FreeBSD-SA-02:05.pine

-----BEGIN PGP SIGNED MESSAGE----- ============================================================================= FreeBSD-SA-02:05 Security Advisory FreeBSD, Inc. Topic: pine port insecure URL handling REVISED Category: ports Module: pine Announced: 2002-01-04 Revised: 2002-01-10 Credits: zen-pars...

pine insecure URL handling

An attacker may send an email message containing a specially constructed URL that will execute arbitrary commands when viewed...

Vulnerability in Viralator proxy extension

Hi! Date: October 2001 Product: Viralator http://viralator.loddington.com/ Viralator is a perl-script to be used with the squid proxy, an apache webserver and some virus scanner software. Its purpose is to allow scanning of files downloaded through the proxy for viruses. The product has been list...

RSA Security ACE/Agent for Windows, ACE/Agent for Windows NT, and ACE/Agent for Windows 2000 do not properly handle null characters in URL

Overview RSA Security ACE/Agent for Windows, ACE/Agent for Windows NT, and ACE/Agent for Windows 2000 contain a vulnerability in which the ACE/Agent does not properly handle null characters contained in a URL. A specially crafted request may cause ACE/Agent to enter a debugging mode, possibly...

Netscape Navigator 4.0.8 - 'about:' Domain Information Disclosure

source: https://www.securityfocus.com/bid/2637/info Due to a flaw in Navigator's security code, all URLs in the about: protocol are considered to be part of the same domain. If arbitrary Javascript code is placed in a GIF's comment field, it is treated like a normal HTML page. The Javascript code...

FreeBSD-SA-00:48.xchat

-----BEGIN PGP SIGNED MESSAGE----- ============================================================================= FreeBSD-SA-00:48 Security Advisory FreeBSD, Inc. Topic: xchat port inappropriately handles URLs Category: ports Module: xchat, xchat-devel Announced: 2000-09-13 Affects: Ports...

[SECURITY] New version of xchat released (update)

Package : xchat Problem type : remote exploit Debian-specific: no The version of X-Chat that was distributed with Debian GNU/Linux 2.2 has a vulnerability in the URL handling code: when a user clicks on a URL X-Chat will start netscape to view its target. However it did not check the URL for shel...

[SECURITY] New version of xchat released

Package : xchat Problem type : remote exploit Debian-specific: no The version of X-Chat that was distributed with Debian GNU/Linux 2.2 has a vulnerability in the URL handling code: when a user clicks on a URL X-Chat will start netscape to view its target. However it did not check the URL for shel...

[SECURITY] New version of xchat released (update)

------------------------------------------------------------------------ Debian Security Advisory [email protected] http://www.debian.org/security/ Wichert Akkerman August 30, 2000 - ------------------------------------------------------------------------ Package : xchat Problem type : remote...

Novell GroupWise Enhancement Pack Java Server URL Handling Overflow DoS

The remote web server can be crashed by an overly long request: GET /servlet/AAAA...AAAA This attack is known to affect GroupWise servers. TRUSTED...

poorman.txt

Missing traling '/' Remote Denial of Service Attack Advisory february 5th 2000 UPDATED February 8th Please, refer to http://bebugs.be.com/devbugs/detail.php3?oid=1229984 as it makes this advisory obsolete... I discovered this very recently, but it seems it was in the Be inc. bug database for a...

Web Server Long URL Handling Remote Overflow DoS

The remote web server crashes when it receives a too long URL. It might be possible to make it execute arbitrary code through this flaw. C Tenable Network Security, Inc. Some vulnerable servers: SmallHTTP All versions vulnerable: 2.x Stables, 3.x Latest beta 8 OmniHTTPd v2.09 of Omnicron...