Ethical Hacking

Learn to find vulnerabilities before the bad guys do! Gain real world hands on hacking experience in our state of the art hacking lab. Course designed and taught by expert instructors with years of penetration testing experience. 12 student maximum in every class. Certification attempt included in every package.
Computer Forensics Training at InfoSec Institute

Gain the in-demand skills of a certified computer examiner, learn to recover trace data left behind by fraud, theft, and cybercrime perpetrators. Discover the source of computer crime and abuse at your organization so that it never happens again. All of our class sizes are guaranteed to be 12 students or less to facilitate one-on-one interaction with one of our expert instructors.




Network Security Bugtraq
[Top] [All Lists]
<prev [Date] next>
[Advanced]
 <prev [Thread] next>

[Full-disclosure] rPSA-2006-0161-1 libmusicbrainz

from [rPath Update Announcements] Network Security [Permanent Link]
Subject: [Full-disclosure] rPSA-2006-0161-1 libmusicbrainz
Date: Wed, 30 Aug 2006 17:38:12 -0400 
rPath Security Advisory: 2006-0161-1
Published: 2006-08-30
Products: rPath Linux 1
Rating: Minor
Exposure Level Classification:
    Indirect User Deterministic Unauthorized Access
Updated Versions:
    libmusicbrainz=/conary.rpath.com@rpl:devel//1/2.1.4-0.1-1

References:
    http://www.cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-4197
    https://issues.rpath.com/browse/RPL-610

Description:
    Previous versions of the libmusicbrainz package are vulnerable to
    compromised or otherwise malicious servers, if a client attempts
    to access the server.  While this is a remote source of data,
    it cannot be triggered directly by a remote attacker, and requires
    explicit or implicit user complicity.  It is therefore similar to
    mail client IMAP parsing vulnerabilities.

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/
[More messages with this same subject...]




<Prev in Thread] Current Thread [Next in Thread>
  • [Full-disclosure] rPSA-2006-0161-1 libmusicbrainz, rPath Update Announcements <=
Previous by Date:  [KAPDA]MyBB 1.1.7 ~ admin/global.php ~ XSS Attack, addmimistrator
Next by Date:  [Full-disclosure] Lyris ListManager 8.95: Add arbitrary administrator to arbitrary list, Design Properly
Previous by Thread:  [KAPDA]MyBB 1.1.7 ~ admin/global.php ~ XSS Attack, addmimistrator
Next by Thread:  [Full-disclosure] Lyris ListManager 8.95: Add arbitrary administrator to arbitrary list, Design Properly
Indexes:  [Date] [Thread] [Top] [All Lists]