Several remotely exploitable buffer overflows in gaim

Stefan Esser of e-matters found almost a dozen remotely exploitable vulnerabilities in Gaim. From the e-matters advisory: While developing a custom add-on, an integer overflow in the handling of AIM DirectIM packets was revealed that could lead to a remote compromise of the IM client. After...

EDIMAX AR-6004 Full Rate ADSL Router Cross Site Scripting Vulnerabillity

Device: EDIMAX AR-6004 Full Rate ADSL Router Integrated 4 port Switch Software: The Router's Server Vendor: http://www.edimax.com.tw/ Versions: AR-6004 Platforms: Windows Bug: Cross Site Scripting Vulnerabillity + Remote Compromise Risk: Medium Exploitation: Remote with browser Date: 6 Jan 2004...

DSA-404 rsync - heap overflow

Bulletin has no description...

IE Remote Compromise by Getting Cache Location

IE Remote Compromise by Getting Cache Location tested OS:WinXp, CN version Microsoft Internet Explorer v6.Sp1; up-to-date on 2003/11/16 overview With the help of LocalZoneInCacherefer to "technical details" part, an attacker can compromise a user's system even though the user has: 1. Customized I...

Cache Disclosure Leads to MYCOMPUTER Zone and Remote Compromise

Cache Disclosure Leads to MYCOMPUTER Zone and Remote Compromise tested OS:WinXp, CN version Microsoft Internet Explorer v6.Sp1; up-to-date on 2003/11/16 overview By combining cache file disclosure and several other unpatched vulnerabilties, an malicious INTERNET page can reach MYCOMPUTER zone. Th...

New "Clean" IE Remote Compromise

tested OS:Win2k3,CN version IE: with MS03-048 installed. OS:WinXp, CN version Microsoft Internet Explorer v6.Sp1; up-to-date on 2003/11/16 overview By combining several vulnerabilities in Internet Explorer, an attacker can execute his EXE file on victim's system. "Clean" means: there is no old...

Six Step IE Remote Compromise Cache Attack

Six Step IE Remote Compromise Cache Attack tested OS:WinXp Microsoft Internet Explorer v6.Sp1; up-to-date on 2003/10/30 Overview A six step cache attack has been found which allows for remote compromise of systems running Internet Explorer merely by viewing a webpage. This attack is possible part...

Advisory 02/2003: emule/xmule/lmule vulnerabilities

e-matters GmbH www.e-matters.de -= Security Advisory =- Advisory: eMule/lmule/xmule multiple remote vulnerabilities Release Date: 2003/08/17 Last Modified: 2003/08/17 Author: Stefan Esser [email protected] Application: eMule = 0.29c xmule = 1.4.3, = 1.5.6a lmule = 1.3.1 Severity: Several...

Internet Explorer Plugin.ocx heap overflow (#NISR24042003)

NGSSoftware Insight Security Research Advisory Name: Internet Explorer ActiveX Control Heap Overflow Systems Affected: IE 5.01 SP3, 5.5 SP2, 6.0 Gold, 6.0 SP1 Severity: Critical Risk Category: Heap Overflow Vendor URL: http://www.microsoft.com Author: Mark Litchfield [email protected] Date: 24...

Coppermine Photo Gallery remote compromise

---AFFECTED SOFTWARE--- From the website, http://www.chezgreg.net/coppermine/: "Coppermine Photo Gallery is a picture gallery script. Users can upload pictures with a web browser thumbnails are created on the fly, add comments, send e-cards and view statistics about the pictures. " "The script us...

ISS Security Brief: Email Processing Vulnerability in Sendmail

-----BEGIN PGP SIGNED MESSAGE----- Internet Security Systems Security Brief March 29, 2003 Email Processing Vulnerability in Sendmail Synopsis: ISS X-Force is researching a public report of an email header processing buffer overflow vulnerability in Sendmail. This report was made public on March...

Advisory 05/2002: Another Fetchmail Remote Vulnerability

e-matters GmbH www.e-matters.de -= Security Advisory =- Advisory: Fetchmail remote vulnerability Release Date: 2002/12/13 Last Modified: 2002/12/13 Author: Stefan Esser [email protected] Application: Fetchmail = 6.1.3 Severity: A vulnerability within Fetchmail could allow remote compromise...

Advisory 04/2002: Multiple MySQL vulnerabilities

e-matters GmbH www.e-matters.de -= Security Advisory =- Advisory: Multiple MySQL vulnerabilities Release Date: 2002/12/12 Last Modified: 2002/12/12 Author: Stefan Esser [email protected] Application: MySQL = 3.23.53a, = 4.0.5a Severity: Several vulnerabilities within libMySQL could allow remot...

Multiple pServ Remote Buffer Overflow Vulnerabilities

There are multiple buffer overflow bugs in pServ that could lead to a remote root? compromise of public servers running the daemon: ABSTRACT Pico Server pServ is a freeware web server available at pserv.sourceforge.net running on many POSIX compliant platforms. The package contains several...

ISS Security Brief: Solaris fs.auto Remote Compromise Vulnerability

-----BEGIN PGP SIGNED MESSAGE----- ISS X-Force Security Brief November 25, 2002 Solaris fs.auto Remote Compromise Vulnerability Synopsis: ISS X-Force has discovered a vulnerability in the Sun Microsystems implementation of the "X Window Font Service", or "XFS". The XFS service was designed as a...

Microsoft PPTP Server and Client remote vulnerability

phion Security Advisory 26/09/2002 Microsoft PPTP Server and Client remote vulnerability Summary ----------------------------- The Microsoft PPTP Service shipping with Windows 2000 and XP contains a remotely exploitable pre-authentication bufferoverflow. Affected Systems...

Multiple OpenVMS WASD HTTP Server Vulnerabilities

Description Multiple vulnerabilities have been reported in WASD HTTP Server for OpenVMS. The consequences of successful exploitation of these issues may range from information disclosure to varying degrees of remote compromise. Technologies Affected WASD WASD HTTP Server 7.1.0 WASD WASD HTTP Serv...

idefense.webmin.txt

Reference: http://www.securiteam.com/unixfocus/5CP0R1P80G.html Webmin Vulnerability Leads to Remote Compromise RPC CGI ------------------------------------------------------------------------ SUMMARY Webmin is a web-based interface for system administration for Linux/UNIX. Using any browser that...

ISS Brief: Remote Compromise and Denial of Service Vulnerability in PHP

TO UNSUBSCRIBE: email "unsubscribe alert" in the body of your message to [email protected] Contact [email protected] for help with any problems! --------------------------------------------------------------------------- -----BEGIN PGP SIGNED MESSAGE----- This document is an ISS X-Force Securit...

Advisory 02/2002: PHP remote vulnerability

e-matters GmbH www.e-matters.de -= Security Advisory =- Advisory: Remote Compromise/DOS Vulnerability in PHP Release Date: 2002/07/22 Last Modified: 2002/07/22 Author: Stefan Esser [email protected] Application: PHP 4.2.0, 4.2.1 Severity: A vulnerability within the multipart/form-data handler...