[SA12455] Kazaa Altnet Download Manager Buffer Overflow Vulnerability

TITLE: Kazaa Altnet Download Manager Buffer Overflow Vulnerability SECUNIA ADVISORY ID: SA12455 VERIFY ADVISORY: http://secunia.com/advisories/12455/ CRITICAL: Highly critical IMPACT: System access WHERE: From remote SOFTWARE: Kazaa 2.x http://secunia.com/product/616/ DESCRIPTION: CelebrityHacker...

[SA12430] Winzip Unspecified Multiple Buffer Overflow Vulnerabilities

TITLE: Winzip Unspecified Multiple Buffer Overflow Vulnerabilities SECUNIA ADVISORY ID: SA12430 VERIFY ADVISORY: http://secunia.com/advisories/12430/ CRITICAL: Highly critical IMPACT: System access WHERE: From remote SOFTWARE: WinZip 9.x http://secunia.com/product/567/ WinZip 8.x...

[SA12387] Gaucho "Content-Type:" Header Processing Buffer Overflow Vulnerability

TITLE: Gaucho "Content-Type:" Header Processing Buffer Overflow Vulnerability SECUNIA ADVISORY ID: SA12387 VERIFY ADVISORY: http://secunia.com/advisories/12387/ CRITICAL: Highly critical IMPACT: System access WHERE: From remote SOFTWARE: Gaucho 1.x http://secunia.com/product/3843/ DESCRIPTION: Ta...

00045-08242004.txt

GulfTech Security Research August, 24th 2004 Vendor : EFS Software Inc. URL : http://www.sharing-file.com Version : Easy File Sharing Webserver v1.25 Risk : Unauthorized System Access && DoS Description: Easy File Sharing Web Server is a file sharing software that allows visitors to upload/downlo...

[SA12226] tnftpd Signal Handling Privilege Escalation Vulnerabilities

TITLE: tnftpd Signal Handling Privilege Escalation Vulnerabilities SECUNIA ADVISORY ID: SA12226 VERIFY ADVISORY: http://secunia.com/advisories/12226/ CRITICAL: Moderately critical IMPACT: System access, Privilege escalation WHERE: From remote SOFTWARE: tnftpd http://secunia.com/product/3800/...

[SA12320] Heimdal ftpd Signal Handling Vulnerabilities

TITLE: Heimdal ftpd Signal Handling Vulnerabilities SECUNIA ADVISORY ID: SA12320 VERIFY ADVISORY: http://secunia.com/advisories/12320/ CRITICAL: Moderately critical IMPACT: Privilege escalation, System access WHERE: From remote SOFTWARE: Heimdal 0.6.x http://secunia.com/product/3299/ DESCRIPTION:...

Sun Java System Access Manager Version Detection

Binary data 4565.prm...

IceWarp Web Mail 3.3.25.2.7 - Multiple Remote Input Validation Vulnerabilities

IceWarp Web Mail 3.3.25.2.7 - Multiple Remote Input Validation Vulnerabilities source: https://www.securityfocus.com/bid/10920/info IceWarp Web Mail is reported prone to multiple input validation vulnerabilities. It is reported that these issues may be exploited by a remote attacker to conduct SQ...

IceWarp Web Mail 3.3.2/5.2.7 - Multiple Remote Input Validation Vulnerabilities

source: https://www.securityfocus.com/bid/10920/info IceWarp Web Mail is reported prone to multiple input validation vulnerabilities. It is reported that these issues may be exploited by a remote attacker to conduct SQL Injection, Account Manipulation, Cross-site Scripting, Information disclosure...

Mandrake Linux Security Advisory : pine (MDKSA-2001:047-1)

Versions of the Pine email client prior to 4.33 have various temporary file creation problems, as does the pico editor. These issues allow any user with local system access to cause any files owned by any other user, including root, to potentially be overwritten if the conditions were right. Upda...

Crystal Reports Vulnerabilities

Dear List, Impervatm's Application Defense Center has discovered several vulnerabilities in BusinessObject's Crystal Reports' Web Interface. These vulnerabilities allow a potential hacker to retrieve and delete any file from the file system of the server on which it runs, as well as causing a...

IBM Lotus Domino 6/7 - HTTP webadmin.nsf Directory Traversal

source: https://www.securityfocus.com/bid/9900/info It has been reported that Lotus Domino may be prone to a directory traversal vulnerability that may allow a remote attacker to access information outside the server root directory. The issue reportedly exists in the server's administrative...

ShopCartCGI 2.3 - gotopage.cgi Traversal Arbitrary File Access

ShopCartCGI 2.3 - gotopage.cgi Traversal Arbitrary File Access source: https://www.securityfocus.com/bid/9670/info It has been reported that ShopcartCGI is prone to a remote file disclosure vulnerability. This issue is due to insufficient validation of user-supplied input. Upon successful...

CVE-2003-0977

CVS server before 1.11.10 may allow attackers to cause the CVS server to create directories and files in the file system root directory via malformed module requests...

Doro privilege escalation

It's possible to access any file or pipe with local system privileges...

CVE-2003-0977

CVS server before 1.11.10 may allow attackers to cause the CVS server to create directories and files in the file system root directory via malformed module requests...

SRT2003-11-13-0218 - PCAnywhere local SYSTEM exploit

Secure Network Operations, Inc. http://www.secnetops.com/research Strategic Reconnaissance Team [email protected] Team Lead Contact [email protected] Our Mission: Secure Network Operations offers expertise in Networking, Intrusion Detection Systems IDS, Software Security Validation, and...

NIPrint multiple bugs

Remote buffer overflow, help access with local system...

Compaq Web-enabled Management Software Default Account

The Compaq Web-based Management / HP System Management Agent active on the remote host is configured with the default, or a predictable, administrator password. Depending on the agents integrated, this allows an attacker to view sensitive and verbose system information, and may even allow more...

Plug and Play Web Server 1.0 002c - Directory Traversal

source: https://www.securityfocus.com/bid/8645/info It has been reported that Plug and Play Web Server is prone a directory traversal issue allowing a remote attacker to traverse outside the server root directory by using '../' or '..' character sequences. Successful exploitation of this...