Yossi Yakubov wrote in http://www.securityfocus.com/archive/1/492202 :
> if you, apache guys will set 403 page's charset ...
Done, as per http://www.securityfocus.com/archive/1/492094 :
>> All [current] releases include fixes ...
> ... change manually the ecnoding in Firefox to UTF-7 ... There i
By : Ali Jasbi ( IHST security & hacking Research team) WwW.Hackerz.ir
Vendor : Cpanel.net
Version : ALL !!
Risk : Very high
What u can do with this bug is :
u can have a access to all the server with reseller privilege (Th3 r00t)
how it's work ?
when u want to create an account in shell wha
Hello Yossi,
I've read your previous messages and I'm not convinced.
> I think that you didn't understand this vulnerability properly. I ask
> to to check again and run this exploit with Firefox. After running this
> exploit, change manually the ecnoding in Firefox to UTF-7.. You will see
> that
seems to work on 1.1.4 as well. froze my whole phone, and i had to do a hard
reset.
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
-
Debian Security Advisory DSA-1579-1 [EMAIL PROTECTED]
http://www.debian.org/security/ Devin Carraway
May 18, 2008
[EMAIL PROTECTED] wrote:
Dear Bill From Apache
I think that you didn't understand this vulnerability properly.
We understand it quite well; we simply disagree on the context of which
is vulnerable, the Apache server which holds to RFC2616, or IE (and Firefox
apparently in some cases) which do
__
Insomnia Security Vulnerability Advisory: ISVA-080516.2
___
Name: Altiris Deployment Solution - Domain Account Disclosure
Released: 16 May 2008
Vendor Link:
re: "set 403 page's charset in the server side by writing it in your server
code"
Apache *does* set the charset in the HTTP header. It is set to iso-8859-1 by
default.
Adding a tag with the iso-8859-1 charset does not change the
browser behavior. See below for the captured response from a
==
Wordpress Malicious File Execution Vulnerability
==
AUTHOR : CWH Underground
DATE : 18 May 2008
SITE : www.citecclub.org
##
Products affected: Microsoft word 2003/2007
OS Tested : Windows Xp all patch
The vulnerability is that you can run javascript in an arbitrary manner without
permission of the user. While it is limited what you can get to run, this may
help attackers using methods that distort the environment j
# Smeego CMS Local File Include Exploit
# by
# 0in from Dark-Coders Programming & Security Group
# http://dark-coders.4rh.eu <<
#
# Contact: 0in(dot)email[at]gmail(dot)com
#---
This paper discusses abusing Microsoft SQL Query wildcards to consume
CPU in database servers using only the search field present in most
common web applications.
It can be downloaded from
http://www.portcullis-security.com/uplds/wildcard_attacks.pdf
Majority of the Microsoft SQL Server based web
__
Insomnia Security Vulnerability Advisory: ISVA-080516.1
___
Name: Altiris Deployment Solution - SQL Injection
Released: 16 May 2008
Vendor Link:
http://ww
13 matches
Mail list logo