S-139: Persits Software XUpload 'AddFile()' Method ActiveX Control Vulnerability


 
Thread Tools Search this Thread
Special Forums Cybersecurity Security Advisories (RSS) S-139: Persits Software XUpload 'AddFile()' Method ActiveX Control Vulnerability
# 1  
Old 01-30-2008
S-139: Persits Software XUpload 'AddFile()' Method ActiveX Control Vulnerability

XUpload is prone to a buffer-overflow vulnerability because it fails to perform adequate boundary checks on user-supplied input. The risk is MEDIUM. An attacker may exploit this issue to execute arbitrary code in the context of an application using the ActiveX control (typically Internet Explorer). Failed attacks will likely cause denial-of-service conditions.


More...
Login or Register to Ask a Question

Previous Thread | Next Thread
Login or Register to Ask a Question
MooseX::Meta::Method::Authorized::CheckRoles(3) 	User Contributed Perl Documentation	   MooseX::Meta::Method::Authorized::CheckRoles(3)

NAME
MooseX::Meta::Method::Authorized::CheckRoles - Check roles of the user DESCRIPTION
This verifier module will check if the user has any of the roles defined in the "requires" attribute of the method. To get the user this module will call "user" on the object which is the invocant for this method, to get the roles it will call "roles" on the user object. METHODS
authorized_do($method, $code, @_) This is the method that does the actual verification. It only invokes the coderef after checking if the user has any of the required roles. It will die otherwise with a string like: Access Denied. User "johndoe" does not have any of the required roles ("foo") required to invoke method "bla" on class "My::ClassTest1". User roles are: ("foo","bar","baz") It will only show the user id if the user implements the method "id". SEE ALSO
MooseX::AuthorizedMethods, Class::MOP::Method AUTHORS
Daniel Ruoso <daniel@ruoso.com> With help from rafl and doy from #moose. COPYRIGHT AND LICENSE
Copyright 2010 by Daniel Ruoso et al This library is free software; you can redistribute it and/or modify it under the same terms as Perl itself. perl v5.18.2 2010-11-24 MooseX::Meta::Method::Authorized::CheckRoles(3)