FVWM 2.4.17/2.5.8 - fvwm_make_browse_menu.sh Scripts Command Execution

source: https://www.securityfocus.com/bid/9922/info It has been reported that the FVWM fvwmmakebrowsemenu.sh script is prone to a command execution vulnerability. This issue is due to the script allowing a user to define which application should be used to execute the file via its filename. An...

[SECURITY] [DSA-383-1] OpenSSH buffer management fix

------------------------------------------------------------------------ Debian Security Advisory DSA-383-1 [email protected] http://www.debian.org/security/ Wichert Akkerman September 17, 2003 - ------------------------------------------------------------------------ Package : ssh-krb5...

Netris client Buffer Overflow Vulnerability.

-INTRODUCTION- Netris is a Linux clone of the classic infamous game Tetrs, giving users three main game modes: play an individual game, server mode: bind to a port and wait for an incoming connection from an opponents Netris client, and connect mode: connect to an opponents Netris client which is...

Kerio MailServer 5.6.3 - Web Mail ADD_ACL Module Cross-Site Scripting

source: https://www.securityfocus.com/bid/7966/info Reportedly, Kerio Mailserver is vulnerable to a cross site-scripting attack. The vulnerability is present in the addacl module of the Kerio Mailserver web mail component. An attacker may exploit this vulnerability by enticing a victim user to...

Kerio MailServer 5.6.3 - Web Mail DO_MAP Module Cross-Site Scripting

source: https://www.securityfocus.com/bid/7968/info Reportedly, Kerio Mailserver is vulnerable to a cross site-scripting attack. The vulnerability is present in the domap module of the Kerio Mailserver web mail component. An attacker may exploit this vulnerability by enticing a victim user to...

xfsdump creates files insecurely on IRIX

-----BEGIN PGP SIGNED MESSAGE----- SGI Security Advisory Title : xfsdump creates files insecurely Number : 20030404-01-P Date : April 10, 2003 Reference: CVE CAN-2003-0173 Reference: SGI BUG 885222 Fixed in : IRIX 6.5.20 when available or patches 5059 and 5060 - ----------------------- - --- Issu...

Microsoft FrontPage Unpassworded Installation

The remote web server appears to have FrontPage Extensions installed with incorrectly set permissions. A remote attacker could exploit this to modify web pages on the server. C Tenable Network Security, Inc. include"compat.inc"; ifdescription scriptid11455; scriptversion "$Revision: 1.21 $";...

Qualcomm Eudora 5.0/5.1/6.0 - Long Attachment Filename Denial of Service (2)

source: https://www.securityfocus.com/bid/7026/info Eudora may crash when handling messages which contain attachments with excessively long filenames. This condition reportedly occurs when messages with malformed attachment filenames are stored in the user's mailbox, which could result in a...

PHP-Nuke 6.0 - Multiple Full Path Disclosure Vulnerabilities

source: https://www.securityfocus.com/bid/6406/info Multiple path disclosure vulnerabilities have been discovered in PHP-Nuke. This issue occurs when requesting a PHP script that shouldn't be accessed directly. Exploiting this issue will cause the target server to disclose sensitive information...

[SECURITY] [DSA 179-1] New gnome-gv packages fix buffer overflow

-------------------------------------------------------------------------- Debian Security Advisory DSA 179-1 [email protected] http://www.debian.org/security/ Martin Schulze October 18th, 2002 http://www.debian.org/security/faq -...

phpGB: DoS and executing_arbitrary_commands

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ppp-design found the following design error in phpGB: Details - ------- Product: phpGB Affected Version: 1.20 and maybe all versions before Immune Version: 1.30 OS affected: all OS with php Vendor-URL: http://www.walzl.net Vendor-Status: informed, new...

MyWebServer 1.0.2 - Long HTTP Request HTML Injection

MyWebServer 1.0.2 - Long HTTP Request HTML Injection source: https://www.securityfocus.com/bid/5470/info MyWebServer is an application and web server for Microsoft Windows operating systems. If an oversized HTTP request is received by MyWebServer, some content provided as a URL is included in the...

Microsoft Windows Media Player 6/7 - Filename Buffer Overflow

source: https://www.securityfocus.com/bid/5357/info The Microsoft Windows Media Player executable is prone to a buffer overflow condition when invoked with an oversized filename. Since the program is executed in the context of the user invoking it, it is not likely that a local attacker could...

IRIX nveventd vulnerability

-----BEGIN PGP SIGNED MESSAGE----- SGI Security Advisory Title: nveventd vulnerability Number: 20020607-02-I Date: June 24, 2002 Reference: CAN-2002-0631 - -------------- - --- Update --- - -------------- Fixed formatting issue which caused PGP signature failure on some mailers. -...

SRT Security Advisory (SRT2002-04-31-1159): Mnews

====================================================================== Strategic Reconnaissance Team Security Advisory SRT2002-04-31-1159 Topic : Mnews local and remote overflow vulnerabilities Date : May 31, 2002 Credit : zillionatsafemode.org Site : http://www.snosoft.com...

CVE-2002-0270

Opera, when configured with the "Determine action by MIME type" option disabled, interprets an object as an HTML document even when its MIME Content-Type is text/plain, which could allow remote attackers to execute arbitrary script in documents that the user does not expect, possibly through web...

Macromedia Flash Activex Buffer overflow

Macromedia Flash Activex Buffer overflow Release Date: 05/02/2002 Severity: High Remote code execution Systems Affected: Flash Activex Ocx Version 6, revision 23 Possibly older versions Forward: This is an unusual advisory in a number of ways. One, it was found while investigating an access error...

CaupoShop: cross-site-scripting bug

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ppp-design found the following cross-site-scripting bug in CaupoShop and probably in CaupoShopPro: Details - ------- Product: CaupoShop and probably CaupoShopPro Version: 1.30a CaupoShop and maybe all versions before OS affected: all OS with php and...

OpenSSH 2.x/3.0.1/3.0.2 - Channel Code Off-by-One

source: https://www.securityfocus.com/bid/4241/info OpenSSH is a suite implementing the SSH protocol. It includes client and server software, and supports ssh and sftp. It was initially developed for BSD, but is also widely used for Linux, Solaris, and other UNIX-like operating systems. A...

AOL Instant Messenger 4.x - Hyperlink Denial of Service

AOL Instant Messenger 4.x - Hyperlink Denial of Service source: https://www.securityfocus.com/bid/4244/info AOL Instant Messenger AIM is a real time messaging service. The AIM client runs on Microsoft Windows operating systems. It is possible to crash the AIM client by sending a specially formatt...