[Full-disclosure] Barracuda LHA archiver security bug leads to remote compromise

Topic: Barracuda LHA archiver security bug leads to remote compromise Announced: 2006-04-03 Product: Barracuda Spam Firewall Vendor: http://www.barracudanetworks.com/ Impact: Remote shell access Affected product: Barracuda with firmware 3.3.03.022 AND spamdef 3.0.10045 Credits: Jean-Sebastien...

[Full-disclosure] Barracuda ZOO archiver security bug leads to remote compromise

Topic: Barracuda ZOO archiver security bug leads to remote compromise Announced: 2006-04-03 Product: Barracuda Spam Firewall Vendor: http://www.barracudanetworks.com/ Impact: Remote shell access Affected product: Barracuda with firmware 3.3.03.022 AND spamdef 3.0.9388 Credits: Jean-Sebastien...

Microsoft Windows Media Player Bitmap Handling Buffer Overflow Vulnerability

Description Microsoft Windows Media Player is prone to a remote buffer-overflow vulnerability. The vulnerability arises when the application handles a skin file containing a specially crafted bitmap image. This issue can also be triggered by just supplying a malicious bitmap to the application...

High Risk Vulnerability in Red Hat Directory Server and Red Hat Certificate Server

Peter Winter-Smith of NGSSoftware has discovered a high risk vulnerability in Red Hat Directory Server and Red Hat Certificate Server. It is possible that under certain circumstances these flaws could permit an unauthenticated attacker to remotely compromise the Directory or Certificate server, i...

EFileGo 3.0 - Multiple Input Validation Vulnerabilities

EFileGo 3.0 - Multiple Input Validation Vulnerabilities source: https://www.securityfocus.com/bid/16124/info eFileGo is prone to multiple input validation vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. An attacker can exploit these...

EFileGo 3.0 - Multiple Input Validation Vulnerabilities

source: https://www.securityfocus.com/bid/16124/info eFileGo is prone to multiple input validation vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. An attacker can exploit these issues to retrieve arbitrary files, upload files to...

ACSSEC-2005-11-25-3.txt

-=+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++=- ACS Security Assessment Advisory - XSS Scripting Vulnerability ID: ACSSEC-2005-11-25 - 0x3 Class: Cross-Site-Scripting XSS Package: FTGate 4.4 Build 4.4.000 Oct 26 2005 Build: Windows NT/2k/XP/2k3 Notified: Dec 01, 2005 Released: Dec...

[Full-disclosure] [ACSSEC-2005-11-25-0x3] FTGate 4.4 [Build 4.4.000 Oct 26 2005] Cr oss Site Scripting Vulnerability

-=+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++=- ACS Security Assessment Advisory - XSS Scripting Vulnerability ID: ACSSEC-2005-11-25 - 0x3 Class: Cross-Site-Scripting XSS Package: FTGate 4.4 Build 4.4.000 Oct 26 2005 Build: Windows NT/2k/XP/2k3 Notified: Dec 01, 2005 Released: Dec...

Microsoft Windows Graphics Rendering Engine WMF Format Code Execution Vulnerability

Description Microsoft Windows WMF graphics rendering engine is affected by a remote code execution vulnerability. The problem presents itself when a user views a malicious WMF formatted file, triggering the vulnerability when the engine attempts to parse the file. A malicious file can cause an...

CuteNews 1.4.1 - template Traversal Arbitrary File Access

CuteNews 1.4.1 - template Traversal Arbitrary File Access source: https://www.securityfocus.com/bid/15295/info CuteNews is affected by a directory traversal vulnerability. An unauthorized attacker can retrieve or upload arbitrary files by supplying directory traversal strings '../' through an...

CuteNews 1.4.1 - 'show_archives.php' Traversal Arbitrary File Access

source: https://www.securityfocus.com/bid/15295/info CuteNews is affected by a directory traversal vulnerability. An unauthorized attacker can retrieve or upload arbitrary files by supplying directory traversal strings '../' through an affected URI parameter. Exploitation of this vulnerability...

CuteNews 1.4.1 - 'template' Traversal Arbitrary File Access

source: https://www.securityfocus.com/bid/15295/info CuteNews is affected by a directory traversal vulnerability. An unauthorized attacker can retrieve or upload arbitrary files by supplying directory traversal strings '../' through an affected URI parameter. Exploitation of this vulnerability...

CuteNews 1.4.1 - show_archives.php Traversal Arbitrary File Access

CuteNews 1.4.1 - showarchives.php Traversal Arbitrary File Access source: https://www.securityfocus.com/bid/15295/info CuteNews is affected by a directory traversal vulnerability. An unauthorized attacker can retrieve or upload arbitrary files by supplying directory traversal strings '../' throug...

High Risk Vulnerability in Sun Directory Server

Peter Winter-Smith of NGSSoftware has discovered high risk vulnerability in Sun Directory Server. This flaw can permit an unauthenticated attacker to remotely compromise the Directory server. Affected versions include: Sun Directory Server 5.2 patch 3 and below This issue has been resolved in the...

Zotob Worm Detection

A Microsoft Windows shell is running on port 8888. This may indicate an infection by the Zotob worm, although other worms may also create a shell on this port. C Tenable Network Security, Inc. include"compat.inc"; ifdescription scriptid19429; scriptversion"1.10"; scriptnameenglish:"Zotob Worm...

indows Plug and Play Remote Compromise

nternet Security Systems Protection Advisory August 9, 2005 Windows Plug and Play Remote Compromise Summary: X-force has discovered a vulnerability in the Windows Plug and Play service. This vulnerability is remotely exploitable in the default configuration of Windows 2000, and is present in all...

ISS Protection Brief: Cisco VoIP Call Manager Remote Compromise

-----BEGIN PGP SIGNED MESSAGE----- Internet Security Systems Protection Brief July 13, 2005 Cisco VoIP Call Manager Remote Compromise Summary: ISS has shipped protection for a flaw X-Force has discovered in Cisco's Call Manager platform. Call Manager is the software-based call processing componen...

eRoom Multiple Security Issues

/ $ An open security advisory 9 - eRoom v6. Vulnerabilities 1: Bug Researcher: c0ntex - c0ntexbatgmail.com 2: Bug Released: July 06 2005 3: Bug Impact Rate: Medium / Hi 4: Bug Scope Rate: Remote $ This advisory and/or proof of concept code must not be used for commercial gain. Documentum eRoom...

Internet Explorer PNG Overflow

Internet Security Systems Protection Advisory June 14, 2005 Internet Explorer PNG Overflow Summary: ISS has shipped protection for a flaw X-Force has discovered in the PNG image processing library used in software such as Microsoft's Internet Explorer web browser. By crafting a PNG file in a...

GLSA-200505-11 : Mozilla Suite, Mozilla Firefox: Remote compromise

The remote host is affected by the vulnerability described in GLSA-200505-11 Mozilla Suite, Mozilla Firefox: Remote compromise The Mozilla Suite and Firefox do not properly protect 'IFRAME' JavaScript URLs from being executed in context of another URL in the history list CAN-2005-1476. The Mozill...