[SA13539] Junkie FTP Client Two Vulnerabilities

TITLE: Junkie FTP Client Two Vulnerabilities SECUNIA ADVISORY ID: SA13539 VERIFY ADVISORY: http://secunia.com/advisories/13539/ CRITICAL: Moderately critical IMPACT: System access, Manipulation of data WHERE: From remote SOFTWARE: Junkie FTP Client 0.x http://secunia.com/product/4415/ DESCRIPTION...

php -- multiple vulnerabilities

Secunia reports: Multiple vulnerabilities have been reported in PHP, which can be exploited to gain escalated privileges, bypass certain security restrictions, gain knowledge of sensitive information, or compromise a vulnerable system...

USN-29-1: samba vulnerability

During an audit of the Samba 3.x code base Stefan Esser discovered a Unicode file name buffer overflow within the handling of TRANSACT2QFILEPATHINFO replies. A malicious samba user with write access to a share could exploit this by creating specially crafted path names files with very long names...

TABS MailCarrier 2.51 - Remote Buffer Overflow

TABS MailCarrier 2.51 - Remote Buffer Overflow / Remote exploit for MailCarrier by NoPh0BiA, no@0x00:/Exploits/MailCarrier$ ./mailcarried-exploit 192.168.0.1 MailCarrier Buffer Overflow Exploit by NoPh0BiA. x Connected to: 192.168.0.1 PORT: 25 x Sending evil buffer..done. x Trying to connect to...

[SA12833] VERITAS Cluster Server Unspecified System Compromise Vulnerability

TITLE: VERITAS Cluster Server Unspecified System Compromise Vulnerability SECUNIA ADVISORY ID: SA12833 VERIFY ADVISORY: http://secunia.com/advisories/12833/ CRITICAL: Highly critical IMPACT: System access WHERE: From remote SOFTWARE: VERITAS Cluster Server 4.x http://secunia.com/product/4059/...

[ GLSA 200410-05 ] Cyrus-SASL: Buffer overflow and SASL_PATH vulnerabilities

Gentoo Linux Security Advisory GLSA 200410-05 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - http://security.gentoo.org/ - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Severity:...

[SA12745] HP VirtualVault / Webproxy mod_ssl Format String Vulnerability

TITLE: HP VirtualVault / Webproxy modssl Format String Vulnerability SECUNIA ADVISORY ID: SA12745 VERIFY ADVISORY: http://secunia.com/advisories/12745/ CRITICAL: Highly critical IMPACT: System access WHERE: From remote SOFTWARE: HP Webproxy 2.x http://secunia.com/product/2307/ HP VirtualVault 4.x...

[SA12677] AIX libXm.a Multiple Vulnerabilities

TITLE: AIX libXm.a Multiple Vulnerabilities SECUNIA ADVISORY ID: SA12677 VERIFY ADVISORY: http://secunia.com/advisories/12677/ CRITICAL: Highly critical IMPACT: System access WHERE: From remote OPERATING SYSTEM: AIX 5.x http://secunia.com/product/213/ DESCRIPTION: IBM has acknowledged some...

MS04-028 Exploitation Backdoor Account Detection

It was possible to log into the remote host with the login 'X' and a blank password. A widely available exploit, using one of the vulnerabilities described in the Microsoft Bulletin MS04-028 creates such an account. This probably means that the remote host has been compromised by the use of this...

[SA12456] Grokster Altnet Download Manager Buffer Overflow Vulnerability

TITLE: Grokster Altnet Download Manager Buffer Overflow Vulnerability SECUNIA ADVISORY ID: SA12456 VERIFY ADVISORY: http://secunia.com/advisories/12456/ CRITICAL: Highly critical IMPACT: System access WHERE: From remote SOFTWARE: Grokster 2.x http://secunia.com/product/3863/ DESCRIPTION:...

Tomcat: Insecure installation

Background Tomcat is the Apache Jakarta Project's official implementation of Java Servlets and Java Server Pages. Description The Gentoo ebuild for Tomcat sets the ownership of the Tomcat init scripts as tomcat:tomcat, but those scripts are executed with root privileges when the system is started...

libpng stack-based buffer overflow and other code concerns

Chris Evans has discovered multiple vulnerabilities in libpng, which can be exploited by malicious people to compromise a vulnerable system or cause a DoS Denial of Service...

Mandrake Linux Security Advisory : php (MDKSA-2003:019)

A buffer overflow was discovered in the wordwrap function in versions of PHP greater than 4.1.2 and less than 4.3.0. Under certain circumstances, this buffer overflow can be used to overwite heap memory and could potentially lead to remote system compromise. %NASLMINLEVEL 70300 C Tenable Network...

Mandrake Linux Security Advisory : rxvt (MDKSA-2003:034)

Digital Defense Inc. released a paper detailing insecurities in various terminal emulators, including rxvt. Many of the features supported by these programs can be abused when untrusted data is displayed on the screen. This abuse can be anything from garbage data being displayed to the screen or ...

SuSE-SA:2004:008: cvs

The remote host is missing the patch for the advisory SuSE-SA:2004:008 cvs. The Concurrent Versions System CVS offers tools which allow developers to share and maintain large software projects. During the analyzation of the CVS protocol and their implementation, the SuSE Security Team discovered ...

SUSE-SA:2003:0015: tcpdump

The remote host is missing the patch for the advisory SUSE-SA:2003:0015 tcpdump. The network traffic analyzer tool tcpdump is vulnerable to a denial-of- service condition while parsing ISAKMP or BGP packets. This bug can be exploited remotely by an attacker to stop the use of tcpdump for analyzin...

SUSE-SA:2003:017: file

The remote host is missing the patch for the advisory SUSE-SA:2003:017 file. The file command can be used to determine the type of files. iDEFENSE published a security report about a buffer overflow in the handling-routines for the ELF file-format. In conjunction with other mechanisms like...

SUSE-SA:2003:001: fetchmail

The remote host is missing the patch for the advisory SUSE-SA:2003:001 fetchmail. fetchmail is used to download emails from POP-, IMAP-, ETRN- or ODMR- servers. Stefan Esser of e-matters reported a bug in fetchmail's mail address expanding code which can lead to remote system compromise. When...

Fastream NETFile FTP/Web Server Input validation Errors

Fastream NETFile FTP/Web Server Input validation Errors -------------------------------------------------------- Release Date: 4 July 2004 Severity: High Systems Affected: Fastream NETFile FTP/Web Server =v.6.7.2.1085 Systems Not Affected: Fastream NETFile FTP/Web Server v6.7.3 Vendor URL:...

IBM ACPRunner 1.2.5 - ActiveX Control Dangerous Method

source: https://www.securityfocus.com/bid/10561/info It is reported that the IBM acpRunner ActiveX control contains dangerous methods that may result in a remote compromise of a system on which the ActiveX control is installed. These methods may be accessed by a malicious website and may result i...