what you don't know can hurt you

Register | Login

FilesNewsUsersAuthors

Home Files News &[SERVICES_TAB]About Contact Add New

Showing 1 - 2 of 2

Files Date: 2012-03-10 to 2012-03-11

Zend Server 5.6.0 Script Insertion

Posted Mar 10, 2012

Authored by LiquidWorm | Site zeroscience.mk

Zend Server version 5.6.0 suffers from multiple script insertion vulnerabilities that allow for cross site scripting attacks.

tags | exploit, vulnerability, xss

SHA-256 | a56a0dc25440b07c1ee03be923fb679446ad7232720bdb846a2f5d0ac189e975

Download | Favorite | View

Ubuntu Security Notice USN-1396-1

Posted Mar 10, 2012

Authored by Ubuntu | Site security.ubuntu.com

Ubuntu Security Notice 1396-1 - It was discovered that the GNU C Library did not properly handle integer overflows in the timezone handling code. An attacker could use this to possibly execute arbitrary code by convincing an application to load a maliciously constructed tzfile. It was discovered that the GNU C Library did not properly handle passwd.adjunct.byname map entries in the Network Information Service (NIS) code in the name service caching daemon (nscd). An attacker could use this to obtain the encrypted passwords of NIS accounts. This issue only affected Ubuntu 8.04 LTS. Various other issues were also addressed.

tags | advisory, overflow, arbitrary

systems | linux, ubuntu

advisories | CVE-2009-5029, CVE-2010-0015, CVE-2011-1071, CVE-2011-1659, CVE-2011-1089, CVE-2011-1095, CVE-2011-1658, CVE-2011-2702, CVE-2011-4609, CVE-2012-0864, CVE-2009-5029, CVE-2010-0015, CVE-2011-1071, CVE-2011-1089, CVE-2011-1095, CVE-2011-1658, CVE-2011-1659, CVE-2011-2702, CVE-2011-4609, CVE-2012-0864

SHA-256 | 6e37a6e7af6dadd5caece2f389fd20999a42067305f2184d676361f4c1b51ea0

Download | Favorite | View