Foundstone Advisory - Buffer Overflow in AnalogX SimpleServer:Shout

---------------------------------------------------------------------- FS Advisory ID: FS-062502-22-AXSH Release Date: June 25, 2002 Product: AnalogX SimpleServer:Shout Vendor: AnalogX http://www.analogx.com Vendor Advisory: See vendor web site Type: Buffer Overflow Severity: High Author: Robin...

BasiliX multiple vulnerabilities

BasiliX multiple vulnerabilities PROGRAM: BasiliX VENDOR: Murat Arslan [email protected] et al. HOMEPAGE: http://basilix.org/ VULNERABLE VERSIONS: 1.1.0 and all previous versions LOGIN REQUIRED: yes some issues, no some issues SEVERITY: high DESCRIPTION: "BasiliX is a webmail application based ...

CBMS: XSS and SQL Injection holes

CBMS: XSS and SQL Injection holes PROGRAM: CBMS VENDOR: Voxel Dot Net, Inc. [email protected] HOMEPAGE: http://www.voxel.net/projects/cbms/ VULNERABLE VERSIONS: 0.7 and possibly earlier versions as well LOGIN REQUIRED: yes SEVERITY: high VERSION OF THIS ADVISORY: 1.1 DESCRIPTION: "The CBMS is a full...

Foundstone Advisory - Buffer Overflow in Ipswitch Imail 7.1 and prior

Date: Mon, 20 May 2002 13:24:26 -0700 From: Foundstone Labs [email protected] To: [email protected] Subject: Foundstone Advisory - Buffer Overflow in Ipswitch Imail 7.1 and prior Please disregard the previous email. Can you please forward this to the bugtraq mailing list? Thanks, Marshall...

Multiple vendors web server source code disclosure (8.3 name form at vulnerability - take II)

//////////////////////////////////////////////////////////////////////////// //////////////////////////////////////////////////////// ======================== Security Advisory ======================== ////////////////////////////////////////////////////////////////////////////...

ie.css.txt

Thor Larholm security advisory TL002 Topic: IE allows universal Cross Site Scripting. Discovery date: 18 March 2002. Affected applications: Any application that hosts the WebBrowser control IE6+. Some of these are: Microsoft Internet Explorer Microsoft Outlook Microsoft Outlook Express Severity:...

PHProjekt multiple vulnerabilities

PHProjekt multiple vulnerabilities PROGRAM: PHProjekt VENDOR: Albrecht Guenther [email protected] et al. HOMEPAGE: http://www.phprojekt.com/ VULNERABLE VERSIONS: all versions below 3.2 LOGIN REQUIRED: yes some issues, no some issues SEVERITY: high DESCRIPTION: "PHProjekt is a groupware suite which...

Back Office Web Administrator Authentication Bypass (#NISR17042002A)

NGSSoftware Insight Security Research Advisory Name: Back Office Web Administration Authentication Bypass Systems Affected: Microsoft's Back Office Web Administrator 4.0, 4.5 Severity: Medium/High Vendor URL: http://www.microsoft.com Author: David Litchfield [email protected] Date: 17th April...

Anthill login and JavaScript vulnerabilities

Anthill login and JavaScript vulnerabilities PROGRAM: Anthill VENDOR: Vincent Danen [email protected] HOMEPAGE: http://anthill.vmlinuz.ca/ VULNERABLE VERSIONS: all TYPE: remote SEVERITY: high DESCRIPTION: "Anthill is a bug tracking database system written in PHP. It provides the standard bu...

Vulnerability in Apache for Win32 batch file processing - Remote command execution

Vulnerability in Apache for Win32 batch file processing - Remote command execution = Author: Ory Segal, Sanctum inc. http://www.sanctuminc.com = Release date: March, 21st 2002 Vendor was notified at: Feb. 13th = 2002 = Vendor: Apache group = Product: Apache web server Win32 - Running DOS batch...

Another Sql Server 7 Buffer Overflow

Security Advisory Name : Another Sql Server 7 Buffer Overflow System Affected : Sql Server 7 all service packs and fixes, ver. 7.00.1021 Severity : High. Remote Exploit: Yes Author: Cesar Cerrudo. Date: 03/05/2002 Advisory Number: CC030202 Description : The extended stored procedure xpdirtree...

AeroMail multiple vulnerabilities

AeroMail multiple vulnerabilities PROGRAM: AeroMail VENDOR: Mark Cushman [email protected] HOMEPAGE: http://the.cushman.net/projects/aeromail/ MIRROR: http://www.packetplay.com/projects/aeromail/ VULNERABLE VERSIONS: all versions below 1.45 SEVERITY: medium to high DESCRIPTION: "AeroMail is a...

Novell Groupwise arbitrary file retrieval vulnerability

FS Advisory ID: FS-101501-20-GWSE Release Date: October 15, 2001 Product: Novell GroupWise Vendor: Novell http://www.novell.com Vendor Advisory: See vendor website. Type: Arbitrary file retrieval vulnerability Severity: High Author: Mike Shema [email protected] Foundstone, Inc...

New command execution vulnerability in myPhpAdmin

--/ Product: phpMyAdmin versions = 2.2.0rc3 --/ Problem: Arbitrary remote command execution --/ Severity: High --/ Author: Carl Livitt carl AT ititc DOT com --/ Date: 31 July 2001 ---------------------------------------------- History ------- Further to the excellent research done by Shaun Clowes...

ScreamingMedia SITEWare source code disclosure vulnerability

FS Advisory ID: FS-061201-18-SMSW Release Date: June 11, 2001 Product: ScreamingMedia SITEWare Vendor: ScreamingMedia Inc. http://www.screamingmedia.com Vendor Advisory: http://www.screamingmedia.com/security/sms1001.php Type: Source code disclosure vulnerability Severity: High Author: Mike Shema...

iPlanet - Netscape Enterprise Web Publisher Buffer Overflow

iPlanet – Netscape Enterprise Web Publisher Buffer Overflow Release Date: May 11, 2001 Severity: High Remote SYSTEM level code execution Systems Affected: Netscape Enterprise 4.1 and prior versions. Description: The Web Publisher feature in Netscape Enterprise 4.1 is vulnerable to a buffer...

Windows 2000 .printer remote overflow proof of concept exploit

Windows 2000 IIS 5.0 Remote buffer overflow vulnerability Remote SYSTEM Level Access Release Date: May 01, 2001 Severity: High Remote SYSTEM level code execution Systems Affected: Microsoft Windows 2000 Internet Information Services 5.0 Microsoft Windows 2000 Internet Information Services 5.0 +...

ccc_harvest.txt

-= Zero Tolerance Technologies T Security Advisory =- Reference: ZTT-SA01-27032001 Author: Richard Scott, [email protected] Product: Computer Associates' CCC\Harvest Source Code control software http://ca.com/products/cccharvest.htm http://ca.com/products/descriptions/cccharvest.pdf...

SSHD-1 Logging Vulnerability

Crimelabs, Inc. www.crimelabs.net Security Note Crimelabs Security Note CLABS200101 Title: SSH-1 Brute Force Password Vulnerability Date: 5 February, 2001 Vendors: Any supported by SSH-1 Versions: At least ssh-1.2.27 and 1.2.30 Not Affected: OpenSSH Severity: Medium to High Author: Jose Nazario...

Unify eWave ServletExec upload

Foundstone, Inc. http://www.foundstone.com "Securing the Dot Com World" Security Advisory Unify eWave ServletExec upload ---------------------------------------------------------------------- FS Advisory ID: FS-103100-16-SRVX Release Date: October 31, 2000 Product: Unify eWave ServletExec 3.0C...