PT-2001-1084 · Netscape +1 · Netscape Enterprise +1

Name of the Vulnerable Software and Affected Versions: Netscape Enterprise version 3.5.1 FastTrack version 3.01 Description: A remote attacker can view the source code of scripts by appending a %20 to the script's URL. Recommendations: For Netscape Enterprise version 3.5.1, update the server...

[SECURITY] [DSA 035-1] New version of man2html available

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - ---------------------------------------------------------------------------- Debian Security Advisory DSA-035-1 [email protected] http://www.debian.org/security/ Martin Schulze March 7, 2001 -...

[SECURITY] [DSA 035-1] New version of man2html available

---------------------------------------------------------------------------- Debian Security Advisory DSA-035-1 [email protected] http://www.debian.org/security/ Martin Schulze March 7, 2001 - ---------------------------------------------------------------------------- Package : man2html...

ISC BIND 8.2.x - 'TSIG' Remote Stack Overflow (1)

/ tsig0wn.c Copyright Field Marshal August Wilhelm Anton Count Neithardt von Gneisenau [email protected] The author is not and will not be held responsible for the action of other people using this code. provided for informational purposes only since a greetz section is de rigeur greets to my...

Adcycle 0.77/0.78 - AdLibrary.pm Session Access

source: https://www.securityfocus.com/bid/2393/info Adcycle is a package of perl scripts available from Adcycle.com. The scripts are designed to manage banner ad rotation through a web interface, backended with a MySQL database. A problem with the suite could allow remote execution of commands. T...

BindView advisory: sshd remote root (bug in deattack.c)

Remote vulnerability in SSH daemon crc32 compensation attack detector ----------------------------------------------------------------------- Issue date: 8 February 2001 Author: Michal Zalewski [email protected] Contact: Scott Blake [email protected] CVE: CAN-2001-0144 Topic:...

IBM NetCommerce Security

hola friends, while i was participating on the openhack contest i found a couple of serious security-holes within ibm s so called "netcommerce" thing which seems to be a mixture of websphere, net.data, servlets, jsp s and db2? however..summary: class: input validation error remote: yes local: yes...

pkc003.txt

/ pkc003.txt / -= SECURITY ADVISORY 003 =- | \ www.pkcrew.org / \ \ | / \ | | | | | / | | | | | / | | | | / | | / / | | | / | - Group: Packet Knights http://www.pkcrew.org/ - Date of release: 01/18/2000 - Problems: Remote buffer overflow Local buffer overflow not dangerous if not suid - Impact:...

Basilix Webmail .class / .inc Direct Request Remote Information Disclosure

It is possible to download the include files on the remote BasiliX webmail service. An attacker may use these to obtain the MySQL authentication credentials. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; ifdescription scriptid10601;...

[PkC] Advisory #003: micq-0.4.6 remote buffer overflow

/ pkc003.txt / -= SECURITY ADVISORY 003 =- | www.pkcrew.org / | / | | | | | / | | | | | / | | | | / | | / / | | | / | | | | | PkC | | | / | | | | | | || || || / Packet Knights Crew -= SECURITY ADVISORY 003 =- - Vulnerable program: micq-0.4.6 Matt's ICQ clone. Maybe others. - Tested on: Linux/ix86...

Удаленная дыра в BSD ftpd

Однобайтное переполнение стека позволяет получить привелегии root...

Oops! 1.4.6 - one russi4n proxy-server Heap Buffer Overflow

/--oopz.c---//-------------r-3-m-0-t-3---------------\------------- TARGET : oops-1.4.6 one russi4n proxy-server CLASS : remote 0S : FreeBSD 4.0 - 2 AUTH0R : diman VEND0R : wanna payment for support. I'm not doing his job, yeh? DATE : 7-11-2k N0TE : xploit was coded for fun only. GREETS : &y, fm,...

Stack too ;) Re: [pkc] remote heap buffer overflow in oops

Uups..!.!.!.. another hole in oops-1.4.6. just a code fragment: / check if this is full name / if !strchrname, '.' if domainname0 / join / strcpychartmpname, name; strncatchartmpname, domainname, sizeoftmpname-strlenchartmpname -1 ; name=chartmpname; if result = lookupdnscachechartmpname, NULL, 0...

Cisco Catalyst Web Interface Remote Command Execution

The remote device appears to be a Cisco Catalyst. It is possible to execute arbitrary commands on the router by requesting them via HTTP, as in : /exec/show/config/cr This command shows the configuration file, which contains passwords. A remote attacker could use this flaw to take control of the...

iPlanet Web Server shtml File Handling Remote Overflow

It is possible to make the remote iPlanet web server execute arbitrary code when requesting a too long .shtml file with a name longer than 800 chars and containing computer code. An attacker may use this flaw to gain a shell on this host C Tenable Network Security, Inc. include"compat.inc"; if...

FreeBSD-SA-00:57.muh

-----BEGIN PGP SIGNED MESSAGE----- ============================================================================= FreeBSD-SA-00:57 Security Advisory FreeBSD, Inc. Topic: muh IRC bouncer remote vulnerability Category: ports Module: muh Announced: 2000-10-13 Credits: Maxime Henrion Affects: Ports...

klogd format bug

OVERVIEW Kernel logging daemon klogd in the sysklogd package for Linux contains a "format bug" making it vulnerable to local root compromise successfully tested on Linux/x86. There's also a possibility for remote vulnerability under certain rather unprobable circumstances and a more probable...

@stake Advisory: DocumentDirect for the Internet (A090800-1)

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 The vulnerability documented in this advisory is remotely exploitable yet we are releasing it on a Friday. We don't see this as adding any additional risk to DocumentDirect customers. The vendor, Mobius, has assured us that they have contacted all the...

[SECURITY] New version of xchat released

Package : xchat Problem type : remote exploit Debian-specific: no The version of X-Chat that was distributed with Debian GNU/Linux 2.2 has a vulnerability in the URL handling code: when a user clicks on a URL X-Chat will start netscape to view its target. However it did not check the URL for shel...

Simple Web Counter swc ctr Parameter Remote Overflow

The CGI 'swc' Simple Web Counter is present and vulnerable to a buffer overflow when issued a too long value to the 'ctr=' argument. An attacker may use this flaw to gain a shell on this host. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. Script audit and contributions from Carmichael...