WinMX 2.6 - Design Error

WinMX 2.6 - Design Error WinMX Design Error Vendor: Frontcode Technologies Product: WinMX Version: = 2.6 Website: http://www.winmx.com/ BID: 7771 Description: WinMX 2.6 is an older version of the popular file sharing client WinMX. While the current version is 3.31, 2.6 still remains quite popular...

P-Synch 6.2.5 - Multiple Vulnerabilities

P-Synch 6.2.5 - Multiple Vulnerabilities P-Synch Multiple Vulnerabilities Vendor: M-Tech Identity Management Solutions Product: P-Synch Version: VBScript, JScript etc https://path/to/psynch/nph-psa.exe?css="VBScript, JScript etc File Include Vulnerability:...

Flooding Internet Explorer 6.0.2800 (6.x?) security zones ! [CRITICAL]

Systems Affected : Internet Explorer 6.0.2800 6.x? Remotely exploitable: Yes Author: Marek Bialoglowy System Integra - [email protected] Attached files: dmz2.rar archive password:zones Note: This is part of my research and the purpose of this post is to consult results and potential...

Xeneo Web Server 2.2.9.0 - Denial of Service

Xeneo Web Server 2.2.9.0 - Denial of Service !/usr/bin/perl Xeneo Web Server DoS Vulnerable systems: Xeneo. Web Server 2.2.9.0 Written by badpack3t For SP Research Labs 04/21/2003 www.security-protocols.com usage: perl sp-xeneo.pl use IO::Socket; use strict; print ".:."x 20; print "\nXeneo Web...

Sakki's guestbook V.1.01 script injection vulnerability.

This advisory can be found at www.blacktigerz.org. Description: Easy to manage and configure asp powered guestbook. Works with MS Access database or without it. Vendor: http://www.sakki.net Vulnerability: gb.asp neglects filtering user input allowing for script injection to the guestbook via "nam...

ISS Security Brief: Email Processing Vulnerability in Sendmail

-----BEGIN PGP SIGNED MESSAGE----- Internet Security Systems Security Brief March 29, 2003 Email Processing Vulnerability in Sendmail Synopsis: ISS X-Force is researching a public report of an email header processing buffer overflow vulnerability in Sendmail. This report was made public on March...

CVE-2002-0926

The CVE-2002-0926 issue affects Wolfram Research webMathematica 1.0.0 and 1.0.0.1. A directory-traversal vulnerability allows remote attackers to read arbitrary files by manipulating the MSPStoreID parameter. The CERT/CC entry corroborates that reading arbitrary files is possible via absolute pat...

EUVD-2002-0917

Directory traversal vulnerability in Wolfram Research webMathematica 1.0.0 and 1.0.0.1 allows remote attackers to read arbitrary files via a .. dot dot in the MSPStoreID parameter...

LOCAL ROOT EXPLOIT - SUPPORT FULL-DISCLOSURE - LOCAL ROOT EXPLOIT

!/usr/bin/perl fartsy.pl by kanix [email protected] /usr/sbin/artswrapper local format string exploit Tested on Red Hat Linux release 7.2 Enigma Jul 6, 2002 "the secret to creativity is knowing how to hide your sources." - Albert Einstein commentz, job offerz, flamez, etc. should be directed t...

Directory Traversal in Wolfram Research's webMathematica

Security Advisory By Andrew Badr ----------------- SUMMARY: There is a vulnerability in the webMathematica software which allows remote clients web surfers to read an arbitrary file on the server assuming the httpd-user has permission. This can reveal sensitive information such as that stored in...

CVE-2001-0676

CVE-2001-0676 affects Rit Research Labs The Bat!

CVE-2001-0675

The Bat! (RIT Research Labs) for Windows (The Bat! v1.51) is affected by a vulnerability where a remote attacker can trigger a denial of service by delivering an email containing a carriage return CR not followed by a LF. This incorrect RFC822 parsing can cause premature end-of-message handling, ...

CVE-2001-0676

Directory traversal vulnerability in Rit Research Labs The Bat! 1.48f and earlier allows a remote attacker to create arbitrary files via a "dot dot" attack in the filename for an attachment...

Menasoft SPHEREserver 0.99 - Denial of Service

// source: https://www.securityfocus.com/bid/4258/info Menasoft SPHEREserver .99 is an online role playing game server. It is vulnerable to a denial of service; multiple connections to the server can be made from a single machine, exhausting available connections and denying connections to...

BPM STUDIO PRO 4.2 DIRECTORY ESCAPE VULNERABILITY

Hi bugtraq again... Now i' ve found another vulnerability in BPM STUDIO PRO 4.2 http server implementation. Anyone can download any file in some host running this software simply like performing this http request : http://BPM-HOST/../../../../autoexec.bat http server is not activated by default...

slocate bug.

Hey, Its a good time to announce that 2xs security LTD. decided to create a research team in order to focus on finding new bugs, further more we managed to develop a security tool to discover bugs/security flaws. In the near future, the tool itself will became an open source project. slocate Secu...

Heap overflow in snmpnetstat

---------------------------- Axioma Security Research January 3, 2002 A D V I S O R Y www.axiomasistemas.com ---------------------------- Platforms : All : Tested on Red Hat Linux 7.1 Application : snmpnetstat from ucd-SNMP-4.2.3 www.net-snmp.org Impact : Remote access to the snmpnetstat client...

w00w00 on AOL Instant Messenger (serious vulnerability)

================================= AOL Instant Messenger advisory w00w00! http://www.w00w00.org ================================= Author: Matt Conover [email protected] Contributors: nocarrier, napster, and w00w00 collectively PRELUDE Happy w00year! It has been a while, friends, but w00w00 is sti...

CVE-2001-0676

Directory traversal vulnerability in Rit Research Labs The Bat! 1.48f and earlier allows a remote attacker to create arbitrary files via a "dot dot" attack in the filename for an attachment...

[synnergy] - Sudo Vudo

Vudo - An object superstitiously believed to embody magical powers - -------------- Michel "MaXX" Kaempf [email protected] -------------- ---------------- Copyright C 2001 Synnergy Networks ---------------- -- 0x00 - Introduction ----------------------------------------------- Sudo superuser do...