Path Parsing Errata in Apache HTTP Server

Original Message: ----------------- From: [email protected] [email protected] Date: Wed, 22 Jan 2003 09:00:58 -0500 To: [email protected] Subject: Path Parsing Errata in Apache HTTP Server Path Parsing Errata in Apache HTTP Server ABSTRACT The Apache HTTP Server...

Missing admin sql password in Okena StormWatch

Hi! I was working with Okena StormWatch1 - a really interesting commercial intrusion prevention product - and saw that there is the SQL password for the admin account sa missing. With a SQL client and a blank password it's possible for everyone who can connect to the manager to compromise the who...

Sun ONE Starter Kit 2.0 ASTAware SearchDisc 3.1 - Search Engine Directory Traversal

Sun ONE Starter Kit 2.0 ASTAware SearchDisc 3.1 - Search Engine Directory Traversal source: https://www.securityfocus.com/bid/5828/info A vulnerability has been reported for the Sun ONE Starter Kit 2.0 and ASTAware SearchDisc. The Starter Kit includes a search engine facility provided for easy...

PHP-Nuke Network Tools Add-On Arbitrary Command Execution

It is possible to make the remote host execute arbitrary commands through the use of the PHPNuke addon called 'Network Tools'. An attacker may use this flaw to gain a shell on this system. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; ...

IRIX nveventd vulnerability

-----BEGIN PGP SIGNED MESSAGE----- SGI Security Advisory Title: nveventd vulnerability Number: 20020607-02-I Date: June 24, 2002 Reference: CAN-2002-0631 - -------------- - --- Update --- - -------------- Fixed formatting issue which caused PGP signature failure on some mailers. -...

[ARL02-A14] ZenTrack System Information Path Disclosure Vulnerability

+/---------------- ALPER Research Labs ------/--------/+ +/---------------- Security Advisory -----/---------/+ +/---------------- ID: ARL02-A14 ----/----------/+ +/---------------- [email protected] ---/-----------/+ Advisory Information -------------------- Name : ZenTrack System Information...

CVE-2002-0208

The CVE concerns PGP Security PGPfire 7.1 for Windows, which alters the TCP/IP stack and modifies ICMP error messages, enabling remote attackers to determine that the target system is running PGPfire. The PT-2002-1279 entry mirrors this with details of the affected software and behavior, noting t...

CVE-2002-0295

CVE-2002-0295 affects Alcatel OmniPCX 4400; the flaw is that setup installs files with world-writable permissions, enabling local users to reconfigure the system and potentially obtain privileges. Documented impact is local, with partial confidentiality/integrity/availability. No explicit exploit...

CVE-1999-1298

Technical details about CVE-1999-1298 are not publicly available in the provided documents. No specific affected products, versions, or remediation steps are disclosed here. Monitor for updates from official sources for further information.

Security updates: at, sudo, xchat

New packages are now available to address security issues with the at scheduler program found in Slackware 8.0's bin.tgz package, sudo, and xchat. Here's the information from the Slackware 8.0 ChangeLog: Mon Jan 21 13:21:07 PST 2002 patches/packages/at.tgz: Fixed a buffer overflow. Security fix...

CVE-2001-1506

Unknown vulnerability in the file system protection subsystem in HP Secure OS Software for Linux 1.0 allows additional user privileges on some files beyond what is specified in the file system protection rules, which allows local users to conduct unauthorized operations on restricted files...

CVE-1999-1501

CVE-1999-1501 affects SGI OS2 IRIX 6.3 components ipxchk and ipxlink, where the IFS environment variable is not properly cleared before executing system calls. This enables local users to run arbitrary commands. The vulnerability is tied to how environment state is preserved across these calls, a...

netkill - FIN_WAIT_1 DoS против многих систем

Устанавливаются многочисленные TCP-соединения, в которых после 1го ACK-пакета содержащего запрос к серверу перестают подтверждаться TCP-пакеты. Это приводит к подвисанию соединений в случе HTTP - в фазе FINWAIT1, в других случаях - в Established...

Локальный DoS против PHP (infinite loop)

PHP-cкрипт запрашивающий сам себя по http приводит к DoS против системы из-за открытия максимального числа соединений...

Microsoft Windows 2000 Service Control Manager creates predictably named pipes

Overview A vulnerability exists in the Microsoft Windows 2000 Service Control Manager which could allow local users to gain control of the system. Description A vulnerability exists in the Service Control Manager SCM function. This function creates named pipes for system services. More informatio...

CVE-2001-0115

The CVE describes a buffer overflow in the arp command on Solaris 7 and earlier, exploitable locally via a long -f parameter. Affected component: arp. Root cause: inadequate bounds checking in the -f option. Impact, as per the sources: complete confidentiality, integrity, and availability losses ...

IRIX 5.36.x - netprint Arbitrary Shared Library Usage

IRIX 5.36.x - netprint Arbitrary Shared Library Usage // source: https://www.securityfocus.com/bid/2656/info The 'netprint' utility shipped with SGI Irix systems is used to send print jobs to print spoolers on remote hosts. It is installed setuid root by default. At the command line, 'netprint'...

GetFullPathName overflow - was 'Re: WFTPD "Pro" 3.0 R4 Buffer Overflow'

At 02:44 PM 4/23/2001, Alun Jones wrote: The latest version of WFTPD is vulnerable to a buffer overflow in the RETR and CWD commands. The overflow can be used to completely disable the FTP server, and can probably be exploited to run arbitrary code on the server host. Again, incorrect. The buffer...

Multiple TCP/IP implementations may use statistically predictable initial sequence numbers

Overview Attacks against TCP initial sequence number generation have been discussed for some time now. It has long been recognized that the ability to know or predict ISNs can lead to TCP connection hijacking or spoofing. What was not previously illustrated was just how predictable one...

SSH 1.2.30 - Daemon Logging Failure

source: https://www.securityfocus.com/bid/2345/info SSH1 is the implementation of the Secure Shell communication protocol by SSH Communications. SSH1 is version 1 of the protocol specified by IETF draft to protect the integrity of traffic over the network. A problem with the implementation of the...