Avirt Gateway Suite Remote SYSTEM Level Compromise

Strumpf Noir Society Advisories ! Public release ! -- -= Avirt Gateway Suite Remote SYSTEM Level Compromise =- Release date: Thursday, January 17, 2002 Introduction: Avirt Gateway Suite combines the features of the Avirt Gateway internet sharing technology with the functionality of the Avirt Mail...

Microsoft Security Notification Bulletin MS01-059

---------------------------------------------------------------------- Title: Unchecked Buffer in Universal Plug and Play can Lead to System Compromise Date: 20 December 2001 Software: Windows 98, Windows 98SE, Windows ME, Windows XP Impact: Run code of attacker's choice Max Risk: Critical...

RAZOR advisory: multiple Sendmail vulnerabilities

RAZOR Advisory: Multiple Local Sendmail Vulnerabilities ======================================================= Author: Michal Zalewski [email protected] Release Date: 10/01/2001 Assigned CVE numbers: CAN-2001-0713, CAN-2001-0714, CAN-2001-0715 Topic: ------ The Sendmail mail delivery...

EFTP Version 2.0.7.337 vulnerabilities

EFTP Version 2.0.7.337 vulnerabilities According to their site @ www.eftp.org "EFTP is a 32bit combined Client/Server application, basically 2 programs in one. EFTP incorporates the 448bit Blowfish Encryption Algorithm and the FTP protocol RFC 959 implementation to provide secure file transfers...

Sendmail 8.118.12 Debugger - Arbitrary Code Execution (4)

Sendmail 8.118.12 Debugger - Arbitrary Code Execution 4 source: https://www.securityfocus.com/bid/3163/info An input validation error exists in Sendmail's debugging functionality. The problem is the result of the use of signed integers in the program's tTflag function, which is responsible for...

Sendmail 8.118.12 Debugger - Arbitrary Code Execution (1)

Sendmail 8.118.12 Debugger - Arbitrary Code Execution 1 // source: https://www.securityfocus.com/bid/3163/info An input validation error exists in Sendmail's debugging functionality. The problem is the result of the use of signed integers in the program's tTflag function, which is responsible for...

Sendmail 8.118.12 Debugger - Arbitrary Code Execution (3)

Sendmail 8.118.12 Debugger - Arbitrary Code Execution 3 source: https://www.securityfocus.com/bid/3163/info An input validation error exists in Sendmail's debugging functionality. The problem is the result of the use of signed integers in the program's tTflag function, which is responsible for...

Sendmail 8.11/8.12 Debugger - Arbitrary Code Execution (4)

source: https://www.securityfocus.com/bid/3163/info An input validation error exists in Sendmail's debugging functionality. The problem is the result of the use of signed integers in the program's tTflag function, which is responsible for processing arguments supplied from the command line with t...

Sendmail 8.11/8.12 Debugger - Arbitrary Code Execution (1)

// source: https://www.securityfocus.com/bid/3163/info An input validation error exists in Sendmail's debugging functionality. The problem is the result of the use of signed integers in the program's tTflag function, which is responsible for processing arguments supplied from the command line wit...

SSH2 3.0 - Short Password Login

source: https://www.securityfocus.com/bid/3078/info An input validation error exists in version 3.0.0 of the SSH daemon sshd running on Unix platforms. It may be possible for remote users to log in to accounts for which there are two or less characters in the password field of the system password...

SSH2 3.0 - Short Password Login

SSH2 3.0 - Short Password Login source: https://www.securityfocus.com/bid/3078/info An input validation error exists in version 3.0.0 of the SSH daemon sshd running on Unix platforms. It may be possible for remote users to log in to accounts for which there are two or less characters in the...

SECURITY.NNOV: special devices access in multiple archivers

Hello, Topic: Special devices access in multiple archivers Author: 3APA3A [email protected] Platform: Windows Affected Software: WinZIP Computing's WinZIP 8.0, PKWare PkZip 4.0, RARSoft WinRar 2.80 Risk: average Released: July, 5, 2001 SECURITY.NNOV advisories:...

cesarFTP v0.98b 'HELP' buffer overflow

DESCRIPTION CesarFTP v0.98b is vulnerable to a buffer overflow when sending the HELP command followed by a very long string of characters. Example : Sending the following perl string : "HELP " . "A" x 1978 . "CCCCx00x0Dx0A" Happily reroutes the SERVER.EXE EIP to 43434343 "CCCC". This way, anyone...

NetSQL 1.0 - Remote Buffer Overflow

NetSQL 1.0 - Remote Buffer Overflow // source: https://www.securityfocus.com/bid/2885/info NetSQL is an implementation of a database and toolset distributed by Munica Corporation. NetSQL is part of 5 piece software package called the Webpak, containing utilities for features such as web boards,...

Apache 1.3 - Artificially Long Slash Path Directory Listing (3)

source: https://www.securityfocus.com/bid/2503/info Apache HTTPD is the Apache Web Server, freely distributed and actively maintained by the Apache Software Foundation. It is a freely available and widely used software package, included with various implementations of the UNIX operating system an...

Apache 1.3 - Artificially Long Slash Path Directory Listing (4)

source: https://www.securityfocus.com/bid/2503/info Apache HTTPD is the Apache Web Server, freely distributed and actively maintained by the Apache Software Foundation. It is a freely available and widely used software package, included with various implementations of the UNIX operating system an...

FreeBSD-SA-01:40.fts

-----BEGIN PGP SIGNED MESSAGE----- ============================================================================= FreeBSD-SA-01:40 Security Advisory FreeBSD, Inc. Topic: fts3 routines contain race condition REVISED Category: core Module: libc Announced: 2001-06-04 Revised: 2001-08-16 Credits: Nick...

iPlanet 4.1 Web Publisher - Remote Buffer Overflow (1)

iPlanet 4.1 Web Publisher - Remote Buffer Overflow 1 source: https://www.securityfocus.com/bid/2732/info iPlanet Webserver is an http server product offered by the Sun-Netscape Alliance. By sending a specially crafted request composed of at least 2000 characters it is possible to cause a buffer...

iPlanet 4.1 Web Publisher - Remote Buffer Overflow (2)

iPlanet 4.1 Web Publisher - Remote Buffer Overflow 2 source: https://www.securityfocus.com/bid/2732/info iPlanet Webserver is an http server product offered by the Sun-Netscape Alliance. By sending a specially crafted request composed of at least 2000 characters it is possible to cause a buffer...

Vixie cron vulnerability

Thank you for using SecurityFocus.com's Security Intelligence Alert SIA Service. To manage account please visit https://alerts.securityfocus.com/ For questions or comments email us at [email protected]. --------------------------------------------------------------------------- Security...