621 matches found
Samba Mangling Method Hash Overflow
The remote Samba server, according to its version number, is vulnerable to a buffer overflow if the option 'mangling method' is set to 'hash' in smb.conf which is not the case by default. An attacker may exploit this flaw to execute arbitrary commands on the remote host. C Tenable Network Securit...
RHEL 2.1 : unzip (RHSA-2003:200)
Updated unzip packages resolving a vulnerability allowing arbitrary files to be overwritten are now available. Updated 15 August 2003 Ben Laurie found that the original patch to fix this issue missed a case where the path component included a quoted slash. These updated packages contain a new pat...
RHEL 2.1 : apache (RHSA-2003:244)
Updated Apache and modssl packages that fix several minor security issues are now available for Red Hat Enterprise Linux. The Apache HTTP server is a powerful, full-featured, efficient, and freely-available Web server. Ben Laurie found a bug in the optional renegotiation code in modssl which can...
RHEL 2.1 : wu-ftpd (RHSA-2004:096)
An updated wu-ftpd package that fixes two security issues is now available. The wu-ftpd package contains the Washington University FTP File Transfer Protocol server daemon. FTP is a method of transferring files between machines. Glenn Stewart discovered a flaw in wu-ftpd. When configured with...
SAP Internet Transaction Server
To the List, ============================================================ SEC-CONSULT Security REPORT SAP Internet Transcaction Server ======================OOOOOOOOOOOO========================== Product: ITS ITS, Version 4620.2.0.323011, Build 46B.323011 win32/IIS 5.0 Vulnerablities: -...
[Full-Disclosure] SRT2003-07-16-0358 - bru has buffer overflow and format issues
Secure Network Operations, Inc. http://www.secnetops.com Anvil IDS appliance http://www.secnetops.com/products Strategic Reconnaissance Team [email protected] Team Lead Contact [email protected] Our Mission: Secure Network Operations...
Several security issues were reported to BugTraq mailing list. However most of these issues were already fixed some time ago.
PMASA-2003-1 Announcement-ID: PMASA-2003-1 Date: 2003-06-18 Summary Several security issues were reported to BugTraq mailing list. However most of these issues were already fixed some time ago. Description Reporter wrote that he found following issues within phpMyAdmin code each issue is followed...
Important: Red Hat Security Advisory: ghostscript security update
A ghostscript package fixing a command execution vulnerability is now available. GNU Ghostscript is an interpreter for the PostScript language, and is often used when printing to printers that do not have their own built-in PostScript interpreter. A flaw has been discovered in the way Ghostscript...
Samba TNG < 0.3.1 Multiple Remote Vulnerabilities
The remote Samba server, according to its version number, is vulnerable to multiple flaws that could let an attacker gain a root shell on this host. C Tenable Network Security, Inc. Ref: Date: Sat, 22 Mar 2003 21:03:11 +0100 CET From: Stephan Lauffer To: [email protected] Cc:...
Ximian Evolution 1.x - UUEncoding Parsing Memory Corruption
source: https://www.securityfocus.com/bid/7117/info The Evolution mail client supports "uuencoded" content and decodes it automatically when a message is initially parsed. A memory corruption error is present in the parsing component that can result in the client crashing when specially malformed...
GiantRat Mailer exposes PoP password
Security advisory Issue: GiantRat Mailer exposes plain text PoP password Date: 03/13/03 Vendor first notified: Febuary 2003 Affected versions: All tested v3.1, 2.x, 1.x ABOUT GiantRat Mailer: GiantRat Mailer is an innovative email client that has settings for the sight-impaired and has optional...
Important: Red Hat Security Advisory: pam security update
Updated PAM packages are now available. These packages correct a bug in pamxauth's handling of authorization data for the root user. Updated 12 March 2003 Added packages for Red Hat Enterprise Linux ES and Red Hat Enterprise Linux WS The pamxauth module is used to forward xauth information from...
Advisory: Corrupt RPM Query Vulnerability
Description: Arbitrary command executing on query of corrupt RPM files note: you do not have to install the file to be affected Severity: Very Low to Low Unless running an lpd with no access restrictions, in which case, it may allow remote compromize. Affects: rpm-4.0.2-7x probably also earlier...
NERF Advisory #2 - 1C:Arcadia multiple vulnerablilities.
--== NERF gr0up security advisory 2 ==-- Multiple vulnerabilities in web-shop 1C: Arcadia, in module tradecli.dll 1. Show path scripts directory. Exploit: http://host/scripts/tradecli.dll?template=nonexistfile Will show error message, witch consist full path to work dir usually /scripts. Advice f...
(SRPRE00004) WebCalendar 0.9.26
================================================= Secure Reality Pty Ltd. Security Pre-Advisory 4 SRPRE00004 http://www.securereality.com.au ================================================= Title Remote command execution vulnerabilities in WebCalendar Released 23/4/2001 This is a pre-release. Th...
RG-1000 802.11 Residential Gateway default WEP key disclosure flaw
Name: RG-1000 default network name and WEP key exposure Product: Orinoco RG-1000 www.wavelan.com Severity: An attacker can determine the network name SSID, and current WEP encryption key-- allowing unrestricted access to the LAN. Author: William A. Arbaugh [email protected] http://www.cs.umd.edu/waa...
Virus Buster 2001(ver8.02) Buffer Overflow
Hi, I found a vulnerability in the feature of virus scan for e-mail in Virus Buster 2001program version 8.02 from Trend Micro Inc. Virus Buster 2001 is a japanese software package that has similar functions of PC-cillin 2000 such as eMail Virus Scanning and Browser Scanningscanning web contents...
FreeBSD-SA-00:24.libedit
-----BEGIN PGP SIGNED MESSAGE----- ============================================================================= FreeBSD-SA-00:24 Security Advisory FreeBSD, Inc. Topic: libedit reads config file from current directory Category: core Module: libedit Announced: 2000-07-05 Affects: All versions of...
Echo Service Detection
The remote host is running the 'echo' service. This service echoes any data which is sent to it. This service is unused these days, so it is strongly advised that you disable it, as it may be used by attackers to set up denial of services attacks against this host. C Tenable Network Security, Inc...
CVE-2024-23426
This CVE entry is rejected/not used and does not represent an active vulnerability record.