MS03-017: Windows Media Player Skin Download Overflow (817787)

The remote host is using a version of Windows Media player that is vulnerable to a directory traversal attack through its handling of 'skins'. An attacker could exploit this flaw to execute arbitrary code on this host with the privileges of the user running Windows Media Player. To exploit this...

Lotus iNotes vulnerable to buffer overflow via PresetFields FolderName field

Overview Lotus iNotes contains a buffer overflow that could permit a remote attacker to execute arbitrary code or cause a denial of service on a vulnerable server. Description Lotus iNotes Web Access is a database application that provides "access to corporate messaging services and personal...

Cisco PIX SSH/telnet dDOS vulnerability CSCdy51810

Security Advisory 05.11.02: Title : Cisco PIX SSH/telnet DOS vulnerability CSCdy51810 Reporter : Nils Reichen LANexpert SA Affected software : PIX OS 6.2.2 and probably old version Risk : High Date : November 5, 2002 URL: Full description should be posted in few days on http://www.giac.org/GCIA.p...

Cisco Security Advisory: Cisco ONS15454 and Cisco ONS15327 Vulnerabilities

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Cisco Security Advisory: Cisco ONS15454 and Cisco ONS15327 Vulnerabilities Revision 1.0 For Public Release 2002 October 31 at 1600 UTC ---------------------------------------------------------------------- Contents Summary Affected Products Details...

HP Tru64 UNIX "uucp" contains buffer overflow (SSRT2275)

Overview The HP Tru64 UNIX implementation of "uucp" contains a locally exploitable buffer overflow. Description "uucp" is used to copy files between hosts. A locally exploitable buffer overflow in "uucp" may permit a local attacker to gain elevated privileges and execute arbitrary code on a...

Security Advisory: Cisco VPN Client Multiple Vulnerabilities

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Cisco Security Advisory: Cisco VPN Client Multiple Vulnerabilities Revision 1.0 For Public Release 2002 August 12 UTC 1500 ---------------------------------------------------------------------- Contents Summary Affected Products Details Impact Softwar...

MITKRB5-SA-2002-001: Remote root vulnerability in MIT krb5 admin system

-----BEGIN PGP SIGNED MESSAGE----- MIT krb5 Security Advisory 2002-001 2002-08-02 Topic: Remote root vulnerability in MIT krb5 admin system Severity: Remote user may be able to gain root access to a KDC host. SUMMARY ======= There is an integer overflow bug in the SUNRPC-derived RPC library used ...

Security Advisory: Cisco ONS15454 IP TOS Bit Vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Cisco Security Advisory: Cisco ONS15454 IP TOS Bit Vulnerability ================================================================ Revision 1.0 For Public Release 2002 June 19 at 1500 UTC...

Microsoft Remote Access Service API contains additional buffer overflow vulnerability via phonebook entries

Overview The Microsoft Remote Access Service API contains a vulnerability that allows local attackers to execute arbitrary code with system privileges. Description The Microsoft Remote Access Service RAS Application Programming Interface API allows Windows programs to make dial-up connections to...

Re: cqure.net.20020412.bordermanager_36_mv1.a

On Wed, 2002-05-08 at 05:03, Patrik Karlsson wrote: cqure.net Security Vulnerability Report No: cqure.net.20020412.bordermanager36mv1.a ============================================== Vulnerability Summary --------------------- Problem: Multiple vulnerabilities identified in Novell Border Manager...

Cisco Security Advisory: LDAP Connection Leak in CTI when User Authentication Fails

-----BEGIN PGP SIGNED MESSAGE----- Cisco Security Advisory: LDAP Connection Leak in CTI when User Authentication Fails Revision 1.0 For Public Release 2002 March 27 17:00 UTC - ------------------------------------------------------------------------------- Contents Summary Affected Products Detai...

Vulnerabilities in multiple RADIUS clients and servers

Topic : Vulnerabilities in multiple RADIUS clients and servers Author : 3APA3A Released : December, 18 2001 Affected Software : Lucent/Livingston RADIUS 3= 2.1 12? Cistron 3= 1.6.4 12 Cistron 1.6.5 2 XtRadius 3= 1.1-pre1 12 FreeRADIUS 3= 0.3 12 ICRadius 3= 0.18.1 12 YARD Radius 3= 1.0.19 12 Ascen...

SECURITY.NNOV: directory traversal and path globbing in multiple archivers

Hello, Topic: Directory traversal and path globbing in multiple archivers Author: 3APA3A [email protected] Affected Software: GNU tar = 1.13.19, Info-Zip UnZip = 5.42, RARSoft rar = 2.02, PKWare pkzipc = 4.00 Not affected: rar 2.80, WinZIP 8.0 Risk: low/average Released: July, 2, 2001...

Security Bulletin (MS00-072)

Microsoft Security Bulletin MS00-072 - -------------------------------------- Patch Available for "Share Level Password" Vulnerability Originally posted: October 10, 2000 Summary ======= Microsoft has released a patch that eliminates a security vulnerability in Microsoftr Windows 95, 98, 98SE, an...

Ошибка между imapd И mail.local

Hello, Надеюсь, что хотя бы из чувства патриотизма может быть еще кто-нибудь в дальнейшем решится писать в этот список рассылки до или хотя бы одновременно публикации в Bugtraq : Ошибка несерьезная, но достаточно интересная. Дело в том, что в данном случае ни одна из программ не содержит явной...

Microsoft Security Bulletin MS00-051 - -------------------------------------- Patch Available for "Excel REGISTER.ID Function" Vulnerability Originally posted: July 26, 2000 Summary ======= Microsoft has released a patch that eliminates a security vulnerability in Microsoftr Microsoft Excel 97 an...

Gauntlet Firewall Vulnerability

In some circumstances NAI Gauntlet firewall performs Network Address Translation in an unexpected manner, causing incorrect routable IP addresses to be generated. This can enable unprivileged users on the protected network to knowingly or unknowingly generate spurious source IP addresses. Vendor...

Security Bulletin (MS00-022)

Patch Available for "XLM Text Macro" Vulnerability Originally Posted: April 03, 2000 Summary ======= Microsoft has released a patch that eliminates a security vulnerability in Microsoftr Excel. The vulnerability could allow a macro to run without generating the expected security warning. Frequent...

cuartango-window.txt

Cuartango Window http://pages.whowhere.com/computers/cuartangojc/cuartangow1.html Affected software Microsoft Internet Explorer 4 Risks Your computer is at risk a malicious VBScript can get full control over your system. The VBScript can de everything : delete files, install viruses, read your...

PT-1999-1178 · Undefined · Undefined

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned. Description: The issue allows ICMP echo ping from arbitrary hosts. Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability...