64-bit Linux kernel privilege escalation
Published:		25.09.2007
Source:		BUGTRAQ
SecurityVulns ID:		8184
Type:		local
Level:		6/10
Description:		Insufficient registry access validation on 32-bit syscalls emulation.

Affected:		LINUX : kernel 2.4
		LINUX : kernel 2.6
CVE:		CVE-2007-4573

Original document

Wojciech Purczynski, COSEINC Linux Advisory #2: IA32 System Call Emulation Vulnerability (25.09.2007)

Files:		exploit for x86_64 linux kernel ia32syscall emulation bug
Discuss:		Read or add your comments to this news (0 comments)

Daily web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl) updated since 25.09.2007
Published:		25.09.2007
Source:		BUGTRAQ
SecurityVulns ID:		8185
Type:		remote
Level:		5/10
Description:		PHP inclusions, SQL injections, directory traversals, crossite scripting, information leaks, etc.

Affected:		GOOGLE : Urchin Web Analytics 5.7
		FREESIDE : Freeside 1.7
		SKLOG : sk.log 0.5
		FLATNUKE : FlatNuke 2.6
		JSPWIKI : JSPWiki 2.4
		JSPWIKI : JSPWiki 2.5

Original document		Jason Kratzer, JSPWiki Multiple Vulnerabilities (25.09.2007)
		darkbunny91_(at)_gmail.com, Arbitrary Command Inclusion (25.09.2007)
		h3llcode_(at)_hotmail.it, Nuke Mobile Entartainment Local File Inclusion (25.09.2007)
		r0t, Freeside XSS vuln. (25.09.2007)
		fryxar fryxar, Google Urchin password theft madness (25.09.2007)

Files:		Exploits FlatNuke Arbitrary Command Inclusion
Discuss:		Read or add your comments to this news (1 comments)

Tivoli Storage Manager backup client buffer overflow
Published:		25.09.2007
Source:		BUGTRAQ
SecurityVulns ID:		8187
Type:		remote
Level:		6/10
Description:		Buffer overflow on oversized TCP/1581 HTTP request Host: header.

Affected:		IBM : Tivoli Storage Manager 5.2
		IBM : Tivoli Storage Manager 5.1
		IBM : Tivoli Storage Manager 5.3
		IBM : Tivoli Storage Manager 5.4
CVE:		CVE-2007-4880

Original document

ZDI, ZDI-07-054: IBM Tivoli Storage Manager Express CAD Service Buffer Overflow Vulnerability (25.09.2007)

Discuss:

Read or add your comments to this news (0 comments)

KDE kdm privilege escalation
Published:		25.09.2007
Source:		BUGTRAQ
SecurityVulns ID:		8186
Type:		local
Level:		6/10
Description:		It's possible to login without password under certain circumstances.

Affected:		KDE : KDE 3.5
CVE:		CVE-2007-4569

Original document

UBUNTU, [USN-517-1] kdm vulnerability (25.09.2007)

Discuss:

Read or add your comments to this news (0 comments)