ld.so from Solaris 9 and 10 doesn't check LD_AUDIT environment variable when
running s[ug]id binaries, allowing to run arbitrary code with elevated
privileges. Well, I can't belive, that such trivial vulnerability exists in
modern OS...

The following PoC code was tested on:

- SunOS 5.10 Generic i8

[ more ]  [ reply ]

===========================================================
Ubuntu Security Notice USN-145-1 June 28, 2005
wget vulnerabilities
CAN-2004-1487, CAN-2004-1488, CAN-2004-2014
===========================================================

A security issue affects the following Ubuntu releases:

Ubun

[ more ]  [ reply ]

---------------------------- Original Message ----------------------------
Subject: phpBB 2.0.16 released
From: "phpBB list" <noreply (at) phpbb (dot) com [email concealed]>
Date: Mon, June 27, 2005 8:34 pm
To: security (at) verloren-im (dot) net [email concealed]
------------------------------------------------------------------------
--

Hi ev

[ more ]  [ reply ]

Cross-Site Scripting (CSS) in Hosting Controller All Version and hot fix it hehe ;)
ActionSpider (at) linuxmail (dot) org [email concealed]

[ more ]  [ reply ]

John Heasman of NGSSoftware has discovered a high risk vulnerability in
RealPlayer for Windows.

Versions affected include:

RealPlayer 10.5 (6.0.12.1040-1069)
RealPlayer 10
RealOne Player v2
RealOne Player v1

RealPlayer 10.5 (6.0.12.1212) is NOT affected.

The flaw permits the overwriting of a lo

[ more ]  [ reply ]

This vulnerabillity is well known and is called the "bluestab" DOS attack.

[ more ]  [ reply ]

Two of these "full path disclosure" error messages suggest a much more
serious problem:

http://localhost/jaf-cms/index.php?page=forum&category=general&id=3/*

Warning: fopen(module/files/3/*): failed to open stream: No such
file or directory in
/var/www/html/jaf-cms/module/forum/inc/csvfil

[ more ]  [ reply ]

===========================================================
Ubuntu Security Notice USN-144-1 June 27, 2005
dbus vulnerability
CAN-2005-0201
===========================================================

A security issue affects the following Ubuntu releases:

Ubuntu 4.10 (Warty Warthog)

The fol

[ more ]  [ reply ]

- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
Gentoo Linux Security Advisory GLSA 200506-23
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
http://security.gentoo.org/
- - - - - -

[ more ]  [ reply ]

M4DR007-07SA (security advisory): Multiple vulnerabilities in ASP Nuke 0.80

Published: 26 16 2005
Released: 26 16 2005
Name: ASP Nuke
Affected Systems: <= 0.80
Issue: Cross-Site Scripting, HTTP Response Splitting, SQL Injection
Author: Alberto Trivero
Vendor: http://www.aspnuke.com/

Software Des

[ more ]  [ reply ]

===========================================================
Ubuntu Security Notice USN-143-1 June 27, 2005
linux-source-2.6.10, linux-source-2.6.8.1 vulnerabilities
CAN-2005-1762, CAN-2005-1765
===========================================================

A security issue affects the following

[ more ]  [ reply ]

When i was playing with my bluetooth device,
i found that if you add in your nickname " 09 0a " in hex, it will cause that every one who search for available bluetooth devices and find your nickname his nokia phone will restart.
you should add a nicname like that,

[something][09 0a in hex][just add

[ more ]  [ reply ]

Summary:
Denial of Service Vulnerability in True North Software, Inc. IA
eMailServer Corporate Edition Version: 5.2.2. Build: 1051.
(http://www.tnsoft.com/)

Details:
Input to the IMAP4 LIST command is not properly checked and/or
filtered. Issuing a single character '%x' as the second argument to
th

[ more ]  [ reply ]

*******description*********
aspnuke is web portal system written in asp .
site : www.aspnuke.com

********POC************
It's possible to inject htttp://host/module/article/article/article.asp?articleid=1'
for example you can change the admin username and password with this querry :
http://host/mod

[ more ]  [ reply ]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

________________________________________________________________________
______

SUSE Security Announcement

Package: RealPlayer
Announcement ID: SUSE-SA:2005:037
Date:

[ more ]  [ reply ]

Secure Science Corporation Bugtraq <bugtraq (at) securescience (dot) net [email concealed]> said:
> Regarding certain vulnerabilities that are being discovered such as
> http://secunia.com/multiple_browsers_dialog_origin_vulnerability_test
>
> Are these really features, or are they flaws now because of the phishing
> threat

[ more ]  [ reply ]

////////////////////////////////////////
// //
// ENGLISH //
// //
////////////////////////////////////////

www.wormzweb.tk

This bug do not affect all php-nuke versions because not all versions allow l

[ more ]  [ reply ]

I just checked it out with my Nokia 6310i, firmware 5.51 (an old firmware, I know).

a) if the phone is not paired with the BT dongle I used, it asks for pairing

b) even though the screen shows "connecting" with the moving bar, I can use one of the blue buttons to cancel this screen a do something

[ more ]  [ reply ]

Hi,

Regarding certain vulnerabilities that are being discovered such as
http://secunia.com/multiple_browsers_dialog_origin_vulnerability_test

Are these really features, or are they flaws now because of the phishing
threat vector. Originally javascript/DHTML/DOM is pretty powerful and
can do a l

[ more ]  [ reply ]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

_______________________________________________________________________

Mandriva Linux Security Update Advisory
_______________________________________________________________________

Package name: squid
Advisory ID:

[ more ]  [ reply ]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

_______________________________________________________________________

Mandriva Linux Security Update Advisory
_______________________________________________________________________

Package name: dbus
Advisory ID:

[ more ]  [ reply ]

Hello,

Please note his tests were on X86, SPARC needs double ret in order to
successfuly xploit/segfault the vulnearable program due to register
windows layout on stack.

Its like xfont (x-something, don't remember) issues on old solaris,
exploitable (segfault) on x86 but not on SPARC because it

[ more ]  [ reply ]

adam stevens napisa³(a):
> [root@nexus:~] traceroute -s 1.1.1.1. 127.0.0.1
> traceroute: 1.1.1.1. is an invalid IPv4 source address
> [root@nexus:~] uname -a
> SunOS nexus 5.10 s10_54 sun4u sparc SUNW,Sun-Blade-100

On my box (generic unpatched Solaris 10 on amd64), segfault strongly depends on
stac

[ more ]  [ reply ]

##########################################################
# GulfTech Security Research June 23rd, 2005
##########################################################
# Vendor : Infopop Corporation
# URL : http://www.ubbcentral.com/ubbthreads/
# Version : All Versions Prior To 6.5.2 Be

[ more ]  [ reply ]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

- ------------------------------------------------------------------------
--
Trustix Secure Linux Security Advisory #2005-0030

Package name: cpio, razor-agents, sudo, telnet
Summary: Multiple security fixes
Date: 2005-06-24
Affec

[ more ]  [ reply ]