ZH2003-11SA.txt

ZH2003-11SA security advisory: Elite News Ver. 1.0.0.0-1.0.0.3 Beta Published: 16/07/2003 Released: 16/07/2003 Name: Elite News Affected Systems: All versions Severity: High Platforms: Windows and Unix Issue: Security holes enable attackers to take administrative control Original Advisory:...

PSOFT H-Sphere Cross Site Scripting Vulnerabilities

-------------------- Product: PSOFT H-Sphere Hosting Control Panel Vendor: PSOFT Positive Software Corporation Versions: VULNERABLE - 2.3.x - 2.2.x - 2.1.x - 2.0.x NOT VULNERABLE - ? --------------------- Description: H-Sphere is a scalable multiserver webhosting control panel, which provides...

H-Sphere 2.x - HTML Template Inclusion Cross-Site Scripting

source: https://www.securityfocus.com/bid/7855/info H-Sphere is prone to multiple cross-site scripting vulnerabilities via the HTML template feature in the Hosting Control Panel. HTML and script code will not be filtered from pages which are generated when a request for an invalid or unknown...

H-Sphere 2.x - HTML Template Inclusion Cross-Site Scripting

H-Sphere 2.x - HTML Template Inclusion Cross-Site Scripting source: https://www.securityfocus.com/bid/7855/info H-Sphere is prone to multiple cross-site scripting vulnerabilities via the HTML template feature in the Hosting Control Panel. HTML and script code will not be filtered from pages which...

PivX Advisory MK002B H&R Block TaxCut Information Disclosure Vulnerability

Mike Kristovich, PivX Security Advisory MK002B Date: January 10, 2003 Application: H&R Block Tax Cut Version: All versions up to current. Bug: Information in saved Tax Returns discloses Social Security Number, Full Information, and more.. Risk: Can allow for identity theft, information disclosure...

H-Sphere WebShell 2.4 - Remote Command Execution

H-Sphere WebShell 2.4 - Remote Command Execution / source: https://www.securityfocus.com/bid/6527/info A vulnerability has been discovered in H-Sphere Webshell. During the pre-authentication phase Webshell fails to perform sufficient bounds checking on user-supplied HTTP parameters. As a result, ...

H-Sphere WebShell 2.4 - Local Privilege Escalation

H-Sphere WebShell 2.4 - Local Privilege Escalation // source: https://www.securityfocus.com/bid/6527/info A vulnerability has been discovered in H-Sphere Webshell. During the pre-authentication phase Webshell fails to perform sufficient bounds checking on user-supplied HTTP parameters. As a resul...

H-Sphere WebShell 2.4 - Remote Command Execution

/ source: https://www.securityfocus.com/bid/6527/info A vulnerability has been discovered in H-Sphere Webshell. During the pre-authentication phase Webshell fails to perform sufficient bounds checking on user-supplied HTTP parameters. As a result, a malicious attacker may be able to trigger a...

H-Sphere WebShell 2.4 - Local Privilege Escalation

// source: https://www.securityfocus.com/bid/6527/info A vulnerability has been discovered in H-Sphere Webshell. During the pre-authentication phase Webshell fails to perform sufficient bounds checking on user-supplied HTTP parameters. As a result, a malicious attacker may be able to trigger a...

CVE-2002-2266

NetScreen ScreenOS 2.8 through 4.0, when forwarding H.323 or Netmeeting traffic, allows remote attackers to cause a denial of service firewall session table consumption by establishing multiple half-open H.323 sessions, which are not cleaned up on garbage removal and do not time out for 36 hours...

Potential H.323 Denial of Service

Title: NetScreen Security Alert 52020 Date: 25 November 2002 Description: Potential H.323 Denial of Service Impact: Complete Denial of Service Affected Products: All firewall/VPN appliances and systems Affected Software Releases: ScreenOS 2.8, 3.0, 3.1, 4.0 Summary: A vulnerability has been...

CVE-2001-0546

Memory leak in H.323 Gatekeeper Service in Microsoft Internet Security and Acceleration ISA Server 2000 allows remote attackers to cause a denial of service resource exhaustion via a large amount of malformed H.323 data...

CVE-2001-0773

Cayman 3220-H DSL Router 1.0 allows remote attacker to cause a denial of service crash via a series of SYN or TCP connect requests...

CVE-2001-0773

CVE-2001-0773 affects Cayman 3220-H DSL Router 1.0. A vulnerability allows remote DoS via a sequence of TCP connect() requests or SYN packets, potentially exploited from LAN or WAN in conjunction with a bouncing vulnerability, causing the gateway to crash. Root cause relates to how the device han...

CVE-1999-1117: Undefined Security Weakness

lquerypv in AIX 4.1 and 4.2 allows local users to read arbitrary files by specifying the file in the -h command line parameter...

CVE-2001-0773: Undefined Security Weakness

Cayman 3220-H DSL Router 1.0 allows remote attacker to cause a denial of service crash via a series of SYN or TCP connect requests...

CVE-2001-0546: Undefined Security Weakness

Memory leak in H.323 Gatekeeper Service in Microsoft Internet Security and Acceleration ISA Server 2000 allows remote attackers to cause a denial of service resource exhaustion via a large amount of malformed H.323 data...

CVE-2001-0734

Hitachi Super-H architecture in NetBSD 1.5 and 1.4.1 allows a local user to gain privileges via modified Status Register contents, which are not properly handled by 1 the sigreturn system call or 2 the processwriteregs kernel routine...

CVE-2001-0773

Cayman 3220-H DSL Router 1.0 allows remote attacker to cause a denial of service crash via a series of SYN or TCP connect requests...

CVE-2001-0734

CVE-2001-0734 affects Hitachi Super-H architecture on NetBSD 1.5 and 1.4.1, enabling a local user to gain privileges via manipulated Status Register contents not correctly handled by the sigreturn system call or the process_write_regs kernel routine. The connected documents do not provide additio...