[Full-Disclosure] EEYE: Symantec Multiple Firewall NBNS Response Remote Heap Corruption

Symantec Multiple Firewall NBNS Response Remote Heap Corruption Release Date: May 12, 2004 Date Reported: April 19, 2004 Severity: High Remote Kernel Code Execution Vendor: Symantec Systems Affected: Symantec Norton Internet Security 2002 Symantec Norton Internet Security 2003 Symantec Norton...

[SECURITY] [DSA 502-1] New exim-tls packages fix buffer overflows

-------------------------------------------------------------------------- Debian Security Advisory DSA 502-1 [email protected] http://www.debian.org/security/ Martin Schulze May 11th, 2004 http://www.debian.org/security/faq -...

ISS Security Brief: McAfee ePolicy Orchestrator Remote Compromise Vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Internet Security Systems Security Brief May 10, 2004 McAfee ePolicy Orchestrator Remote Compromise Vulnerability Synopsis: ISS X-Force has discovered a vulnerability in the McAfee ePolicy Orchestrator software. ePolicy Orchestrator ePO enables the enterprise...

EMule Web 0.42 Control Panel - Denial of Service

source: https://www.securityfocus.com/bid/10317/info It has been reported that eMule's Web Control Panel is susceptible to a remote denial of service vulnerability. This issue is reportedly triggered by sending malformed requests to the web interface. Upon processing malformed requests, the...

[SECURITY] [DSA 501-1] New exim packages fix buffer overflows

-------------------------------------------------------------------------- Debian Security Advisory DSA 501-1 [email protected] http://www.debian.org/security/ Martin Schulze May 7th, 2004 http://www.debian.org/security/faq -...

DeleGate 7.8.x8.x - SSLway Filter Remote Stack Buffer Overflow (PoC)

DeleGate 7.8.x8.x - SSLway Filter Remote Stack Buffer Overflow PoC source: https://www.securityfocus.com/bid/10295/info A remote buffer overflow vulnerability has been reported to affect the DeleGate SSLway filter. This filter is employed when DeleGate is applying SSL to arbitrary protocols. The...

[Full-Disclosure] Advisory: Heimdal kadmind version4 remote heap overflow

Name: Heimdal kadmind version4 remote heap overflow Date: 6 May 2004 CVE candidate: CAN-2004-0434 Author: Evgeny Demidov Description: There exists a remote preauth heap overflow vulnerability in Heimdal kadmind version4 support. All versions of Heimdal including 0.6.1 are known to be vulnerable...

Exim Sender 3.35 - Verification Remote Stack Buffer Overrun

// source: https://www.securityfocus.com/bid/10290/info Exim has been reported prone to a remotely exploitable stack-based buffer overrun vulnerability. This is exposed if sender verification has been enabled in the agent and may be triggered by a malicious e-mail. Exploitation may permit executi...

Titan FTP Server 3.0 - LIST Denial of Service

Titan FTP Server 3.0 - LIST Denial of Service source: https://www.securityfocus.com/bid/10272/info Titan FTP is prone to a remote denial of service vulnerability when handling the 'LIST' command. A remote attacker can cause the FTP server to crash by improperly handling a non-existent socket...

Symantec Firewall Malformed TCP Packet Options Remote DoS

The remote system appears vulnerable to an invalid Options field within a TCP packet. At least one vendor firewall Symantec has been reported prone to such a bug. An attacker, utilizing this flaw, would be able to remotely shut down the remote firewall stopping all network-based transactions by...

ipsec-tools and iputils contain a remote DoS vulnerability

Background From http://ipsec-tools.sourceforge.n et/ "IPsec-Tools is a port of KAME's IPsec utilities to the Linux-2.6 IPsec implementation." iputils is a collection of network monitoring tools, including racoon, ping and ping6. Description When racoon receives an ISAKMP header, it allocates memo...

Real Networks Helix Universal Server 9.0.x - Denial of Service

Real Networks Helix Universal Server 9.0.x - Denial of Service source: https://www.securityfocus.com/bid/10157/info It has been reported that Real Networks Helix Universal Server is affected by a remote denial of service vulnerability. This issue is due to a failure of the application to properly...

Real Networks Helix Universal Server 9.0.x - Denial of Service

source: https://www.securityfocus.com/bid/10157/info It has been reported that Real Networks Helix Universal Server is affected by a remote denial of service vulnerability. This issue is due to a failure of the application to properly handle malformed RTSP Real-Time Streaming Protocol requests. A...

Apache Tomcat source.jsp Arbitrary Directory Listing

The source.jsp page, distributed with Apache Tomcat, discloses information when given a specially crafted query string. This can reveal information such as the web root path and directory listings. A remote attacker exploit this information to mount further attacks. %NASLMINLEVEL 70300 This scrip...

MPlayer 0.91.0 - Remote HTTP Header Buffer Overflow

MPlayer 0.91.0 - Remote HTTP Header Buffer Overflow source: https://www.securityfocus.com/bid/10008/info It has been reported that MPlayer is prone to a remote HTTP header buffer overflow vulnerability. This issue is due to a failure of the application to properly verify buffer bounds on the...

LinBit Technologies LINBOX Officeserver - Remote Authentication Bypass

LinBit Technologies LINBOX Officeserver - Remote Authentication Bypass source: https://www.securityfocus.com/bid/10010/info It has been reported that LINBOX is prone to a remote authentication bypass vulnerability. This issue is due to a design error that would allow access to web based...

[SECURITY] [DSA 469-1] New libpam-pgsql packages fix SQL injection

-------------------------------------------------------------------------- Debian Security Advisory DSA 469-1 [email protected] http://www.debian.org/security/ Martin Schulze March 29th, 2004 http://www.debian.org/security/faq -...

NexGen FTP Server 1.0/2.x - Directory Traversal

source: https://www.securityfocus.com/bid/9970/info It has been reported that the Nexgen FTP server is prone to a remote directory traversal vulnerability. This issue is due to a failure of the application to properly sanitize file request strings from authenticated users. Successful exploitation...

WFTPD Server GUI 3.21 - Remote Denial of Service

WFTPD Server GUI 3.21 - Remote Denial of Service source: https://www.securityfocus.com/bid/9908/info WFTPD server front end GUI has been reported to be prone to a denial of service. The issue is reported to present itself if a user who is logged into the affected service issues an FTP request wit...

IP3 Networks IP3 NetAccess Appliance - SQL Injection

IP3 Networks IP3 NetAccess Appliance - SQL Injection source: https://www.securityfocus.com/bid/9858/info The IP3 NetAccess Appliance is reported prone to a remote SQL-injection vulnerability. This issue is due to the application's failure to properly sanitize user input. This issue may allow an...