Packet Storm Security Last 50 http://packetstormsecurity.org/ 50 Most Recent Packet Storm File Additions en-us browser_insecurity_iceberg_2008.pdf http://packetstormsecurity.org/papers/general/browser_insecurity_iceberg_2008.pdf Understanding the Web browser threat: Examination of vulnerable online Web browser populations and the insecurity iceberg . SSRT080039.txt http://packetstormsecurity.org/0807-advisories/SSRT080039.txt HP Security Bulletin - A potential security vulnerability has been identified with HP System Management Homepage (SMH) for Linux and Windows. This vulnerability could by exploited remotely to allow cross site scripting (XSS). 25C3-CFP.txt http://packetstormsecurity.org/papers/call_for/25C3-CFP.txt The Call For Papers for the 25th Chaos Communication Congress (25C3) has been announced. SCANIT-2008-003.txt http://packetstormsecurity.org/0807-advisories/SCANIT-2008-003.txt Wordtrans versions 1.1pre15 and below suffer from a remote command execution vulnerability. SCANIT-2008-002.txt http://packetstormsecurity.org/0807-advisories/SCANIT-2008-002.txt Wordtrans versions 1.1pre15 and below suffer from a remote command execution vulnerability. SCANIT-2008-001.txt http://packetstormsecurity.org/0807-advisories/SCANIT-2008-001.txt QNX RTOS phgrafx version 6.3.2 and 6.3.0 suffer from a privilege escalation vulnerability. usurdat.zip http://packetstormsecurity.org/0807-exploits/usurdat.zip Proof of concept denial of service exploit for SOLDNER - Secret Wars versions 33724 and below which suffer from an endless loop vulnerability. usurdat.txt http://packetstormsecurity.org/0807-advisories/usurdat.txt SOLDNER - Secret Wars versions 33724 and below suffer from an endless loop vulnerability. glsa-200807-02.txt http://packetstormsecurity.org/0807-advisories/glsa-200807-02.txt Gentoo Linux Security Advisory GLSA 200807-02 - Nico Golde reported an off-by-one error within the read_client() function in the webhttpd.c file, leading to a stack-based buffer overflow. Stefan Cornelius (Secunia Research) reported a boundary error within the same function, also leading to a stack-based buffer overflow. Both vulnerabilities require that the HTTP Control interface is enabled. Versions less than 3.2.10.1 are affected. glsa-200807-01.txt http://packetstormsecurity.org/0807-advisories/glsa-200807-01.txt Gentoo Linux Security Advisory GLSA 200807-01 - Multiple integer overflows may allow for Denial of Service. Versions less than 2.4.4-r13 are affected. blogparticle-traverse.txt http://packetstormsecurity.org/0807-exploits/blogparticle-traverse.txt Blog Particle version 8.0 suffers from directory traversal and database credential disclosure vulnerabilities. hbr-rfi.txt http://packetstormsecurity.org/0807-exploits/hbr-rfi.txt HIOX Banner Rotator (HBR) version 1.3 suffers from a remote file inclusion vulnerability. 0806-exploits.tgz http://packetstormsecurity.org/0806-exploits/0806-exploits.tgz Packet Storm new exploits for June, 2008. mambongal-sql.txt http://packetstormsecurity.org/0807-exploits/mambongal-sql.txt The Mambo n-gallery component suffers from multiple SQL injection vulnerabilities. psys070-sql.txt http://packetstormsecurity.org/0807-exploits/psys070-sql.txt pSys version 0.7.0 suffers from a remote SQL injection vulnerability in chatbox.php. pivot-disclosure.txt http://packetstormsecurity.org/0807-exploits/pivot-disclosure.txt Pivot version 1.40.5 Dreamwind load_template() credential disclosure exploit. USN-617-2.txt http://packetstormsecurity.org/0807-advisories/USN-617-2.txt Ubuntu Security Notice 617-2 - USN-617-1 fixed vulnerabilities in Samba. The upstream patch introduced a regression where under certain circumstances accessing large files might cause the client to report an invalid packet length error. This update fixes the problem. Samba developers discovered that nmbd could be made to overrun a buffer during the processing of GETDC logon server requests. When samba is configured as a Primary or Backup Domain Controller, a remote attacker could send malicious logon requests and possibly cause a denial of service. Alin Rad Pop of Secunia Research discovered that Samba did not properly perform bounds checking when parsing SMB replies. A remote attacker could send crafted SMB packets and execute arbitrary code. rcm-sql.txt http://packetstormsecurity.org/0807-exploits/rcm-sql.txt RCM Revision Web Development suffers from a remote SQL injection vulnerability in products.php. barenuked-admin.txt http://packetstormsecurity.org/0807-exploits/barenuked-admin.txt BareNuked CMS version 1.1.0 arbitrary add administrator exploit. faname10-xss.txt http://packetstormsecurity.org/0807-exploits/faname10-xss.txt Fa Name version 1.0 suffers from multiple cross site scripting vulnerabilities. faname10-sql.txt http://packetstormsecurity.org/0807-exploits/faname10-sql.txt Fa Name version 1.0 suffers from a remote SQL injection vulnerability. rssagg-sql.txt http://packetstormsecurity.org/0807-exploits/rssagg-sql.txt RSS-aggregator version 1.0 suffers from direct administrative access and SQL injection vulnerabilities. lul-busybox.c http://packetstormsecurity.org/0807-exploits/lul-busybox.c BusyBox local format string exploit. openbsdanim-local.txt http://packetstormsecurity.org/0807-exploits/openbsdanim-local.txt Local root animated,.. yes animated, exploit for OpenBSD 4.0 that takes advantage of an old vga vulnerability. ashop-sql.txt http://packetstormsecurity.org/0807-exploits/ashop-sql.txt AShop Deluxe version 4.x remote SQL injection exploit that takes advantage of catalogue.php. mybloggie-sql.txt http://packetstormsecurity.org/0807-exploits/mybloggie-sql.txt myBloggie version 2.1.6 suffers from multiple remote SQL injection vulnerability. catviz-sql.txt http://packetstormsecurity.org/0807-exploits/catviz-sql.txt Catviz version 0.4.0 beta1 suffers from a SQL injection vulnerability. surgemail-dos.txt http://packetstormsecurity.org/0806-exploits/surgemail-dos.txt Surgemail version 39e-1 post authentication IMAP remote buffer overflow denial of service exploit. eshop100-sql.txt http://packetstormsecurity.org/0806-exploits/eshop100-sql.txt eSHOP100 suffers from a remote SQL injection vulnerability. dirlist-traverse.txt http://packetstormsecurity.org/0806-exploits/dirlist-traverse.txt dirLIST suffers from an arbitrary file download vulnerability. singapore-database.txt http://packetstormsecurity.org/0806-exploits/singapore-database.txt Singapore version 0.10.1 suffers from directory traversal and database credential exposure vulnerabilities. pktanon-1.2.0-dev.tar.gz http://packetstormsecurity.org/UNIX/scanners/pktanon-1.2.0-dev.tar.gz PKtAnon performs network trace anonymization. It is highly configurable and uses anonymization profiles. Anonymization profiles allow for mapping of arbitrary anonymization primitives to protocol attributes, thus providing high flexibility and easy usability. A huge number of anonymization primitives and network protocols are supported and ready to use for online and offline anonymization. acmlmboard-sql.txt http://packetstormsecurity.org/0806-exploits/acmlmboard-sql.txt AcmlmBoard version 1.A2 suffers from a remote SQL injection vulnerability. haloloop2.zip http://packetstormsecurity.org/0806-exploits/haloloop2.zip Proof of concept exploit for Halo: Combat Evolved versions 1.07 and below which suffer from an endless loop vulnerability. haloloop2.txt http://packetstormsecurity.org/0806-advisories/haloloop2.txt Halo: Combat Evolved versions 1.07 and below suffer from an endless loop vulnerability. stalker39x.zip http://packetstormsecurity.org/0806-exploits/stalker39x.zip Proof of concept exploit for S.T.A.L.K.E.R.: Shadow of Chernobyl versions 1.0006 and below which suffer from multiple buffer overflow vulnerabilities. stalker39x.txt http://packetstormsecurity.org/0806-advisories/stalker39x.txt S.T.A.L.K.E.R.: Shadow of Chernobyl versions 1.0006 and below suffer from multiple buffer overflow vulnerabilities. seportal-sql.txt http://packetstormsecurity.org/0806-exploits/seportal-sql.txt SePortal version 2.4 suffers from a remote SQL injection vulnerability in poll.php. phpfusionclass-sql.txt http://packetstormsecurity.org/0806-exploits/phpfusionclass-sql.txt The PHP-Fusion classifieds module suffers from a remote SQL injection vulnerability. sebraccms-sql.txt http://packetstormsecurity.org/0806-exploits/sebraccms-sql.txt SebracCMS versions 0.4 and below suffer from multiple SQL injection vulnerabilities. joomlawebtv-sql.txt http://packetstormsecurity.org/0806-exploits/joomlawebtv-sql.txt Joomla Xe webtv component blind SQL injection exploit. joomlabea-sql.txt http://packetstormsecurity.org/0806-exploits/joomlabea-sql.txt The Joomla beamospetition component suffers from a remote SQL injection vulnerability. obm-sql.txt http://packetstormsecurity.org/0806-exploits/obm-sql.txt Online Booking Manager version 2.2 suffers from a remote SQL injection vulnerability. joomlajabode-sql.txt http://packetstormsecurity.org/0806-exploits/joomlajabode-sql.txt The Joomla jabode component suffers from a remote SQL injection vulnerability. SSRT080063-2.txt http://packetstormsecurity.org/0806-advisories/SSRT080063-2.txt HP Security Bulletin - A potential security vulnerability has been identified with HP-UX running Apache with PHP. This vulnerability could be exploited remotely to execute arbitrary code. SSRT080075.txt http://packetstormsecurity.org/0806-advisories/SSRT080075.txt HP Security Bulletin - A potential security vulnerabilities has been identified with HP-UX running HP CIFS Server (Samba). The vulnerabilities could be exploited remotely to execute arbitrary code. otmanager-cookie.txt http://packetstormsecurity.org/0806-exploits/otmanager-cookie.txt OTManager CMS version 2.4 suffers from an insecure cookie handling vulnerability. aplus-cookie.txt http://packetstormsecurity.org/0806-exploits/aplus-cookie.txt A+ PHP scripts News Management System suffers from an insecure cookie handling vulnerability. poweraward-lfi.txt http://packetstormsecurity.org/0806-exploits/poweraward-lfi.txt PowerAward version 1.1.0 RC1 suffers from local file inclusion and cross site scripting vulnerabilities. bacom2008-cfp.txt http://packetstormsecurity.org/papers/call_for/bacom2008-cfp.txt Call for the papers for the first annual BA-Con applied technical security conference has been announced. It will be held in Buenos Aires on September 30th and October 1st, 2008.