Packet Storm Security Last 100

100 Most Recent Packet Storm File Additions

trixbox-lfi.txt - (Found July 15, 2008 )

Trixbox CE versions 2.6.1 and below suffer from a local file inclusion vulnerability. This issue is due to a failure of the application to properly sanitize POST data assigned to a parameter of the userindex.php page.
http://packetstormsecurity.org/0807-exploits/trixbox-lfi.txt

wefi3330-lfi.txt - (Found July 15, 2008 )

The wireless client, WeFi version 3.3.3.0, is susceptible to a local information disclosure due to irresponsible coding. Earlier versions may also be affected.
http://packetstormsecurity.org/0807-exploits/wefi3330-lfi.txt

dsa-1606-1.txt - (Found July 15, 2008 )

Debian Security Advisory 1606-1 - It was discovered that poppler, a PDF rendering library, did not properly handle embedded fonts in PDF files, allowing attackers to execute arbitrary code via a crafted font object.
http://packetstormsecurity.org/0807-advisories/dsa-1606-1.txt

ZDI-08-041.txt - (Found July 15, 2008 )

A vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Novell eDirectory. Authentication is not required to exploit this vulnerability. The specific flaw exists within dhost.exe, bound by default to TCP port 524. Flawed arithmetic applied to a user-supplied value results in an integer overflow and subsequently a complete stack smash allowing an attacker to execute arbitrary code via SEH redirection.
http://packetstormsecurity.org/0807-advisories/ZDI-08-041.txt

wpacrack.py.txt - (Found July 15, 2008 )

Python script that cracks a 256-bit WPA-PSK hash (64 char) using wpa_passphrase and a wordlist.
http://packetstormsecurity.org/UNIX/scanners/wpacrack.py.txt

msowa-xss.txt - (Found July 15, 2008 )

Several cross site scripting vulnerabilities were found in within Outlook Web Access (OWA) 20032007. An attacker can craft a malicious email which will trigger within a user's browser. Different version of OWA and different clients (Light and Premium) have different attack vectors which can result in an attacker gaining persistent control over a victim's use of Outlook Web Access.
http://packetstormsecurity.org/0807-advisories/msowa-xss.txt

gapicms-rfi.txt - (Found July 15, 2008 )

gapicms version 9.0.2 suffers from a remote file inclusion vulnerability.
http://packetstormsecurity.org/0807-exploits/gapicms-rfi.txt

phpdatingclub-lfi.txt - (Found July 15, 2008 )

phpDatingClub suffers from a local file inclusion vulnerability in website.php.
http://packetstormsecurity.org/0807-exploits/phpdatingclub-lfi.txt

dreamnews-sql.txt - (Found July 15, 2008 )

The DreamNews Manager is susceptible to a SQL injection vulnerability.
http://packetstormsecurity.org/0807-exploits/dreamnews-sql.txt

glsa-200807-07.txt - (Found July 15, 2008 )

Gentoo Linux Security Advisory GLSA 200807-07 - Multiple integer overflow and buffer overflow vulnerabilities have been discovered in the X.Org X server as shipped by NX and NX Node (GLSA 200806-07). Versions less than 3.2.0-r3 are affected.
http://packetstormsecurity.org/0807-advisories/glsa-200807-07.txt