CVE-2002-2350

Cross-site scripting XSS vulnerability in zusershow.php in dbtreelistpropertymethod.php in Zorum 2.4 allows remote attackers to inject arbitrary web script or HTML via the class parameter...

XSS bug in Zorum 2.4

Vulnerable systems: Zorum 2.4 Exploit: zusershow.php?method=showuserlink&class=Scriptjavascript:alert document.cookie/Script&rollid=admin&x=3da59a9da8825& without "" Solution: i think that will work , but im not sure open dbtreelistpropertymethod.php and put this code in line 7: $class =...

CVE-2002-0916

Format string vulnerability in the allowuser code for the Stellar-X msntauth authentication module, as distributed in Squid 2.4.STABLE6 and earlier, allows remote attackers to execute arbitrary code via format strings in the user name, which are not properly handled in a syslog call...

CVE-2002-0510

The UDP implementation in Linux 2.4.x kernels keeps the IP Identification field at 0 for all non-fragmented packets, which could allow remote attackers to determine that a target system is running Linux...

CVE-2002-0510

CVE-2002-0510 describes a fingerprinting flaw in the UDP/IP stack of Linux 2.4.x: the IP Identification field is kept at 0 for non-fragmented packets, enabling remote observers to determine if a target runs Linux. The available connected documents reiterate the Linux kernel vulnerability and refe...

updated squid advisory

Apologies - it should be stable6, not stable5. Here's the updated one: Squid Proxy Cache Security Update Advisory SQUID-2002:2 Advisory ID: SQUID-2002:2 Date: March 26, 2002 Affected versions: Squid-2.x up to and including 2.4.STABLE4 Reported by: zen-parse [email protected]...

CVE-1999-1326

Wu-FTPD ABOR privilege escalation (CVE-1999-1326) affects the wu-ftpd server. The vulnerability arises when handling an ABOR after a data connection has closed, due to a flaw in the dologout() path that can allow a remote attacker to gain elevated privileges (potentially root). Exploitation could...

CVE-1999-1419

Buffer overflow in nssnisplus.so.1 library in NIS+ in Solaris 2.3 and 2.4 allows local users to gain root privileges...

CVE-2001-0364

SSH Communications Security sshd 2.4 for Windows allows remote attackers to create a denial of service via a large number of simultaneous connections...

CVE-1999-1419

CVE-1999-1419 describes a buffer overflow in the nss_nisplus.so.1 library used by NIS+ on Solaris 2.3 and 2.4, enabling local users to gain root privileges. The provided documents do not include patch versions or remediation steps. No exploitation details are provided.

CVE-1999-1432

CVE-1999-1432 affects Solaris Powermanagement on Solaris 2.4–2.6; the xlock authentication process does not start until after sys-suspend finishes, allowing a physically proximate attacker to type into the last active application during the restore window and potentially gain higher privileges. A...

CVE-2001-1584

CardBoard 2.4 greeting card CGI by Michael Barretto allows remote attackers to execute arbitrary commands via shell metacharacters in the recipient field...

Bug in Linux 2.4 / iptables MAC match module

-- | | || |/ / -- -- | /o| /o| | | |/o| | -- -- ||||/|| / ||/ -- -- netservers security advisory 01-09-26 -- SUBJECT : Bug in Linux 2.4 / iptables MAC match module SUMMARY : MAC match module does not match small packets EFFECTS : Malicious users may bypass MAC-based DROP rules pcAnywhere does not...

squid DoS

Dear All, I'd like to inform about a DoS bug I recently found in SQUID regarding handling of mkdir-only PUT requests - please look at http://www.squid-cache.org/bugs/showbug.cgi?id=233 for more info. From my testing, it applies both to Squid 2.3 and 2.4 series. Tested on RedHat 6.2 and 7.1. This...

CVE-2001-0405

Concrete details: CVE-2001-0405 affects ip_conntrack_ftp inside the Linux 2.4 iptables RELATED connection tracking. A crafted FTP PORT command could cause the firewall to allow an arbitrary IP/port through the RELATED table, bypassing access restrictions. Implication: arbitrary firewall holes for...

CVE-1999-1184

Buffer overflow in Elm 2.4 and earlier allows local users to gain privileges via a long TERM environmental variable...

CVE-1999-1295

Transarc DCE Distributed File System DFS 1.1 for Solaris 2.4 and 2.5 does not properly initialize the grouplist for users who belong to a large number of groups, which could allow those users to gain access to resources that are protected by DFS...

CVE-1999-1413

Solaris 2.4 before kernel jumbo patch -35 allows set-gid programs to dump core even if the real user id is not in the set-gid group, which allows local users to overwrite or create files at higher privileges by causing a core dump, e.g. through dmesg...

CVE-1999-1521

Computalynx CMail 2.4 and CMail 2.3 SP2 SMTP servers are vulnerable to a buffer overflow attack in the MAIL FROM command that may allow a remote attacker to execute arbitrary code on the server...

CVE-1999-1334

Multiple buffer overflows in filter command in Elm 2.4 allows attackers to execute arbitrary commands via 1 long From: headers, 2 long Reply-To: headers, or 3 via a long -f filterfile command line argument...