CVE-2006-4005

BomberClone 0.11.6 and earlier allows remote attackers to cause a denial of service daemon crash via 1 a certain malformed PKGFackreq packet, which triggers a crash in the rscacheadd function in pkgcache.c; and 2 an error packet, which is intended to be received by clients and force client...

CVE-2006-0705

CVE-2006-0705 is a format-string vulnerability in SFTP/SSH logging code across multiple servers (e.g., SSH Secure Shell Server variants, and related SFTP servers). The flaw affects the handling of filenames in logs, enabling a remote authenticated user to potentially execute arbitrary commands vi...

CVE-2006-0705: Use of Externally-Controlled Format String

Format string vulnerability in a logging function as used by various SFTP servers, including 1 AttachmateWRQ Reflection for Secure IT UNIX Server before 6.0.0.9, 2 Reflection for Secure IT Windows Server before 6.0 build 38, 3 F-Secure SSH Server for Windows before 5.3 build 35, 4 F-Secure SSH...

Multiple vendor SFTP logging format string vulnerability

Overview A logging function used by multiple vendors' SFTP servers contains a format string vulnerability, which may allow an authorized remote attacker to execute arbitrary code or cause a denial of service. Description SFTP SFTP Secure FTP is a file transfer application that uses SSH for...

[Full-disclosure] Neomail Cross Site Scripting Vulnerability

Title: Neomail Cross Site Scripting Author: Simo Ben youssef aka 6mOHaCk simoatmorxorg Discovered: 24 january 2005 Published: 02 february 2006 MorX Security Research Team http://www.morx.org Service: Webmail Perl Client Vendor: neomail / www.neocodesolutions.com Vulnerability: Cross Site Scriptin...

Debian DSA-704-1 : remstats - tempfile, missing input sanitising

Jens Steube discovered several vulnerabilities in remstats, the remote statistics system. The Common Vulnerabilities and Exposures project identifies the following problems : - CAN-2005-0387 When processing uptime data on the unix-server a temporary file is opened in an insecure fashion which cou...

Buffer overflow in sarad

I have found several buffer overflows in the sarad program used to serve the British National Corpus http://www.natcorp.ox.ac.uk/SARA/. At least one I didn't check the others too closely allows execution of arbitrary code over the network with the rights of the daemon which is supposed to be a...

Marcus S. Xenakis "directory.php" allows arbitrary code execution

------------------------------------------------------------ itcp advisory 3 [email protected] http://www.it-checkpoint.net/advisory/3.html March 10th, 2002 ------------------------------------------------------------ Marcus S. Xenakis "directory.php" allows arbitrary code execution...

netkill - generic remote DoS attack

NAME netkill - generic remote DoS attack $Id: netkill,v 1.7 2000/04/20 18:56:22 shalunov Exp $ SUMMARY By exploiting features inherent to TCP protocol remote attackers can perform denial of service attacks on a wide array of target operating systems. The attack is most efficient against HTTP...

Linux news 16.05.00

Open Source Motif Open Group открыла исходники Motif. Motif - это набор для создания и обслуживания кнопочек, полос прокрутки и так далее. В общем, как Qt, только Motif. Netscape для Linux использует именно его. Подробнее: http://www.opengroup.org/openmotif/ Bluefish 0.4 Появилось сообщение о том...

Microsoft Windows 95/Windows for Workgroups - 'smbclient' Directory Traversal

source: https://www.securityfocus.com/bid/1884/info Samba is a set of of programs that allow Windows® clients access to a Unix server's filespace and printers over NetBIOS. A directory traversal vulnerability exists in Microsoft's implementation of the SMB file and print sharing protocol for...