IKS, EDS Security Vulnerabilities

Oracle Document Capture - Actbar2.ocx Insecure Method

...

Oracle Document Capture empop3.dll Insecure Methods

Exploit for windows platform in category remote...

Oracle Document Capture Actbar2.ocx Insecure Method

Exploit for windows platform in category remote...

Oracle Document Capture - 'empop3.dll' Insecure Methods

...

Oracle Document Capture - Actbar2.ocx Insecure Method

Oracle Document Capture - Actbar2.ocx Insecure...

[DSECRG-11-005] Oracle Document Capture empop3.dll - insecure method

ActiveX components contain insecure methods. Digital Security Research Group [DSecRG] Advisory DSECRG-11-005 (internal DSECRG-00154) Application: Oracle Document Capture Versions Affected: Release 10gR3 Vendor URL: www.oracle.com Bugs: insecure method,...

Oracle Document Capture empop3.dll Insecure Methods

...

Oracle Document Capture Actbar2.ocx Insecure Method

...

After Twitter Hack, NY Times Debates Social Network Security

In the wake of a high profile (though harmless) cross site scripting attack launched from Twitter.com’s Web site, the New York Times is sponsoring a debate about the security of online social networks that offers some harsh criticism of the micro blogging site. The Gray Lady pulled together top...

HP Snags Application Testing Firm Fortify

The drumbeat for more secure application development picked up pace on Tuesday, with news that software giant HP had acquired privately funded Fortify Software, a maker of static code analysis tools, for an undisclosed amount. HP said that Fortify’s static analysis tools will complement its...

[oCERT-2008-015] glib and glib-predecessor heap overflows

2008-015 glib and glib-predecessors heap overflows Description: Base64 encoding and decoding functions in glib suffer from vulnerabilities during memory allocation which may result in arbitrary code execution when processing large strings. A number of other GNOME-related applications which...

eds-sql.txt

...

Directory Traversal in Sun iPlanet Administration Server 5.1

Text of original posting to Sun: >>Originator: EDS Information Assurance Group - Jim Hardisty, Mark Brewis >>Date of Contact: 22nd April 2003 >>Issue:During a recent Penetration Test, a member of the team, Jim Hardisty, identified an issue with an installation of >>iPlanet A...

ActivCard password cache memory leakage

In December of the 2002 I was analysing the ActivCard product for a client. During the analysis I noticed that making a memory dump of the process "scardsrv" was possible to obtain the users stored staticaly in the card. This issue at first, could seem smaller, although in depth already it has a...

Shana Informed 3.05 information disclosure

Shana Informed v3.05 stores random data in clear text http://www.cirt.net/advisories/shana.shtml Product Description: Shana Corporation provides eForm solutions and is the developer of Informed. Their solution is used by more than two million people around the world. Shana's Informed has been...

Sudo 1.6.x - Password Prompt Heap Overflow

Sudo 1.6.x - Password Prompt Heap...

Sudo 1.6.x - Password Prompt Heap Overflow

...

elf-pv.txt

...