[OpenSSL Advisory] Denial of Service in ASN.1 parsing

-----BEGIN PGP SIGNED MESSAGE----- OpenSSL Security Advisory 4 November 2003 Denial of Service in ASN.1 parsing ================================== Previously, OpenSSL 0.9.6k was released on the 30 September 2003 to address various ASN.1 issues. The issues were found using a test suite from NISCC...

Nullsoft SHOUTcast 1.9.2 - icy-nameicy-url Memory Corruption (1)

Nullsoft SHOUTcast 1.9.2 - icy-nameicy-url Memory Corruption 1 source: https://www.securityfocus.com/bid/8954/info Nullsoft SHOUTcast Server is prone to a memory corruption vulnerability that may lead to denial of service attacks or code execution. This is due to insufficient bounds checking of...

Nullsoft SHOUTcast 1.9.2 - 'icy-name/icy-url' Memory Corruption (1)

source: https://www.securityfocus.com/bid/8954/info Nullsoft SHOUTcast Server is prone to a memory corruption vulnerability that may lead to denial of service attacks or code execution. This is due to insufficient bounds checking of server commands supplied by authenticated users, specifically...

Nullsoft SHOUTcast 1.9.2 - 'icy-name/icy-url' Memory Corruption (2)

// source: https://www.securityfocus.com/bid/8954/info Nullsoft SHOUTcast Server is prone to a memory corruption vulnerability that may lead to denial of service attacks or code execution. This is due to insufficient bounds checking of server commands supplied by authenticated users, specifically...

DoS in Plug and Play Web Server Proxy Server

DoS in Plug and Play Web Server Proxy Server ============================== Plug & Play server is a HTTP/FTP/NEWS/MAIL/TELNET/DNS/DHCP/HTTP-PROXY server, running on Windows platforms. Version: 1.0002c -------- Vendor: www.pandpsoft.com ------- Vulnerability: -------------- Sending the following...

Nullsoft SHOUTcast 1.9.2 - icy-nameicy-url Memory Corruption (2)

Nullsoft SHOUTcast 1.9.2 - icy-nameicy-url Memory Corruption 2 // source: https://www.securityfocus.com/bid/8954/info Nullsoft SHOUTcast Server is prone to a memory corruption vulnerability that may lead to denial of service attacks or code execution. This is due to insufficient bounds checking o...

Sun Java Plugin 1.4.2 _01 - Cross-Site Applet Sandbox Security Model Violation

source: https://www.securityfocus.com/bid/8857/info A vulnerability has been reported in Java implementations that may potentially allow Java applets from two different domains to violate the sandbox security model and share read/write access to data areas. This violates the principle of isolatio...

Apache Httpd < 1.3.31 : Allow/Deny parsing on big-endian 64-bit platforms

A bug in the parsing of Allow/Deny rules using IP addresses without a netmask on big-endian 64-bit platforms causes the rules to fail to match...

JBoss 3.0.8/3.2.1 - HSQLDB Remote Command Injection

source: https://www.securityfocus.com/bid/8773/info A remote command-injection vulnerability has been reported in JBoss. The issue is reportedly exposed via the HSQLDB component, which is a SQL database server that manages JMS connections. Because of a number of flaws, an attacker can pass comman...

JBoss 3.0.83.2.1 - HSQLDB Remote Command Injection

JBoss 3.0.83.2.1 - HSQLDB Remote Command Injection source: https://www.securityfocus.com/bid/8773/info A remote command-injection vulnerability has been reported in JBoss. The issue is reportedly exposed via the HSQLDB component, which is a SQL database server that manages JMS connections. Becaus...

Buffer Overflow in WideChapter Browser

Buffer Overflow in WideChapter Browser Advisory Information: ===================== Application: WideChapter Browser Vendor Homepage: http://www.widechapter.com Versions: 3.0 and earlier versions Platforms: Windows all Severity: High Date: 12.09.03 Introduction: ============= "WideChapter is the...

TEXONET-20030902.txt

----------------------------------------------------------------------- Texonet Security Advisory 20030902 ----------------------------------------------------------------------- Advisory ID : TEXONET-20030902 Authors : Joel Soderberg and Christer Oberg Issue date : Tuesday, September 02, 2003...

Buffer overflow in Avant Browser 8.02

/ ZUD SECURITY TEAM PRESENT : : bug found by nimber 000o0o : Email : [email protected] : Site: www.zudteam.org www.zudteam.org : HomePage: www.nimber.plux.ru : : ====================== : Advisory Information: //----------------------------------------o =====================// : Application : Ava...

Remote denial of service vulnerability in Meteor FTP Version 1.5

www.evicted.org [email protected] August 8, 2003 Meteor FTP Version 1.5 Remote Denial of Service Vulnerability 1. Introduction ---------------- Meteor FTP is a personal ftp server that runs on Windows98/ME/2K/XP. 2. Vulnerability ----------------- A vulnerability exists in Meteor FTP Version 1.5...

IglooFTP PRO 3.8 - Multiple Buffer Overflow Vulnerabilities (1)

IglooFTP PRO 3.8 - Multiple Buffer Overflow Vulnerabilities 1 // source: https://www.securityfocus.com/bid/8117/info IglooFTP PRO for Windows platforms has been reported prone to multiple buffer overrun vulnerabilities. The issue likely presents itself due do a lack of sufficient bounds checking...

IglooFTP PRO 3.8 - Multiple Buffer Overflow Vulnerabilities (2)

source: https://www.securityfocus.com/bid/8117/info IglooFTP PRO for Windows platforms has been reported prone to multiple buffer overrun vulnerabilities. The issue likely presents itself due do a lack of sufficient bounds checking performed on data that is copied into a reserved internal memory...

IglooFTP PRO 3.8 - Multiple Buffer Overflow Vulnerabilities (1)

// source: https://www.securityfocus.com/bid/8117/info IglooFTP PRO for Windows platforms has been reported prone to multiple buffer overrun vulnerabilities. The issue likely presents itself due do a lack of sufficient bounds checking performed on data that is copied into a reserved internal memo...

Opera 7 - Denial of Service

Opera 7 - Denial of Service source: https://www.securityfocus.com/bid/8066/info Opera has been reported to be prone to five denial of service vulnerabilities. These issues can be triggered when the browser attempts to interpret a document with malformed code. Exploitation could cause the browser ...

Apache Httpd < 1.3.32 : mod_proxy buffer overflow

A buffer overflow was found in the Apache proxy module, modproxy, which can be triggered by receiving an invalid Content-Length header. In order to exploit this issue an attacker would need to get an Apache installation that was configured as a proxy to connect to a malicious site. This would cau...

Pi3Web 2.0.2 - SortName Buffer Overflow

// source: https://www.securityfocus.com/bid/7787/info Pi3Web is prone to a buffer overflow vulnerability. This is due to insufficient bounds checking of URI parameters. This could be exploited to cause a denial of service or possibly to execute malicious instructions. This issue was reported for...