5190 matches found
[SA12789] IceWarp Web Mail Cross-Site Scripting Vulnerabilities
TITLE: IceWarp Web Mail Cross-Site Scripting Vulnerabilities SECUNIA ADVISORY ID: SA12789 VERIFY ADVISORY: http://secunia.com/advisories/12789/ CRITICAL: Moderately critical IMPACT: Unknown, Cross Site Scripting WHERE: From remote SOFTWARE: IceWarp Web Mail 5.x http://secunia.com/product/3775/...
DSA-560-1 lesstif1-1 - integer and stack overflows
Bulletin has no description...
[SA12720] Online Recruitment Agency Unspecified Vulnerabilities
TITLE: Online Recruitment Agency Unspecified Vulnerabilities SECUNIA ADVISORY ID: SA12720 VERIFY ADVISORY: http://secunia.com/advisories/12720/ CRITICAL: Moderately critical IMPACT: Unknown WHERE: From remote SOFTWARE: Online Recruitment Agency 1.x http://secunia.com/product/4000/ DESCRIPTION: So...
[SA12703] IBM Trading Partner Interchange Arbitrary File Access Vulnerability
TITLE: IBM Trading Partner Interchange Arbitrary File Access Vulnerability SECUNIA ADVISORY ID: SA12703 VERIFY ADVISORY: http://secunia.com/advisories/12703/ CRITICAL: Moderately critical IMPACT: Exposure of system information, Exposure of sensitive information WHERE: From remote SOFTWARE: IBM...
Debian DSA-323-1 : noweb - insecure temporary files
Jakob Lell discovered a bug in the 'noroff' script included in noweb whereby a temporary file was created insecurely. During a review, several other instances of this problem were found and fixed. Any of these bugs could be exploited by a local user to overwrite arbitrary files owned by the user...
Debian DSA-161-1 : mantis - privilege escalation
A problem with user privileges has been discovered in the Mantis package, a PHP based bug tracking system. The Mantis system didn't check whether a user is permitted to view a bug, but displays it right away if the user entered a valid bug id. Another bug in Mantis caused the 'View Bugs' page to...
Debian DSA-194-1 : masqmail - buffer overflows
A set of buffer overflows have been discovered in masqmail, a mail transport agent for hosts without permanent internet connection. In addition to this privileges were dropped only after reading a user-supplied configuration file. Together this could be exploited to gain unauthorized root access ...
Debian DSA-152-1 : l2tpd - missing random seed
Current versions of l2tpd, a layer 2 tunneling client/server program, forgot to initialize the random generator which made it vulnerable since all generated random number were 100% guessable. When dealing with the size of the value in an attribute value pair, too many bytes were able to be copied...
Debian DSA-331-1 : imagemagick - insecure temporary file
imagemagick's libmagick library, under certain circumstances, creates temporary files without taking appropriate security precautions. This vulnerability could be exploited by a local user to create or overwrite files with the privileges of another user who is invoking a program using this librar...
Debian DSA-141-1 : mpack - buffer overflow
Eckehard Berns discovered a buffer overflow in the munpack program which is used for decoding respectively binary files in MIME Multipurpose Internet Mail Extensions format mail messages. If munpack is run on an appropriately malformed email or news article then it will crash, and perhaps can be...
ADVISORY: http response splitting in snipsnap
ADVISORY Author: Maestro me! Date: 14-SEP-04 Vendor: SnipSnap www.snipsnap.org Product: SnipSnap 0.5.2a Product description from vendor website: SnipSnap is a free and easy to install weblog and wiki tool written in Java. Problem: Http response splitting web cache poisoning, xss, yadayadayada -...
Ipswitch IMail Server < 8.13.0 Multiple Vulnerabilities
Binary data 2257.prm...
Opera < 7.54 Empty Embedded Object DoS
The version of Opera installed on the remote host contains a flaw that allows an attacker to crash this browser remotely. To exploit this flaw, an attacker would need to craft a rogue website containing an embedded 'CCCC' object with an empty 'src' tag in it and would need to lure a victim to vis...
[SA12387] Gaucho "Content-Type:" Header Processing Buffer Overflow Vulnerability
TITLE: Gaucho "Content-Type:" Header Processing Buffer Overflow Vulnerability SECUNIA ADVISORY ID: SA12387 VERIFY ADVISORY: http://secunia.com/advisories/12387/ CRITICAL: Highly critical IMPACT: System access WHERE: From remote SOFTWARE: Gaucho 1.x http://secunia.com/product/3843/ DESCRIPTION: Ta...
Bugs fixed in Version 1.4.3
In-Reply-To: [email protected] B. Unspecified File Download Vulnerability B1. An error in the MyDMS software allows to a registered users and only to registered users to download any file, such as /etc/passwd, by inserting in a parameter a text such as...
phpGroupWare Unspecified Remote File Inclusion
The version of PhpGroupWare hosted on the remote web server has a vulnerability that may permit remote attackers, without prior authentication, to include and execute malicious PHP scripts. Remote users may influence URI variables to include a malicious PHP script on a remote system, it is possib...
CVSTrac Invalid Ticket DoS
The remote host seems to be running cvstrac, a web-based bug and patch-set tracking system for CVS. This version contains a flaw related to invalid tickets that may allow an attacker to cause the application to crash. An attacker, exploiting this flaw, would be able to remotely shut down the...
CVSTrac history.c history_update Function Overflow
The remote host seems to be running cvstrac, a web-based bug and patch-set tracking system for CVS. This version contains a flaw related to the historyupdate function in history.c that may allow an attacker to cause a buffer overflow and execute arbitrary code on the remote system. Nessus has...
Mandrake Linux Security Advisory : gdm (MDKSA-2003:085)
Several vulnerabilities were discovered in versions of gdm prior to 2.4.1.6. The first vulnerability is that any user can read any text file on the system due to code originally written to be run as the user logging in was in fact being run as the root user. This code is what allows the examinati...
Mandrake Linux Security Advisory : bind (MDKSA-2002:038-1)
A vulnerability was discovered in the BIND9 DNS server in versions prior to 9.2.1. An error condition will trigger the shutdown of the server when the rdataset parameter to the dnsmessagefindtype function in message.c is not NULL as expected. This condition causes the server to assert an error...