Race in XP SCM Service Shutdown Mechanism

Race Condition in Windows XP Service Control Manager Service Shutdown Mechanism ABSTRACT "The Windows XP Professional operating system is the best choice for businesses of all sizes. Windows XP Professional integrates the strengths of Windows 2000 Professional, such as standards-based security,...

CVE-2002-0831

The kqueue mechanism in FreeBSD 4.3 through 4.6 STABLE allows local users to cause a denial of service kernel panic via a pipe call in which one end is terminated and an EVFILTWRITE filter is registered for the other end...

CVE-2002-0831

Technical details about CVE-2002-0831 are not publicly available in the provided documents. Monitor for updates.

CVE-2002-0147: Undefined Security Weakness

Buffer overflow in the ASP data transfer mechanism in Internet Information Server IIS 4.0, 5.0, and 5.1 allows remote attackers to cause a denial of service or execute code, aka "Microsoft-discovered variant of Chunked Encoding buffer overrun."...

CVE-2002-0030: Undefined Security Weakness

The digital signature mechanism for the Adobe Acrobat PDF viewer only verifies the PE header of executable code for a plug-in, which can allow attackers to execute arbitrary code in certified mode by making the plug-in appear to be signed by Adobe...

CVE-2002-1265

The Sun RPC functionality in multiple libc implementations does not provide a time-out mechanism when reading data from TCP connections, which allows remote attackers to cause a denial of service hang...

Important: Red Hat Security Advisory: kernel security update

This kernel update for Red Hat Linux Advanced Server 2.1 addresses some security issues and provides minor bug fixes. The Linux kernel handles the basic functions of the operating system. A number of vulnerabilities were found in the Red Hat Linux Advanced Server kernel. These vulnerabilities cou...

[SecurityOffice] Webserver 4D v3.6 Weak Password Preservation Vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: MD5 - -- Webserver 4D v3.6 Weak Password Preservation Vulnerability -- - -- Type Design Error - -- Release Date September 25, 2002 - -- Product / Vendor Webserver 4D by MDG Computer Services, Inc. is an complete Web Server environment written entirely on t...

poprelayd & sendmail Arbitrary Mail Relay

Nessus has detected that the remote SMTP server allows relaying for users which were identified by 'POP before SMTP'. The access control mechanism is based on the POP server logs. However, it is possible to poison these logs, which means that any spammer could be using your mail server to send...

Security Advisory FreeBSD-SA-02:37.kqueue

-----BEGIN PGP SIGNED MESSAGE----- ============================================================================= FreeBSD-SA-02:37.kqueue Security Advisory The FreeBSD Project Topic: local users can panic the system using the kqueue mechanism Category: core Module: kqueue Announced: 2002-08-05...

Sharity Cifslogin Buffer Overflow (arguments)

Sharity Cifslogin Buffer Overflow arguments ============================================= Author: Alex Hernandez [email protected] C 2002 Thanks all the people from Spain and Argentina. Greets to: Paco Spain, Gabriel M, L.martins. Thanks friends for all ur help Zillion & Kevin from Snosoft...

OpenSSH 3.x - Challenge-Response Buffer Overflow (2)

OpenSSH 3.x - Challenge-Response Buffer Overflow 2 source: https://www.securityfocus.com/bid/5093/info The OpenSSH team has reported two vulnerabilities in OpenSSH that are remotely exploitable and may allow for unauthenticated attackers to obtain root privileges. The conditions are related to th...

OpenSSH 3.x - Challenge-Response Buffer Overflow (1)

source: https://www.securityfocus.com/bid/5093/info The OpenSSH team has reported two vulnerabilities in OpenSSH that are remotely exploitable and may allow for unauthenticated attackers to obtain root privileges. The conditions are related to the OpenSSH SSH2 challenge-response mechanism. They...

OpenSSH 3.x - Challenge-Response Buffer Overflow (1)

OpenSSH 3.x - Challenge-Response Buffer Overflow 1 source: https://www.securityfocus.com/bid/5093/info The OpenSSH team has reported two vulnerabilities in OpenSSH that are remotely exploitable and may allow for unauthenticated attackers to obtain root privileges. The conditions are related to th...

CVE-2000-0551: Undefined Security Weakness

The file transfer mechanism in Danware NetOp 6.0 does not provide authentication, which allows remote attackers to access and modify arbitrary files...

Hot Standby Router Protocol (HSRP) uses weak authentication

Overview A denial-of-service vulnerability exists in the Hot Standby Router Protocol HSRP . Description HSRP is a protocol designed to provide transparent recovery of routing services when failures occur. Quoting from RFC2281 the RFC describing the Hot Standby Router Protocol:The Hot Standby Rout...

Alcatel ADSL Modem Unrestricted Remote Access

On the Alcatel Speed Touch Pro ADSL modem, a protection mechanism feature is available to ensure that nobody can gain remote access to the modem via the WAN/DSL interface. This mechanism guarantees that nobody from outside your network can access the modem's management interface and potentially...

CVE-1999-1239

HP-UX 9.x does not properly enable the Xauthority mechanism in certain conditions, which could allow local users to access the X display even when they have not explicitly been authorized to do so...

CVE-2001-0435

The split key mechanism used by PGP 7.0 allows a key share holder to obtain access to the entire key by setting the "Cache passphrase while logged on" option and capturing the passphrases of other share holders as they authenticate...

eXtremail 1.x2.1 - Remote Format String (2)

eXtremail 1.x2.1 - Remote Format String 2 // source: https://www.securityfocus.com/bid/2908/info eXtremail is a freeware SMTP server available for Linux and AIX. eXtremail contains a format-string vulnerability in its logging mechanism. Attackers can send SMTP commands argumented with maliciously...