[Full-disclosure] [xfocus-SD-060314]Microsoft Office Excel Buffer Overflow Vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Relase Date: 2006-03-15 CVE: CVE-2006-0031 Affected Products: ================== Microsoft Office Excel 2000 Microsoft Office Excel XP Microsoft Office Excel 2003 Impact: ======= Microsoft Excel is a popular spreadsheet program of Microsoft Office...

IRM 017: Multiple Vulnerabilities in Infovista Portal SE

---------------------------------------------------------------------- IRM Security Advisory No. 017 Multiple Vulnerabilities in Infovista Portal SE Vulnerability Type / Importance: Directory Traversal / High Information Leakage / Low Problem Discovered: January 20th 2006 Vendor Contacted: Januar...

IRM 013: Ultraapps Issue Manager is vulnerable to Privilege Escalation

---------------------------------------------------------------------- IRM Security Advisory No. 013 Ultraapps Issue Manager is vulnerable to Privilege Escalation Vulnerablity Type / Importance: Privilege Escalation / High Problem discovered: November 25th 2005 Vendor contacted: November 25th 200...

Avirt gateway insecure telnet proxy

It was possible to connect to the remote telnet server without password and to get a command prompt with the 'DOS' command. An attacker may use this flaw to get access on your system. OpenVAS Vulnerability Test $Id: avirtgatewaytelnet.nasl 8023 2017-12-07 08:36:26Z teissa $ Description: Avirt...

Compaq Web SSI DoS

It was possible to kill the remote web server by requesting something like: / This is probably a Compaq Web Enterprise Management server. SPDX-FileCopyrightText: 2004 Michel Arboi Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right...

CERN httpd CGI name heap overflow

It was possible to kill the remote web server by requesting GET /cgi-bin/A.AAAA...A HTTP/1.0 This is known to trigger a heap overflow in some servers like CERN HTTPD. SPDX-FileCopyrightText: 2005 Michel Arboi Some text descriptions might be excerpted from a referenced sources, and are Copyright C...

[Full-disclosure] iDEFENSE Security Advisory 10.24.05: SCO Unixware Setuid ppp prompt Buffer Overflow Vulnerability

SCO Unixware Setuid ppp prompt Buffer Overflow Vulnerability iDEFENSE Security Advisory 10.24.05 http://www.idefense.com/application/poi/display?type=vulnerabilities October 24, 2005 I. BACKGROUND SCO UnixWare is a UNIX operating system. More information is available at:...

Rational ClearQuest Cross-Site Scripting Vulnerability

Secunia Advisory: SA16717 Release Date: 2005-09-20 Critical: Less critical Impact: Cross Site Scripting Where: From local network Solution Status: Vendor Patch Software: Rational ClearQuest 2002 Rational ClearQuest 2003 Select a product and view a complete list of all Patched/Unpatched Secunia...

Sun Solaris "tl" Driver Denial of Service Vulnerability

Secunia Advisory: SA16874 Release Date: 2005-09-20 Critical: Less critical Impact: DoS Where: Local system Solution Status: Vendor Patch OS: Sun Solaris 10 Select a product and view a complete list of all Patched/Unpatched Secunia advisories affecting it. Description: A vulnerability has been...

Symantec Brightmail AntiSpam Denial of Service Vulnerabilities

Secunia Advisory: SA16733 Release Date: 2005-09-07 Critical: Moderately critical Impact: DoS Where: From remote Solution Status: Vendor Patch Software: Symantec Brightmail AntiSpam 6.x Select a product and view a complete list of all Patched/Unpatched Secunia advisories affecting it. Description:...

GuppY Multiple Vulnerabilities

Secunia Advisory: SA16707 Release Date: 2005-09-06 Critical: Highly critical Impact: Cross Site Scripting System access Where: From remote Solution Status: Vendor Patch Software: GuppY 4.x Select a product and view a complete list of all Patched/Unpatched Secunia advisories affecting it...

Apache PCRE Integer Overflow Vulnerability

Secunia Advisory: SA16688 Release Date: 2005-09-05 Critical: Less critical Impact: Privilege escalation Where: Local system Solution Status: Vendor Patch Software: Apache 2.0.x Select a product and view a complete list of all Patched/Unpatched Secunia advisories affecting it. CVE reference:...

UnixWare ICMP Message Handling Denial of Service

Release Date: 2005-09-05 Critical: Less critical Impact: DoS Where: From remote Solution Status: Vendor Patch OS: UnixWare 7.x.x Select a product and view a complete list of all Patched/Unpatched Secunia advisories affecting it. CVE reference: CAN-2004-0790 CAN-2004-0791 CAN-2004-1060 CAN-2005-00...

mod_ssl "SSLVerifyClient" Security Bypass Security Issue

modssl "SSLVerifyClient" Security Bypass Security Issue Secunia Advisory: SA16700 Release Date: 2005-09-05 Critical: Moderately critical Impact: Security Bypass Where: From remote Solution Status: Vendor Patch Software: modssl 2.x Select a product and view a complete list of all Patched/Unpatched...

myBloggie "username" SQL Injection Vulnerability

Secunia Advisory: SA16699 Release Date: 2005-09-05 Critical: Moderately critical Impact: Security Bypass Manipulation of data Where: From remote Solution Status: Vendor Patch Software: myBloggie 2.x Select a product and view a complete list of all Patched/Unpatched Secunia advisories affecting it...

WebGUI Perl Code Execution Vulnerabilities

Secunia Advisory: SA16682 Release Date: 2005-09-02 Critical: Highly critical Impact: System access Where: From remote Solution Status: Vendor Patch Software: WebGUI 6.x Select a product and view a complete list of all Patched/Unpatched Secunia advisories affecting it. Description: Some...

OpenSSH Two Security Issues

Secunia Advisory: SA16686 Release Date: 2005-09-02 Critical: Less critical Impact: Security Bypass Privilege escalation Where: From remote Solution Status: Vendor Patch Software: OpenSSH 3.x OpenSSH 4.x Select a product and view a complete list of all Patched/Unpatched Secunia advisories affectin...

FreeStyle Wiki Arbitrary Command Injection Vulnerability

Secunia Advisory: SA16612 Release Date: 2005-08-30 Critical: Moderately critical Impact: System access Where: From remote Solution Status: Vendor Patch Software: FreeStyle Wiki 3.x Select a product and view a complete list of all Patched/Unpatched Secunia advisories affecting it. Description: A...

iDEFENSE Security Advisory 2005-05-24.4

Ipswitch IMail Web Calendaring Arbitrary File Read Vulnerability iDEFENSE Security Advisory 05.24.05 www.idefense.com/application/poi/display?id=242&type=vulnerabilities May 24, 2005 I. BACKGROUND Ipswitch Collaboration Suite ICS is a comprehensive communication and collaboration solution for...

NukeETXSS.txt

NukeET 'codigo' variable cross site scripting vendor url:http://www.truzone.org advisore:http://lostmon.blogspot.com/2005/05/ nukeet-codigo-variable-cross-site.html Vendor confirmed : yes exploit available: yes NukeET Contains a flaw too that allows a remote cross site scripting attack.This flaw...