Lotus Notes Applix Graphics viewer BEGIN tag buffer overflow

Added: 06/06/2008 CVE: CVE-2007-5405 BID: 28454 OSVDB: 44194 Background Lotus Notes is the client for Lotus Domino servers. Lotus Notes uses the Autonomy KeyView library to display Applix Graphics .ag attachments. Problem A buffer overflow vulnerability when parsing the initial BEGIN tag in an...

IBM Lotus Notes ZIP file handling buffer overflow

Overview IBM Lotus Notes contains a buffer overflow when handling a ZIP file with a large file name. This could allow a remote attacker to execute arbitrary code on a vulnerable system. Description IBM Lotus Notes is an integrated client application that provides functionality including email,...

IBM Lotus Domino Server 6.5.1 Web Service - Remote Denial of Service

IBM Lotus Domino Server 6.5.1 Web Service - Remote Denial of Service source: https://www.securityfocus.com/bid/13045/info A remote denial of service vulnerability affects IBM Lotus Domino Server web service. This issue is due to a failure of the application to properly handle malformed network...

IBM Lotus Domino Server 6.5.1 Web Service - Remote Denial of Service

source: https://www.securityfocus.com/bid/13045/info A remote denial of service vulnerability affects IBM Lotus Domino Server web service. This issue is due to a failure of the application to properly handle malformed network requests. IBM has denied that this issue is a vulnerability and they ha...

technote.pl

Technote Inc. from Korea Command Excution Spawn bash style Shell with webserver uid This Script is currently under development use strict; use IO::Socket; my $host; my $port; my $command; my $url; my $pdf; my $url1; my $number; my $url2; my $shiz; my @results; my $probe; my @U; $U1 =...

technote-commandexec.txt

Technote Command Excution Technote Inc. from Korea offers a Site Package which includes a web board. Previous exploit discovered way back on year 2000 focused on a File Disclosure Vulnerability http://www.securityfocus.com/bid/2156/discussion/ However, command execution is also possible using the...

VERITAS Software Technical Advisory

Dear Valued VERITAS Software Customer, VERITAS Technical Services has recently discovered an issue that could potentially allow unauthorized access to the main server when utilizing VERITAS Bare Metal Restore for Tivoli Storage Manager TSM versions 3.1.0, 3.1.1, 3.2.0 and 3.2.1. This TechAlert is...

CVE-2001-0074

Directory traversal vulnerability in print.cgi in Technote allows remote attackers to read arbitrary files via a .. dot dot attack in the board parameter...

CVE-2001-0075

Directory traversal vulnerability in main.cgi in Technote allows remote attackers to read arbitrary files via a .. dot dot attack in the filename parameter...

CVE-2001-0075

CVE-2001-0075 involves the Technote package where the CGI script main.cgi is vulnerable to a directory traversal via the filename parameter (using “..”). This allows remote attackers to read arbitrary files on the host, with the privileges of the web server. The vulnerability is concrete in the T...

CVE-2001-0075

Directory traversal vulnerability in main.cgi in Technote allows remote attackers to read arbitrary files via a .. dot dot attack in the filename parameter...

CVE-2001-0074

CVE-2001-0074 is a directory traversal vulnerability in print.cgi of Technote that allows remote attackers to read arbitrary files via a .. path in the board parameter. The issue arises from unvalidated path handling in the CGI script, enabling partial confidentiality impact. Public references de...

CVE-2001-0075: Undefined Security Weakness

Directory traversal vulnerability in main.cgi in Technote allows remote attackers to read arbitrary files via a .. dot dot attack in the filename parameter...

CVE-2001-0074: Undefined Security Weakness

Directory traversal vulnerability in print.cgi in Technote allows remote attackers to read arbitrary files via a .. dot dot attack in the board parameter...

Technote main.cgi filename Parameter Traversal Arbitrary File Access

The technote CGI board is installed. This board has a well known security flaw in the CGI main.cgi that lets an attacker read arbitrary files with the privileges of the http daemon usually root or nobody. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc';...

Technote 20002001 - Filename Command Execution File Disclosure

Technote 20002001 - Filename Command Execution File Disclosure source: https://www.securityfocus.com/bid/2156/info Technote Inc. offers a multi-communication Package that includes a web board type of service. A script that ships with Technote, 'main.cgi', accepts a parameter called 'filename'. Th...

Technote 2000/2001 - 'board' File Disclosure

source: https://www.securityfocus.com/bid/2155/info Technote Inc. offers a Multicommunication Package which includes a web board type of service. A script that ships with Technote, print.cgi, accepts a parameter called "board". This remotely-supplied variable is used as a filename when the open...