Zone Labs desktop security products fail to properly validate RCPT TO command argument

Overview Zone Labs desktop security products contains a buffer overflow in the code that processes the RCPT TO command argument. This could allow an attacker to execute arbitrary code with SYSTEM privileges. Description Zone Labs offers a suite of desktop security products. These products provide...

DSA-440 linux-kernel-2.4.17-powerpc-apus - several vulnerabilities

Bulletin has no description...

Clam Antivirus DoS vulnerability

Background Clam AntiVirus is a GPLed anti-virus toolkit, designed for integration with mail servers to perform attachment scanning. Clam AV also provides a command line scanner and a tool for fetching updates of the virus database. Description Oliver Eikemeier of Fillmore Labs discovered the...

XFree86 Font Information File Buffer Overflow

Background XFree86, provides a client/server interface between display hardware and the desktop environment while also providing both the windowing infrastructure and a standardized API. XFree86 is platform independent, network-transparent and extensible. Description Exploitation of a buffer...

Monkeyd Denial of Service vulnerability

Background The Monkey HTTP daemon is a Web server written in C that works under Linux and is based on the HTTP/1.1 protocol. It aims to develop a fast, efficient and small web server. Description A bug in the URI processing of incoming requests allows for a Denial of Service to be launched agains...

Cisco Security Advisory: Cisco 6000/6500/7600 Crafted Layer 2 Frame Vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Cisco Security Advisory: Cisco 6000/6500/7600 Crafted Layer 2 Frame Vulnerability Revision 1.0 - FINAL For Public Release 2004 February 03 1600 UTC GMT - ---------------------------------------------------------------------------- Contents Summary...

DSA-420 jitterbug - improperly sanitised input

Bulletin has no description...

Cisco Security Advisory: Cisco Personal Assistant User Password Bypass Vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Cisco Security Advisory: Cisco Personal Assistant User Password Bypass Vulnerability Document ID: 47765 Revision 1.0 FINAL For Public Release 2004 January 8 17:00 UTC GMT - ----------------------------------------------------------------------- Conten...

DSA-407 ethereal - buffer overflows

Bulletin has no description...

DSA-408 screen - integer overflow

Bulletin has no description...

miniBB bb_func_usernfo.php Website Name Field XSS

The remote host is using the miniBB forum management system. According to its version number, this forum is vulnerable to a cross-site scripting bug. A remote attacker could exploit this to impersonate a legitimate user by tricking them into requesting a maliciously crafted URL. %NASLMINLEVEL 703...

Cross-site scripting vulnerability in SARA v<=4.2.7

XSS Vulnerability in Security Auditor's Research Assistant SARA versions before 5.0.0 Affects: SARA versions 4.2.6 and 4.2.7. Older versions not tested, presumably affected. Related software sharing common ancestry: SATAN 1.1.1 would not run properly on my test platform, but checking the code it...

Cisco ACNS contains buffer overflow vulnerability in the authentication module when supplied an overly long password

Overview Cisco Application and Content Networking Software ACNS contains a buffer overflow that may enable an attacker to execute arbitrary code on the affected device. Description Cisco ACNS Software "...combines demand-pull caching and pre-positioning for accelerated delivery of web application...

osCommerce 2.2-MS1 SQL Injection Vulnerability

Vendor : osCommerce URL : http://www.oscommerce.com Version : osCommerce 2.2-MS1 / Older Versions? Risk : SQL Injection Vulnerability Description: osCommerce is an online shop e-commerce solution under on going development by the open source community. Its feature packed out-of-the-box installati...

Remote execution in My_eGallery

Product: MyeGallery Versions affected: all 3.1.1.g Website: http://lottasophie.sourceforge.net/index.php 1. Introduction --------------- MyeGallery is a very nice PostNuke module, which allows users to create and manipulate their own galleries on the web, plus offers various additional features...

[Full-Disclosure] Cross-Site Scripting Vulnerability in Wrensoft Zoom Search Engine

Cross-Site Scripting Vulnerability in Wrensoft Zoom Search Engine 09 October 2003 PDF version: http://www.sintelli.com/adv/sa-2003-02-zoomsearch.pdf Background Zoom is a package that adds search facilities to your website and produces fast search results by indexing your website in advance. Unlik...

DSA-382 ssh - possible remote vulnerability

Bulletin has no description...

DSA-375 node - buffer overflow, format string

Bulletin has no description...

Cisco Secure PIX Firewall TCP Reset Vulnerability

Overview A vulnerability in Cisco's Secure PIX Firewall may allow a remote attacker to reset arbitrary TCP sessions. Description Cisco describes the Secure PIX Firewall as, "an easy-to-install, integrated hardware/software firewall appliance". A vulnerability in the Secure PIX Firewall may allow ...

Stellar Docs Malformed Query Path Disclosure

The remote host is running StellarDocs There is a flaw in this system which may allow an attacker to obtain the physical path of the remote installation of StellarDocs. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include 'compat.inc' ; ifdescription scriptid11817; scriptversion"1.21";...