Multiple Vulnerabilities in MDaemon + WorldClient

Advisory Title: Multiple Vulnerabilities in MDaemon + WorldClient Release Date: 07/05/2002 Application: WorldClient and MDaemon Platform: Windows Clients. Version: MDaemon/WorldClient 5.0.5.0 - and probably earlier versions Severity: Several Vulnerabilities - one of which gives system access...

Windows 2000 DCOM clients may leak sensitive information onto the network

BindView Security Advisory -------- Windows 2000 DCOM clients may leak sensitive information onto the network Issue Date: April 2, 2002 Contact: [email protected] Topic: Windows 2000 DCOM system may leak sensitive data onto the network Overview: Due to a flaw in Windows 2000's DCOM layer,...

CVE-2001-1154

CVE-2001-1154 affects Cyrus mail servers (versions 2.0.15, 2.0.16, and 1.6.24) running on BSDi 4.2 with IMAP enabled. The issue allows remote attackers to cause a denial-of-service condition (hang) by leveraging PHP IMAP clients. The available documents confirm the affected software stack and the...

CVE-2001-1154

Cyrus 2.0.15, 2.0.16, and 1.6.24 on BSDi 4.2, with IMAP enabled, allows remote attackers to cause a denial of service hang using PHP IMAP clients...

CVE-2001-1154: Undefined Security Weakness

Cyrus 2.0.15, 2.0.16, and 1.6.24 on BSDi 4.2, with IMAP enabled, allows remote attackers to cause a denial of service hang using PHP IMAP clients...

PT-2002-1073 · Red Hat +2 · Red Hat +2

Name of the Vulnerable Software and Affected Versions: OpenSSH versions 2.0 through 3.0.2 openssh-askpass-3.1p1 openssh-askpass-gnome-3.1p1 openssh-clients-3.1p1 openssh-server-3.1p1 openssh-3.1p1 Description: The issue is related to an off-by-one error in the channel code of OpenSSH, allowing...

CVE-2000-0892

CVE-2000-0892 describes a vulnerability where some telnet clients may disclose environment variables to remote telnet servers or via telnet: URLs, due to RFC 1572 (NEW-ENVIRON). The underlying issue is the ability of a server to request environment variables before authentication, potentially exp...

CVE-2000-0892

Some telnet clients allow remote telnet servers to request environment variables from the client that may contain sensitive information, or remote web servers to obtain the information via a telnet: URL...

CVE-2000-0892: Undefined Security Weakness

Some telnet clients allow remote telnet servers to request environment variables from the client that may contain sensitive information, or remote web servers to obtain the information via a telnet: URL...

SECURITY.NNOV: few vulnerabilities in multiple RADIUS implementations

Topic : Vulnerabilities in multiple RADIUS clients and servers Author : 3APA3A [email protected] Released : December, 18 2001 Public release : March, 04 2002 Affected Software : Cistron = 1.6.4 12 Cistron 1.6.5 2 XtRadius = 1.1-pre1 12 FreeRADIUS = 0.3 12 ICRadius = 0.18.1 12 YARD Radius =...

Gator installer Plugin allows any software to be installed

Advisory Title: Gator installer Plugin allows any software to be installed Release Date: 21/01/2002 Application: Gator installer plugin for Internet Explorer GAIN Platform: Windows clients with Internet Explorer. DLL version - 3.0.6.1 Severity: Malicious users can install backdoor software and ga...

[ GFISEC04102001 ] Internet Explorer and Access allow macros to be executed automatically

GFI Security Labs Advisory http://www.gfi.com/ ----Title: GFISEC04102001 Internet Explorer and Access allow macros to be executed automatically ----Published: 12.FEB.2002 ----Vendor Status: Microsoft has been informed and we have worked with them to release a patch. ----Systems Affected: Windows...

CVE-2001-1515

Macintosh clients, when using NT file system volumes on Windows 2000 SP1, create subdirectories and automatically modify the inherited NTFS permissions, which may cause the directories to have less restrictive permissions than intended...

PT-2001-2600 · Microsoft · Windows 2000 Sp1

Name of the Vulnerable Software and Affected Versions: Windows 2000 SP1 Description: The issue arises when Macintosh clients use NT file system volumes on Windows 2000 SP1. In this scenario, the creation of subdirectories automatically modifies the inherited NTFS permissions, potentially resultin...

PT-2001-1066 · Openssh +1 · Openssh-Askpass-Gnome +5

Name of the Vulnerable Software and Affected Versions: OpenSSH versions prior to 2.9.9 openssh-server version 2.9p2 openssh-clients version 2.9p2 openssh version 2.9p2 openssh-askpass-gnome version 2.9p2 openssh-askpass version 2.9p2 Description: The issue affects the confidentiality, integrity,...

Buffer Overflows in various email clients

Overview Buffer Overflows in several MIME headers affect a large number of electronic mail clients. Description A variety of electronic mail clients circa 1998 are vulnerable to buffer overflow attacks in the code that processes MIME headers. See the vendor statements referenced below for details...

CVE-2000-0892

Some telnet clients allow remote telnet servers to request environment variables from the client that may contain sensitive information, or remote web servers to obtain the information via a telnet: URL...

ID Software Quake 1.9 - Denial of Service

ID Software Quake 1.9 - Denial of Service // source: https://www.securityfocus.com/bid/3051/info Quake is a very popular 3D "first-person-shooter" game from ID software. A flaw has been identified in the product's network play features which allows a maliciously designed client to prevent...

ID Software Quake 1.9 - Denial of Service

// source: https://www.securityfocus.com/bid/3051/info Quake is a very popular 3D "first-person-shooter" game from ID software. A flaw has been identified in the product's network play features which allows a maliciously designed client to prevent legitimate players from connecting to the Quake...

ISSalert: ISS Advisory: Oracle Redirect Denial of Service

Internet Security Systems Security Advisory June 19, 2001 Oracle Redirect Denial of Service Synopsis: Internet Security Systems ISS X-Force has identified a vulnerability with redirected Oracle connections. This vulnerability allows an unauthenticated user to consume all the memory on an Oracle...