[NT] Serv-U LIST -l Parameter Buffer Overflow

The following security advisory is sent to the securiteam mailing list, and can be found at the SecuriTeam web site: http://www.securiteam.com - - promotion The SecuriTeam alerts list - Free, Accurate, Independent. Get your security news from a reliable source...

Cisco Catalyst reboots in response to an SSH "protocol mismatch" error

Overview Multiple versions of Cisco Catalyst switches contain a denial-of-service vulnerability that allows unauthenticated remote users to restart an affected device. Description Cisco Catalyst switches in the 6000, 5000, and 4000 series contain a vulnerability in their SSH support component. Th...

Think of the buffers! Won't somebody think of the buffers?!

Advisory Name: Think of the buffers! Won't somebody think of the buffers?! Impact : Arbitrary code execution as SYSTEM Discovered by: Hugh Mann [email protected] Tested progs : Ipswitch WSFTP Server 4.0.2.EVAL Description A remote user who has write access to a directory can execute arbitrary...

wsftp402eval3.txt

Advisory Name: Open the WSFTP Server backdoor to SYSTEM Impact : Privilege escalation Discovered by: Hugh Mann [email protected] Tested progs : Ipswitch WSFTP Server 4.0.2.EVAL Description Any local user or any remote user who can execute programs on the FTP server as any user can start progra...

Symantec Gateway Security 5400 Series 2.0 - Error Page Cross-Site Scripting

source: https://www.securityfocus.com/bid/9755/info A vulnerability has been reported to exist in the Symantec Gateway Security Web based management console that may allow a remote user to launch cross-site scripting attacks. The issue is reported to exist due to improper sanitizing of...

Symantec Gateway Security 5400 Series 2.0 - Error Page Cross-Site Scripting

Symantec Gateway Security 5400 Series 2.0 - Error Page Cross-Site Scripting source: https://www.securityfocus.com/bid/9755/info A vulnerability has been reported to exist in the Symantec Gateway Security Web based management console that may allow a remote user to launch cross-site scripting...

XMB Forum 1.8 - editprofile.php?user Cross-Site Scripting

XMB Forum 1.8 - editprofile.php?user Cross-Site Scripting source: https://www.securityfocus.com/bid/9726/info XMB Forum has been reported prone to multiple cross-site scripting, HTML injection and SQL injection vulnerabilities. The issues present themselves due to insufficient sanitization of...

XMB Forum 1.8 - u2uadmin.php?uid Cross-Site Scripting

XMB Forum 1.8 - u2uadmin.php?uid Cross-Site Scripting source: https://www.securityfocus.com/bid/9726/info XMB Forum has been reported prone to multiple cross-site scripting, HTML injection and SQL injection vulnerabilities. The issues present themselves due to insufficient sanitization of remote...

YABB SE 1.5 - Quote SQL Injection

YABB SE 1.5 - Quote SQL Injection source: https://www.securityfocus.com/bid/9674/info It has been reported that YaBB SE may be prone to a SQL injection vulnerability that may allow a remote user to inject arbitrary SQL queries into the database used by the software. YaBB SE versions 1.5.4 and 1.5...

BolinTech DreamFTP Server 1.2 (1.02/TryFTP 1.0.0.1) - Remote User Name Format String

include include include include // WIN NT/2K/XP cmd.exe shellcode // kernel32.dll baseaddress calculation: OS/SP-independent // string-save: 00, 0a and 0d free. // portbinding: port 28876 // looping: reconnect after disconnect char shellcode =...

VisualShapers EZContents 1.x/2.0 - 'archivednews.php' Arbitrary File Inclusion

source: https://www.securityfocus.com/bid/9638/info It has been reported that ezContents may be prone to a file include vulnerability in multiple modules. The problem reportedly exists because remote users may influence the 'GLOBALSrootdp' and 'GLOBALSlanguagehome' variables in the 'db.php' and...

VisualShapers EZContents 1.x2.0 - archivednews.php Arbitrary File Inclusion

VisualShapers EZContents 1.x2.0 - archivednews.php Arbitrary File Inclusion source: https://www.securityfocus.com/bid/9638/info It has been reported that ezContents may be prone to a file include vulnerability in multiple modules. The problem reportedly exists because remote users may influence t...

JShop E-Commerce Suite xSearch Cross-Site Scripting Vulnerability

JShop E-Commerce Suite xSearch Cross-Site Scripting Vulnerability. CVE-2004-2084. Webapps exploit for php platform source: http://www.securityfocus.com/bid/9609/info A vulnerability has been reported to exist in JShop E-Commerce that may allow a remote user to execute HTML or script code in a...

DEBIAN-CVE-2004-0042

vsftpd 1.1.3 generates different error messages depending on whether or not a valid username exists, which allows remote attackers to identify valid usernames...

Xoops 2.0.x - 'viewtopic.php' Cross-Site Scripting

source: https://www.securityfocus.com/bid/9497/info It has been reported that Xoops may be prone to a cross-site scripting vulnerability that may allow a remote user to execute HTML or script code in a user's browser. HTML and script code may be parsed via the 'topicid' and 'forum' URI parameters...

Xoops 2.0.x - viewtopic.php Cross-Site Scripting

Xoops 2.0.x - viewtopic.php Cross-Site Scripting source: https://www.securityfocus.com/bid/9497/info It has been reported that Xoops may be prone to a cross-site scripting vulnerability that may allow a remote user to execute HTML or script code in a user's browser. HTML and script code may be...

fsp buffer overflow and directory traversal vulnerabilities

The Debian security team reported a pair of vulnerabilities in fsp: A vulnerability was discovered in fsp, client utilities for File Service Protocol FSP, whereby a remote user could both escape from the FSP root directory CAN-2003-1022, and also overflow a fixed-length buffer to execute arbitrar...

Apache 1.3.x 2.0.48 mod_userdir - Remote Users Disclosure

Apache 1.3.x 2.0.48 moduserdir - Remote Users Disclosure / m00-apache-w00t.c Apache 1.3.-2.0.48 remote users disclosure exploit by m00 Security. Proof-of-Concept edition This tool scans remote hosts with httpd apache and disclosure information about existens users accounts via wrong default...

PHP-Coolfile 1.4 - Unauthorized Administrative Access

PHP-Coolfile 1.4 - Unauthorized Administrative Access source: https://www.securityfocus.com/bid/9018/info PHP-Coolfile allows unauthorized administrative access due to an error in the way access is evaluated in the action.php file. This could allow a remote user to obtain the administrative...

Dansie Shopping Cart Discloses Installation Path to Remote Users

Indonesia Security Development Team Advisory Dansie Shopping Cart Discloses Installation Path to Remote Users ================================================================ Advisory Name: Dansie Shopping Cart Discloses Installation Path to Remote Users Release Date: 5:21 AM 10/20/03 Application...