AdSubtract Proxy ACL Bypass Vulnerability

AdSubtract Proxy ACL Bypass Vulnerability URL http://www.lurhq.com/advisory20030604.html Release Date June 4, 2003 Author Joe Stewart About AdSubtract AdSubtract is one of the leading products in the banner-ad blocking software market. It is frequently bundled with modems from several leading...

Windows XP SP1 gethostbyaddr() flow (Re[3]: mirc32 6.0x crash when resolving dns.)

Dear vulndev, It's definitely bug in Windows XP SP1, as it was supposed by Roland Postle [email protected] To reproduce it: 1. Created zone 1.168.192.in-addr.arpa and add record: 254 IN CNAME non.existant.name 2. Use test program attached 3. I did tests on Windows NT 4.0, Windows 2000 and Windows...

Vignette multiple bugs

No description provided...

sircd buffer overflow

Buffer overflow on DNS resolution, default operator account of !@...

SuSE Security Announcement: susehelp (SuSE-SA:2003:005)

-----BEGIN PGP SIGNED MESSAGE----- SuSE Security Announcement Package: susehelp Announcement-ID: SuSE-SA:2003:005 Date: Mon Jan 20 14:00:00 CET 2003 Affected products: SuSE Linux 8.1, SuSE Linux Enterprise Server 8, SuSE Linux Office Server, SuSE Linux Openexchange Server 4 Vulnerability Type:...

CVE-2002-1754

Buffer overflow in Novell NetWare Client 4.80 through 4.83 allows local users to cause a denial of service crash by using ping, traceroute, or a similar utility to force the client to resolve a large hostname...

Multiple bugs in BadBlue

No description provided...

Linksys router vulnerability

SUMMARY: Linksys products running affected firmware versions are susceptible to a bug that allows unauthenticated access to the management interface. This bug affects both local and remote management if enabled. AFFECTED PRODUCTS per Linksys support: BEFSR41, BEFSR11, BEFSRU31: firmware versions...

SuSE Security Announcement: perl-MailTools (SuSE-SA:2002:041)

-----BEGIN PGP SIGNED MESSAGE----- SuSE Security Announcement Package: perl-MailTools Announcement-ID: SuSE-SA:2002:041 Date: Tue Nov 5 11:30:00 CET 2002 Affected products: 7.1, 7.2, 7.3, 8.0, 8.1 SuSE eMail Server III, 3.1 Vulnerability Type: remote command execution Severity 1-10: 6 SuSE defaul...

Apache HTTPD server vulnerable to cross site scripting on error page when using wildcard DNS

Overview Versions of the Apache HTTPD server with wildcard DNS enabled and UseCanonicalName disabled, are vulnerable to a cross-site scripting attack. Description Apache HTTPD servers versions 2.0.42 and prior, and 1.3.26 and prior, with wildcard DNS enabled and UseCanonicalName disabled, are...

[SECURITY] [DSA 159-2] New Python packages fix problem introduced by security fix

Attachment: pgpVFLiuYrAP.pgp Description: PGP message...

Delete arbitrary files using Help and Support Center [MSRC 1198dg]

MS Tracking ID: MSRC 1198dg Date Reported: 25/06/02 Date Published: 15/08/02 Vendor: Microsoft Impact: Delete files through CSS condition in Help Center Resolution: To be fixed in XP SP1 Tested Applications: IE6 + all service packs to date of publishing Windows XP + all patches to date of...

TZ Advisores - Buffer Overflow in IBM U2 UniVerse ODBC

Systems Affecteds: All UniVerse versions with UV/ODBC Explanation: Trying to make an invalid query the client crashes and make the server slow with 5sec to 2min lag what could crash the server. Expoit: Make a query accessing UV/ODBC I've used CrystalReports all versions and make a valid/invalid...

Microsoft SQL Server 2000 contains denial-of-service vulnerability in SQL Server Resolution Service

Overview Microsoft SQL Server 2000 contains a vulnerability that allows remote attackers to create a denial-of-service condition between two Microsoft SQL servers. Description The SQL Server Resolution Service SSRS was introduced in Microsoft SQL Server 2000 to provide referral services for...

Microsoft SQL Server 2000 contains heap buffer overflow in SQL Server Resolution Service

Overview Microsoft SQL Server 2000 contains a remotely exploitable heap buffer overflow that allows attackers to execute arbitrary code with the same privileges as the SQL server. Description The SQL Server Resolution Service SSRS was introduced in Microsoft SQL Server 2000 to provide referral...

Microsoft SQL Server 2000 contains stack buffer overflow in SQL Server Resolution Service

Overview Microsoft SQL Server 2000 contains a remotely exploitable stack buffer overflow that allows attackers to execute arbitrary code with the same privileges as the SQL server. Description The SQL Server Resolution Service SSRS was introduced in Microsoft SQL Server 2000 to provide referral...

Important: Red Hat Security Advisory: : Updated mailman packages available

Updated mailman packages are now available for Red Hat Secure Web Server 3.2 U.S.. These updates resolve a cross-site scripting vulnerability present in versions of Mailman prior to 2.0.11. Two cross-site scripting vulnerabilities have been discovered in versions of Mailman prior to version 2.0.1...

Buffer overflow in webalizer

Buffer overflow in host name resolution during log analizing...

CVE-1999-1233

IIS 4.0 does not properly restrict access for the initial session request from a user's IP address if the address does not resolve to a DNS domain, aka the "Domain Resolution" vulnerability...

CVE-1999-1233

Product/affected component: IIS 4.0. Vulnerability description: The “Domain Resolution” issue occurs because access is not properly restricted for the initial session request from an IP address that does not resolve to a DNS domain. Root cause (as stated): Improper restriction of initial session ...