A vulnerability allows remote attackers to deny services on vulnerable installations of OpenLDAP….

continue reading.....

PartyPoker.com is “the world’s largest online poker brand in terms of number of players and reven…

continue reading.....

A stack overflow vulnerability in Alcatel-Lucent’s web interface allows remote attackers to cause…

continue reading.....

Microsoft Office contains a “number of import filters. These input filters allow transparent conv…

continue reading.....

The kernel driver KmxFw.sys shipped with various CA products contains a vulnerability in the code…

continue reading.....

“Netrw supports “transparent” editing of files on other machines using [...] vim ftp://hostname/p…

continue reading.....

continue reading.....

Microsoft Office contains “a number of import filters. These input filters allow transparent conv…

continue reading.....

Microsoft Corp.’s PowerPoint Viewer is “a viewer for full-featured presentations created in Power…

continue reading.....

A vulnerability in Apache’s Tomcat allows attackers to utilize a directory traversal vulnerabilit…

continue reading.....

The snoop “command line utility is installed by default on Solaris. It is used to capture and dis…

continue reading.....

continue reading.....

A vulnerability in Apache’s Tomcat allows attackers to utilize a directory traversal vulnerabilit…

continue reading.....

A vulnerability in Cisco’s WebEx ActiveX allows remote attackers to cause it to overflow an inter…

continue reading.....

The 8e6 Professional Edition offers “high-performance, enterprise-level filtering with the R3000 …

continue reading.....

A vulnerability in the way Wireshark handles RMI packets allows attackers to cause the Wireshark …

continue reading.....

“America’s Army (also known as AA or Army Game Project) is a tactical multiplayer first-person sh…

continue reading.....

continue reading.....

A vulnerability in libxslt allows attackers that can supply an arbitrary XSLT file to cause the l…

continue reading.....

The message argument of Apache Tomact’s HttpServletResponse.sendError() call is not only displaye…

continue reading.....

continue reading.....

Virtualization technologies allow users to run different operating systems simultaneously on top …

continue reading.....

Ingres Database is “a database server used in several Computer Associates’ products. For example, CA Directory Service use the Ingres Database server”. Multiple local issues have been found in the Ingres database product.

continue reading.....

Hewlett-Packard’s Internet Services provides “end-user emulation of major business applications and a single integrated view of the Internet infrastructure”. Remote exploitation of a denial of service vulnerability in Hewlett-Packard’s Internet Services Probe Builder product allows an unauthenticated attacker the ability to terminate any process.

continue reading.....

SAP’s MaxDB is “a database software product”. MaxDB was released as open source from version 7.5 up to version 7.6.00. Later versions are no longer open source but are available for download from the SAP SDN website (sdn.sap.com) as a community edition with free community support for public use beyond the scope of SAP applications. The “dbmsrv” program is set-uid “sdb”, set-gid “sdba”, and installed by default. Local exploitation of an untrusted path vulnerability in the “dbmsrv” program, as distributed with SAP AG’s MaxDB, allow attackers to elevate privileges to that of the “sdb” user.

continue reading.....

By flooding an Asterisk server with IAX2 ‘POKE’ requests, an attacker may eat up all call numbers associated with the IAX2 protocol on an Asterisk server and prevent other IAX2 calls from getting through. Due to the nature of the protocol, IAX2 POKE calls will expect an ACK packet in response to the PONG packet sent in response to the POKE. While waiting for this ACK packet, this dialog consumes an IAX2 call number, as the ACK packet must contain the same call number as was allocated and sent in the PONG.

continue reading.....

This exploit targets a fairly ubiquitous flaw in DNS implementations which allow the insertion of malicious DNS records into the cache of the target nameserver. This exploit caches a single malicious host entry into the target nameserver. By causing the target nameserver to query for random hostnames at the target domain, the attacker can spoof a response to the target server including an answer for the query, an authority server record, and an additional record for that server, causing target nameserver to insert the additional record into the cache.

continue reading.....

continue reading.....

The user name field of the CUA Module Login does not sanitize user input allowing for an attacker to run arbitrary SQL code. Through “–” syntax it is possible to comment out the password check allowing an attacker to log in with the first available user name in the table. After performing this several times or by searching through the “Accounts” tab within the CUA Module an attacker can gather a list of all users. With this list an attacker can select an administrator account and log in with this by simply entering the user name followed by “–”.

continue reading.....

This exploit targets a fairly ubiquitous flaw in DNS implementations which allow the insertion of malicious DNS records into the cache of the target nameserver. This exploit caches a single malicious nameserver entry into the target nameserver which replaces the legitimate nameservers for the target domain. By causing the target nameserver to query for random hostnames at the target domain, the attacker can spoof a response to the target server including an answer for the query, an authority server record, and an additional record for that server, causing target nameserver to insert the additional record into the cache. This insertion completely replaces the original nameserver records for the target domain.

continue reading.....