[SECURITY] [DSA 274-2] New mutt packages fix arbitrary code execution in potato

-------------------------------------------------------------------------- Debian Security Advisory DSA 274-2 [email protected] http://www.debian.org/security/ Martin Schulze April 7th, 2003 http://www.debian.org/security/faq -...

Samba 2.2.x - Remote Buffer Overflow

!/usr/bin/perl Header Name: trans2root.pl Purpose: Proof of concept exploit for Samba 2.2.x trans2open overflow Author: H D Moore Copyright: Copyright C 2003 Digital Defense Inc. trans2root.pl -t -H -h use strict; use Socket; use IO::Socket; use IO::Select; use POSIX; use Getopt::Std; $SIGUSR2 = ...

passlogd.txt

======================================== INetCop Security Advisory 2003-0x82-015 ======================================== Title: Remote Multiple Buffer Overflow vulnerability in passlogd sniffer. 0x01. Description About: passlogdpassive syslog capture daemon is a purpose-built sniffer for capturi...

[SECURITY] [DSA 274-1] New mutt packages fix arbitrary code execution

-------------------------------------------------------------------------- Debian Security Advisory DSA 274-1 [email protected] http://www.debian.org/security/ Martin Schulze March 28th, 2003 http://www.debian.org/security/faq -...

Security Update: [CSSA-2003-015.0] Linux: apcupsd remote root vulnerability and buffer overflows

-----BEGIN PGP SIGNED MESSAGE----- SuSE Security Announcement Package: apcupsd Announcement-ID: SuSE-SA:2003:022 Date: Wednesday, Mar 26th 2003 14:00 MET Affected products: 7.3, 8.0, 8.1 Vulnerability Type: remote system compromise Severity 1-10: 3 SuSE default package: no Cross References:...

Microsoft IIS 5.0 (Windows XP/2000/NT 4.0) - WebDAV 'ntdll.dll' Remote Buffer Overflow (4)

source: https://www.securityfocus.com/bid/7116/info The Windows library ntdll.dll includes a function that does not perform sufficient bounds checking. The vulnerability is present in the function "RtlDosPathNameToNtPathNameU" and may be exploited through other programs that use the library if an...

WU-FTPD Unspecified Security Issue

The version of WU-FTPD running on the remote host has an unspecified remote vulnerability. This is reportedly due to an unspecified bug in glob.c discovered by the SuSE security team. Nessus verified this vulnerability by looking at the banner of the remote FTP server. C Tenable Network Security,...

popper_mod PHP Administration Script Authentication Bypass

It is possible to administrate the remote poppermod CGI by requesting the /admin directory directly. An attacker may use this flaw to obtain the passwords of your users. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; ifdescription...

Cisco VPN 3000 Concentrator HTML Source Plaintext User Password Disclosure (CSCdv88230, CSCdw22408)

The remote VPN concentrator discloses the passwords of its users in the source HTML of the embedded web server. This vulnerability is documented as Cisco bug ID CSCdv88230 and CSCdw22408. C Tenable Network Security, Inc. Thanks to Nicolas FISCHBACH [email protected] for his help Ref:...

[SECURITY] [DSA 255-1] New tcpdump packages fix denial of service vulnerability

-------------------------------------------------------------------------- Debian Security Advisory DSA 255-1 [email protected] http://www.debian.org/security/ Martin Schulze February 27th, 2003 http://www.debian.org/security/faq -...

Oracle TO_TIMESTAMP_TZ Remote System Buffer Overrun (#NISR16022003b)

NGSSoftware Insight Security Research Advisory Name: Oracle TOTIMESTAMPTZ Remote System Buffer Overrun Systems Affected: All platforms; Oracle9i Database Release 2, 9i Release 1, 8i, 8.1.7, 8.0.6 Severity: High Risk Category: Remote System Buffer Overrun Vendor URL: http://www.oracle.com Author:...

[SECURITY] [DSA 251-1] New w3m packages fix cookie information leak

-------------------------------------------------------------------------- Debian Security Advisory DSA 251-1 [email protected] http://www.debian.org/security/ Martin Schulze February 14th, 2003 http://www.debian.org/security/faq -...

[SECURITY] [DSA 250-1] New w3mmee-ssl packages fix cookie information leak

-------------------------------------------------------------------------- Debian Security Advisory DSA 250-1 [email protected] http://www.debian.org/security/ Martin Schulze February 12th, 2003 http://www.debian.org/security/faq -...

[SECURITY] [DSA 248-1] New hypermail packages fix arbitrary code execution

-------------------------------------------------------------------------- Debian Security Advisory DSA 248-1 [email protected] http://www.debian.org/security/ Martin Schulze January 31st, 2003 http://www.debian.org/security/faq -...

[SECURITY] [DSA 248-1] New hypermail packages fix arbitrary code execution

-------------------------------------------------------------------------- Debian Security Advisory DSA 248-1 [email protected] http://www.debian.org/security/ Martin Schulze January 31st, 2003 http://www.debian.org/security/faq -...

[SECURITY] [DSA 247-1] New courier packages fix SQL injection

-------------------------------------------------------------------------- Debian Security Advisory DSA 247-1 [email protected] http://www.debian.org/security/ Martin Schulze January 30th, 2003 http://www.debian.org/security/faq -...

[SECURITY] [DSA 246-1] New tomcat packages fix information exposure and cross site scripting

-------------------------------------------------------------------------- Debian Security Advisory DSA 246-1 [email protected] http://www.debian.org/security/ Martin Schulze January 29th, 2003 http://www.debian.org/security/faq -...

[SECURITY] [DSA 244-1] New noffle packages fix buffer overflows

-------------------------------------------------------------------------- Debian Security Advisory DSA 244-1 [email protected] http://www.debian.org/security/ Martin Schulze January 27th, 2003 http://www.debian.org/security/faq -...

Advisory 01/2003: CVS remote vulnerability

e-matters GmbH www.e-matters.de -= Security Advisory =- Advisory: CVS remote vulnerability Release Date: 2003/01/20 Last Modified: 2003/01/20 Author: Stefan Esser [email protected] Application: CVS = 1.11.4 Severity: A vulnerability within CVS allows remote compromise of CVS servers. Risk:...

[SECURITY] [DSA 233-1] New cvs packages fix arbitrary code execution

-------------------------------------------------------------------------- Debian Security Advisory DSA 233-1 [email protected] http://www.debian.org/security/ Martin Schulze January 21st, 2003 http://www.debian.org/security/faq -...