[SECURITY] [DSA 043-2] New versions of Zope fix vulnerabilities

---------------------------------------------------------------------------- Debian Security Advisory DSA-043-2 [email protected] http://www.debian.org/security/ Martin Schulze April 26, 2001 - ---------------------------------------------------------------------------- Packages : zope...

Tektronix Phaser 740/750/850/930 - Network Printer Administration Interface

source: https://www.securityfocus.com/bid/2659/info A remote vulnerability exists in Tektronix Phaser network printers in the 7xx, 8xx, and 9xx series. An attacker with access to the printer's local network or, if no firewall is in place, any attacker can reach the printer's admin interface,...

Tektronix Phaser 740750850930 - Network Printer Administration Interface

Tektronix Phaser 740750850930 - Network Printer Administration Interface source: https://www.securityfocus.com/bid/2659/info A remote vulnerability exists in Tektronix Phaser network printers in the 7xx, 8xx, and 9xx series. An attacker with access to the printer's local network or, if no firewal...

Savant Web Server Multiple Percent Request Remote DoS

It is possible to cause the Savant web server on the remote host to lock by sending a specially crafted GET request for a URL composed of percent characters. C Tenable Network Security, Inc. include"compat.inc"; ifdescription scriptid10633; scriptversion "1.22"; scriptbugtraqid2468;...

PT-2001-1084 · Netscape +1 · Netscape Enterprise +1

Name of the Vulnerable Software and Affected Versions: Netscape Enterprise version 3.5.1 FastTrack version 3.01 Description: A remote attacker can view the source code of scripts by appending a %20 to the script's URL. Recommendations: For Netscape Enterprise version 3.5.1, update the server...

[SECURITY] [DSA 035-1] New version of man2html available

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - ---------------------------------------------------------------------------- Debian Security Advisory DSA-035-1 [email protected] http://www.debian.org/security/ Martin Schulze March 7, 2001 -...

[SECURITY] [DSA 035-1] New version of man2html available

---------------------------------------------------------------------------- Debian Security Advisory DSA-035-1 [email protected] http://www.debian.org/security/ Martin Schulze March 7, 2001 - ---------------------------------------------------------------------------- Package : man2html...

ISC BIND 8.2.x - 'TSIG' Remote Stack Overflow (1)

/ tsig0wn.c Copyright Field Marshal August Wilhelm Anton Count Neithardt von Gneisenau [email protected] The author is not and will not be held responsible for the action of other people using this code. provided for informational purposes only since a greetz section is de rigeur greets to my...

Adcycle 0.77/0.78 - AdLibrary.pm Session Access

source: https://www.securityfocus.com/bid/2393/info Adcycle is a package of perl scripts available from Adcycle.com. The scripts are designed to manage banner ad rotation through a web interface, backended with a MySQL database. A problem with the suite could allow remote execution of commands. T...

BindView advisory: sshd remote root (bug in deattack.c)

Remote vulnerability in SSH daemon crc32 compensation attack detector ----------------------------------------------------------------------- Issue date: 8 February 2001 Author: Michal Zalewski [email protected] Contact: Scott Blake [email protected] CVE: CAN-2001-0144 Topic:...

IBM NetCommerce Security

hola friends, while i was participating on the openhack contest i found a couple of serious security-holes within ibm s so called "netcommerce" thing which seems to be a mixture of websphere, net.data, servlets, jsp s and db2? however..summary: class: input validation error remote: yes local: yes...

pkc003.txt

/ pkc003.txt / -= SECURITY ADVISORY 003 =- | \ www.pkcrew.org / \ \ | / \ | | | | | / | | | | | / | | | | / | | / / | | | / | - Group: Packet Knights http://www.pkcrew.org/ - Date of release: 01/18/2000 - Problems: Remote buffer overflow Local buffer overflow not dangerous if not suid - Impact:...

Basilix Webmail .class / .inc Direct Request Remote Information Disclosure

It is possible to download the include files on the remote BasiliX webmail service. An attacker may use these to obtain the MySQL authentication credentials. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; ifdescription scriptid10601;...

[PkC] Advisory #003: micq-0.4.6 remote buffer overflow

/ pkc003.txt / -= SECURITY ADVISORY 003 =- | www.pkcrew.org / | / | | | | | / | | | | | / | | | | / | | / / | | | / | | | | | PkC | | | / | | | | | | || || || / Packet Knights Crew -= SECURITY ADVISORY 003 =- - Vulnerable program: micq-0.4.6 Matt's ICQ clone. Maybe others. - Tested on: Linux/ix86...

Удаленная дыра в BSD ftpd

Однобайтное переполнение стека позволяет получить привелегии root...

Oops! 1.4.6 - one russi4n proxy-server Heap Buffer Overflow

/--oopz.c---//-------------r-3-m-0-t-3---------------\------------- TARGET : oops-1.4.6 one russi4n proxy-server CLASS : remote 0S : FreeBSD 4.0 - 2 AUTH0R : diman VEND0R : wanna payment for support. I'm not doing his job, yeh? DATE : 7-11-2k N0TE : xploit was coded for fun only. GREETS : &y, fm,...

Stack too ;) Re: [pkc] remote heap buffer overflow in oops

Uups..!.!.!.. another hole in oops-1.4.6. just a code fragment: / check if this is full name / if !strchrname, '.' if domainname0 / join / strcpychartmpname, name; strncatchartmpname, domainname, sizeoftmpname-strlenchartmpname -1 ; name=chartmpname; if result = lookupdnscachechartmpname, NULL, 0...

Cisco Catalyst Web Interface Remote Command Execution

The remote device appears to be a Cisco Catalyst. It is possible to execute arbitrary commands on the router by requesting them via HTTP, as in : /exec/show/config/cr This command shows the configuration file, which contains passwords. A remote attacker could use this flaw to take control of the...

iPlanet Web Server shtml File Handling Remote Overflow

It is possible to make the remote iPlanet web server execute arbitrary code when requesting a too long .shtml file with a name longer than 800 chars and containing computer code. An attacker may use this flaw to gain a shell on this host C Tenable Network Security, Inc. include"compat.inc"; if...

FreeBSD-SA-00:57.muh

-----BEGIN PGP SIGNED MESSAGE----- ============================================================================= FreeBSD-SA-00:57 Security Advisory FreeBSD, Inc. Topic: muh IRC bouncer remote vulnerability Category: ports Module: muh Announced: 2000-10-13 Credits: Maxime Henrion Affects: Ports...