CA Products That Embed Ingres Multiple Vulnerabilities

Title: CA Products That Embed Ingres Multiple Vulnerabilities CA Advisory Date: 2008-08-01 Reported By: iDefense Labs Impact: A remote attacker can execute arbitrary code, gain privileges, or cause a denial of service condition. Summary: CA products that embed Ingres contain multiple...

CA BrightStor ARCserve Backup Mediasvr.exe and caloggerd.exe Vulnerabilities

Title: CA BrightStor ARCserve Backup Mediasvr.exe and caloggerd.exe Vulnerabilities Notice Date: 2007-05-16 CA is aware that two functional exploit code samples were publicized on May 16, 2007. These two denial of service exploits are associated with vulnerabilities in CA BrightStor ARCserve Back...

SOL2319 - Insufficient MAC computation in OpenSSH - CAN-2003-0078

Obtaining and installing patches F5 has released a patch for BIG-IP and 3-DNS versions 4.2 and 4.5. To download the patch, perform the following procedure 1. Open the F5 Downloads page in a browser. 2. Navigate to the BIG-IP BIG-IP v4.x 4.5.x section. 3. Click CAN-2003-0078 and download the...

CA BrightStor ARCserve Backup Mediasvr.exe vulnerability

CA is aware that functional exploit code was publicized on March 30, 2007 for a CA BrightStor ARCserve Backup Mediasvr.exe vulnerability. We have verified that a high risk vulnerability does exist and we are now working on a patch to address the issue. CA recommends that BrightStor ARCserve Backu...

SupportSoft tgctlsi.dll ActiveX control buffer overflow

Added: 03/15/2007 CVE: CVE-2006-6490 BID: 22564 OSVDB: 33481 Background SupportSoft ActiveX controls are used by third-party products to provide remote technical support. Problem SupportSoft ActiveX controls are affected by multiple buffer overflow vulnerabilities which can lead to command...

SupportSoft tgctlsi.dll ActiveX control buffer overflow

Added: 03/15/2007 CVE: CVE-2006-6490 BID: 22564 OSVDB: 33481 Background SupportSoft ActiveX controls are used by third-party products to provide remote technical support. Problem SupportSoft ActiveX controls are affected by multiple buffer overflow vulnerabilities which can lead to command...

Microsoft Security Advisory (933052) Vulnerability in Microsoft Word Could Allow Remote Code Executio

Microsoft Security Advisory 933052 Vulnerability in Microsoft Word Could Allow Remote Code Execution Published: February 14, 2007 Microsoft is investigating new public reports of very limited, targeted attacks against Microsoft Word “zero-day” using a vulnerability in Microsoft Office 2000 and...

SOL6923 - LDAP and RADIUS authentication failures can reveal a valid FirePass username

F5 Product Development tracked this issue as CR66767 for FirePass 5.5.1 and CR68628 for FirePass 6.0.0, and it was fixed in FirePass 5.5.2 and 6.0.1. For information about upgrading, refer to the FirePass release notes. Additionally, a hotfix has been issued for FirePass 5.5.1. Customers affected...

Hawking Technology wireless router WR254-CA DNS issue

Hi, I have discovered a security issue with Hawking Technology wireless router, model WR254-CA. Since they are still available on the market so I think it will be good to warn the community. This router contains a DNS address 139.175.55.244 hardcoded in the firmware. At least when used in DHCP...

[Full-disclosure] [CAID 34693, 34694]: CA BrightStor ARCserve Backup Multiple Buffer Overflow Vulnerabilities

Title: CAID 34693, 34694: CA BrightStor ARCserve Backup Multiple Buffer Overflow Vulnerabilities CA Vulnerability ID CAID: 34693, 34694 CA Advisory Date: 2006-10-05 Discovered By: TippingPoint, www.zerodayinitiative.com Impact: Remote attacker can execute arbitrary code. Summary: CA BrightStor...

pdjk-support suite sql inj.

pdjk-support suite sql inj. Vuln. dicovered by : r0t Date: 25 nov. 2005 Orginal advisory:http://pridels.blogspot.com/2005/11/pdjk-support-suite-sql-inj.html Vendor:http://support.pdjkeelan.com/ affected vesion: 1.1a retail edition and prior. Product Description: The pdjk-support suite is a full...

WebEOC is vulnerable to cross-site scripting attacks

Overview WebEOC contains multiple cross-site scripting vulnerabilities that may allow a remote attacker to inject and execute arbitrary script using a vulnerable WebEOC site. Description WebEOC is a web-based crisis information management application that provides functions to gather, coordinate,...

Echo Security Advisory 2005.14

.OR.ID ECHOADV14$2005 --------------------------------------------------------------------------- Multiple Vulnerabilities in Liberum Help Desk --------------------------------------------------------------------------- Author: Dedi Dwianto Date: June, 02nd 2005 Location: Indonesia, Jakarta Web:...

Problem With IP Logging In Invision Power Board?

IPB like many other forum systems logs visitors IP's However I have noticed in the past that people who are surfing through some proxies have their internal private IP logged instead of their "real" IP Address. Here are a few screenshots I took of my LAN IP being logged instead of my internet IP...

Authentix Security Advisory

Security advisory: Authentix100 Release Date: 1 november 2000 Vendor: Flicks Software http://www.flicks.com Product Description Authentix is a Windows-based product that offers cookie/form-based or 100 cookie-free "Basic Authentication" website protection while keeping NT Users Names and Password...

Infosec.20000712.worldclient.2.1

Infosec Security Vulnerability Report No: Infosec.20000712.worldclient.2.1 =============================== Vulnerability Summary --------------------- Problem: The web server for remote access to e-mail in WorldClient 2.1 is vulnerable for root dot dot. It is possible to read and in some cases...

Infosec.20000712.worldclient.2.1

Infosec Security Vulnerability Report No: Infosec.20000712.worldclient.2.1 Vulnerability Summary --------------------- Problem: The web server for remote access to e-mail in WorldClient 2.1 is vulnerable for root dot dot. It is possible to read and in some cases download any file known by name an...

SilverBack Security Advisory: Nbase-Xyplex DoS

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 SilverBack Security Advisory Copyright c 2000 SilverBack Technologies April 5th, 2000 www.silverbacktech.com Products affected: Nbase-Xyplex EdgeBlaster MultiFunction WAN Access Router Description: SilverBack Technologies has discovered a Denial of...

serv-u.2.5.txt

Remote DoS Attack in Serv-U FTP-Server v2.5a Vulnerability PROBLEM: UssrLabs found a Local/Remote DoS Attack in Serv-U FTP-Server v2.5a, The buffer overflow is caused by a bad Formed SITE command For the source / binary of this remote / local D.O.S Go to: http://www.ussrback.com/servu/ Vendor...

usrnetserver.txt

http://www.rootshell.com/ Date: Mon, 26 Oct 1998 18:51:09 +0000 From: Vesselin Mladenov Subject: USR Netserver 8/16 vulnarable to nestea attack Three days ago I found out that USR Netserver 8/16 V.34, running version 2.0.14 OS is vulnerable to nestea DoS attack for more info lookup in...