Opera 7.x - Directory Traversal

Opera 7.x - Directory Traversal source: https://www.securityfocus.com/bid/9279/info Opera is prone to a file corruption vulnerability. This issue is exposed when a user is presented with a file dialog, which will cause the creation of a temporary file. It is possible to specify a relative path to...

Directory traversal in The TelCondex SimpleWebserver 2.13.31027 Build 3289.

/ Gr33tz: ZeT, JLx, euronymous and all my friends. :D : : For Contacts: 000000 : /./ | /. : Email : [email protected] : [email protected] : HomePage: www.nimber.plux.ru : : ====================== : Advisory Information: //----------------------------------------o =====================// Application...

[OpenSSL Advisory] Denial of Service in ASN.1 parsing

-----BEGIN PGP SIGNED MESSAGE----- OpenSSL Security Advisory 4 November 2003 Denial of Service in ASN.1 parsing ================================== Previously, OpenSSL 0.9.6k was released on the 30 September 2003 to address various ASN.1 issues. The issues were found using a test suite from NISCC...

Nullsoft SHOUTcast 1.9.2 - icy-nameicy-url Memory Corruption (2)

Nullsoft SHOUTcast 1.9.2 - icy-nameicy-url Memory Corruption 2 // source: https://www.securityfocus.com/bid/8954/info Nullsoft SHOUTcast Server is prone to a memory corruption vulnerability that may lead to denial of service attacks or code execution. This is due to insufficient bounds checking o...

DoS in Plug and Play Web Server Proxy Server

DoS in Plug and Play Web Server Proxy Server ============================== Plug & Play server is a HTTP/FTP/NEWS/MAIL/TELNET/DNS/DHCP/HTTP-PROXY server, running on Windows platforms. Version: 1.0002c -------- Vendor: www.pandpsoft.com ------- Vulnerability: -------------- Sending the following...

Nullsoft SHOUTcast 1.9.2 - icy-nameicy-url Memory Corruption (1)

Nullsoft SHOUTcast 1.9.2 - icy-nameicy-url Memory Corruption 1 source: https://www.securityfocus.com/bid/8954/info Nullsoft SHOUTcast Server is prone to a memory corruption vulnerability that may lead to denial of service attacks or code execution. This is due to insufficient bounds checking of...

Nullsoft SHOUTcast 1.9.2 - 'icy-name/icy-url' Memory Corruption (1)

source: https://www.securityfocus.com/bid/8954/info Nullsoft SHOUTcast Server is prone to a memory corruption vulnerability that may lead to denial of service attacks or code execution. This is due to insufficient bounds checking of server commands supplied by authenticated users, specifically...

Nullsoft SHOUTcast 1.9.2 - 'icy-name/icy-url' Memory Corruption (2)

// source: https://www.securityfocus.com/bid/8954/info Nullsoft SHOUTcast Server is prone to a memory corruption vulnerability that may lead to denial of service attacks or code execution. This is due to insufficient bounds checking of server commands supplied by authenticated users, specifically...

Sun Java Plugin 1.4.2 _01 - Cross-Site Applet Sandbox Security Model Violation

source: https://www.securityfocus.com/bid/8857/info A vulnerability has been reported in Java implementations that may potentially allow Java applets from two different domains to violate the sandbox security model and share read/write access to data areas. This violates the principle of isolatio...

Apache Httpd < 1.3.31 : Allow/Deny parsing on big-endian 64-bit platforms

A bug in the parsing of Allow/Deny rules using IP addresses without a netmask on big-endian 64-bit platforms causes the rules to fail to match...

JBoss 3.0.83.2.1 - HSQLDB Remote Command Injection

JBoss 3.0.83.2.1 - HSQLDB Remote Command Injection source: https://www.securityfocus.com/bid/8773/info A remote command-injection vulnerability has been reported in JBoss. The issue is reportedly exposed via the HSQLDB component, which is a SQL database server that manages JMS connections. Becaus...

JBoss 3.0.8/3.2.1 - HSQLDB Remote Command Injection

source: https://www.securityfocus.com/bid/8773/info A remote command-injection vulnerability has been reported in JBoss. The issue is reportedly exposed via the HSQLDB component, which is a SQL database server that manages JMS connections. Because of a number of flaws, an attacker can pass comman...

TEXONET-20030902.txt

----------------------------------------------------------------------- Texonet Security Advisory 20030902 ----------------------------------------------------------------------- Advisory ID : TEXONET-20030902 Authors : Joel Soderberg and Christer Oberg Issue date : Tuesday, September 02, 2003...

Buffer Overflow in WideChapter Browser

Buffer Overflow in WideChapter Browser Advisory Information: ===================== Application: WideChapter Browser Vendor Homepage: http://www.widechapter.com Versions: 3.0 and earlier versions Platforms: Windows all Severity: High Date: 12.09.03 Introduction: ============= "WideChapter is the...

Buffer overflow in Avant Browser 8.02

/ ZUD SECURITY TEAM PRESENT : : bug found by nimber 000o0o : Email : [email protected] : Site: www.zudteam.org www.zudteam.org : HomePage: www.nimber.plux.ru : : ====================== : Advisory Information: //----------------------------------------o =====================// : Application : Ava...

Remote denial of service vulnerability in Meteor FTP Version 1.5

www.evicted.org [email protected] August 8, 2003 Meteor FTP Version 1.5 Remote Denial of Service Vulnerability 1. Introduction ---------------- Meteor FTP is a personal ftp server that runs on Windows98/ME/2K/XP. 2. Vulnerability ----------------- A vulnerability exists in Meteor FTP Version 1.5...

IglooFTP PRO 3.8 - Multiple Buffer Overflow Vulnerabilities (1)

// source: https://www.securityfocus.com/bid/8117/info IglooFTP PRO for Windows platforms has been reported prone to multiple buffer overrun vulnerabilities. The issue likely presents itself due do a lack of sufficient bounds checking performed on data that is copied into a reserved internal memo...

IglooFTP PRO 3.8 - Multiple Buffer Overflow Vulnerabilities (2)

source: https://www.securityfocus.com/bid/8117/info IglooFTP PRO for Windows platforms has been reported prone to multiple buffer overrun vulnerabilities. The issue likely presents itself due do a lack of sufficient bounds checking performed on data that is copied into a reserved internal memory...

IglooFTP PRO 3.8 - Multiple Buffer Overflow Vulnerabilities (1)

IglooFTP PRO 3.8 - Multiple Buffer Overflow Vulnerabilities 1 // source: https://www.securityfocus.com/bid/8117/info IglooFTP PRO for Windows platforms has been reported prone to multiple buffer overrun vulnerabilities. The issue likely presents itself due do a lack of sufficient bounds checking...

Opera 7 - Denial of Service

Opera 7 - Denial of Service source: https://www.securityfocus.com/bid/8066/info Opera has been reported to be prone to five denial of service vulnerabilities. These issues can be triggered when the browser attempts to interpret a document with malformed code. Exploitation could cause the browser ...