04WebServer multiple bugs

Crossite scripting, DOS device access...

QuiXplorer < 2.3.1 item Parameter Directory Traversal File Access

Binary data 1727.prm...

SUSE-SA:2004:020: kernel

The remote host is missing the patch for the advisory SUSE-SA:2004:020 kernel. Multiple security vulnerabilities are being addressed with this security update of the Linux kernel. Kernel memory access vulnerabilities are fixed in the e1000, decnet, acpiasus, alsa, airo/WLAN, pss and mpu401 driver...

[Squid 2004-OSC2Nuke-001] Inadequate Security Checking in OSC2Nuke

=========================================================================== =========================================================================== Advisory: 2004-OSC2Nuke-001 Affected Software: OSC2Nuke 7x version 1 OSCNukeLite V3.1 and earlier Main Developer: Dreamlite Development Team Modu...

Multiple SLMail/SLWebMail bugs

Multiple buffer overflows, file access, etc...

Moderate: Red Hat Security Advisory: kernel security update

Updated kernel packages are now available that fix a few security issues, an NFS performance issue, and an e1000 driver loading issue introduced in Update 3. The Linux kernel handles the basic functions of the operating system. Alan Cox found issues in the R128 Direct Render Infrastructure that...

CVE-2003-1301

Sun Java Runtime Environment JRE 1.x before 1.4.211 and 1.5.x before 1.5.006, and as used in multiple web browsers, allows remote attackers to cause a denial of service application crash via deeply nested object arrays, which are not properly handled by the garbage collector and trigger invalid...

Moderate: Red Hat Security Advisory: : Updated Net-SNMP packages fix security and other bugs

Updated Net-SNMP packages are available to correct a security vulnerability and other bugs. The Net-SNMP project includes various Simple Network Management Protocol SNMP tools. A security issue in Net-SNMP versions before 5.0.9 could allow an existing user/community to gain access to data in MIB...

[SECURITY] [DSA-392-1] New webfs packages fix buffer overflows, file and directory exposure

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - -------------------------------------------------------------------------- Debian Security Advisory DSA 392-1 [email protected] http://www.debian.org/security/ Matt Zimmerman September 29th, 2003 http://www.debian.org/security/faq -...

Important: Red Hat Security Advisory: : : : Updated 2.4 kernel for pSeries and iSeries fixes vulnerabilities

Updated kernel packages, based on the 2.4.18 kernel, are now available for Red Hat Linux 7.1 for iSeries and pSeries systems. Please see the NOTE at the end of the description for important information about booting the new kernel on your system. The Linux kernel handles the basic functions of th...

[SECURITY] [DSA 265-1] New bonsai packages fix several vulnerabilities

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - -------------------------------------------------------------------------- Debian Security Advisory DSA 265-1 [email protected] http://www.debian.org/security/ Martin Schulze March 21st, 2003 http://www.debian.org/security/faq -...

Cisco VPN 3000 Concentrator Multiple Vulnerabilities (CSCdx07754, CSCdx24622, CSCdx24632)

The remote VPN concentrator is subject to multiple flaws : - XML public rule - HTML pages access - HTML login processing This vulnerability is documented as Cisco bug ID CSCdx07754, CSCdx24622 and CSCdx24632. C Tenable Network Security, Inc. Thanks to Nicolas FISCHBACH [email protected] for his...

Multiple cgihtml vulnerabilities

Overview -------- cgihtml is a collection of routines for parsing World Wide Web WWW Common Gateway Interface CGI input and outputting HyperText Markup Language HTML. http://www.eekim.com/software/cgihtml/ According to the authors website, it has potentially been used in the implementation of...

[SECURITY] [DSA 202-1] New IM packages fix insecure temporary file creation

-------------------------------------------------------------------------- Debian Security Advisory DSA 202-1 [email protected] http://www.debian.org/security/ Martin Schulze December 3rd, 2002 http://www.debian.org/security/faq -...

Multiple problems with Pingtel xpressa SIP Phones

Multiple problems leading to full remote access...

Security holes : Rose, EasyNews, User Online, Mon Album, KorWebLog

Hello people : Product 1 : Rose http://www.jinxm.co.uk Version : 4.52 Problem : - Admin access Exploit : - newsadmin/upload.php?userinfousername=hop&userinfouserlevel=100 Product 2 : EasyNews http://www.webrc.ca Version : 4.3 Problem : - Admin access Exploits : - admin.php?enlogid=0&action=users ...

CGIscript.net - csPassword.cgi - Multiple Vulnerabilities

CGIscript.net - csPassword.cgi - Multiple Vulnerabilities --------------------------------------------------------------------- Date : May 29, 2002 Product : csPassword.cgi Vendor : WWW.CGIscript.NET, LLC. Homepage : http://www.cgiscript.net/ DISCUSSION:...

Apple OSX sliplogin overflow

side note ... isn't it odd that I can run gdb on a suid binary? Osx version 10.1.3 localhost: elguapo ls -al /usr/sbin/sliplogin -r-sr-xr-x 1 root wheel 14700 Dec 8 10:49 /usr/sbin/sliplogin localhost: elguapo sliplogin perl -e 'print "A" x 9000' Bus error localhost: elguapo uname -a Darwin...

Security holes in WoltLab Burning Board

Product : WoltLab Burning Board http://www.woltlab.de Versions : 1.1.0 and less Problems : - XSS - Access to users/admins accounts More details in french : http://www.ifrance.com/kitetoua/tuto/wbboard.txt translated by google : http://translate.google.com/translate?u=http3A...

Security holes in ASP-Nuke

Product : ASP-Nuke http://www.asp-nuke.com Versions : RC1, RC2 Problems : RC1 : - By-passing of filters against HTML RC2 : - Access to all accounts - Cross Site Scripting - Path disclosure More details : in french : http://www.ifrance.com/kitetoua/tuto/ASPNuke.txt translated by Google :...