geoHTTP.txt

Software: GeoHttpServer Vendor: GEOVISION INC http://www.geovision.com.tw Versions: ALL Platforms: Unix Bug: Authentification Bypass Vulnerability & D.O.S Denial Of Service Risk: High Exploitation: Remote with browser Date: 22 Jan 2004 Author: Rafel Ivgi, The-Insider e-mail: [email protected]...

Surfboard <= 1.1.8 vulns

Luigi Auriemma Application: Surfboard webserver http://surfd.sourceforge.net Versions: = 1.1.8 Platforms: nix Bugs: possibility to view all the files in the system and resources consumption Risk: medium/high Exploitation: remote/easy Date: 01 Dec 2003 Author: Luigi Auriemma e-mail:...

[RHSA-2003:311-01] Updated Pan packages fix denial of service vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - --------------------------------------------------------------------- Red Hat Security Advisory Synopsis: Updated Pan packages fix denial of service vulnerability Advisory ID: RHSA-2003:311-01 Issue date: 2003-11-24 Updated on: 2003-11-24 Product: R...

rush12.txt

RusH security team | http://www.rsteam.ru o----------------------------= Advisory 12 =----------------------------o oxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxo o--------------------------------------------------------------------------o | Product: phpWebFileManage...

XSS in Tek-Tips Forum

hello 3APA3A ZUD SECURITY TEAM PRESENT bug found by nimber Email : [email protected] Site: www.zudteam.org HomePage: www.nimber.plux.ru 11.08.2003 Name: Tek-Tips Forum Web Site: www.tek-tips.com Bug: XSS Vulnerability. Exploitexaple:...

DSA-326 orville-write - buffer overflows

Bulletin has no description...

DSA-318 lyskom-server - denial of service

Bulletin has no description...

BitchX: Crash when channel modes change

On May 7th 2003, we recieved a bug report through our tracking system which noted a crash problem with BitchX for all versions up to 1.0c20cvs. Certain mode changes would cause BitchX to core consistantly. This problem was resolved in less than 24 hours. The patch was commited to CVS by powuh...

KaZaA - Bad Zone

To follow up my mid Oct post: KaZaA is still launching ads in the local zone. KaZaA was contacted 6 Jan 03 via their bug report page. "Pop-up ads are being spawned from the local hard disk. This puts them in the local zone. Scripts running in this zone can be harmful." I am now awaiting their...

Execution Rights Not Checked Correctly For 16-bit Applications

A 16-bit executable file can be loaded for execution even though the file is flagged with execute permission denied. Platforms: Windows NT, 2000, XP Overview: Windows NT/2000/XP do not check execution rights correctly before allowing 16-bit executables to load. This makes it possible to load and...

FreeBSD-SA-02:36.nfs

-----BEGIN PGP SIGNED MESSAGE----- ============================================================================= FreeBSD-SA-02:36.nfs Security Advisory The FreeBSD Project Topic: Bug in NFS server code allows remote denial of service Category: core Module: nfs Announced: 2002-08-05 Credits: Mike...

UT DDoS risk

Application: Unreal Tournament Win version, Linux and Mac not tested Version: all the version 436 vulnerable too Bug: UT servers send a great number of packets to every host that send only 1 packet to them, for 2 min and 30 sec Risk: UT servers used as flooders, DDoS risk Author: Auriemma Luigi...

KPMG-2002006: Lotus Domino Physical Path Revealed

-------------------------------------------------------------------- -=Lotus Domino Physical Path Revealed=- courtesy of KPMG Denmark BUG-ID: 2002006 Released: 02nd Apr 2002 -------------------------------------------------------------------- Problem: ======== Due to problems handling Windows DOS...

uucp --config patch -- not sufficient

Problem: uucp patch from RedHat possibly others prevents original exploit, but not variations. Severity: Potential for local root on some distributions, uucp.uucp on others. https://bugzilla.redhat.com/bugzilla/showbug.cgi?id=54466 I had seen this report some time ago, and thought: "Good. They've...

Lynx format string vulnerability in URL logging.

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 The vendor has been notified, but since this is a low risk I am releasing early. Vapid Labs Larry W. Cashdollar Bug Report Summary: lynx has a format string vulnerability in LYUtils.c line 7995 due to a bad call to syslog, where the format argument is...

WRSHDNT 2.21.00 CPU overusage

WRSHDNT 2.21.00 CPU overusage Greetings, Denicomp Systems fixed previous bug partially: version 2.21.00 is prone to the same bug when port number is 1024. Support personnel reply to my bug report was: "If you don't write buggy rsh clients, you don't have a problem :" Cheers, Martin / WRSHDNT...

Buffer overflow in Python code

Hi, I've found buffer overflow in Python 2.1.1 source code. Maybe there're many others The buffer overflow is in the file traceback.c in the directory Python of the Python source code. Simply there's a sprintf done in this way: sprintflinebuf,FMT,filename,lineno,name What cause the overflow is th...

Bug in compile portion for older versions of CheckPoint Firewalls

There is a bug in how CheckPoint firewalls prior to version 4.0 SP2 handled compiling the firewall policy on Solaris workstations. I was actually migrating a client from version 4.0 SP1 when I stumbled on this. The vendor was contacted on January 30, 2001 and responded on February 2, 2001 that th...

g6-dos.txt

The FTP server G6 v 2.00 freezes if told to create a directory "COM1", "COM2", "COM3" or "COM4" MKD COM1 The version tested was running on win2k. The upload was allowed into /upload bug submitter: GkOS -- Best regards, Konstantin mailto:[email protected] aka GkOS...

ftp.server.025.txt

Andrisk Security Advisory 1 - FTP server v0.25 Topic: FTP Server v.025 Announced: 2001-04-25 Affects: FTP server version 0.25 OS : Win9x/NT I. Problem Description FTP Server 0.25 is an FTP server for Windows 9x/NT. A bug allows any user download and view any files from remote computer. II. Impact...