http://packetstormsecurity.org/ 20 Most Recent Packet Storm File Additions en-us http://packetstormsecurity.org/1003-advisories/USN-913-1.txt Ubuntu Security Notice 913-1 - It was discovered that libpng did not properly initialize memory when decoding certain 1-bit interlaced images. If a user or automated system were tricked into processing crafted PNG images, an attacker could possibly use this flaw to read sensitive information stored in memory. This issue only affected Ubuntu 6.06 LTS, 8.04 LTS, 8.10 and 9.04. It was discovered that libpng did not properly handle certain excessively compressed PNG images. If a user or automated system were tricked into processing a crafted PNG image, an attacker could possibly use this flaw to consume all available resources, resulting in a denial of service. http://packetstormsecurity.org/1003-exploits/argosoft-traversal.txt ArGoSoft FTP Server .NET version 1.0.2.1 suffers from a directory traversal vulnerability. http://packetstormsecurity.org/forensics/dff-0.5.0-src.tar.gz DFF (Digital Forensics Framework) is a simple but powerful tool with a flexible module system which will help you in your digital forensics works, including file recovery due to error or crash, evidence research and analysis, etc. DFF provides a robust architecture and some handy modules. http://packetstormsecurity.org/1003-advisories/CORE-2009-0803.txt Core Security Technologies Advisory - A vulnerability found in the memory management of the Virtual Machine Monitor makes memory pages mapped above the 2GB available with read or read/write access to user-space programs running in a Guest operating system. http://packetstormsecurity.org/1003-exploits/CORELAN-10-013.txt Windisc version 1.3 suffers from a stack buffer overflow vulnerability. Full exploit code included. http://packetstormsecurity.org/1003-exploits/fckeditor-shell.txt FCKEditor version 2.0 RC3 suffers from a shell upload vulnerability. http://packetstormsecurity.org/1003-advisories/USN-912-1.txt Ubuntu Security Notice 912-1 - It was discovered that Audio File Library contained a heap-based buffer overflow. If a user or automated system processed a crafted WAV file, an attacker could cause a denial of service via application crash, or possibly execute arbitrary code with the privileges of the user invoking the program. The default compiler options for Ubuntu should reduce this vulnerability to a denial of service. http://packetstormsecurity.org/1003-advisories/ZDI-10-032.txt Zero Day Initiative Advisory 10-032 - This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of SAP MaxDB. Authentication is not required to exploit this vulnerability. The specific flaw exists within the serv.exe process which listens by default on TCP port 7210. The process trusts a value from a handshake packet and uses it as a length when copying data to the stack. If provided a malicious value and packet data, this can be leveraged to execute arbitrary code under the context of the SYSTEM user. http://packetstormsecurity.org/1003-exploits/clantigercms-xsrf.txt Clan Tiger CMS suffers from a cross site request forgery vulnerability. http://packetstormsecurity.org/1003-exploits/chillycms-xss.txt Chilly CMS suffers from a persistent cross site scripting vulnerability. http://packetstormsecurity.org/1003-exploits/chillycms-xsrf.txt Chilly CMS suffers from a cross site request forgery vulnerability. http://packetstormsecurity.org/1003-exploits/wftpdkill.py.txt WFTPD version 3.3 remote unhandled exception denial of service exploit. http://packetstormsecurity.org/1003-exploits/sugarcrm-xss.txt SugarCRM versions prior to 5.5.0a and 5.2.0l suffer from a cross site scripting vulnerability. http://packetstormsecurity.org/1003-advisories/ZDI-10-031.txt Zero Day Initiative Advisory 10-031 - This vulnerability allows remote attackers to execute arbitrary code on vulnerable software utilizing Apple's WebKit library. User interaction is required to exploit this vulnerability in that the target must visit a malicious page. The specific flaw exists due to a failure to unregister a callback pointer during the destruction of a particular type of element when embedded inside a 'blink' container. The application dereferences the original resource which can can be leveraged by an attacker to execute arbitrary code under the context of the current user. http://packetstormsecurity.org/1003-exploits/ossim22-exec.pdf CYBSEC Security Advisory - OSSIM version 2.2 suffers from a remote command execution vulnerability. http://packetstormsecurity.org/1003-exploits/ossim22-upload.pdf CYBSEC Security Advisory - OSSIM version 2.2 suffers from an arbitrary file upload vulnerability. http://packetstormsecurity.org/1003-exploits/ossim22-download.pdf CYBSEC Security Advisory - OSSIM version 2.2 suffers from an arbitrary file download vulnerability. http://packetstormsecurity.org/1003-exploits/egroupware-exec.pdf CYBSEC Security Advisory - EGroupware suffers from a remote command execution vulnerability. Versions 1.4.001 / 1.4.002 / 1.6.001 / 1.6.002 and Premium Line versions 9.1 and 9.2 are affected. http://packetstormsecurity.org/1003-exploits/egroupware-xss.pdf CYBSEC Security Advisory - EGroupware suffers from a reflected cross site scripting vulnerability. Versions 1.4.001 / 1.4.002 / 1.6.001 / 1.6.002 and Premium Line versions 9.1 and 9.2 are affected. http://packetstormsecurity.org/1003-exploits/occms-sql.txt Online Community CMS By I-net suffers from a remote SQL injection vulnerability.