[UNIX] Snif File Disclosure Vulnerability

The following security advisory is sent to the securiteam mailing list, and can be found at the SecuriTeam web site: http://www.securiteam.com - - promotion The SecuriTeam alerts list - Free, Accurate, Independent. Get your security news from a reliable source...

Applied Watch Command Center 1.0 - Authentication Bypass (2)

// source: https://www.securityfocus.com/bid/9124/info A vulnerability has been identified in the system that may allow an attacker to bypass authentication to add attacker supplied IDS alerts and new user accounts in the console. Successful exploitation of these issues may allow an attacker to...

Sun Java Virtual Machine 1.x - Slash Path Security Model Circumvention

source: https://www.securityfocus.com/bid/8879/info A vulnerability has been identified in the Sun Java Virtual Machine packaged with JRE and SDK. This issue results in the circumvention of the Java Security Model, and can permit an attacker to execute arbitrary code on vulnerable hosts. import...

[Full-Disclosure] Proof of concept for Windows Messenger Service overflow

/ DoS Proof of Concept for MS03-043 - exploitation shouldn't be too hard. Launching it one or two times against the target should make the machine reboot. Tested against a Win2K SP4. "The vulnerability results because the Messenger Service does not properly validate the length of a message before...

IBM DB2 Discovery Service Malformed UDP Packet Remote DoS

It was possible to crash the IBM DB2 UDP-based discovery listener on the remote host by sending it a packet with more than 20 bytes. An unauthenticated attacker can use this attack to make this service crash continuously, thereby denying service to legitimate users. C Tenable Network Security, In...

Flying Dog Software Powerslave 4.3 Portalmanager - 'sql_id' Information Disclosure

source: https://www.securityfocus.com/bid/8659/info It has been reported that Powerslave Portalmanager is prone to an information disclosure issue that may allow remote attackers to gain access to sensitive information about the underlying database structure. The problem is reported to exist in t...

LSH 1.x - Remote Buffer Overflow (2)

// source: https://www.securityfocus.com/bid/8655/info lsh has been reported prone to a remote buffer overflow vulnerability. The condition is reported to present itself in fairly restrictive circumstances, and has been reported to be exploitable pre-authentication. Successful exploitation could...

myServer 0.4.x - cgi-lib.dll Remote Buffer Overflow (PoC)

myServer 0.4.x - cgi-lib.dll Remote Buffer Overflow PoC source: https://www.securityfocus.com/bid/8612/info myServer has been reported prone to a remote buffer overflow vulnerability. It is possible to trigger this issue by sending overly long values for URI parameters. Although unconfirmed, this...

Srcpd 2.0 - Multiple Buffer Overflow Vulnerabilities

// source: https://www.securityfocus.com/bid/8467/info Several stack-based buffer overflow vulnerabilities exist in multiple srcpd commands that may allow an attacker to run arbitrary code on a vulnerable host. The vulnerability is due to the lack of boundary checking in the affected functions,...

MS Internet Explorer Object Data Remote Exploit (M03-032)

CVE-ID：CVE-2003-0701CNNVD-ID：CNNVD-200308-125漏洞影响范围：•Microsoft Internet Explorer 5.01 •Microsoft Internet Explorer 5.5 •Microsoft Internet Explorer 6.0 •Microsoft Internet Explorer 6.0 for Windows Server 2003 解决方案：官方已发布升级补丁，请立即升级到最新版本。 titleby malware M03-032 Exploit/title script language=vbs...

Eudora WorldMail 2.0 - Search Cross-Site Scripting

source: https://www.securityfocus.com/bid/8403/info It has been reported that a cross-site scripting issue exists in the search utility of the software. It is possible that an attacker may create a malicious link containing script code that could be executed in a user's browser. The successful...

CDRTools 2.0 - RSCSI Debug File Arbitrary Local File Manipulation

source: https://www.securityfocus.com/bid/8328/info It has been reported that the rscsi utility may provide for the modification of ownership and the corruption of arbitrary attacker specified files. It has been reported that a local attacker may invoke the rscsi utility to corrupt or seize group...

Gallery 1.21.3.x - Search Engine Cross-Site Scripting

Gallery 1.21.3.x - Search Engine Cross-Site Scripting source: https://www.securityfocus.com/bid/8288/info Gallery is prone to a cross-site scripting vulnerability. This issue is present in the search engine facility provided by the software. An attacker could exploit this issue by constructing a...

Alt-N WebAdmin 2.0.x - 'USER' Remote Buffer Overflow (1)

// source: https://www.securityfocus.com/bid/8024/info Alt-N WebAdmin is prone to a buffer overflow condition. This is due to insufficient bounds checking on the USER parameter. Successful exploitation could result in code execution with SYSTEM level privileges. / WebAdmin.dll remote proof of...

Microsoft Windows XP2000NT 4.0 - HTML Converter HR Align Buffer Overflow

Microsoft Windows XP2000NT 4.0 - HTML Converter HR Align Buffer Overflow source: https://www.securityfocus.com/bid/8016/info Microsoft Windows platforms are prone to a boundary condition error in the HTML converter. If the 'Align' attribute of the 'HR' tag is given an excessively large value, an...

VisNetic WebMail 5.8.6 .6 - Information Disclosure

VisNetic WebMail 5.8.6 .6 - Information Disclosure source: https://www.securityfocus.com/bid/8018/info VisNetic WebMail is prone to an information disclosure vulnerability. Reportedly, by appending a dot '.' character to the end of a URI request to WebMail, the source code of PHP files may be...

silentthought simple Web server 1.0 - Directory Traversal

silentthought simple Web server 1.0 - Directory Traversal source: https://www.securityfocus.com/bid/7888/info It has been reported that Simple Web Server fails to properly sanitize web requests. By sending a malicious web request to the vulnerable server, using directory traversal sequences, it i...

silentthought simple Web server 1.0 - Directory Traversal

source: https://www.securityfocus.com/bid/7888/info It has been reported that Simple Web Server fails to properly sanitize web requests. By sending a malicious web request to the vulnerable server, using directory traversal sequences, it is possible for a remote attacker to access sensitive...

Activity Monitor 2002 2.6 - Remote Denial of Service

Activity Monitor 2002 2.6 - Remote Denial of Service // source: https://www.securityfocus.com/bid/7748/info A vulnerability has been reported for Activity Monitor 2002 that may be exploited to remotely trigger a denial of service condition. The problem occurs while handling data received from hos...

OneOrZero Helpdesk 1.4 - TUpdate.php SQL Injection

OneOrZero Helpdesk 1.4 - TUpdate.php SQL Injection source: https://www.securityfocus.com/bid/7609/info An SQL injection issue has been reported to affect OneOrZero Helpdesk. The error presents itself in a OneOrZero Helpdesk script that fails to sufficiently sanitize user-supplied input before...