[SECURITY] [DSA 416-1] New fsp packages fix buffer overflow, directory traversal

-------------------------------------------------------------------------- Debian Security Advisory DSA 416-1 [email protected] http://www.debian.org/security/ Matt Zimmerman January 6th, 2004 http://www.debian.org/security/faq -...

[SECURITY] [DSA 415-1] New zebra packages fix denial of service

-------------------------------------------------------------------------- Debian Security Advisory DSA 415-1 [email protected] http://www.debian.org/security/ Matt Zimmerman January 6th, 2004 http://www.debian.org/security/faq -...

[SECURITY] [DSA 410-1] New libnids packages fix buffer overflow

-------------------------------------------------------------------------- Debian Security Advisory DSA 410-1 [email protected] http://www.debian.org/security/ Matt Zimmerman January 5th, 2004 http://www.debian.org/security/faq -...

[SECURITY] [DSA 409-1] New bind packages fix denial of service

-------------------------------------------------------------------------- Debian Security Advisory DSA 409-1 [email protected] http://www.debian.org/security/ Matt Zimmerman January 5th, 2004 http://www.debian.org/security/faq -...

aix __ bos.rte.printers __ format string vulnerability

there is a local and possibly remote format string vulnerability in package bos.rte.printers. feeding /usr/bin/enq with arguments containing formatstring characters it can result in segfault. the research of this problem with acknowledgements of exact arguments and configuration types wasn't done...

Webcam Corp Webcam Watchdog 1.0/1.1/3.63 Web Server - Remote Buffer Overflow

source: https://www.securityfocus.com/bid/9351/info A problem has been identified in the handling of remote web requests by the Webcam Watchdog software. Because of this, it may be possible for a remote attacker to gain unauthorized access to a vulnerable system. !/usr/bin/perl -w Stack Overflow ...

Jordan Windows Telnet Server 1.0/1.2 - 'Username' Stack Buffer Overrun (3)

source: https://www.securityfocus.com/bid/9316/info Jordan Windows Telnet Server has been reported prone to a remote buffer overrun vulnerability. The issue has been reported to present itself when a username of excessive length is supplied to the Telnet server. Due to a lack of bounds checking,...

Jordan Windows Telnet Server 1.01.2 - Username Stack Buffer Overrun (3)

Jordan Windows Telnet Server 1.01.2 - Username Stack Buffer Overrun 3 source: https://www.securityfocus.com/bid/9316/info Jordan Windows Telnet Server has been reported prone to a remote buffer overrun vulnerability. The issue has been reported to present itself when a username of excessive lengt...

BES-CMS 0.40.5 - start.php File Inclusion

BES-CMS 0.40.5 - start.php File Inclusion source: https://www.securityfocus.com/bid/9268/info It has been reported that BES-CMS is vulnerable to a remote file include vulnerability that may allow an attacker to include malicious files containing arbitrary code to be executed on a vulnerable syste...

PT-2003-1990 · Freescripts · Freescripts Visitorbook Le

Name of the Vulnerable Software and Affected Versions: FreeScripts VisitorBook LE affected versions not specified Description: The issue allows remote attackers to spoof the origin of their incoming requests, facilitating cross-site scripting XSS attacks. This is possible because the FreeScripts...

PLD Software Ebola 0.1.4 - Remote Buffer Overflow

PLD Software Ebola 0.1.4 - Remote Buffer Overflow // source: https://www.securityfocus.com/bid/9156/info It has been reported that a buffer overflow condition is present in the authentication mechanism implemented in Ebola. The condition is due to the use of the C library function sprintf to...

Microsoft Windows XP - Workstation Service Remote (MS03-049)

/ To build new netapi32.lib pedump /exp netapi32.dll netapi32.exp buildlib netapi32.exe netapi32.exp netapi32.lib netapi32.dll d:\rpcwksbo.exe WKS service remote exploit MS03-049 by fiNis fiNisatbkdotru, ver:0.1.1 ------------------------------------------------------------------- Usage:...

VP-ASP shopsearch SQL Injection

The remote host is running the VP-ASP CGI suite. There is a bug in this suite that could allow an attacker to force it to execute arbitrary SQL statements on the remote host. An attacker could use this flaw to gain the control of the remote website and possibly execute arbitrary commands on the...

EZPhotoShare 1.0/1.1 - Memory Corruption

source: https://www.securityfocus.com/bid/9150/info eZphotoshare has been reported prone to multiple remote memory corruption vulnerabilities. The issues present themselves in the routines employed by eZphotoshare to handle network based communications. It has been reported that a remote attacker...

pound remotely exploitable vulnerability

An unknown remotely exploitable vulnerability was disclosed. Robert Segall writes: a security vulnerability was brought to my attention many thanks to Akira Higuchi. Everyone running any previous version should upgrade to 1.6 immediately - the vulnerability may allow a remote exploit. No exploits...

Xitami Malformed POST Request Infinite Loop Remote DoS

The remote host is running a vulnerable version of the Xitami web server. It is possible to freeze the remote web server by sending a malformed POST request. This is known to affect Xitami versions 2.5 and earlier. C Tenable Network Security, Inc. include"compat.inc"; ifdescription scriptid11934;...

[SECURITY] [DSA 401-1] New hylafax packages fix remote root exploit

-------------------------------------------------------------------------- Debian Security Advisory DSA 401-1 [email protected] http://www.debian.org/security/ Martin Schulze November 17th, 2003 http://www.debian.org/security/faq -...

Microsoft Windows - Workstation Service WKSSVC Remote (MS03-049)

Microsoft Windows - Workstation Service WKSSVC Remote MS03-049 / Author: snooq Date: 14 November 2003 +++++++++++++ THIS IS A PRIVATE VERSION +++++++++++++++ This is just slightly better than the one I posted to packetstorm.... The public version will crash 'services.exe' immediately while this o...

BRS WebWeaver 1.06 remote DoS vulnerability

/ m00 security advistory 004 BRS WebWeaver remote DoS vulnerability www.m00security.org / --------------------------------- Product: BRS WebWeaver Version: 1.06 and bellow OffSite: www.brswebweaver.com --------------------------------- Overview: BRS WebWeaver is an HTTP Server with support for CG...

[SECURITY] [DSA 396-1] New thttpd packages fix information leak, DoS and arbitrary code execution

-------------------------------------------------------------------------- Debian Security Advisory DSA 396-1 [email protected] http://www.debian.org/security/ Martin Schulze October 29th, 2003 http://www.debian.org/security/faq -...