Cisco IOS Software Input Access List Leakage with NAT - Cisco Systems

A group of related software bugs bug IDs given under "Software Versions and Fixes" create an undesired interaction between network address translation NAT and input access list processing in certain Cisco routers running 12.0-based versions of Cisco IOS software including 12.0, 12.0S, and 12.0T, ...

DSA-2074-1 ncompress - execution of arbitrary code

Bulletin has no description...

DSA-1954-1 cacti - insufficient input sanitising

Bulletin has no description...

XSS vulnerability in recently updated and configure RSS feed actions

Our eSecurity team has identified a Cross Site Scripting issue with the confluence server as follows: Arbirtatry javascript can be injected in the following cases which can lead to escalated or invalid privileges being granted to an unauthorized user: 1...

Cisco Security Advisory: Cisco Unified Communications Manager Overflow Vulnerabilities

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Cisco Security Advisory: Cisco Unified Communications Manager Overflow Vulnerabilities Document ID: 92015 Advisory ID: cisco-sa-20070711-cucm http://www.cisco.com/warp/public/707/cisco-sa-20070711-cucm.shtml Revision 1.0 For Public Release 2007 July 1...

Microsoft Windows Web Client Buffer Overflow Vulnerability

Description Microsoft Windows Web Client is prone to a buffer overflow. Successful exploitation could allow arbitrary code execution with System privileges. Technologies Affected Microsoft Windows Server 2003 Datacenter Edition Microsoft Windows Server 2003 Datacenter Edition Itanium Microsoft...

Cisco Security Advisory: IOS HTTP Server Command Injection Vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Cisco Security Advisory: IOS HTTP Server Command Injection Vulnerability ======================================================================== Document ID: 68322 Advisory ID: cisco-sa-20051201-http...

[Full-disclosure] Cisco Security Advisory: Cisco CallManager Memory Handling Vulnerabilities

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ======================================================================== Cisco Security Advisory: Cisco CallManager Memory Handling Vulnerabilities Revision 1.0 For Public Release 2005 July 12 1500 UTC GMT...

Cisco Security Advisory: FWSM URL Filtering Solution TCP ACL Bypass Vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Cisco Security Advisory: ======================== FWSM URL Filtering Solution TCP ACL Bypass Vulnerability ======================================================== Document ID: 64821 Revision 1.0 For Public Release 2005 May 11 1600 UTC GMT -...

Cisco Security Advisory: Cisco IOS Misformed BGP Packet Causes Reload

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Cisco Security Advisory: Cisco IOS Misformed BGP Packet Causes Reload Revision 1.0 For Public Release 2005 January 26 1600 UTC GMT - ----------------------------------------------------------------------- Contents ======== Summary Affected Products...

Cross Site Scripting holes found in Horde 3.0

Hyperdose Security Advisory Name: Cross Site Scripting holes found in Horde 3.0 Systems Affected: Horde 3.0 installations Severity: Moderate Author: Robert Fly - [email protected] Advisory URL: http://www.hyperdose.com/advisories/H2005-01.txt --Horde Description-- The Horde Application Framewo...

DSA-575-1 catdoc - insecure temporary file

Bulletin has no description...

Broadcast crash in Popmessenger 1.60 (before 20 Sep 2004)

Luigi Auriemma Application: PopMessenger http://www.leadmind.com Versions: = 1.60 before 20 Sep 2004 Platforms: Windows Bug: crash Risk: medium Exploitation: remote broadcast Date: 21 September 2004 Author: Luigi Auriemma e-mail: [email protected] web: http://aluigi.altervista.org 1...

DSA-533 courier - cross-site scripting

Bulletin has no description...

Apache-SSL security advisory - apache_1.3.28+ssl_1.52 and prior

Apache-SSL optional client certificate vulnerability ---------------------------------------------------- Synopsis -------- If configured with SSLVerifyClient set to 1 or 3 client certificates optional and SSLFakeBasicAuth, Apache-SSL 1.3.28+1.52 and all earlier versions would permit a client to...

[Full-Disclosure] Sylpheed-claws format string bug, yet still sylpheed much better than windows

Georgi Guninski security advisory 61, 2003 Sylpheed-claws format string bug, yet still sylpheed much better than windows Systems affected: Sylpheed-claws 0.9.6 - 0.9.4 Fixed in CVS Risk: Medium Date: 22 October 2003 Legal Notice: This Advisory is Copyright c 2003 Georgi Guninski. You may distribu...

DSA-341 liece - insecure temporary file

Bulletin has no description...

Buffer overflow in 3D-ftp

Product: 3D-ftp Client Version: 4.0x OffSite: http://www.sitegallery.net/ Problem: Remote buffer overflow ------------------------------------------ 3D-ftp - Quite good Windows FTP Client. FTP Client have many opportunities Remote buffer overflow will take place if server send long banner = 8192...

SIPS (PHP)

Product : SIPS Version : v0.2.2 WebSite : http://www.squishdot.org Problem : Viewing users account Description: ------------ You could easily look throught any user's account without any permissions. Each of them is in dir names after first letter of his login. For example foo will have url like...

Security hole in kpf - KDE personal fileserver.

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 SECURITY ADVISORY Author: Ajay R Ramjatan [email protected] Date: 11 October 2002 Software: kpf - KDE Personal File Server part of kdenetwork Vulnerable: kpf of any KDE release between KDE 3.0.1 and KDE 3.0.3a Fixed: kpf from kdenetwork 3.0.4...