Function File Disclosure Vulnerability
Tags: user accountsservice file change-icon vulnerability
June 28, 2012
0:00
Vuln: AccountsService 'user_change_icon_file_authorized_cb()' Function File Disclosure Vulnerability
» ‎ SecurityFocus Vulnerabilities

AccountsService 'user_change_icon_file_authorized_cb()' Function File Disclosure Vulnerability
Tags: user accountsservice file change-icon vulnerability
June 27, 2012
0:00
Vuln: Oracle MySQL CVE-2012-2122 User Login Security Bypass Vulnerability
» ‎ SecurityFocus Vulnerabilities

Oracle MySQL CVE-2012-2122 User Login Security Bypass Vulnerability
Tags: oracle mysql user cve vulnerability

June 26, 2012
16:44
Red Hat Security Advisory 2012-1042-01
» ‎ Packet Storm Security Advisories

Red Hat Security Advisory 2012-1042-01 - The kernel packages contain the Linux kernel, the core of any Linux operating system. A local, unprivileged user could use an integer overflow flaw in drm_mode_dirtyfb_ioctl() to cause a denial of service or escalate their privileges. It was found that the kvm_vm_ioctl_assign_device() function in the KVM subsystem of a Linux kernel did not check if the user requesting device assignment was privileged or not. A local, unprivileged user on the host could assign unused PCI devices, or even devices that were in use and whose resources were not properly claimed by the respective drivers, which could result in the host crashing.
Tags: user kernel linux kernel-packages red-hat-security linux-kernel

16:44
Red Hat Security Advisory 2012-1042-01
» ‎ Packet Storm Security Recent Files

Red Hat Security Advisory 2012-1042-01 - The kernel packages contain the Linux kernel, the core of any Linux operating system. A local, unprivileged user could use an integer overflow flaw in drm_mode_dirtyfb_ioctl() to cause a denial of service or escalate their privileges. It was found that the kvm_vm_ioctl_assign_device() function in the KVM subsystem of a Linux kernel did not check if the user requesting device assignment was privileged or not. A local, unprivileged user on the host could assign unused PCI devices, or even devices that were in use and whose resources were not properly claimed by the respective drivers, which could result in the host crashing.
Tags: user kernel linux kernel-packages red-hat-security linux-kernel

16:44
Red Hat Security Advisory 2012-1042-01
» ‎ Packet Storm Security Misc. Files

Red Hat Security Advisory 2012-1042-01 - The kernel packages contain the Linux kernel, the core of any Linux operating system. A local, unprivileged user could use an integer overflow flaw in drm_mode_dirtyfb_ioctl() to cause a denial of service or escalate their privileges. It was found that the kvm_vm_ioctl_assign_device() function in the KVM subsystem of a Linux kernel did not check if the user requesting device assignment was privileged or not. A local, unprivileged user on the host could assign unused PCI devices, or even devices that were in use and whose resources were not properly claimed by the respective drivers, which could result in the host crashing.
Tags: user kernel linux kernel-packages red-hat-security linux-kernel

June 21, 2012
20:48
Zero Day Initiative Advisory 12-100
» ‎ Packet Storm Security Recent Files

Zero Day Initiative Advisory 12-100 - This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of HP OpenView Performance Manager. Authentication is not required to exploit this vulnerability. The specific flaw exists within the PMParamHandler component of Performance Manager, which is served via an Apache Tomcat instance that listens on TCP port 8081. The process receives a filename from a remote user and performs insufficient validation of the provided file path. Additionally, the user can specify an arbitrary extension due to premature truncation resulting from an embedded null byte. Remote unauthenticated attackers can exploit this vulnerability by sending malformed message packets to the target, which could lead to a directory traversing arbitrary file write and ultimately remote code execution under the context of the SYSTEM user.
Tags: user zero vulnerability manager.-authentication apache-tomcat code-execution performance-manager

20:48
Zero Day Initiative Advisory 12-100
» ‎ Packet Storm Security Misc. Files

Zero Day Initiative Advisory 12-100 - This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of HP OpenView Performance Manager. Authentication is not required to exploit this vulnerability. The specific flaw exists within the PMParamHandler component of Performance Manager, which is served via an Apache Tomcat instance that listens on TCP port 8081. The process receives a filename from a remote user and performs insufficient validation of the provided file path. Additionally, the user can specify an arbitrary extension due to premature truncation resulting from an embedded null byte. Remote unauthenticated attackers can exploit this vulnerability by sending malformed message packets to the target, which could lead to a directory traversing arbitrary file write and ultimately remote code execution under the context of the SYSTEM user.
Tags: user zero vulnerability manager.-authentication apache-tomcat code-execution performance-manager

June 20, 2012
7:24
Red Hat Security Advisory 2012-0939-04
» ‎ Packet Storm Security Advisories

Red Hat Security Advisory 2012-0939-04 - X.Org is an open source implementation of the X Window System. It provides the basic low-level functionality that full-fledged graphical user interfaces are designed upon. A flaw was found in the way the X.Org server handled lock files. A local user with access to the system console could use this flaw to determine the existence of a file in a directory not accessible to the user, via a symbolic link attack. A race condition was found in the way the X.Org server managed temporary lock files. A local attacker could use this flaw to perform a symbolic link attack, allowing them to make an arbitrary file world readable, leading to the disclosure of sensitive information.
Tags: user red flaw x.org x-window open-source-implementation graphical-user-interfaces x-window-system

7:24
Red Hat Security Advisory 2012-0939-04
» ‎ Packet Storm Security Recent Files

Red Hat Security Advisory 2012-0939-04 - X.Org is an open source implementation of the X Window System. It provides the basic low-level functionality that full-fledged graphical user interfaces are designed upon. A flaw was found in the way the X.Org server handled lock files. A local user with access to the system console could use this flaw to determine the existence of a file in a directory not accessible to the user, via a symbolic link attack. A race condition was found in the way the X.Org server managed temporary lock files. A local attacker could use this flaw to perform a symbolic link attack, allowing them to make an arbitrary file world readable, leading to the disclosure of sensitive information.
Tags: user red flaw x.org x-window open-source-implementation graphical-user-interfaces x-window-system

7:24
Red Hat Security Advisory 2012-0939-04
» ‎ Packet Storm Security Misc. Files

Red Hat Security Advisory 2012-0939-04 - X.Org is an open source implementation of the X Window System. It provides the basic low-level functionality that full-fledged graphical user interfaces are designed upon. A flaw was found in the way the X.Org server handled lock files. A local user with access to the system console could use this flaw to determine the existence of a file in a directory not accessible to the user, via a symbolic link attack. A race condition was found in the way the X.Org server managed temporary lock files. A local attacker could use this flaw to perform a symbolic link attack, allowing them to make an arbitrary file world readable, leading to the disclosure of sensitive information.
Tags: user red flaw x.org x-window open-source-implementation graphical-user-interfaces x-window-system

June 18, 2012
17:33
Ubuntu Security Notice USN-1480-1
» ‎ Packet Storm Security Advisories

Ubuntu Security Notice 1480-1 - Timothy D. Morgan discovered that Raptor would unconditionally load XML external entities. If a user were tricked into opening a specially crafted document in an application linked against Raptor, an attacker could possibly obtain access to arbitrary files on the user's system or potentially execute arbitrary code with the privileges of the user invoking the program.
Tags: user ubuntu security timothy-d.-morgan external-entities d-morgan s-system
8:25
Ubuntu Security Notice USN-1478-1
» ‎ Packet Storm Security Advisories

Ubuntu Security Notice 1478-1 - Mateusz Jurczyk and Gynvael Coldwind discovered that Libav incorrectly handled certain malformed DV files. If a user were tricked into opening a crafted DV file, an attacker could cause a denial of service via application crash, or possibly execute arbitrary code with the privileges of the user invoking the program. This issue only affected Ubuntu 11.10. Mateusz Jurczyk and Gynvael Coldwind discovered that Libav incorrectly handled certain malformed NSV files. If a user were tricked into opening a crafted NSV file, an attacker could cause a denial of service via application crash, or possibly execute arbitrary code with the privileges of the user invoking the program. This issue only affected Ubuntu 11.04 and Ubuntu 11.10. Various other issues were also addressed.
Tags: user ubuntu security mateusz-jurczyk application-crash nsv-files jurczyk

8:25
Ubuntu Security Notice USN-1478-1
» ‎ Packet Storm Security Recent Files

Ubuntu Security Notice 1478-1 - Mateusz Jurczyk and Gynvael Coldwind discovered that Libav incorrectly handled certain malformed DV files. If a user were tricked into opening a crafted DV file, an attacker could cause a denial of service via application crash, or possibly execute arbitrary code with the privileges of the user invoking the program. This issue only affected Ubuntu 11.10. Mateusz Jurczyk and Gynvael Coldwind discovered that Libav incorrectly handled certain malformed NSV files. If a user were tricked into opening a crafted NSV file, an attacker could cause a denial of service via application crash, or possibly execute arbitrary code with the privileges of the user invoking the program. This issue only affected Ubuntu 11.04 and Ubuntu 11.10. Various other issues were also addressed.
Tags: user ubuntu security mateusz-jurczyk application-crash nsv-files jurczyk

8:25
Ubuntu Security Notice USN-1478-1
» ‎ Packet Storm Security Misc. Files

Ubuntu Security Notice 1478-1 - Mateusz Jurczyk and Gynvael Coldwind discovered that Libav incorrectly handled certain malformed DV files. If a user were tricked into opening a crafted DV file, an attacker could cause a denial of service via application crash, or possibly execute arbitrary code with the privileges of the user invoking the program. This issue only affected Ubuntu 11.10. Mateusz Jurczyk and Gynvael Coldwind discovered that Libav incorrectly handled certain malformed NSV files. If a user were tricked into opening a crafted NSV file, an attacker could cause a denial of service via application crash, or possibly execute arbitrary code with the privileges of the user invoking the program. This issue only affected Ubuntu 11.04 and Ubuntu 11.10. Various other issues were also addressed.
Tags: user ubuntu security mateusz-jurczyk application-crash nsv-files jurczyk

8:25
Ubuntu Security Notice USN-1479-1
» ‎ Packet Storm Security Advisories

Ubuntu Security Notice 1479-1 - Mateusz Jurczyk and Gynvael Coldwind discovered that FFmpeg incorrectly handled certain malformed DV files. If a user were tricked into opening a crafted DV file, an attacker could cause a denial of service via application crash, or possibly execute arbitrary code with the privileges of the user invoking the program. Mateusz Jurczyk and Gynvael Coldwind discovered that FFmpeg incorrectly handled certain malformed NSV files. If a user were tricked into opening a crafted NSV file, an attacker could cause a denial of service via application crash, or possibly execute arbitrary code with the privileges of the user invoking the program. Various other issues were also addressed.
Tags: user ubuntu security mateusz-jurczyk application-crash nsv-files jurczyk

8:25
Ubuntu Security Notice USN-1479-1
» ‎ Packet Storm Security Recent Files

Ubuntu Security Notice 1479-1 - Mateusz Jurczyk and Gynvael Coldwind discovered that FFmpeg incorrectly handled certain malformed DV files. If a user were tricked into opening a crafted DV file, an attacker could cause a denial of service via application crash, or possibly execute arbitrary code with the privileges of the user invoking the program. Mateusz Jurczyk and Gynvael Coldwind discovered that FFmpeg incorrectly handled certain malformed NSV files. If a user were tricked into opening a crafted NSV file, an attacker could cause a denial of service via application crash, or possibly execute arbitrary code with the privileges of the user invoking the program. Various other issues were also addressed.
Tags: user ubuntu security mateusz-jurczyk application-crash nsv-files jurczyk

8:25
Ubuntu Security Notice USN-1479-1
» ‎ Packet Storm Security Misc. Files

Ubuntu Security Notice 1479-1 - Mateusz Jurczyk and Gynvael Coldwind discovered that FFmpeg incorrectly handled certain malformed DV files. If a user were tricked into opening a crafted DV file, an attacker could cause a denial of service via application crash, or possibly execute arbitrary code with the privileges of the user invoking the program. Mateusz Jurczyk and Gynvael Coldwind discovered that FFmpeg incorrectly handled certain malformed NSV files. If a user were tricked into opening a crafted NSV file, an attacker could cause a denial of service via application crash, or possibly execute arbitrary code with the privileges of the user invoking the program. Various other issues were also addressed.
Tags: user ubuntu security mateusz-jurczyk application-crash nsv-files jurczyk

0:00
Vuln: Oracle MySQL CVE-2012-2122 User Login Security Bypass Vulnerability
» ‎ SecurityFocus Vulnerabilities

Oracle MySQL CVE-2012-2122 User Login Security Bypass Vulnerability
Tags: oracle mysql user cve vulnerability

June 15, 2012
17:00
WordPress User Meta Plugin 'uploader.php' Arbitrary File Upload Vulnerability
» ‎ SecuriTeam

WordPress User Meta is prone to a vulnerability that lets attackers upload arbitrary files. The issue occurs because the application fails to adequately sanitize user-supplied input.
Tags: upload wordpress user meta meta-plugin arbitrary-files file-upload attackers

June 11, 2012
18:37
WordPress User Meta 1.1.1 Shell Upload
» ‎ Packet Storm Security Exploits

WordPress User Meta plugin version 1.1.1 suffers from a remote shell upload vulnerability.
Tags: shell wordpress user meta meta-1 remote-shell plugin-version

18:37
WordPress User Meta 1.1.1 Shell Upload
» ‎ Packet Storm Security Recent Files

WordPress User Meta plugin version 1.1.1 suffers from a remote shell upload vulnerability.
Tags: shell wordpress user meta meta-1 remote-shell plugin-version

18:37
WordPress User Meta 1.1.1 Shell Upload
» ‎ Packet Storm Security Misc. Files

WordPress User Meta plugin version 1.1.1 suffers from a remote shell upload vulnerability.
Tags: shell wordpress user meta meta-1 remote-shell plugin-version

14:00
[webapps / 0day] - Wordpress User Meta Version 1.1.1 Arbitrary File Upload Vulnerability
» ‎ 0day.today (was: 1337day, Inj3ct0r, 1337db)

[webapps / 0day] - Wordpress User Meta Version 1.1.1 Arbitrary File Upload Vulnerability
Tags: day wordpress user meta-version file-upload vulnerability meta

June 06, 2012
16:51
Zero Day Initiative Advisory 12-083
» ‎ Packet Storm Security Advisories

Zero Day Initiative Advisory 12-083 - This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Oracle Java. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists in the Java OpenAL (JOAL) library. This library is not installed by default with Java, but it is available as a signed .jar package. The affected jar files are signed with a certificate that is trusted by default JRE installs and as such are downloaded and run without user interaction. Crafted Java applets can reach a call to 'dispatch_alDeleteBuffers1' that takes a user controllable int and uses it as a function pointer. This can lead to remote code execution under the context of the current process.
Tags: java zero user oracle-java code-execution zero-day

16:51
Zero Day Initiative Advisory 12-083
» ‎ Packet Storm Security Misc. Files

Zero Day Initiative Advisory 12-083 - This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Oracle Java. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists in the Java OpenAL (JOAL) library. This library is not installed by default with Java, but it is available as a signed .jar package. The affected jar files are signed with a certificate that is trusted by default JRE installs and as such are downloaded and run without user interaction. Crafted Java applets can reach a call to 'dispatch_alDeleteBuffers1' that takes a user controllable int and uses it as a function pointer. This can lead to remote code execution under the context of the current process.
Tags: java zero user oracle-java code-execution zero-day

June 05, 2012
7:24
WordPress Nmedia User File Uploader Shell Upload
» ‎ Packet Storm Security Exploits

WordPress Nmedia User File Uploader plugin version 1.8 suffers from a shell upload vulnerability.
Tags: nmedia wordpress user file-uploader vulnerability shell

7:24
WordPress Nmedia User File Uploader Shell Upload
» ‎ Packet Storm Security Misc. Files

WordPress Nmedia User File Uploader plugin version 1.8 suffers from a shell upload vulnerability.
Tags: nmedia wordpress user file-uploader vulnerability shell

May 21, 2012
17:21
Red Hat Security Advisory 2012-0677-01
» ‎ Packet Storm Security Advisories

Red Hat Security Advisory 2012-0677-01 - PostgreSQL is an advanced object-relational database management system. The pg_dump utility inserted object names literally into comments in the SQL script it produces. An unprivileged database user could create an object whose name includes a newline followed by an SQL command. This SQL command might then be executed by a privileged user during later restore of the backup dump, allowing privilege escalation. CREATE TRIGGER did not do a permissions check on the trigger function to be called. This could possibly allow an authenticated database user to call a privileged trigger function on data of their choosing.
Tags: database user sql relational-database-management relational-database-management-system database-management-system

17:21
Red Hat Security Advisory 2012-0677-01
» ‎ Packet Storm Security Recent Files

Red Hat Security Advisory 2012-0677-01 - PostgreSQL is an advanced object-relational database management system. The pg_dump utility inserted object names literally into comments in the SQL script it produces. An unprivileged database user could create an object whose name includes a newline followed by an SQL command. This SQL command might then be executed by a privileged user during later restore of the backup dump, allowing privilege escalation. CREATE TRIGGER did not do a permissions check on the trigger function to be called. This could possibly allow an authenticated database user to call a privileged trigger function on data of their choosing.
Tags: database user sql relational-database-management relational-database-management-system database-management-system

17:21
Red Hat Security Advisory 2012-0677-01
» ‎ Packet Storm Security Misc. Files

Red Hat Security Advisory 2012-0677-01 - PostgreSQL is an advanced object-relational database management system. The pg_dump utility inserted object names literally into comments in the SQL script it produces. An unprivileged database user could create an object whose name includes a newline followed by an SQL command. This SQL command might then be executed by a privileged user during later restore of the backup dump, allowing privilege escalation. CREATE TRIGGER did not do a permissions check on the trigger function to be called. This could possibly allow an authenticated database user to call a privileged trigger function on data of their choosing.
Tags: database user sql relational-database-management relational-database-management-system database-management-system

May 05, 2012
18:30
Ubuntu Security Notice USN-1430-3
» ‎ Packet Storm Security Advisories

Ubuntu Security Notice 1430-3 - USN-1430-1 fixed vulnerabilities in Firefox. This update provides the corresponding fixes for Thunderbird. Bob Clary, Christian Holler, Brian Hackett, Bobby Holley, Gary Kwong, Hilary Hall, Honza Bambas, Jesse Ruderman, Julian Seward, and Olli Pettay discovered memory safety issues affecting Firefox. If the user were tricked into opening a specially crafted page, an attacker could exploit these to cause a denial of service via application crash, or potentially execute code with the privileges of the user invoking Firefox. Aki Helin discovered a use-after-free vulnerability in XPConnect. An attacker could potentially exploit this to execute arbitrary code with the privileges of the user invoking Firefox. Various other issues were also addressed.
Tags: user ubuntu firefox julian-seward hilary-hall gary-kwong christian-holler jesse-ruderman brian-hackett bob-clary memory-safety

18:30
Ubuntu Security Notice USN-1430-3
» ‎ Packet Storm Security Misc. Files

Ubuntu Security Notice 1430-3 - USN-1430-1 fixed vulnerabilities in Firefox. This update provides the corresponding fixes for Thunderbird. Bob Clary, Christian Holler, Brian Hackett, Bobby Holley, Gary Kwong, Hilary Hall, Honza Bambas, Jesse Ruderman, Julian Seward, and Olli Pettay discovered memory safety issues affecting Firefox. If the user were tricked into opening a specially crafted page, an attacker could exploit these to cause a denial of service via application crash, or potentially execute code with the privileges of the user invoking Firefox. Aki Helin discovered a use-after-free vulnerability in XPConnect. An attacker could potentially exploit this to execute arbitrary code with the privileges of the user invoking Firefox. Various other issues were also addressed.
Tags: user ubuntu firefox julian-seward hilary-hall gary-kwong christian-holler jesse-ruderman brian-hackett bob-clary memory-safety

May 01, 2012
14:34
Ubuntu Security Notice USN-1435-1
» ‎ Packet Storm Security Advisories

Ubuntu Security Notice 1435-1 - Joonas Kuorilehto and Aleksis Kauppinen discovered that ImageMagick incorrectly handled certain ResolutionUnit tags. If a user or automated system using ImageMagick were tricked into opening a specially crafted image, an attacker could exploit this to cause a denial of service or possibly execute code with the privileges of the user invoking the program. Joonas Kuorilehto and Aleksis Kauppinen discovered that ImageMagick incorrectly handled certain IFD structures. If a user or automated system using ImageMagick were tricked into opening a specially crafted image, an attacker could exploit this to cause a denial of service. Various other issues were also addressed.
Tags: imagemagick user ubuntu denial-of-service joonas automated-system

14:34
Ubuntu Security Notice USN-1435-1
» ‎ Packet Storm Security Recent Files

Ubuntu Security Notice 1435-1 - Joonas Kuorilehto and Aleksis Kauppinen discovered that ImageMagick incorrectly handled certain ResolutionUnit tags. If a user or automated system using ImageMagick were tricked into opening a specially crafted image, an attacker could exploit this to cause a denial of service or possibly execute code with the privileges of the user invoking the program. Joonas Kuorilehto and Aleksis Kauppinen discovered that ImageMagick incorrectly handled certain IFD structures. If a user or automated system using ImageMagick were tricked into opening a specially crafted image, an attacker could exploit this to cause a denial of service. Various other issues were also addressed.
Tags: imagemagick user ubuntu denial-of-service joonas automated-system

14:34
Ubuntu Security Notice USN-1435-1
» ‎ Packet Storm Security Misc. Files

Ubuntu Security Notice 1435-1 - Joonas Kuorilehto and Aleksis Kauppinen discovered that ImageMagick incorrectly handled certain ResolutionUnit tags. If a user or automated system using ImageMagick were tricked into opening a specially crafted image, an attacker could exploit this to cause a denial of service or possibly execute code with the privileges of the user invoking the program. Joonas Kuorilehto and Aleksis Kauppinen discovered that ImageMagick incorrectly handled certain IFD structures. If a user or automated system using ImageMagick were tricked into opening a specially crafted image, an attacker could exploit this to cause a denial of service. Various other issues were also addressed.
Tags: imagemagick user ubuntu denial-of-service joonas automated-system

April 27, 2012
13:16
Ubuntu Security Notice USN-1430-1
» ‎ Packet Storm Security Advisories

Ubuntu Security Notice 1430-1 - Bob Clary, Christian Holler, Brian Hackett, Bobby Holley, Gary Kwong, Hilary Hall, Honza Bambas, Jesse Ruderman, Julian Seward, and Olli Pettay discovered memory safety issues affecting Firefox. If the user were tricked into opening a specially crafted page, an attacker could exploit these to cause a denial of service via application crash, or potentially execute code with the privileges of the user invoking Firefox. Aki Helin discovered a use-after-free vulnerability in XPConnect. An attacker could potentially exploit this to execute arbitrary code with the privileges of the user invoking Firefox. Various other issues were also addressed.
Tags: user ubuntu firefox julian-seward hilary-hall gary-kwong christian-holler jesse-ruderman brian-hackett bob-clary memory-safety

13:16
Ubuntu Security Notice USN-1430-1
» ‎ Packet Storm Security Recent Files

Ubuntu Security Notice 1430-1 - Bob Clary, Christian Holler, Brian Hackett, Bobby Holley, Gary Kwong, Hilary Hall, Honza Bambas, Jesse Ruderman, Julian Seward, and Olli Pettay discovered memory safety issues affecting Firefox. If the user were tricked into opening a specially crafted page, an attacker could exploit these to cause a denial of service via application crash, or potentially execute code with the privileges of the user invoking Firefox. Aki Helin discovered a use-after-free vulnerability in XPConnect. An attacker could potentially exploit this to execute arbitrary code with the privileges of the user invoking Firefox. Various other issues were also addressed.
Tags: user ubuntu firefox julian-seward hilary-hall gary-kwong christian-holler jesse-ruderman brian-hackett bob-clary memory-safety

13:16
Ubuntu Security Notice USN-1430-1
» ‎ Packet Storm Security Misc. Files

Ubuntu Security Notice 1430-1 - Bob Clary, Christian Holler, Brian Hackett, Bobby Holley, Gary Kwong, Hilary Hall, Honza Bambas, Jesse Ruderman, Julian Seward, and Olli Pettay discovered memory safety issues affecting Firefox. If the user were tricked into opening a specially crafted page, an attacker could exploit these to cause a denial of service via application crash, or potentially execute code with the privileges of the user invoking Firefox. Aki Helin discovered a use-after-free vulnerability in XPConnect. An attacker could potentially exploit this to execute arbitrary code with the privileges of the user invoking Firefox. Various other issues were also addressed.
Tags: user ubuntu firefox julian-seward hilary-hall gary-kwong christian-holler jesse-ruderman brian-hackett bob-clary memory-safety

April 26, 2012
17:00
Microsoft Print Feature Remote Code Execution Vulnerability
» ‎ SecuriTeam

An attacker who successfully exploites this vulnerability could gain the same user rights as the current user. Users whose accounts are configured to have fewer user rights on the system could be less impacted than users who operate with administrative user rights.
Tags: user vulnerability microsoft code-execution administrative-user current-user

April 23, 2012
16:04
Asterisk Project Security Advisory - AST-2012-004
» ‎ Packet Storm Security Advisories

Asterisk Project Security Advisory - A user of the Asterisk Manager Interface can bypass a security check and execute shell commands when they lack permission to do so. Under normal conditions, a user should only be able to run shell commands if that user has System class authorization. Users could bypass this restriction by using the MixMonitor application with the originate action or by using either the GetVar or Status manager actions in combination with the SHELL and EVAL functions. The patch adds checks in each affected action to verify if a user has System class authorization. If the user does not have those authorizations, Asterisk rejects the action if it detects the use of any functions or applications that run system commands.
Tags: user security asterisk manager-interface shell-commands project-security

16:04
Asterisk Project Security Advisory - AST-2012-004
» ‎ Packet Storm Security Recent Files

Asterisk Project Security Advisory - A user of the Asterisk Manager Interface can bypass a security check and execute shell commands when they lack permission to do so. Under normal conditions, a user should only be able to run shell commands if that user has System class authorization. Users could bypass this restriction by using the MixMonitor application with the originate action or by using either the GetVar or Status manager actions in combination with the SHELL and EVAL functions. The patch adds checks in each affected action to verify if a user has System class authorization. If the user does not have those authorizations, Asterisk rejects the action if it detects the use of any functions or applications that run system commands.
Tags: user security asterisk manager-interface shell-commands project-security

16:04
Asterisk Project Security Advisory - AST-2012-004
» ‎ Packet Storm Security Misc. Files

Asterisk Project Security Advisory - A user of the Asterisk Manager Interface can bypass a security check and execute shell commands when they lack permission to do so. Under normal conditions, a user should only be able to run shell commands if that user has System class authorization. Users could bypass this restriction by using the MixMonitor application with the originate action or by using either the GetVar or Status manager actions in combination with the SHELL and EVAL functions. The patch adds checks in each affected action to verify if a user has System class authorization. If the user does not have those authorizations, Asterisk rejects the action if it detects the use of any functions or applications that run system commands.
Tags: user security asterisk manager-interface shell-commands project-security

13:00
Bugtraq: AST-2012-004: Asterisk Manager User Unauthorized Shell Access
» ‎ SecurityFocus Vulnerabilities

AST-2012-004: Asterisk Manager User Unauthorized Shell Access
Tags: manager asterisk user unauthorized-shell bugtraq ast

April 09, 2012
21:31
Zero Day Initiative Advisory 12-060
» ‎ Packet Storm Security Recent Files

Zero Day Initiative Advisory 12-060 - This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Oracle Java. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within cmm.dll. While parsing multi-function a to b curve data the size of an allocation is calculated based on user supplied data. It is possible to cause an integer wrap on the nTblSize variable. This variable is later used to allocate an heap buffer which will be smaller than necessary resulting in heap memory corruption. This can lead to remote code execution under the context of the current user.
Tags: day zero user heap-memory curve-data memory-corruption

21:31
Zero Day Initiative Advisory 12-060
» ‎ Packet Storm Security Misc. Files

Zero Day Initiative Advisory 12-060 - This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Oracle Java. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within cmm.dll. While parsing multi-function a to b curve data the size of an allocation is calculated based on user supplied data. It is possible to cause an integer wrap on the nTblSize variable. This variable is later used to allocate an heap buffer which will be smaller than necessary resulting in heap memory corruption. This can lead to remote code execution under the context of the current user.
Tags: day zero user heap-memory curve-data memory-corruption

8:00
Bugtraq: [CVE-2012-1574] Apache Hadoop user impersonation vulnerability
» ‎ SecurityFocus Vulnerabilities

[CVE-2012-1574] Apache Hadoop user impersonation vulnerability
Tags: user hadoop apache impersonation cve vulnerability

April 06, 2012
19:05
Apache Hadoop User Impersonation
» ‎ Packet Storm Security Advisories

Apache Hadoop suffers from a user impersonation vulnerability. Versions 0.20.203.0, 0.20.204.0, 0.20.205.0, 1.0.0 to 1.0.1, and 0.23.0 to 0.23.1 are affected.
Tags: hadoop apache user impersonation vulnerability

19:05
Apache Hadoop User Impersonation
» ‎ Packet Storm Security Misc. Files

Apache Hadoop suffers from a user impersonation vulnerability. Versions 0.20.203.0, 0.20.204.0, 0.20.205.0, 1.0.0 to 1.0.1, and 0.23.0 to 0.23.1 are affected.
Tags: hadoop apache user impersonation vulnerability

April 04, 2012
17:01
Ubuntu Security Notice USN-1416-1
» ‎ Packet Storm Security Advisories

Ubuntu Security Notice 1416-1 - Alexander Gavrun discovered that the TIFF library incorrectly allocated space for a tile. If a user or automated system were tricked into opening a specially crafted TIFF image, a remote attacker could execute arbitrary code with user privileges, or crash the application, leading to a denial of service. It was discovered that the tiffdump utility incorrectly handled directory data structures with many directory entries. If a user or automated system were tricked into opening a specially crafted TIFF image, a remote attacker could crash the application, leading to a denial of service, or possibly execute arbitrary code with user privileges. This issue only applied to Ubuntu 8.04 LTS, Ubuntu 10.04 LTS, Ubuntu 10.10 and Ubuntu 11.04. Various other issues were also addressed.
Tags: user ubuntu security alexander-gavrun tiff tiff-library tiff-image denial-of-service

March 26, 2012
13:38
Ricoh DC DL-10 SR10 FTP USER Command Buffer Overflow
» ‎ Packet Storm Security Exploits

This Metasploit module exploits a vulnerability found in Ricoh DC's DL-10 SR10 FTP service. By supplying a long string of data to the USER command, it is possible to trigger a stack-based buffer overflow, which allows remote code execution under the context of the user. Please note that in order to trigger the vulnerability, the server must be configured with a log file name (by default, it's disabled).
Tags: ricoh user ftp dc-dl- based-buffer-overflow code-execution

13:38
Ricoh DC DL-10 SR10 FTP USER Command Buffer Overflow
» ‎ Packet Storm Security Recent Files

This Metasploit module exploits a vulnerability found in Ricoh DC's DL-10 SR10 FTP service. By supplying a long string of data to the USER command, it is possible to trigger a stack-based buffer overflow, which allows remote code execution under the context of the user. Please note that in order to trigger the vulnerability, the server must be configured with a log file name (by default, it's disabled).
Tags: ricoh user ftp dc-dl- based-buffer-overflow code-execution

13:38
Ricoh DC DL-10 SR10 FTP USER Command Buffer Overflow
» ‎ Packet Storm Security Misc. Files

This Metasploit module exploits a vulnerability found in Ricoh DC's DL-10 SR10 FTP service. By supplying a long string of data to the USER command, it is possible to trigger a stack-based buffer overflow, which allows remote code execution under the context of the user. Please note that in order to trigger the vulnerability, the server must be configured with a log file name (by default, it's disabled).
Tags: ricoh user ftp dc-dl- based-buffer-overflow code-execution

March 23, 2012
16:38
Ubuntu Security Notice USN-1401-2
» ‎ Packet Storm Security Advisories

Ubuntu Security Notice 1401-2 - USN-1401-1 fixed vulnerabilities in Xulrunner. This update provides the corresponding fixes for Thunderbird. It was discovered that a flaw in the Mozilla SVG implementation could result in an out-of-bounds memory access if SVG elements were removed during a DOMAttrModified event handler. If the user were tricked into opening a specially crafted page, an attacker could exploit this to cause a denial of service via application crash. Atte Kettunen discovered a use-after-free vulnerability in the Gecko Rendering Engine's handling of SVG animations. An attacker could potentially exploit this to execute arbitrary code with the privileges of the user invoking the Xulrunner based application. Atte Kettunen discovered an out of bounds read vulnerability in the Gecko Rendering Engine's handling of SVG Filters. An attacker could potentially exploit this to make data from the user's memory accessible to the page content. Soroush Dalili discovered that the Gecko Rendering Engine did not adequately protect against dropping JavaScript links onto a frame. A remote attacker could, through cross-site scripting (XSS), exploit this to modify the contents of the frame or steal confidential data. Mariusz Mlynski discovered that the Home button accepted JavaScript links to set the browser Home page. An attacker could use this vulnerability to get the script URL loaded in the privileged about:sessionrestore context. Bob Clary, Vincenzo Iozzo, and Willem Pinckaers discovered memory safety issues affecting Firefox. If the user were tricked into opening a specially crafted page, an attacker could exploit these to cause a denial of service via application crash, or potentially execute code with the privileges of the user invoking Firefox. Various other issues were also addressed.
Tags: user attacker svg dalili bob-clary willem-pinckaers svg-animations application-crash memory-safety

16:38
Ubuntu Security Notice USN-1401-2
» ‎ Packet Storm Security Recent Files

Ubuntu Security Notice 1401-2 - USN-1401-1 fixed vulnerabilities in Xulrunner. This update provides the corresponding fixes for Thunderbird. It was discovered that a flaw in the Mozilla SVG implementation could result in an out-of-bounds memory access if SVG elements were removed during a DOMAttrModified event handler. If the user were tricked into opening a specially crafted page, an attacker could exploit this to cause a denial of service via application crash. Atte Kettunen discovered a use-after-free vulnerability in the Gecko Rendering Engine's handling of SVG animations. An attacker could potentially exploit this to execute arbitrary code with the privileges of the user invoking the Xulrunner based application. Atte Kettunen discovered an out of bounds read vulnerability in the Gecko Rendering Engine's handling of SVG Filters. An attacker could potentially exploit this to make data from the user's memory accessible to the page content. Soroush Dalili discovered that the Gecko Rendering Engine did not adequately protect against dropping JavaScript links onto a frame. A remote attacker could, through cross-site scripting (XSS), exploit this to modify the contents of the frame or steal confidential data. Mariusz Mlynski discovered that the Home button accepted JavaScript links to set the browser Home page. An attacker could use this vulnerability to get the script URL loaded in the privileged about:sessionrestore context. Bob Clary, Vincenzo Iozzo, and Willem Pinckaers discovered memory safety issues affecting Firefox. If the user were tricked into opening a specially crafted page, an attacker could exploit these to cause a denial of service via application crash, or potentially execute code with the privileges of the user invoking Firefox. Various other issues were also addressed.
Tags: user attacker svg dalili bob-clary willem-pinckaers svg-animations application-crash memory-safety

16:38
Ubuntu Security Notice USN-1401-2
» ‎ Packet Storm Security Misc. Files

Ubuntu Security Notice 1401-2 - USN-1401-1 fixed vulnerabilities in Xulrunner. This update provides the corresponding fixes for Thunderbird. It was discovered that a flaw in the Mozilla SVG implementation could result in an out-of-bounds memory access if SVG elements were removed during a DOMAttrModified event handler. If the user were tricked into opening a specially crafted page, an attacker could exploit this to cause a denial of service via application crash. Atte Kettunen discovered a use-after-free vulnerability in the Gecko Rendering Engine's handling of SVG animations. An attacker could potentially exploit this to execute arbitrary code with the privileges of the user invoking the Xulrunner based application. Atte Kettunen discovered an out of bounds read vulnerability in the Gecko Rendering Engine's handling of SVG Filters. An attacker could potentially exploit this to make data from the user's memory accessible to the page content. Soroush Dalili discovered that the Gecko Rendering Engine did not adequately protect against dropping JavaScript links onto a frame. A remote attacker could, through cross-site scripting (XSS), exploit this to modify the contents of the frame or steal confidential data. Mariusz Mlynski discovered that the Home button accepted JavaScript links to set the browser Home page. An attacker could use this vulnerability to get the script URL loaded in the privileged about:sessionrestore context. Bob Clary, Vincenzo Iozzo, and Willem Pinckaers discovered memory safety issues affecting Firefox. If the user were tricked into opening a specially crafted page, an attacker could exploit these to cause a denial of service via application crash, or potentially execute code with the privileges of the user invoking Firefox. Various other issues were also addressed.
Tags: user attacker svg dalili bob-clary willem-pinckaers svg-animations application-crash memory-safety

March 22, 2012
23:10
Ubuntu Security Notice USN-1403-1
» ‎ Packet Storm Security Advisories

Ubuntu Security Notice 1403-1 - Mateusz Jurczyk discovered that FreeType did not correctly handle certain malformed BDF font files. If a user were tricked into using a specially crafted font file, a remote attacker could cause FreeType to crash. Mateusz Jurczyk discovered that FreeType did not correctly handle certain malformed BDF font files. If a user were tricked into using a specially crafted font file, a remote attacker could cause FreeType to crash. Mateusz Jurczyk discovered that FreeType did not correctly handle certain malformed TrueType font files. If a user were tricked into using a specially crafted font file, a remote attacker could cause FreeType to crash. Various other issues were also addressed.
Tags: user font freetype mateusz-jurczyk truetype-font-files bdf-font mateusz

23:10
Ubuntu Security Notice USN-1403-1
» ‎ Packet Storm Security Recent Files

Ubuntu Security Notice 1403-1 - Mateusz Jurczyk discovered that FreeType did not correctly handle certain malformed BDF font files. If a user were tricked into using a specially crafted font file, a remote attacker could cause FreeType to crash. Mateusz Jurczyk discovered that FreeType did not correctly handle certain malformed BDF font files. If a user were tricked into using a specially crafted font file, a remote attacker could cause FreeType to crash. Mateusz Jurczyk discovered that FreeType did not correctly handle certain malformed TrueType font files. If a user were tricked into using a specially crafted font file, a remote attacker could cause FreeType to crash. Various other issues were also addressed.
Tags: user font freetype mateusz-jurczyk truetype-font-files bdf-font mateusz

23:10
Ubuntu Security Notice USN-1403-1
» ‎ Packet Storm Security Misc. Files

Ubuntu Security Notice 1403-1 - Mateusz Jurczyk discovered that FreeType did not correctly handle certain malformed BDF font files. If a user were tricked into using a specially crafted font file, a remote attacker could cause FreeType to crash. Mateusz Jurczyk discovered that FreeType did not correctly handle certain malformed BDF font files. If a user were tricked into using a specially crafted font file, a remote attacker could cause FreeType to crash. Mateusz Jurczyk discovered that FreeType did not correctly handle certain malformed TrueType font files. If a user were tricked into using a specially crafted font file, a remote attacker could cause FreeType to crash. Various other issues were also addressed.
Tags: user font freetype mateusz-jurczyk truetype-font-files bdf-font mateusz

March 19, 2012
15:21
Ubuntu Security Notice USN-1401-1
» ‎ Packet Storm Security Advisories

Ubuntu Security Notice 1401-1 - It was discovered that a flaw in the Mozilla SVG implementation could result in an out-of-bounds memory access if SVG elements were removed during a DOMAttrModified event handler. If the user were tricked into opening a specially crafted page, an attacker could exploit this to cause a denial of service via application crash. Atte Kettunen discovered a use-after-free vulnerability in the Gecko Rendering Engine's handling of SVG animations. An attacker could potentially exploit this to execute arbitrary code with the privileges of the user invoking the Xulrunner based application. Atte Kettunen discovered an out of bounds read vulnerability in the Gecko Rendering Engine's handling of SVG Filters. An attacker could potentially exploit this to make data from the user's memory accessible to the page content. Various other issues were also addressed.
Tags: user attacker svg svg-animations application-crash denial-of-service

15:21
Ubuntu Security Notice USN-1401-1
» ‎ Packet Storm Security Recent Files

Ubuntu Security Notice 1401-1 - It was discovered that a flaw in the Mozilla SVG implementation could result in an out-of-bounds memory access if SVG elements were removed during a DOMAttrModified event handler. If the user were tricked into opening a specially crafted page, an attacker could exploit this to cause a denial of service via application crash. Atte Kettunen discovered a use-after-free vulnerability in the Gecko Rendering Engine's handling of SVG animations. An attacker could potentially exploit this to execute arbitrary code with the privileges of the user invoking the Xulrunner based application. Atte Kettunen discovered an out of bounds read vulnerability in the Gecko Rendering Engine's handling of SVG Filters. An attacker could potentially exploit this to make data from the user's memory accessible to the page content. Various other issues were also addressed.
Tags: user attacker svg svg-animations application-crash denial-of-service

15:21
Ubuntu Security Notice USN-1401-1
» ‎ Packet Storm Security Misc. Files

Ubuntu Security Notice 1401-1 - It was discovered that a flaw in the Mozilla SVG implementation could result in an out-of-bounds memory access if SVG elements were removed during a DOMAttrModified event handler. If the user were tricked into opening a specially crafted page, an attacker could exploit this to cause a denial of service via application crash. Atte Kettunen discovered a use-after-free vulnerability in the Gecko Rendering Engine's handling of SVG animations. An attacker could potentially exploit this to execute arbitrary code with the privileges of the user invoking the Xulrunner based application. Atte Kettunen discovered an out of bounds read vulnerability in the Gecko Rendering Engine's handling of SVG Filters. An attacker could potentially exploit this to make data from the user's memory accessible to the page content. Various other issues were also addressed.
Tags: user attacker svg svg-animations application-crash denial-of-service

March 18, 2012
13:19
[Slides] Rootkits in your Web application
» ‎ SecDocs

Authors: Artur Janc
Tags: web application XSS
Event: Chaos Communication Congress 28th (28C3) 2011
Abstract: XSS bugs are the most widely known and commonly occurring Web vulnerability, but their impact has often been limited to cookie theft and/or simple actions, such as setting malicious email filters, stealing some data, or self-propagation via an XSS worm. In this work, I discuss practical approaches for exploiting XSS and other client-side script injection attacks, and introduce novel techniques for maintaining and escalating access within the victim's browser. In particular, I introduce the concept of resident XSS where attacker-supplied code is running in the context of an affected user's main application window and describe its consequences. I also draw analogies between such persistent Web threats and the traditional rootkit model, including similarities in the areas of embedding malicious code, maintaining access, stealthy communication with a C&C server, and the difficulty of detecting and removing attacker-supplied code. Despite a few high profile cases of XSS worms, most XSS exploitation attempts have so far been limited to cookie-stealing and executing simple malicious actions. However, as a consequence of the same-origin policy and a combination of other browser mechanisms, a single XSS vulnerability can often lead to a long-term compromise all of a user's interactions with an affected webapp in the same browser profile, long after the original bug has been fixed. In particular, an attacker can maintain access across window/browser closures, survive cookie and cache deletions, and compromise other user accounts accessed from the same browser. Yet more troubling is the fact that Web application authors currently have no means to detect or mitigate such threats once an attack has taken place. In the talk I provide an overview of techniques to escalate an XSS into long-term account compromise, and explore the similarities between such persistent Web bugs and traditional rootkits. In particular, I: 1) Introduce the concept of resident XSS, where malicious JavaScript is executed in the context of the victim's main application window/tab. Contrary to the traditional methods of exploiting XSS via a hidden frame or malicious link which are opened in a separate, usually short-lived window, resident XSS gives an attacker full freedom to monitor and alter the user's interaction with the affected application. 2) Describe several techniques to convert various Web bugs into a resident XSS. Such techniques include backdooring client-side persistent storage mechanisms (WebSQL, localStorage, Flash LSOs), opening poisoned application windows with injected malicious scripts, exploiting persistent (self-)XSS and others. 3) Discuss the consequences of resident XSS, which usually allow the attacker to get permanent access to an affected user's account and/or obtain the user's application login credentials. On sensitive domains for which users have enabled access to additional browser or plugin features (geolocation, camera/microphone), it can enable persistent snooping on the exploited user. In a large number of cases it can also enable full compromise of the user's machine by exploiting the application-user trust relationship (e.g. by requiring the user to install attacker-supplied plugins to use the affected webapp, or by hijacking file download links within the vulnerable domain). 4) Analyze the techniques for maintaining access to a once-compromised origin. In addition to backdooring persistent storage APIs, this can be achieved by exploiting self-XSS bugs, spawning same-origin pop-unders with references to the original window, and hiding in frames created by advertising networks on popular websites. In most cases, a combination of those techniques suffices to bypass a variety of the most common "cleanup" actions taken by users, and allows an on-going compromise of the affected origin. 5) Present the difficulties faced by Web application authors when trying to clean up a compromised origin. Short of wiping/re-creating a browser profile, there are currently no fully reliable methods to restore a browser's state to a secure configuration once a malicious script has run in the context of an affected domain. I will present the above with concrete examples of vulnerable applications and a demo.
Tags: xss user application artur-janc chaos-communication-congress application-authors novel-techniques

March 15, 2012
20:09
lshell 0.9.15.1
» ‎ Packet Storm Security Recent Files

lshell lets you restrict a user's shell environment to limited sets of commands, choose to enable or disable any command over SSH (e.g. SCP, SFTP, rsync, etc.), log user's commands, implement timing restrictions, and more.
Tags: user shell lshell shell-environment

20:09
lshell 0.9.15.1
» ‎ Packet Storm Security Tools

lshell lets you restrict a user's shell environment to limited sets of commands, choose to enable or disable any command over SSH (e.g. SCP, SFTP, rsync, etc.), log user's commands, implement timing restrictions, and more.
Tags: user shell lshell shell-environment

20:09
lshell 0.9.15.1
» ‎ Packet Storm Security Misc. Files

lshell lets you restrict a user's shell environment to limited sets of commands, choose to enable or disable any command over SSH (e.g. SCP, SFTP, rsync, etc.), log user's commands, implement timing restrictions, and more.
Tags: user shell lshell shell-environment

March 14, 2012
20:06
lshell 0.9.15
» ‎ Packet Storm Security Recent Files

lshell lets you restrict a user's shell environment to limited sets of commands, choose to enable or disable any command over SSH (e.g. SCP, SFTP, rsync, etc.), log user's commands, implement timing restrictions, and more.
Tags: user shell lshell shell-environment

20:06
lshell 0.9.15
» ‎ Packet Storm Security Tools

lshell lets you restrict a user's shell environment to limited sets of commands, choose to enable or disable any command over SSH (e.g. SCP, SFTP, rsync, etc.), log user's commands, implement timing restrictions, and more.
Tags: user shell lshell shell-environment

20:06
lshell 0.9.15
» ‎ Packet Storm Security Misc. Files

lshell lets you restrict a user's shell environment to limited sets of commands, choose to enable or disable any command over SSH (e.g. SCP, SFTP, rsync, etc.), log user's commands, implement timing restrictions, and more.
Tags: user shell lshell shell-environment

March 12, 2012
15:00
[linux/x86-64] - linux/x86-64 - add user with passwd (189 bytes)
» ‎ 0day.today (was: 1337day, Inj3ct0r, 1337db)

[linux/x86-64] - linux/x86-64 - add user with passwd (189 bytes)
Tags: user linux passwd

10:11
Add User With Password Shellcode
» ‎ Packet Storm Security Recent Files

189 bytes small add user t0r with password of Winner shellcode for Linux x86_64.
Tags: shellcode password user linux

10:11
Add User With Password Shellcode
» ‎ Packet Storm Security Misc. Files

189 bytes small add user t0r with password of Winner shellcode for Linux x86_64.
Tags: shellcode password user linux

March 11, 2012
4:11
WordPress 3.3.1 User Count Enumeration
» ‎ Packet Storm Security Exploits

WordPress version 3.3.1 suffers from a user count enumeration vulnerability.
Tags: enumeration wordpress user vulnerability

4:11
WordPress 3.3.1 User Count Enumeration
» ‎ Packet Storm Security Recent Files

WordPress version 3.3.1 suffers from a user count enumeration vulnerability.
Tags: enumeration wordpress user vulnerability

4:11
WordPress 3.3.1 User Count Enumeration
» ‎ Packet Storm Security Misc. Files

WordPress version 3.3.1 suffers from a user count enumeration vulnerability.
Tags: enumeration wordpress user vulnerability

March 08, 2012
0:00
Vuln: Samba SWAT 'user' Field Cross Site Scripting Vulnerability
» ‎ SecurityFocus Vulnerabilities

Samba SWAT 'user' Field Cross Site Scripting Vulnerability
Tags: user swat samba samba-swat cross-site-scripting vulnerability

March 06, 2012
16:00
Ubuntu Security Notice USN-1389-1
» ‎ Packet Storm Security Advisories

Ubuntu Security Notice 1389-1 - Paolo Bonzini discovered a flaw in Linux's handling of the SG_IO ioctl command. A local user, or user in a VM could exploit this flaw to bypass restrictions and gain read/write access to all data on the affected block device. Sasha Levin discovered a flaw in the permission checking for device assignments requested via the kvm ioctl in the Linux kernel. A local user could use this flaw to crash the system causing a denial of service. Various other issues were also addressed.
Tags: user ubuntu flaw paolo-bonzini linux-kernel bonzini denial-of-service

16:00
Ubuntu Security Notice USN-1389-1
» ‎ Packet Storm Security Recent Files

Ubuntu Security Notice 1389-1 - Paolo Bonzini discovered a flaw in Linux's handling of the SG_IO ioctl command. A local user, or user in a VM could exploit this flaw to bypass restrictions and gain read/write access to all data on the affected block device. Sasha Levin discovered a flaw in the permission checking for device assignments requested via the kvm ioctl in the Linux kernel. A local user could use this flaw to crash the system causing a denial of service. Various other issues were also addressed.
Tags: user ubuntu flaw paolo-bonzini linux-kernel bonzini denial-of-service

16:00
Ubuntu Security Notice USN-1389-1
» ‎ Packet Storm Security Misc. Files

Ubuntu Security Notice 1389-1 - Paolo Bonzini discovered a flaw in Linux's handling of the SG_IO ioctl command. A local user, or user in a VM could exploit this flaw to bypass restrictions and gain read/write access to all data on the affected block device. Sasha Levin discovered a flaw in the permission checking for device assignments requested via the kvm ioctl in the Linux kernel. A local user could use this flaw to crash the system causing a denial of service. Various other issues were also addressed.
Tags: user ubuntu flaw paolo-bonzini linux-kernel bonzini denial-of-service

15:58
Ubuntu Security Notice USN-1388-1
» ‎ Packet Storm Security Advisories

Ubuntu Security Notice 1388-1 - Paolo Bonzini discovered a flaw in Linux's handling of the SG_IO ioctl command. A local user, or user in a VM could exploit this flaw to bypass restrictions and gain read/write access to all data on the affected block device. A flaw was found in KVM's Programmable Interval Timer (PIT). When a virtual interrupt control is not available a local user could use this to cause a denial of service by starting a timer. Various other issues were also addressed.
Tags: user ubuntu flaw paolo-bonzini programmable-interval-timer bonzini denial-of-service

15:58
Ubuntu Security Notice USN-1388-1
» ‎ Packet Storm Security Recent Files

Ubuntu Security Notice 1388-1 - Paolo Bonzini discovered a flaw in Linux's handling of the SG_IO ioctl command. A local user, or user in a VM could exploit this flaw to bypass restrictions and gain read/write access to all data on the affected block device. A flaw was found in KVM's Programmable Interval Timer (PIT). When a virtual interrupt control is not available a local user could use this to cause a denial of service by starting a timer. Various other issues were also addressed.
Tags: user ubuntu flaw paolo-bonzini programmable-interval-timer bonzini denial-of-service

15:58
Ubuntu Security Notice USN-1388-1
» ‎ Packet Storm Security Misc. Files

Ubuntu Security Notice 1388-1 - Paolo Bonzini discovered a flaw in Linux's handling of the SG_IO ioctl command. A local user, or user in a VM could exploit this flaw to bypass restrictions and gain read/write access to all data on the affected block device. A flaw was found in KVM's Programmable Interval Timer (PIT). When a virtual interrupt control is not available a local user could use this to cause a denial of service by starting a timer. Various other issues were also addressed.
Tags: user ubuntu flaw paolo-bonzini programmable-interval-timer bonzini denial-of-service

15:58
Ubuntu Security Notice USN-1387-1
» ‎ Packet Storm Security Advisories

Ubuntu Security Notice 1387-1 - Aristide Fattori and Roberto Paleari reported a flaw in the Linux kernel's handling of IPv4 icmp packets. A remote user could exploit this to cause a denial of service. A flaw was found in the Linux Ethernet bridge's handling of IGMP (Internet Group Management Protocol) packets. An unprivileged local user could exploit this flaw to crash the system. Han-Wen Nienhuys reported a flaw in the FUSE kernel module. A local user who can mount a FUSE file system could cause a denial of service. Various other issues were also addressed.
Tags: user ubuntu flaw wen-nienhuys aristide-fattori roberto-paleari internet-group-management-protocol internet-group-management protocol-packets

15:58
Ubuntu Security Notice USN-1387-1
» ‎ Packet Storm Security Recent Files

Ubuntu Security Notice 1387-1 - Aristide Fattori and Roberto Paleari reported a flaw in the Linux kernel's handling of IPv4 icmp packets. A remote user could exploit this to cause a denial of service. A flaw was found in the Linux Ethernet bridge's handling of IGMP (Internet Group Management Protocol) packets. An unprivileged local user could exploit this flaw to crash the system. Han-Wen Nienhuys reported a flaw in the FUSE kernel module. A local user who can mount a FUSE file system could cause a denial of service. Various other issues were also addressed.
Tags: user ubuntu flaw wen-nienhuys aristide-fattori roberto-paleari internet-group-management-protocol internet-group-management protocol-packets

15:58
Ubuntu Security Notice USN-1387-1
» ‎ Packet Storm Security Misc. Files

Ubuntu Security Notice 1387-1 - Aristide Fattori and Roberto Paleari reported a flaw in the Linux kernel's handling of IPv4 icmp packets. A remote user could exploit this to cause a denial of service. A flaw was found in the Linux Ethernet bridge's handling of IGMP (Internet Group Management Protocol) packets. An unprivileged local user could exploit this flaw to crash the system. Han-Wen Nienhuys reported a flaw in the FUSE kernel module. A local user who can mount a FUSE file system could cause a denial of service. Various other issues were also addressed.
Tags: user ubuntu flaw wen-nienhuys aristide-fattori roberto-paleari internet-group-management-protocol internet-group-management protocol-packets

15:58
Ubuntu Security Notice USN-1384-1
» ‎ Packet Storm Security Advisories

Ubuntu Security Notice 1384-1 - A bug was discovered in the Linux kernel's calculation of OOM (Out of memory) scores, that would result in the wrong process being killed. A user could use this to kill the process with the highest OOM score, even if that process belongs to another user or the system. Paolo Bonzini discovered a flaw in Linux's handling of the SG_IO ioctl command. A local user, or user in a VM could exploit this flaw to bypass restrictions and gain read/write access to all data on the affected block device. Various other issues were also addressed.
Tags: user ubuntu process paolo-bonzini linux-kernel ioctl security-notice

15:58
Ubuntu Security Notice USN-1384-1
» ‎ Packet Storm Security Recent Files

Ubuntu Security Notice 1384-1 - A bug was discovered in the Linux kernel's calculation of OOM (Out of memory) scores, that would result in the wrong process being killed. A user could use this to kill the process with the highest OOM score, even if that process belongs to another user or the system. Paolo Bonzini discovered a flaw in Linux's handling of the SG_IO ioctl command. A local user, or user in a VM could exploit this flaw to bypass restrictions and gain read/write access to all data on the affected block device. Various other issues were also addressed.
Tags: user ubuntu process paolo-bonzini linux-kernel ioctl security-notice

15:58
Ubuntu Security Notice USN-1384-1
» ‎ Packet Storm Security Misc. Files

Ubuntu Security Notice 1384-1 - A bug was discovered in the Linux kernel's calculation of OOM (Out of memory) scores, that would result in the wrong process being killed. A user could use this to kill the process with the highest OOM score, even if that process belongs to another user or the system. Paolo Bonzini discovered a flaw in Linux's handling of the SG_IO ioctl command. A local user, or user in a VM could exploit this flaw to bypass restrictions and gain read/write access to all data on the affected block device. Various other issues were also addressed.
Tags: user ubuntu process paolo-bonzini linux-kernel ioctl security-notice

March 01, 2012
0:00
Vuln: Kadu SMS and User Status Message Multiple HTML Injection Vulnerabilities
» ‎ SecurityFocus Vulnerabilities

Kadu SMS and User Status Message Multiple HTML Injection Vulnerabilities
Tags: sms kadu user status-message

February 23, 2012
19:48
Red Hat Security Advisory 2012-0333-01
» ‎ Packet Storm Security Advisories

Red Hat Security Advisory 2012-0333-01 - Updates have been made to the Linux kernel. SG_IO ioctl SCSI requests on partitions or LVM volumes could be passed to the underlying block device, allowing a privileged user to bypass restrictions and gain read and write access to the entire block device. A local, unprivileged user could use an integer overflow flaw in drm_mode_dirtyfb_ioctl() to cause a denial of service or escalate their privileges. A local, unprivileged user could use an integer overflow flaw in drm_mode_dirtyfb_ioctl() to cause a denial of service or escalate their privileges. A local, unprivileged user could use a flaw in the Performance Events implementation to cause a denial of service. Various other issues have also been addressed.
Tags: user ioctl flaw integer-overflow red-hat-security linux-kernel

19:48
Red Hat Security Advisory 2012-0333-01
» ‎ Packet Storm Security Recent Files

Red Hat Security Advisory 2012-0333-01 - Updates have been made to the Linux kernel. SG_IO ioctl SCSI requests on partitions or LVM volumes could be passed to the underlying block device, allowing a privileged user to bypass restrictions and gain read and write access to the entire block device. A local, unprivileged user could use an integer overflow flaw in drm_mode_dirtyfb_ioctl() to cause a denial of service or escalate their privileges. A local, unprivileged user could use an integer overflow flaw in drm_mode_dirtyfb_ioctl() to cause a denial of service or escalate their privileges. A local, unprivileged user could use a flaw in the Performance Events implementation to cause a denial of service. Various other issues have also been addressed.
Tags: user ioctl flaw integer-overflow red-hat-security linux-kernel

19:48
Red Hat Security Advisory 2012-0333-01
» ‎ Packet Storm Security Misc. Files

Red Hat Security Advisory 2012-0333-01 - Updates have been made to the Linux kernel. SG_IO ioctl SCSI requests on partitions or LVM volumes could be passed to the underlying block device, allowing a privileged user to bypass restrictions and gain read and write access to the entire block device. A local, unprivileged user could use an integer overflow flaw in drm_mode_dirtyfb_ioctl() to cause a denial of service or escalate their privileges. A local, unprivileged user could use an integer overflow flaw in drm_mode_dirtyfb_ioctl() to cause a denial of service or escalate their privileges. A local, unprivileged user could use a flaw in the Performance Events implementation to cause a denial of service. Various other issues have also been addressed.
Tags: user ioctl flaw integer-overflow red-hat-security linux-kernel

February 22, 2012
21:22
Zero Day Initiative Advisory 12-038
» ‎ Packet Storm Security Advisories

Zero Day Initiative Advisory 12-038 - This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Oracle Java. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within JavaFX, a downloadable Java extension. The JavaFX Jar file is signed by Oracle and can be installed without user interaction. Once installed it is possible to invoke the main method of any trusted class with arbitrary arguments and with a trusted call stack. This can be leveraged to remote code execution under the context of the user.
Tags: day zero user oracle-java code-execution java-extension

21:22
Zero Day Initiative Advisory 12-038
» ‎ Packet Storm Security Recent Files

Zero Day Initiative Advisory 12-038 - This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Oracle Java. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within JavaFX, a downloadable Java extension. The JavaFX Jar file is signed by Oracle and can be installed without user interaction. Once installed it is possible to invoke the main method of any trusted class with arbitrary arguments and with a trusted call stack. This can be leveraged to remote code execution under the context of the user.
Tags: day zero user oracle-java code-execution java-extension

21:22
Zero Day Initiative Advisory 12-038
» ‎ Packet Storm Security Misc. Files

Zero Day Initiative Advisory 12-038 - This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Oracle Java. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within JavaFX, a downloadable Java extension. The JavaFX Jar file is signed by Oracle and can be installed without user interaction. Once installed it is possible to invoke the main method of any trusted class with arbitrary arguments and with a trusted call stack. This can be leveraged to remote code execution under the context of the user.
Tags: day zero user oracle-java code-execution java-extension

February 21, 2012
7:30
Red Hat Security Advisory 2012-0303-03
» ‎ Packet Storm Security Advisories

Red Hat Security Advisory 2012-0303-03 - X.Org is an open source implementation of the X Window System. It provides the basic low-level functionality that full-fledged graphical user interfaces are designed upon. A flaw was found in the way the X.Org server handled lock files. A local user with access to the system console could use this flaw to determine the existence of a file in a directory not accessible to the user, via a symbolic link attack.
Tags: user hat red x.org x-window open-source-implementation graphical-user-interfaces x-window-system

7:30
Red Hat Security Advisory 2012-0303-03
» ‎ Packet Storm Security Misc. Files

Red Hat Security Advisory 2012-0303-03 - X.Org is an open source implementation of the X Window System. It provides the basic low-level functionality that full-fledged graphical user interfaces are designed upon. A flaw was found in the way the X.Org server handled lock files. A local user with access to the system console could use this flaw to determine the existence of a file in a directory not accessible to the user, via a symbolic link attack.
Tags: user hat red x.org x-window open-source-implementation graphical-user-interfaces x-window-system

February 17, 2012
19:05
Ubuntu Security Notice USN-1369-1
» ‎ Packet Storm Security Advisories

Ubuntu Security Notice 1369-1 - Nicolas Gregoire and Aki Helin discovered that when processing a malformed embedded XSLT stylesheet, Thunderbird can crash due to memory corruption. If the user were tricked into opening a specially crafted page, an attacker could exploit this to cause a denial of service via application crash, or potentially execute code with the privileges of the user invoking Thunderbird. It was discovered that memory corruption could occur during the decoding of Ogg Vorbis files. If the user were tricked into opening a specially crafted file, an attacker could exploit this to cause a denial of service via application crash, or potentially execute code with the privileges of the user invoking Thunderbird. Various other issues were also addressed.
Tags: user ubuntu thunderbird nicolas-gregoire memory-corruption xslt-stylesheet

19:05
Ubuntu Security Notice USN-1369-1
» ‎ Packet Storm Security Recent Files

Ubuntu Security Notice 1369-1 - Nicolas Gregoire and Aki Helin discovered that when processing a malformed embedded XSLT stylesheet, Thunderbird can crash due to memory corruption. If the user were tricked into opening a specially crafted page, an attacker could exploit this to cause a denial of service via application crash, or potentially execute code with the privileges of the user invoking Thunderbird. It was discovered that memory corruption could occur during the decoding of Ogg Vorbis files. If the user were tricked into opening a specially crafted file, an attacker could exploit this to cause a denial of service via application crash, or potentially execute code with the privileges of the user invoking Thunderbird. Various other issues were also addressed.
Tags: user ubuntu thunderbird nicolas-gregoire memory-corruption xslt-stylesheet

19:05
Ubuntu Security Notice USN-1369-1
» ‎ Packet Storm Security Misc. Files

Ubuntu Security Notice 1369-1 - Nicolas Gregoire and Aki Helin discovered that when processing a malformed embedded XSLT stylesheet, Thunderbird can crash due to memory corruption. If the user were tricked into opening a specially crafted page, an attacker could exploit this to cause a denial of service via application crash, or potentially execute code with the privileges of the user invoking Thunderbird. It was discovered that memory corruption could occur during the decoding of Ogg Vorbis files. If the user were tricked into opening a specially crafted file, an attacker could exploit this to cause a denial of service via application crash, or potentially execute code with the privileges of the user invoking Thunderbird. Various other issues were also addressed.
Tags: user ubuntu thunderbird nicolas-gregoire memory-corruption xslt-stylesheet

February 13, 2012
13:10
Ubuntu Security Notice USN-1363-1
» ‎ Packet Storm Security Advisories

Ubuntu Security Notice 1363-1 - A flaw was found in KVM's Programmable Interval Timer (PIT). When a virtual interrupt control is not available a local user could use this to cause a denial of service by starting a timer. A flaw was discovered in the XFS filesystem. If a local user mounts a specially crafted XFS image it could potential execute arbitrary code on the system. Andy Whitcroft discovered a that the Overlayfs filesystem was not doing the extended permission checks needed by cgroups and Linux Security Modules (LSMs). A local user could exploit this to by-pass security policy and access files that should not be accessible. Various other issues were also addressed.
Tags: user ubuntu security andy-whitcroft programmable-interval-timer permission-checks security-modules

13:10
Ubuntu Security Notice USN-1363-1
» ‎ Packet Storm Security Recent Files

Ubuntu Security Notice 1363-1 - A flaw was found in KVM's Programmable Interval Timer (PIT). When a virtual interrupt control is not available a local user could use this to cause a denial of service by starting a timer. A flaw was discovered in the XFS filesystem. If a local user mounts a specially crafted XFS image it could potential execute arbitrary code on the system. Andy Whitcroft discovered a that the Overlayfs filesystem was not doing the extended permission checks needed by cgroups and Linux Security Modules (LSMs). A local user could exploit this to by-pass security policy and access files that should not be accessible. Various other issues were also addressed.
Tags: user ubuntu security andy-whitcroft programmable-interval-timer permission-checks security-modules

13:10
Ubuntu Security Notice USN-1363-1
» ‎ Packet Storm Security Misc. Files

Ubuntu Security Notice 1363-1 - A flaw was found in KVM's Programmable Interval Timer (PIT). When a virtual interrupt control is not available a local user could use this to cause a denial of service by starting a timer. A flaw was discovered in the XFS filesystem. If a local user mounts a specially crafted XFS image it could potential execute arbitrary code on the system. Andy Whitcroft discovered a that the Overlayfs filesystem was not doing the extended permission checks needed by cgroups and Linux Security Modules (LSMs). A local user could exploit this to by-pass security policy and access files that should not be accessible. Various other issues were also addressed.
Tags: user ubuntu security andy-whitcroft programmable-interval-timer permission-checks security-modules

13:09
Ubuntu Security Notice USN-1362-1
» ‎ Packet Storm Security Advisories

Ubuntu Security Notice 1362-1 - Han-Wen Nienhuys reported a flaw in the FUSE kernel module. A local user who can mount a FUSE file system could cause a denial of service. A flaw was found in KVM's Programmable Interval Timer (PIT). When a virtual interrupt control is not available a local user could use this to cause a denial of service by starting a timer. A flaw was discovered in the XFS filesystem. If a local user mounts a specially crafted XFS image it could potential execute arbitrary code on the system. Various other issues were also addressed.
Tags: user ubuntu flaw wen-nienhuys programmable-interval-timer kernel-module denial-of-service

13:09
Ubuntu Security Notice USN-1362-1
» ‎ Packet Storm Security Recent Files

Ubuntu Security Notice 1362-1 - Han-Wen Nienhuys reported a flaw in the FUSE kernel module. A local user who can mount a FUSE file system could cause a denial of service. A flaw was found in KVM's Programmable Interval Timer (PIT). When a virtual interrupt control is not available a local user could use this to cause a denial of service by starting a timer. A flaw was discovered in the XFS filesystem. If a local user mounts a specially crafted XFS image it could potential execute arbitrary code on the system. Various other issues were also addressed.
Tags: user ubuntu flaw wen-nienhuys programmable-interval-timer kernel-module denial-of-service

13:09
Ubuntu Security Notice USN-1362-1
» ‎ Packet Storm Security Misc. Files

Ubuntu Security Notice 1362-1 - Han-Wen Nienhuys reported a flaw in the FUSE kernel module. A local user who can mount a FUSE file system could cause a denial of service. A flaw was found in KVM's Programmable Interval Timer (PIT). When a virtual interrupt control is not available a local user could use this to cause a denial of service by starting a timer. A flaw was discovered in the XFS filesystem. If a local user mounts a specially crafted XFS image it could potential execute arbitrary code on the system. Various other issues were also addressed.
Tags: user ubuntu flaw wen-nienhuys programmable-interval-timer kernel-module denial-of-service

13:09
Ubuntu Security Notice USN-1361-1
» ‎ Packet Storm Security Advisories

Ubuntu Security Notice 1361-1 - Han-Wen Nienhuys reported a flaw in the FUSE kernel module. A local user who can mount a FUSE file system could cause a denial of service. A flaw was found in KVM's Programmable Interval Timer (PIT). When a virtual interrupt control is not available a local user could use this to cause a denial of service by starting a timer. A flaw was discovered in the XFS filesystem. If a local user mounts a specially crafted XFS image it could potential execute arbitrary code on the system. Various other issues were also addressed.
Tags: user ubuntu flaw wen-nienhuys programmable-interval-timer kernel-module denial-of-service

13:09
Ubuntu Security Notice USN-1361-1
» ‎ Packet Storm Security Recent Files

Ubuntu Security Notice 1361-1 - Han-Wen Nienhuys reported a flaw in the FUSE kernel module. A local user who can mount a FUSE file system could cause a denial of service. A flaw was found in KVM's Programmable Interval Timer (PIT). When a virtual interrupt control is not available a local user could use this to cause a denial of service by starting a timer. A flaw was discovered in the XFS filesystem. If a local user mounts a specially crafted XFS image it could potential execute arbitrary code on the system. Various other issues were also addressed.
Tags: user ubuntu flaw wen-nienhuys programmable-interval-timer kernel-module denial-of-service

13:09
Ubuntu Security Notice USN-1361-1
» ‎ Packet Storm Security Misc. Files

Ubuntu Security Notice 1361-1 - Han-Wen Nienhuys reported a flaw in the FUSE kernel module. A local user who can mount a FUSE file system could cause a denial of service. A flaw was found in KVM's Programmable Interval Timer (PIT). When a virtual interrupt control is not available a local user could use this to cause a denial of service by starting a timer. A flaw was discovered in the XFS filesystem. If a local user mounts a specially crafted XFS image it could potential execute arbitrary code on the system. Various other issues were also addressed.
Tags: user ubuntu flaw wen-nienhuys programmable-interval-timer kernel-module denial-of-service

February 08, 2012
8:15
Ubuntu Security Notice USN-1350-1
» ‎ Packet Storm Security Advisories

Ubuntu Security Notice 1350-1 - Jesse Ruderman and Bob Clary discovered memory safety issues affecting Thunderbird. If the user were tricked into opening a specially crafted page, an attacker could exploit these to cause a denial of service via application crash, or potentially execute code with the privileges of the user invoking Thunderbird. It was discovered that Thunderbird did not properly handle node removal in the DOM. If the user were tricked into opening a specially crafted page, an attacker could exploit this to cause a denial of service via application crash, or potentially execute code with the privileges of the user invoking Thunderbird. Various other issues were also addressed.
Tags: user ubuntu thunderbird jesse-ruderman dom bob-clary application-crash memory-safety denial-of-service

8:15
Ubuntu Security Notice USN-1350-1
» ‎ Packet Storm Security Recent Files

Ubuntu Security Notice 1350-1 - Jesse Ruderman and Bob Clary discovered memory safety issues affecting Thunderbird. If the user were tricked into opening a specially crafted page, an attacker could exploit these to cause a denial of service via application crash, or potentially execute code with the privileges of the user invoking Thunderbird. It was discovered that Thunderbird did not properly handle node removal in the DOM. If the user were tricked into opening a specially crafted page, an attacker could exploit this to cause a denial of service via application crash, or potentially execute code with the privileges of the user invoking Thunderbird. Various other issues were also addressed.
Tags: user ubuntu thunderbird jesse-ruderman dom bob-clary application-crash memory-safety denial-of-service

8:15
Ubuntu Security Notice USN-1350-1
» ‎ Packet Storm Security Misc. Files

Ubuntu Security Notice 1350-1 - Jesse Ruderman and Bob Clary discovered memory safety issues affecting Thunderbird. If the user were tricked into opening a specially crafted page, an attacker could exploit these to cause a denial of service via application crash, or potentially execute code with the privileges of the user invoking Thunderbird. It was discovered that Thunderbird did not properly handle node removal in the DOM. If the user were tricked into opening a specially crafted page, an attacker could exploit this to cause a denial of service via application crash, or potentially execute code with the privileges of the user invoking Thunderbird. Various other issues were also addressed.
Tags: user ubuntu thunderbird jesse-ruderman dom bob-clary application-crash memory-safety denial-of-service

8:15
Ubuntu Security Notice USN-1353-1
» ‎ Packet Storm Security Advisories

Ubuntu Security Notice 1353-1 - Jesse Ruderman and Bob Clary discovered memory safety issues affecting the Gecko Browser engine. If the user were tricked into opening a specially crafted page, an attacker could exploit these to cause a denial of service via application crash, or potentially execute code with the privileges of the user invoking Xulrunner. It was discovered that the Gecko Browser engine did not properly handle node removal in the DOM. If the user were tricked into opening a specially crafted page, an attacker could exploit this to cause a denial of service via application crash, or potentially execute code with the privileges of the user invoking Xulrunner. Various other issues were also addressed.
Tags: user ubuntu security jesse-ruderman dom bob-clary application-crash memory-safety browser-engine

8:15
Ubuntu Security Notice USN-1353-1
» ‎ Packet Storm Security Recent Files

Ubuntu Security Notice 1353-1 - Jesse Ruderman and Bob Clary discovered memory safety issues affecting the Gecko Browser engine. If the user were tricked into opening a specially crafted page, an attacker could exploit these to cause a denial of service via application crash, or potentially execute code with the privileges of the user invoking Xulrunner. It was discovered that the Gecko Browser engine did not properly handle node removal in the DOM. If the user were tricked into opening a specially crafted page, an attacker could exploit this to cause a denial of service via application crash, or potentially execute code with the privileges of the user invoking Xulrunner. Various other issues were also addressed.
Tags: user ubuntu security jesse-ruderman dom bob-clary application-crash memory-safety browser-engine

8:15
Ubuntu Security Notice USN-1353-1
» ‎ Packet Storm Security Misc. Files

Ubuntu Security Notice 1353-1 - Jesse Ruderman and Bob Clary discovered memory safety issues affecting the Gecko Browser engine. If the user were tricked into opening a specially crafted page, an attacker could exploit these to cause a denial of service via application crash, or potentially execute code with the privileges of the user invoking Xulrunner. It was discovered that the Gecko Browser engine did not properly handle node removal in the DOM. If the user were tricked into opening a specially crafted page, an attacker could exploit this to cause a denial of service via application crash, or potentially execute code with the privileges of the user invoking Xulrunner. Various other issues were also addressed.
Tags: user ubuntu security jesse-ruderman dom bob-clary application-crash memory-safety browser-engine

February 06, 2012
16:13
Red Hat Security Advisory 2012-0101-01
» ‎ Packet Storm Security Advisories

Red Hat Security Advisory 2012-0101-01 - Red Hat Network Satellite is a systems management tool for Linux-based infrastructures. It allows for provisioning, monitoring, and remote management of multiple Linux deployments with a single, centralized tool. If a user submitted a system registration XML-RPC call to an RHN Satellite server and that call failed, their RHN user password was included in plain text in the error messages both stored in the server log and mailed to the server administrator. With this update, user passwords are excluded from these error messages to avoid the exposure of authentication credentials.
Tags: user hat red red-hat-network linux-deployments authentication-credentials

16:13
Red Hat Security Advisory 2012-0101-01
» ‎ Packet Storm Security Recent Files

Red Hat Security Advisory 2012-0101-01 - Red Hat Network Satellite is a systems management tool for Linux-based infrastructures. It allows for provisioning, monitoring, and remote management of multiple Linux deployments with a single, centralized tool. If a user submitted a system registration XML-RPC call to an RHN Satellite server and that call failed, their RHN user password was included in plain text in the error messages both stored in the server log and mailed to the server administrator. With this update, user passwords are excluded from these error messages to avoid the exposure of authentication credentials.
Tags: user hat red red-hat-network linux-deployments authentication-credentials

16:13
Red Hat Security Advisory 2012-0101-01
» ‎ Packet Storm Security Misc. Files

Red Hat Security Advisory 2012-0101-01 - Red Hat Network Satellite is a systems management tool for Linux-based infrastructures. It allows for provisioning, monitoring, and remote management of multiple Linux deployments with a single, centralized tool. If a user submitted a system registration XML-RPC call to an RHN Satellite server and that call failed, their RHN user password was included in plain text in the error messages both stored in the server log and mailed to the server administrator. With this update, user passwords are excluded from these error messages to avoid the exposure of authentication credentials.
Tags: user hat red red-hat-network linux-deployments authentication-credentials

February 03, 2012
16:18
Ubuntu Security Notice USN-1355-1
» ‎ Packet Storm Security Advisories

Ubuntu Security Notice 1355-1 - It was discovered that if a user chose to export their Firefox Sync key the "Firefox Recovery Key.html" file is saved with incorrect permissions, making the file contents potentially readable by other users. Nicolas Gregoire and Aki Helin discovered that when processing a malformed embedded XSLT stylesheet, Firefox can crash due to memory corruption. If the user were tricked into opening a specially crafted page, an attacker could exploit this to cause a denial of service via application crash, or potentially execute code with the privileges of the user invoking Firefox. Various other issues were also addressed.
Tags: user ubuntu firefox nicolas-gregoire memory-corruption incorrect-permissions

16:18
Ubuntu Security Notice USN-1355-1
» ‎ Packet Storm Security Recent Files

Ubuntu Security Notice 1355-1 - It was discovered that if a user chose to export their Firefox Sync key the "Firefox Recovery Key.html" file is saved with incorrect permissions, making the file contents potentially readable by other users. Nicolas Gregoire and Aki Helin discovered that when processing a malformed embedded XSLT stylesheet, Firefox can crash due to memory corruption. If the user were tricked into opening a specially crafted page, an attacker could exploit this to cause a denial of service via application crash, or potentially execute code with the privileges of the user invoking Firefox. Various other issues were also addressed.
Tags: user ubuntu firefox nicolas-gregoire memory-corruption incorrect-permissions

16:18
Ubuntu Security Notice USN-1355-1
» ‎ Packet Storm Security Misc. Files

Ubuntu Security Notice 1355-1 - It was discovered that if a user chose to export their Firefox Sync key the "Firefox Recovery Key.html" file is saved with incorrect permissions, making the file contents potentially readable by other users. Nicolas Gregoire and Aki Helin discovered that when processing a malformed embedded XSLT stylesheet, Firefox can crash due to memory corruption. If the user were tricked into opening a specially crafted page, an attacker could exploit this to cause a denial of service via application crash, or potentially execute code with the privileges of the user invoking Firefox. Various other issues were also addressed.
Tags: user ubuntu firefox nicolas-gregoire memory-corruption incorrect-permissions

Skip to page: 1 2 3 4

jetlib.sec » Tags » user

Feeds

769 items tagged "user"

Tags: wordpress cimy user vulnerability disclosure user-manager

Tags: nbsp method user ruby rails application-source-code password-method model-users cktricky

Tags: user anarchy username common-aliases format-style common-names

Tags: user anarchy username common-aliases format-style common-names

Tags: user anarchy username common-aliases format-style common-names

Tags: user anarchy username common-aliases format-style common-names

Tags: netiq privileged user privileged-user vulnerability authentication

Tags: mybb web user web-applications vulnerability user-profile

Tags: mybb web user web-applications vulnerability user-profile

Tags: nufw firewall user slides

Tags: mybb dymy user vulnerability user-agent

Tags: mybb dymy user vulnerability user-agent

Tags: mybb dymy user vulnerability user-agent

Tags: web imageshack user user-authentication web-applications

Tags: server freefloat user instrumentation-service malicious-user default-path

Tags: server freefloat user instrumentation-service malicious-user default-path

Tags: server freefloat user instrumentation-service malicious-user default-path

Tags: oracle mysql user vulnerability

Tags: oracle mysql user vulnerability

Tags: oracle mysql user vulnerability

Tags: user ubuntu lynx dan-rosenberg based-buffer-overflow application-crash force-ssl

Tags: user ubuntu lynx dan-rosenberg based-buffer-overflow application-crash force-ssl

Tags: user ubuntu lynx dan-rosenberg based-buffer-overflow application-crash force-ssl

Tags: user module network network-shutdown base64 php-code

Tags: user module network network-shutdown base64 php-code

Tags: user module network network-shutdown base64 php-code

Tags: netiq privileged user code-execution privileged-user vulnerability

Tags: user ubuntu firefox ed-morley julian-seward boris-zbarsky andrew-mccreight gary-kwong christian-holler chris-lord jesse-ruderman

Tags: user ubuntu firefox ed-morley julian-seward boris-zbarsky andrew-mccreight gary-kwong christian-holler chris-lord jesse-ruderman

Tags: user ubuntu firefox ed-morley julian-seward boris-zbarsky andrew-mccreight gary-kwong christian-holler chris-lord jesse-ruderman

Tags: user code ubuntu ed-morley julian-seward boris-zbarsky andrew-mccreight gary-kwong christian-holler chris-lord jesse-ruderman

Tags: user code ubuntu ed-morley julian-seward boris-zbarsky andrew-mccreight gary-kwong christian-holler chris-lord jesse-ruderman

Tags: user code ubuntu ed-morley julian-seward boris-zbarsky andrew-mccreight gary-kwong christian-holler chris-lord jesse-ruderman

Tags: user ubuntu firefox ed-morley julian-seward boris-zbarsky andrew-mccreight gary-kwong christian-holler chris-lord jesse-ruderman

Tags: user ubuntu firefox ed-morley julian-seward boris-zbarsky andrew-mccreight gary-kwong christian-holler chris-lord jesse-ruderman

Tags: user ubuntu firefox ed-morley julian-seward boris-zbarsky andrew-mccreight gary-kwong christian-holler chris-lord jesse-ruderman

Tags: user ubuntu ppm huzaifa-s.-sidhpurwala tiff ppm-images tiff-image denial-of-service

Tags: user ubuntu ppm huzaifa-s.-sidhpurwala tiff ppm-images tiff-image denial-of-service

Tags: user ubuntu ppm huzaifa-s.-sidhpurwala tiff ppm-images tiff-image denial-of-service

Tags: novell netiq user target-system system-privileges code-execution

Tags: novell netiq user target-system system-privileges code-execution

Tags: administrator module user read account-profile vulnerability combinations

Tags: administrator module user read account-profile vulnerability combinations

Tags: administrator module user read account-profile vulnerability combinations

Tags: mybb follower user plugin-version vulnerability

Tags: mybb follower user plugin-version vulnerability

Tags: mybb follower user plugin-version vulnerability

Tags: wordpress cimy user manager-plugin vulnerability disclosure user-manager

Tags: fpga user storing mike classic-arcade-games ancient-computers Hardware

Tags: javascript user website jordi-chancel christian-holler david-bloom jesse-ruderman dalili henrik-skupin memory-corruption malicious-website

Tags: javascript user website jordi-chancel christian-holler david-bloom jesse-ruderman dalili henrik-skupin memory-corruption malicious-website

Tags: javascript user website jordi-chancel christian-holler david-bloom jesse-ruderman dalili henrik-skupin memory-corruption malicious-website

Tags: exploitable blender user

Tags: user emacs ubuntu hiroshi-oota paul-ling lisp-code search-paths

Tags: user emacs ubuntu hiroshi-oota paul-ling lisp-code search-paths

Tags: user emacs ubuntu hiroshi-oota paul-ling lisp-code search-paths

Tags: enumeration wordpress user disclosure

Tags: enumeration wordpress user disclosure

Tags: enumeration wordpress user disclosure

Tags: web codeigniter user web-applications vulnerability user-manager

Tags: user ubuntu firefox private-browsing jason-smith daniel-holbert gary-kwong steve-fink christian-holler andrew-sutherland jesse-ruderman

Tags: user ubuntu firefox private-browsing jason-smith daniel-holbert gary-kwong steve-fink christian-holler andrew-sutherland jesse-ruderman

Tags: user ubuntu firefox private-browsing jason-smith daniel-holbert gary-kwong steve-fink christian-holler andrew-sutherland jesse-ruderman

Tags: openfiler user the command-execution system-password arbitrary-code

Tags: openfiler user the command-execution system-password arbitrary-code

Tags: openfiler user the command-execution system-password arbitrary-code

Tags: user ubuntu gimp joseph-sheridan murray-mcallister palette-files malformed-headers

Tags: user ubuntu gimp joseph-sheridan murray-mcallister palette-files malformed-headers

Tags: user ubuntu gimp joseph-sheridan murray-mcallister palette-files malformed-headers

Tags: user ubuntu system chen-haogang udf-file-system datagram-sockets protocol-implementation

Tags: user ubuntu system chen-haogang udf-file-system datagram-sockets protocol-implementation

Tags: user ubuntu system chen-haogang udf-file-system datagram-sockets protocol-implementation

Tags: user ubuntu firefox jason-smith daniel-holbert gary-kwong steve-fink christian-holler andrew-sutherland jesse-ruderman abhishek-arya