Packet Storm - Information Security News, Files, Tools, Exploits, Advisories and Whitepapers http://packetstormsecurity.org/ en-us Mon, 28 May 2012 05:40:25 GMT 144400 http://packetstormsecurity.org/ http://www.google-analytics.com/__utm.gif?utmwv=1.3&utmn=1615999995&utmcs=ISO-8859-1&utmsr=31337x31337&utmsc=32-bit&utmul=en-us&utmje=0&utmfl=-&utmcn=1&utmdt=Files%u2248%20Packet%20Storm&utmhn=packetstormsecurity.org&utmr=-&utmp=%2F0708-exploits%2F&utmac=UA-18885198-1&utmcc=__utma%3D32867617.1615999995.1338183625.1338183625.1338183625.1%3B%2B__utmz%3D32867617.1338183625.1.1.utmccn%3D(direct)%7Cutmcsr%3D(direct)%7Cutmcmd%3D(none) http://packetstormsecurity.org/files/59007/0708-exploits.tgz http://packetstormsecurity.org/files/59007/0708-exploits.tgz http://packetstormsecurity.org/files/59007/0708-exploits.tgz.html Wed, 05 Sep 2007 02:10:35 GMT Packet Storm new exploits for August, 2007. http://packetstormsecurity.org/files/58992/cisco-sql.txt http://packetstormsecurity.org/files/58992/cisco-sql.txt http://packetstormsecurity.org/files/58992/cisco-sql.txt.html Fri, 31 Aug 2007 17:00:05 GMT A SQL injection vulnerability exists in the Log On page of the web interface for Cisco CallManager AKA Unified Communications Manager. An unauthenticated attacker who is able to access the Log On page could exploit this vulnerability to run arbitrary SQL commands as the logged in database user, usually cm_publisher. By running SQL commands, the attacker could gain information about the CallManager configuration, including call records. Exploitation details provided. http://packetstormsecurity.org/files/58990/telemark-xss.txt http://packetstormsecurity.org/files/58990/telemark-xss.txt http://packetstormsecurity.org/files/58990/telemark-xss.txt.html Fri, 31 Aug 2007 16:56:40 GMT The Telemark.com search engine is susceptible to a cross site scripting vulnerability. http://packetstormsecurity.org/files/58989/chacha-xss.txt http://packetstormsecurity.org/files/58989/chacha-xss.txt http://packetstormsecurity.org/files/58989/chacha-xss.txt.html Fri, 31 Aug 2007 16:55:55 GMT The ChaCha.com search functionality suffers from a cross site scripting vulnerability. http://packetstormsecurity.org/files/58980/ppstream-overflow.txt http://packetstormsecurity.org/files/58980/ppstream-overflow.txt http://packetstormsecurity.org/files/58980/ppstream-overflow.txt.html Fri, 31 Aug 2007 16:48:45 GMT PPStream ActiveX remote overflow exploit that makes use of PowerPlayer.dll version 2.0.1.3829. http://packetstormsecurity.org/files/58979/norton-local.txt http://packetstormsecurity.org/files/58979/norton-local.txt http://packetstormsecurity.org/files/58979/norton-local.txt.html Fri, 31 Aug 2007 16:47:37 GMT Norman Virus Control local exploit that makes use of nvcoaft51.sys. http://packetstormsecurity.org/files/58978/phpbblinks-sql.txt http://packetstormsecurity.org/files/58978/phpbblinks-sql.txt http://packetstormsecurity.org/files/58978/phpbblinks-sql.txt.html Fri, 31 Aug 2007 16:45:56 GMT phpBB Links MOD versions 1.2.2 and below remote SQL injection exploit. http://packetstormsecurity.org/files/58977/ourspace-upload.txt http://packetstormsecurity.org/files/58977/ourspace-upload.txt http://packetstormsecurity.org/files/58977/ourspace-upload.txt.html Fri, 31 Aug 2007 16:44:47 GMT Ourspace version 2.0.9 suffers from an upload vulnerability in uploadmedia.cgi. http://packetstormsecurity.org/files/58976/nmdeluxe-sql.txt http://packetstormsecurity.org/files/58976/nmdeluxe-sql.txt http://packetstormsecurity.org/files/58976/nmdeluxe-sql.txt.html Fri, 31 Aug 2007 16:43:51 GMT NMDeluxe version 2.0.0 suffers from a remote SQL injection vulnerability. http://packetstormsecurity.org/files/58975/wiresharkdnp3-dos.txt http://packetstormsecurity.org/files/58975/wiresharkdnp3-dos.txt http://packetstormsecurity.org/files/58975/wiresharkdnp3-dos.txt.html Fri, 31 Aug 2007 16:42:02 GMT Wireshark versions below 0.99.5 DNP3 dissector infinite loop denial of service exploit. http://packetstormsecurity.org/files/58974/hexamail-dos.txt http://packetstormsecurity.org/files/58974/hexamail-dos.txt http://packetstormsecurity.org/files/58974/hexamail-dos.txt.html Fri, 31 Aug 2007 16:40:35 GMT Hexamail Server version 3.0.0.001 pop3 pre-auth remote overflow denial of service exploit. http://packetstormsecurity.org/files/58958/dumsdei.zip http://packetstormsecurity.org/files/58958/dumsdei.zip http://packetstormsecurity.org/files/58958/dumsdei.zip.html Thu, 30 Aug 2007 08:17:24 GMT Proof of concept exploit for Doomsday versions 1.9.0-beta5.1 and below which suffer from buffer overflow and format string vulnerabilities. http://packetstormsecurity.org/files/58947/blizzard-dos.txt http://packetstormsecurity.org/files/58947/blizzard-dos.txt http://packetstormsecurity.org/files/58947/blizzard-dos.txt.html Thu, 30 Aug 2007 07:47:49 GMT Blizzard StarCraft Brood War version 1.15.1 suffers from a remote denial of service vulnerability. http://packetstormsecurity.org/files/58945/ymsg-crash.tgz http://packetstormsecurity.org/files/58945/ymsg-crash.tgz http://packetstormsecurity.org/files/58945/ymsg-crash.tgz.html Thu, 30 Aug 2007 07:15:28 GMT Yahoo! Messenger version 8.1.0.413 webcam remote crash denial of service exploit. http://packetstormsecurity.org/files/58944/msnmsg-overflow.tgz http://packetstormsecurity.org/files/58944/msnmsg-overflow.tgz http://packetstormsecurity.org/files/58944/msnmsg-overflow.tgz.html Thu, 30 Aug 2007 07:13:22 GMT MSN Messenger 7.x VIDEO remote heap overflow exploit. http://packetstormsecurity.org/files/58943/pakupaku-rfulfi.txt http://packetstormsecurity.org/files/58943/pakupaku-rfulfi.txt http://packetstormsecurity.org/files/58943/pakupaku-rfulfi.txt.html Thu, 30 Aug 2007 07:10:12 GMT Pakupaku CMS versions 0.4 and below remote file upload exploit. http://packetstormsecurity.org/files/58942/phpbg-rfi.txt http://packetstormsecurity.org/files/58942/phpbg-rfi.txt http://packetstormsecurity.org/files/58942/phpbg-rfi.txt.html Thu, 30 Aug 2007 07:08:31 GMT phpBG version 0.9.1 suffers from remote file inclusion vulnerabilities. http://packetstormsecurity.org/files/58941/phpns-sql.txt http://packetstormsecurity.org/files/58941/phpns-sql.txt http://packetstormsecurity.org/files/58941/phpns-sql.txt.html Thu, 30 Aug 2007 07:06:58 GMT PHPNS version 1.1 suffers from a remote SQL injection vulnerability in shownews.php. http://packetstormsecurity.org/files/58940/abcestore-sql.txt http://packetstormsecurity.org/files/58940/abcestore-sql.txt http://packetstormsecurity.org/files/58940/abcestore-sql.txt.html Thu, 30 Aug 2007 07:05:57 GMT ABC estore version 3.0 remote blind SQL injection exploit. http://packetstormsecurity.org/files/58939/xgb-bypass.txt http://packetstormsecurity.org/files/58939/xgb-bypass.txt http://packetstormsecurity.org/files/58939/xgb-bypass.txt.html Thu, 30 Aug 2007 07:04:47 GMT xGB version 2.0 suffers from a remote permission bypass vulnerability. http://packetstormsecurity.org/files/58938/gdi32-dos.txt http://packetstormsecurity.org/files/58938/gdi32-dos.txt http://packetstormsecurity.org/files/58938/gdi32-dos.txt.html Thu, 30 Aug 2007 07:03:14 GMT Microsoft Windows denial of service exploit that makes use of GDI32.DLL. This vulnerability is related to MS07-046. http://packetstormsecurity.org/files/58916/phpnukeclan-rfi.txt http://packetstormsecurity.org/files/58916/phpnukeclan-rfi.txt http://packetstormsecurity.org/files/58916/phpnukeclan-rfi.txt.html Wed, 29 Aug 2007 04:27:57 GMT PHPNuke-Clan versions 4.2.0 and below suffer from a remote file inclusion vulnerability in mvcw_conver.php. http://packetstormsecurity.org/files/58915/vwar-rfi.txt http://packetstormsecurity.org/files/58915/vwar-rfi.txt http://packetstormsecurity.org/files/58915/vwar-rfi.txt.html Wed, 29 Aug 2007 04:26:37 GMT VWar versions 1.5.0 R15 and below suffer from a remote file inclusion vulnerability in mvcw.php. http://packetstormsecurity.org/files/58914/paycart-sql.txt http://packetstormsecurity.org/files/58914/paycart-sql.txt http://packetstormsecurity.org/files/58914/paycart-sql.txt.html Wed, 29 Aug 2007 04:24:35 GMT DL PayCart version 1.01 blind SQL injection exploit that makes use of viewitem.php. http://packetstormsecurity.org/files/58903/postcast-overflow.txt http://packetstormsecurity.org/files/58903/postcast-overflow.txt http://packetstormsecurity.org/files/58903/postcast-overflow.txt.html Tue, 28 Aug 2007 15:48:51 GMT Postcast Server Pro version 3.0.61 and Quiksoft EasyMail emsmtp.dll version 6.0.1 buffer overflow exploit.