4925 matches found
ISC InterNetNews (INN) contains buffer overflow in ARTpost() function
Overview The Internet Software Consortium's ISC InterNetNews INN is a Usenet application. A vulnerability in INN may permit a remote attacker to compromise the system. Description Version 2.4.0 of ISC's InterNetNews package contains a Network News Transfer Protocol NNTP server that contains a...
Slackware 8.1 kernel security update
New kernels are available for Slackware 8.1 containing a backported fix from a bounds-checking problem in the kernel's mremap call which could be used by a local attacker to gain root privileges. This fix was previously issued for Slackware 9.0, 9.1, and -current SSA:2004-006-01. Sites running...
INN < 2.4.1 Control Message Handling Code Overflow
The remote host is running INN 2.4.0. There is a known security flaw in this version of INN that could allow an attacker to execute arbitrary code on this server. C Tenable Network Security, Inc. Ref: http://www.isc.org/products/INN/ include"compat.inc"; ifdescription scriptid11984; scriptversion...
KpyM Telnet Server DoS
The remote host is running KpyM Telnet Server, a Telnet server for Windows. According to its banner, the installed version of KpyM is older than 1.06. Such versions mark a connection as free before all components, such as sockets and threads, are shut down. By flooding the service with connection...
Problem with Appleshare IP FTP server
This affects versions 6.3.1 and lower. It will say 'Appleshare IP FTP server.' But, there is a problem with it, Im not quite sure why, that when you login as an anonymous user, and type RMD / the system freezes. My bet is that because Non-OSX macs dont use slashes for directories, that the ftp...
[Full-Disclosure] SRT2003-12-04-0723 - PLDaniels Ebola remote overflow
Secure Network Operations, Inc. http://www.secnetops.com/research Strategic Reconnaissance Team [email protected] Team Lead Contact [email protected] Our Mission: Secure Network Operations offers expertise in Networking, Intrusion Detection Systems IDS, Software Security Validation, and...
XBoard < 4.2.7: pxboard insecure tmp file handling
About XBoard: XBoard is a graphical chessboard that can serve as a user interface to chess engines such as GNU Chess, the Internet Chess Servers, electronic mail correspondence chess, or your own collection of saved games. pxboard is a script that saves its standard input to a temporary file and...
phpBB < 2.0.7 Multiple Script SQL Injection
The remote host is running a version of phpBB older than 2.0.7. There is a flaw in the remote software that could allow anyone to inject arbitrary SQL commands, which may in turn be used to gain administrative access on the remote host or to obtain the MD5 hash of the password of any user...
Remote DoS in FreeRADIUS, all versions.
Application: FreeRADIUS, all versions http://www.freeradius.org Summary: A remote DoS, and possibly exploit, exists in all versions of the FreeRADIUS server. All users should upgrade to the latest version, as soon as it is officially release. For later announcements, see: http://www.freeradius.or...
Quagga / Zebra Malformed Telnet Command Denial of Service
A remote denial of service vulnerability exists in Zebra and Quagga that can be triggered by sending a telnet option delimiter with no actual option data, which causes the daemon to attempt to dereference a typically NULL pointer and crash. This affects all versions from 0.90a to 0.93b. MA...
[SNS Advisory No.69] Eudora "Reply-To-All" Buffer Overflow Vulnerability
---------------------------------------------------------------------- SNS Advisory No.69 Eudora "Reply-To-All" Buffer Overflow Vulnerability Problem first discovered on: Thu, 09 Jan 2003 Published on: Mon, 10 Nov 2003 ---------------------------------------------------------------------- Overvie...
[Full-Disclosure] STG Security Advisory: [SSA-20031025-05] InfronTech WebTide 7.04 Directory and File Disclosure Vulnerability
STG Security Advisory: SSA-20031025-05 InfronTech WebTide 7.04 Directory and File Disclosure Vulnerability Revision 1.0 Date Published: 2003-10-25 KST Last Update: 2003-10-25 Disclosed by SSR Team [email protected] Abstract ======== InfronTech's J2EE Web Application Server, WebTide, is a...
[Advisory] Powerslave 4.3 Information Leak Vuln.
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ========================================================= H Zero Seven Security Advisory Product : FlyingDog Software - Powerslave Portalmanager Impact : information leak vulnerability Issue date: 19 Sept. 2003 Update : Powerslave 4.4.3pl3 Affected :...
LSH Daemon < 1.4.3 / 1.5.3 lshd Remote Overflow
According to its banner, the version of LSH a free replacement for SSH is a version prior to 1.4.3 / 1.5.3. It is, therefore, affected by a buffer overflow vulnerability due to improper handling of user input to the 'readline.c', 'channelcommands.c', and 'clientkeyexchange.c' source files that...
[CLA-2003:723] Conectiva Security Announcement - openslp
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - -------------------------------------------------------------------------- CONECTIVA LINUX SECURITY ANNOUNCEMENT - -------------------------------------------------------------------------- PACKAGE : openslp SUMMARY : Temporary file creation...
TrueType Font Server for X11 (xfstt) Malformed Packet Remote Overflow
The remote X Font Service for TrueType xfstt is vulnerable to a remote buffer overflow which may lead to code execution as root or a denial of service. C Tenable Network Security, Inc. Ref: Date: Tue, 15 Jul 2003 00:38:20 +0200 From: ruben unteregger To: [email protected] Subject: xfstt-1...
Important: Red Hat Security Advisory: : Updated wu-ftpd packages fix remote vulnerability.
Updated wu-ftpd packages are now available that fix a remotely exploitable security issue. The wu-ftpd package contains the Washington University FTP File Transfer Protocol server daemon. FTP is a method of transferring files between computers on a network. An off-by-one bug has been discovered i...
ePolicy Orchestrator Multiple Remote Vulnerabilities (OF, FS)
According to its banner, the remote version of ePolicy Orchestrator has multiple vulnerabilities which may allow an attacker to gain information on the MSDE installation of this host, or even execute arbitrary code. %NASLMINLEVEL 70300 C Tenable Network Security, Inc...
Important: Red Hat Security Advisory: stunnel security update
Updated stunnel packages are now available. These updates correct a potential vulnerability in stunnel's signal handling. Stunnel is a wrapper for network connections. It can be used to tunnel an unencrypted network connection over a secure connection encrypted using SSL or TLS or to provide a...
PHP < 4.3.3 php_check_safe_mode_include_dir Function Safemode Bypass
According to its banner, the version of PHP 4.3.x installed on the remote host is prior to 4.3.2. It is, therefore, potentially affected by an information disclosure vulnerability. Due to a flaw in the function phpsafemodeincludedir, a local attacker could bypass safe mode and gain unauthorized...