[Full-Disclosure] SECURITY ADVISORY

SECURITY ADVISORY IMPACT: DoS SEVERITY: High VENDOR: http://www.Wap-Serv.com CONTACT: [email protected] , +44 01628 634240 PRODUCT: http://www.wap-serv.com/product.htm WapServ Lite, WapServ Pro, WapServ Enterprise DISTRIBUTION: ALREADY NOTIFIED PUBLIC DOMAIN AND VENDOR SIMULTANEOUSLY HOW TO...

ICQLite executable trojaning

bugtraq@, Title: ICQ Lite executable trojaning Affected: ICQLite 2003a Vendor: ICQ Inc Vendor URL: http://www.icq.com Risk: Average Exploitable: Yes Remote: No Date: May, 29 2003 Advisory URL: http://www.security.nnov.ru/advisories/icqlite.asp I. Intro: ICQ Lite is popular internet messenger...

ICQ Lite weak permissions

During installation Interactive Users: Full Control permission is added to executables directory...

Upload Lite upload.cgi Arbitrary File Upload

The Upload Lite upload.cgi CGI script is installed. This script has a well-known security flaw that lets anyone upload arbitrary files on the remote web server. Note that Nessus did not test whether uploads are possible, only that the script exists. %NASLMINLEVEL 70300 C Tenable Network Security,...

Vulnerability in Upload Lite 3.22 that could allow somebody to upload/execute code on a remote host.

There is a vulnerability in Upload Lite 3.22 that could allow somebody to upload/execute code on a remote host. The exploit was tested on Windows and as far as I know it will only work on windows.. It will not work on nix because of file permissions. Upload Lite 3.22 from PerlScriptsJavaScripts.c...

CGI::Lite protection bypass

Not all dangerous shell characters are filtered by CGI::Lite::escapedangerouschars...

Security bug in CGI::Lite::escape_dangerous_chars() function

SUBJECT Security bug in CGI::Lite::escapedangerouschars function, part of the CGI::Lite 2.0 package, and earlier revisions thereof. SUMMARY The CGI::Lite::escapedangerouschars function fails to escape the entire set of special characters that may have significance to the underlying shell command...

Cyboards Remote Code Execution

Cyboards PHP Lite Vulnerability By Mindwarper :: [email protected] :: ------- ------- ---------------------- Vendor Information: ---------------------- Homepage : http://www.gold-sonata.com Vendor : informed Mailed advisory: 13/01/03 Vender Response : None yet possibly because they have no...

CVE-2002-1742

SOAP::Lite 0.50 through 0.52 allows remote attackers to load arbitrary Perl functions by suppling a non-existent function in a script using a SOAP::Lite module, which causes the AUTOLOAD subroutine to trigger...

CVE-2002-0603

Snapgear Lite+ firewall 1.5.3 allows remote attackers to cause a denial of service IPSEC crash via a zero length packet to UDP port 500...

CVE-2002-0604

Snapgear Lite+ firewall 1.5.3 and 1.5.4 allows remote attackers to cause a denial of service crash via a large number of packets with malformed IP options...

CVE-2002-0602

Snapgear Lite+ firewall 1.5.4 and 1.5.3 allows remote attackers to cause a denial of service crash via a large number of connections to 1 the HTTP web management port, or 2 the PPTP port...

CVE-2002-0603

The CVE-2002-0603 entry concerns the Snapgear Lite+ firewall, version 1.5.3. Affected component: the IPsec handling vulnerable to a remote denial-of-service triggered by sending a zero-length packet to UDP port 500, causing a crash. The vulnerability is network-exploitable with no authentication ...

CVE-2002-0602

Affected product: Snapgear Lite+ firewall, versions 1.5.3 and 1.5.4. Issue: remote attackers can cause a denial of service (crash) by establishing a large number of connections to the HTTP web management port or the PPTP port. Root cause is not explicitly detailed in the provided documents. Impac...

CVE-2002-0604

Snapgear Lite+ firewall 1.5.3 and 1.5.4 allows remote attackers to cause a denial of service crash via a large number of packets with malformed IP options...

CVE-2002-0604

CVE-2002-0604 affects Snapgear Lite+ firewall versions 1.5.3 and 1.5.4. A remote attacker can crash the device (DoS) by sending a large number of packets with malformed IP options. Attack vector: NETWORK; authentication: NONE; impact: availability partial. No remediation/fix details are provided ...

CVE-2002-0603

Snapgear Lite+ firewall 1.5.3 allows remote attackers to cause a denial of service IPSEC crash via a zero length packet to UDP port 500...

CVE-2002-0602

Snapgear Lite+ firewall 1.5.4 and 1.5.3 allows remote attackers to cause a denial of service crash via a large number of connections to 1 the HTTP web management port, or 2 the PPTP port...

CVE-2002-0603: Undefined Security Weakness

Snapgear Lite+ firewall 1.5.3 allows remote attackers to cause a denial of service IPSEC crash via a zero length packet to UDP port 500...

CVE-2002-0604: Undefined Security Weakness

Snapgear Lite+ firewall 1.5.3 and 1.5.4 allows remote attackers to cause a denial of service crash via a large number of packets with malformed IP options...