[CLOSE] OSVDB ID : 60573 - Disclosed: 2009-12-02

Description:

Unknown / Incomplete

[CLOSE] OSVDB ID : 60574 - Disclosed: 2009-12-02

Description:

Unknown / Incomplete

[CLOSE] OSVDB ID : 60585 - Disclosed: 2009-12-02

Description:

Roxio Creator is prone to an integer overflow condition. The program fails to properly sanitize user-supplied input when parsing image dimensions, resulting in a heap-based buffer overflow. With a specially crafted file, a context-dependent attacker can potentially execute arbitrary code on a user's system.

[CLOSE] OSVDB ID : 60648 - Disclosed: 2009-12-02

Description:

Lateral Arts Photobox Uploader ActiveX is prone to an overflow condition. The ActiveX control fails to properly sanitize user-supplied input assigned to various properties (e.g. LogURL, ConnectURL, SkinURL, AlbumCreateURL, ErrorURL, and httpsinglehost), resulting in a stack-based buffer overflow. With a specially crafted web page, a context-dependent attacker can execute arbitrary code on a user's system.

[CLOSE] OSVDB ID : 60814 - Disclosed: 2009-12-02

Description:

(Description Provided by CVE) : Multiple cross-site request forgery (CSRF) vulnerabilities in Moodle 1.8 before 1.8.11 and 1.9 before 1.9.7 allow remote attackers to hijack the authentication of unspecified victims via unknown vectors.

[CLOSE] OSVDB ID : 60815 - Disclosed: 2009-12-02

Description:

(Description Provided by CVE) : The LAMS module (mod/lams) for Moodle 1.8 before 1.8.11 and 1.9 before 1.9.7 stores the (1) username, (2) firstname, and (3) lastname fields within the user table, which allows attackers to obtain user account information via unknown vectors.

[CLOSE] OSVDB ID : 60816 - Disclosed: 2009-12-02

Description:

(Description Provided by CVE) : mod/glossary/showentry.php in the Glossary module for Moodle 1.8 before 1.8.11 and 1.9 before 1.9.7 does not properly perform access control, which allows attackers to read unauthorized Glossary entries via unknown vectors.

[CLOSE] OSVDB ID : 60817 - Disclosed: 2009-12-02

Description:

(Description Provided by CVE) : mnet/lib.php in Moodle 1.8 before 1.8.11 and 1.9 before 1.9.7, when MNET services are enabled, does not properly check permissions, which allows remote authenticated servers to execute arbitrary MNET functions.

[CLOSE] OSVDB ID : 60818 - Disclosed: 2009-12-02

Description:

(Description Provided by CVE) : SQL injection vulnerability in the SCORM module in Moodle 1.8 before 1.8.11 and 1.9 before 1.9.7 allows remote authenticated users to execute arbitrary SQL commands via vectors related to an "escaping issue when processing AICC CRS file (Course_Title)."

[CLOSE] OSVDB ID : 71878 - Disclosed: 2009-12-02

Description:

TimThumb contains a flaw that allows a remote cross-site scripting (XSS) attack. This flaw exists because the application does not validate certain unspecified input passed via the PATH_INFO and 'src' parameter upon submission to the timthumb.php script. This may allow a user to create a specially crafted URL that would execute arbitrary script code in a user's browser within the trust relationship between their browser and the server.

[CLOSE] OSVDB ID : 86444 - Disclosed: 2009-12-02

Description:

Simple Machines Forum (SMF) contains a flaw that allows a remote attacker to access arbitrary files outside of a restricted path. The issue is due to the Sources/ManageErrors.php script not properly establishing restrictions on accessible files for administrative requests. Using the log viewing functionality via index.php, an administrator can view any file on the system by requesting it with an absolute path.

[CLOSE] OSVDB ID : 91814 - Disclosed: 2009-12-02

Description:

Juniper IVE OS Secure Access (SA) and Unified Access Control (UAC) contain a flaw that is triggered when using NTLMv1 or NTLMv2 protocols for Active Directory based authentication. This may allow a remote attacker to bypass the authentication step of the login process.

[CLOSE] OSVDB ID : 91813 - Disclosed: 2009-12-02

Description:

Juniper IVE OS Secure Access (SA) and Unified Access Control (UAC) contain an unspecified flaw that is due to the programs failing to properly enforce a timeout when certain sub-menus are used by an administrator. This may allow a remote attacker to more easily gain administrative access.

[CLOSE] OSVDB ID : 60597 - Disclosed: 2009-12-02

Description:

Pligg 1.0.2 contains a flaw that allows a remote cross site scripting (XSS) attack. This flaw exists because the application does not validate the HTTP Referer Header parameter upon submission to the admin/admin_config.php script. This may allow a user to create a specially crafted URL that would execute arbitrary script code in a user's browser within the trust relationship between their browser and the server.

[CLOSE] OSVDB ID : 60580 - Disclosed: 2009-12-02

Description:

Joaktree Component for Joomla! contains a flaw that may allow an attacker to carry out an SQL injection attack. The issue is due to the 'index.php' script not properly sanitizing user-supplied input to the 'treeId' parameter. This may allow an attacker to inject or manipulate SQL queries in the back-end database, allowing for the manipulation or disclosure of arbitrary data.

[CLOSE] OSVDB ID : 60583 - Disclosed: 2009-12-02

Description:

Theeta CMS contains a flaw that may allow an attacker to carry out an SQL injection attack. The issue is due to the 'blog/index.php' script not properly sanitizing user-supplied input to the 'start' parameter. This may allow an attacker to inject or manipulate SQL queries in the back-end database, allowing for the manipulation or disclosure of arbitrary data.

[CLOSE] OSVDB ID : 60632 - Disclosed: 2009-12-02

Description:

(Description Provided by CVE) : Buffer overflow in Adobe Illustrator CS4 14.0.0, CS3 13.0.3 and earlier, and CS3 13.0.0 allows remote attackers to execute arbitrary code via a long DSC comment in an Encapsulated PostScript (.eps) file. NOTE: some of these details are obtained from third party information.

[CLOSE] OSVDB ID : 60593 - Disclosed: 2009-12-02

Description:

(Description Provided by CVE) : Multiple stack-based buffer overflows in src/Task.cc in the FastCGI program in IIPImage Server before 0.9.8 might allow remote attackers to execute arbitrary code via vectors associated with crafted arguments to the (1) RGN::run, (2) JTLS::run, or (3) SHD::run function. NOTE: some of these details are obtained from third party information.

[CLOSE] OSVDB ID : 60598 - Disclosed: 2009-12-02

Description:

Pligg 1.0.2 contains a flaw that allows a remote cross site scripting (XSS) attack. This flaw exists because the application does not validate the HTTP Referer Header upon submission to the admin/admin_modules.php script. This may allow a user to create a specially crafted URL that would execute arbitrary script code in a user's browser within the trust relationship between their browser and the server.

[CLOSE] OSVDB ID : 60599 - Disclosed: 2009-12-02

Description:

Pligg 1.0.2 contains a flaw that allows a remote cross site scripting (XSS) attack. This flaw exists because the application does not validate the HTTP Referer Header XSS parameter upon submission to the delete.php script. This may allow a user to create a specially crafted URL that would execute arbitrary script code in a user's browser within the trust relationship between their browser and the server.

[CLOSE] OSVDB ID : 60600 - Disclosed: 2009-12-02

Description:

Pligg 1.0.2 contains a flaw that allows a remote cross site scripting (XSS) attack. This flaw exists because the application does not validate the HTTP Referer Header upon submission to the editlink.php script. This may allow a user to create a specially crafted URL that would execute arbitrary script code in a user's browser within the trust relationship between their browser and the server.

[CLOSE] OSVDB ID : 60601 - Disclosed: 2009-12-02

Description:

Pligg 1.0.2 contains a flaw that allows a remote cross site scripting (XSS) attack. This flaw exists because the application does not validate the HTTP Referer Header upon submission to the submit.php script. This may allow a user to create a specially crafted URL that would execute arbitrary script code in a user's browser within the trust relationship between their browser and the server.

[CLOSE] OSVDB ID : 60602 - Disclosed: 2009-12-02

Description:

Pligg 1.0.2 contains a flaw that allows a remote cross site scripting (XSS) attack. This flaw exists because the application does not validate the HTTP Referer Header upon submission to the submit_groups.php script. This may allow a user to create a specially crafted URL that would execute arbitrary script code in a user's browser within the trust relationship between their browser and the server.

[CLOSE] OSVDB ID : 60603 - Disclosed: 2009-12-02

Description:

Pligg 1.0.2 contains a flaw that allows a remote cross site scripting (XSS) attack. This flaw exists because the application does not validate the HTTP Referer Header upon submission to the user_add_remove_links.php script. This may allow a user to create a specially crafted URL that would execute arbitrary script code in a user's browser within the trust relationship between their browser and the server.

[CLOSE] OSVDB ID : 60604 - Disclosed: 2009-12-02

Description:

Pligg 1.0.2 contains a flaw that allows a remote cross site scripting (XSS) attack. This flaw exists because the application does not validate the HTTP Referer Header upon submission to the user_settings.php script. This may allow a user to create a specially crafted URL that would execute arbitrary script code in a user's browser within the trust relationship between their browser and the server.

[CLOSE] OSVDB ID : 60605 - Disclosed: 2009-12-02

Description:

Pligg 1.0.2 contains a flaw that allows a remote Cross-site Request Forgery (CSRF / XSRF) attack. The flaw exists because the application does not require multiple steps or explicit confirmation for sensitive transactions. By using a crafted URL (e.g., a crafted GET request inside an "img" tag), an attacker may trick the victim into clicking on the image to take advantage of the trust relationship between the authenticated victim and the application. Such an attack could trick the victim into executing arbitrary commands in the context of their session with the application, without further prompting or verification.

[CLOSE] OSVDB ID : 60606 - Disclosed: 2009-12-02

Description:

Pligg 1.0.2 contains a flaw that allows a remote cross site redirection attack. This flaw exists because the application does not validate the "return" parameter upon submission to the login.php script. This could allow a user to create a specially crafted URL, that if clicked, would redirect a victim from the intended legitimate web site to an arbitrary web site of the attacker's choosing. This could be leveraged to direct a user to a web page containing attacks that target client side software such as a web browser or document rendering programs.

[CLOSE] OSVDB ID : 60607 - Disclosed: 2009-12-02

Description:

Pligg 1.0.2 contains a flaw that allows a remote cross site redirection attack. This flaw exists because the application does not validate the "return" parameter upon submission to the user_settings.php script. This could allow a user to create a specially crafted URL, that if clicked, would redirect a victim from the intended legitimate web site to an arbitrary web site of the attacker's choosing. This could be leveraged to direct a user to a web page containing attacks that target client side software such as a web browser or document rendering programs.

[CLOSE] OSVDB ID : 60798 - Disclosed: 2009-12-02

Description:

(Description Provided by CVE) : The U.S. Defense Information Systems Agency (DISA) Security Readiness Review (SRR) script for the Solaris x86 platform executes files in arbitrary directories as root for filenames equal to (1) java, (2) openssl, (3) php, (4) snort, (5) tshark, (6) vncserver, or (7) wireshark, which allows local users to gain privileges via a Trojan horse program.

[CLOSE] OSVDB ID : 60875 - Disclosed: 2009-12-02

Description:

(Description Provided by CVE) : Off-by-one error in src/http.c in CoreHTTP 0.5.3.1 and earlier allows remote attackers to cause a denial of service or possibly execute arbitrary code via an HTTP request with a long first line that triggers a buffer overflow. NOTE: this vulnerability reportedly exists because of an incorrect fix for CVE-2007-4060.

[CLOSE] OSVDB ID : 62135 - Disclosed: 2009-12-02

Description:

(Description Provided by CVE) : The TLS protocol, and the SSL protocol 3.0 and possibly earlier, as used in Microsoft Internet Information Services (IIS) 7.0, mod_ssl in the Apache HTTP Server 2.2.14 and earlier, OpenSSL before 0.9.8l, GnuTLS 2.8.5 and earlier, Mozilla Network Security Services (NSS) 3.12.4 and earlier, multiple Cisco products, and other products, does not properly associate renegotiation handshakes with an existing connection, which allows man-in-the-middle attackers to insert data into HTTPS sessions, and possibly other types of sessions protected by TLS or SSL, by sending an unauthenticated request that is processed retroactively by a server in a post-renegotiation context, related to a "plaintext injection" attack, aka the "Project Mogul" issue.

[CLOSE] OSVDB ID : 89880 - Disclosed: 2009-12-02

Description:

By default, AVTech AVC-787 DVR installs with default user credentials (username/password combination). The 'admin' account has a password of 'admin', which is publicly known and documented. This allows remote attackers to trivially access the program or system and gain privileged access.

[CLOSE] OSVDB ID : 86460 - Disclosed: 2009-12-01

Description:

Simple Machines Forum (SMF) contains a flaw that allows a remote cross-site scripting (XSS) attack. This flaw exists because the application does not validate input passed via a the body of a message post before returning it to the user. This may allow a user to create a specially crafted request that would execute arbitrary script code in a user's browser within the trust relationship between their browser and the server.

[CLOSE] OSVDB ID : 60859 - Disclosed: 2009-12-01

Description:

Unknown / Incomplete

[CLOSE] OSVDB ID : 60570 - Disclosed: 2009-12-01

Description:

(Description Provided by CVE) : The _rtld function in the Run-Time Link-Editor (rtld) in libexec/rtld-elf/rtld.c in FreeBSD 7.1, 7.2, and 8.0 does not clear the LD_PRELOAD environment variable, which allows local users to gain privileges by executing a setuid or setguid program with a modified LD_PRELOAD variable containing an untrusted search path that points to a Trojan horse library, a different vector than CVE-2009-4147.

[CLOSE] OSVDB ID : 60589 - Disclosed: 2009-12-01

Description:

(Description Provided by CVE) : Integer overflow in Novell eDirectory 8.7.3.x before 8.7.3.10 ftf2 and 8.8.x before 8.8.5.2 allows remote attackers to execute arbitrary code via an NDS Verb 0x1 request containing a large integer value that triggers a heap-based buffer overflow.

[CLOSE] OSVDB ID : 86461 - Disclosed: 2009-12-01

Description:

Simple Machines Forum (SMF) contains a flaw that allows a remote Cross-site Request Forgery (CSRF / XSRF) attack. The flaw exists because the application does not require multiple steps or explicit confirmation for sensitive transactions related to the ManageServer.php script. By using a crafted URL (e.g., a crafted GET request inside an "img" tag), an attacker may trick the victim into clicking on the image to take advantage of the trust relationship between the authenticated victim and the application. Such an attack could trick the victim into executing arbitrary commands in the context of their session with the application, without further prompting or verification.

[CLOSE] OSVDB ID : 86459 - Disclosed: 2009-12-01

Description:

Simple Machines Forum (SMF) contains a flaw that allows a remote cross-site scripting (XSS) attack. This flaw exists because the application does not validate the replacing of censored words, which will cause the malformed code to be inserted for every censored word on a forum. This may allow a user to create a specially crafted request that would execute arbitrary script code in a user's browser within the trust relationship between their browser and the server.

[CLOSE] OSVDB ID : 86458 - Disclosed: 2009-12-01

Description:

Simple Machines Forum (SMF) contains a flaw that allows a remote cross-site scripting (XSS) attack. This flaw exists because the application does not validate certain input when editing smiley group names. This may allow a user to create a specially crafted request that would execute arbitrary script code in a user's browser within the trust relationship between their browser and the server.

[CLOSE] OSVDB ID : 86457 - Disclosed: 2009-12-01

Description:

Simple Machines Forum (SMF) contains a flaw that allows a remote cross-site scripting (XSS) attack. This flaw exists because the application does not validate input passed via the invalid file error message upon submission to the ManageErrors.php script. This may allow a user to create a specially crafted request that would execute arbitrary script code in a user's browser within the trust relationship between their browser and the server.