[NOBYTES.COM: #3] osCommerce 2.2-MS2 - XSS Vulnerability

Hello All, I have discovered XSS vulnerability in: osCommerce 2.2-MS2 Authors Site: http://www.oscommerce.com/ +-Example:--------------------------------------------------+ XSS: http://www.victimsite.com/contactus.php?&name=1&email=1&enquiry=3C/textare a3E3Cscript3Ealert'w00t';3C/script3E Result:...

3Dmax 6.x backburner Manager <= 2.2 Denial of Service Exploit

Exploit for unknown platform in category dos / poc ============================================================= 3Dmax 6.x backburner Manager www.Xtiger.net&www.ThySea.com Code by Xtiger email protected Reference: http://jishu.thysea.com/index.php?modules=show&id=10327...

NetNote Server 2.2 build 230 - Crafted String Denial of Service

NetNote Server 2.2 build 230 - Crafted String Denial of Service / NetNote Server v2.2 build 230, crafted string vulnerability. Poc included crash the server. Full disclosure and poc exploit by class101 at DFind.kd-team.com & n3ws at EFnet 13 november 2004 ------------------ WHAT IS NETNOTE...

Debian DSA-458-3 : python2.2 - buffer overflow

This security advisory corrects DSA 458-2 which caused a problem in the gethostbyaddr routine. The original advisory said : Sebastian Schmidt discovered a buffer overflow bug in Python's getaddrinfo function, which could allow an IPv6 address, supplied by a remote attacker via DNS, to overwrite...

Debian DSA-031-2 : sudo - buffer overflow

Todd Miller announced a new version of sudo which corrects a buffer overflow that could potentially be used to gain root privileges on the local system. The fix from sudo 1.6.3p6 is available in sudo 1.6.2p2-1potato1 for Debian 2.2 potato. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The...

Debian DSA-514-1 : kernel-image-sparc-2.2 - failing function and TLB flush

Paul Starzetz and Wojciech Purczynski of isec.pl discovered a critical security vulnerability in the memory management code of Linux inside the mremap2 system call. Due to flushing the TLB Translation Lookaside Buffer, an address cache too early it is possible for an attacker to trigger a local...

Debian DSA-032-1 : proftpd - proftpd running with incorrect userid, erroneous file removal

The following problems have been reported for the version of proftpd in Debian 2.2 potato : - There is a configuration error in the postinst script, when the user enters 'yes', when asked if anonymous access should be enabled. The postinst script wrongly leaves the 'run as uid/gid root'...

Debian DSA-136-1 : openssl - multiple remote exploits

The OpenSSL development team has announced that a security audit by A.L. Digital Ltd and The Bunker, under the DARPA CHATS program, has revealed remotely exploitable buffer overflow conditions in the OpenSSL code. Additionally, the ASN1 parser in OpenSSL has a potential DoS attack independently...

Debian DSA-057-1 : gftp - printf format attack

The gftp package as distributed with Debian GNU/Linux 2.2 has a problem in its logging code: it logged data received from the network but it did not protect itself from printf format attacks. An attacker can use this by making an FTP server return special responses that exploit this. %NASLMINLEVE...

Debian DSA-454-1 : linux-kernel-2.2.22-alpha - failing function and TLB flush

Paul Starzetz and Wojciech Purczynski of isec.pl discovered a critical security vulnerability in the memory management code of Linux inside the mremap2 system call. Due to flushing the TLB Translation Lookaside Buffer, an address cache too early it is possible for an attacker to trigger a local...

Debian DSA-044-1 : mailx

The mail program a simple tool to read and send email as distributed with Debian GNU/Linux 2.2 has a buffer overflow in the input parsing code. Since mail is installed setgid mail by default this allowed local users to use it to gain access to mail group. Since the mail code was never written to ...

GLSA-200409-03 : Python 2.2: Buffer overflow in getaddrinfo()

The remote host is affected by the vulnerability described in GLSA-200409-03 Python 2.2: Buffer overflow in getaddrinfo If IPV6 is disabled in Python 2.2, getaddrinfo is not able to handle IPV6 DNS requests properly and a buffer overflow occurs. Impact : An attacker can execute arbitrary code as...

Python 2.2: Buffer overflow in getaddrinfo()

Background Python is an interpreted, interactive, object-oriented, cross-platform programming language. Description If IPV6 is disabled in Python 2.2, getaddrinfo is not able to handle IPV6 DNS requests properly and a buffer overflow occurs. Impact An attacker can execute arbitrary code as the us...

CVE-2004-0150

Buffer overflow in the getaddrinfo function in Python 2.2 before 2.2.2, when IPv6 support is disabled, allows remote attackers to execute arbitrary code via an IPv6 address that is obtained using DNS...

CVE-2004-0150

The CVE-2004-0150 entry concerns Python 2.2.0–2.2.1 where a buffer overflow in getaddrinfo (with IPv6 support disabled) can permit remote code execution via a DNS-obtained IPv6 address. Affected component: Python's getaddrinfo routine; root cause is improper handling of DNS IPv6 addresses leading...

CVE-2004-0160

Removed by vendor...

DSA-458-3 python2.2 - buffer overflow

Bulletin has no description...

Corsaire Security Advisory 2003-02-24.1

-- Corsaire Security Advisory -- Title: Port80 Software ServerMask inconsistencies Date: 24.02.03 Application: Port80 Software ServerMask 2.2 and prior Environment: IIS 4 / IIS 5 / IIS 5.1 Author: Martin O'Neal [email protected] Audience: General distribution Reference: c030224-001 -- Sco...

Mandrake Linux Security Advisory : python (MDKSA-2004:019)

A buffer overflow in python 2.2's getaddrinfo function was discovered by Sebastian Schmidt. If python 2.2 is built without IPv6 support, an attacker could configure their name server to let a hostname resolve to a special IPv6 address, which could contain a memory address where shellcode is place...

CVE-2004-0686

Buffer overflow in Samba 2.2.x to 2.2.9, and 3.0.0 to 3.0.4, when the "mangling method = hash" option is enabled in smb.conf, has unknown impact and attack vectors...