[UNIX] Chora CVS/SVN Viewer Remote Vulnerability

The following security advisory is sent to the securiteam mailing list, and can be found at the SecuriTeam web site: http://www.securiteam.com - - promotion The SecuriTeam alerts list - Free, Accurate, Independent. Get your security news from a reliable source...

CVE-2002-1002

CVE-2002-1002 describes a buffer overflow in Novell iManager (eMFrame 1.2.1) that enables remote attackers to cause a denial of service (crash) by supplying a long user name. Affected software: Novell iManager with component eMFrame 1.2.1. Root cause: improper handling of long user name input lea...

CVE-2002-0513

The PHP administration script in poppermod 1.2.1 and earlier relies on Apache .htaccess authentication, which allows remote attackers to gain privileges if the script is not appropriately configured by the administrator...

NOVL-2002-2963081 - Novell iManager (eMFrame 1.2.1) DoS Attack

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 For Immediate Disclosure ============================== Summary ============================== Security Alert: NOVL-2002-2963081 Title: Novell iManager eMFrame 1.2.1 DoS Attack Date: 12 Aug 2002 Revision: 1 Product Name: Novell iManager OS/Platforms:...

CVE-2002-0458

CVE-2002-0458 affects News-TNK 1.2.1 and earlier. The vulnerability is a cross-site scripting (XSS) flaw that allows remote attackers to run arbitrary Javascript via the WEB parameter. According to the NVD entry, exploitation would be via a network vector with high complexity and no authenticatio...

[SECURITY] New version of horde and imp released

Package : horde and imp Problem type : remote exploit Debian-specific: no imp as distributed in Debian GNU/Linux 2.2 suffered from insufficient checking of user supplied data: the IMP webmail interface did not check the $from variable which contains the sender address for shell metacharacters. Th...

Linux news 16.06.00

SCO планирует выпускать свой собственный дистрибутив Linux. По-моему сейчас не делает свои дистрибутивы Linux только ленивый. Лучше бы был один, но отличный. Подробнее: http://slashdot.org/articles/00/06/13/127228.shtml Интервью с Аланом Коксом На LinuxJournal выложено интервью с одним из главных...