ZH2004-09SA.txt

ZH2004-09SA security advisory: PhpNewsManager Remote arbitrary files retrieving Discovered: 02 february 2004 Vendor Contacted: 10 february 2004 Published: 23 february 2004 Name: PhpNewsManager Affected Systems: 1.46 Issue: Remote file retrieving Author: G00db0y from Zone-h Security Labs -...

EEYE: Microsoft ASN.1 Library Bit String Heap Corruption

Microsoft ASN.1 Library Bit String Heap Corruption Release Date: February 10, 2004 Date Reported: September 25, 2003 Severity: High Remote Code Execution Systems Affected: Microsoft Windows NT 4.0 Microsoft Windows 2000 Microsoft Windows XP Microsoft Windows Server 2003 Description: eEye Digital...

[Full-Disclosure] smbmount disrupts Windows file sharing.

Announced: 2004-02-02 Type: Denial of Service Attack on Windows Impact: smbmount can stop Windows from sharing files Writer: Daniel Kabs, Germany [email protected] Credits: Thanks to Steve Ladjabi [email protected] Contents: 1. Abstract 2. Affected Systems 3. Attack Setup 4. Symptoms 5...

ZH2004-01SA (security advisory): Web Blog 1.1 Remote arbitrary files retrieving

ZH2004-01SA security advisory: Web Blog 1.1 Remote arbitrary files retrieving Published: 28 january 2004 Released: 28 january 2004 Name: Web Blog Affected Systems: 1.1 Issue: Remote file retrieving Author: Zone-h Security Labs Vendor: http://leifwright.com Description Zone-h Security Team has...

ZH2004-02SA (security advisory): PJ CGI Neo review (NeoBoard review) Remote arbitrary file retrieving

ZH2004-02SA security advisory: PJ CGI Neo review NeoBoard review Remote arbitrary file retrieving Published: 29 january 2004 Released: 29 january 2004 Name: PJ CGI Neo review NeoBoard review Affected Systems: Current version Issue: Remote file retrieving Author: Zone-h Security Labs Vendor:...

multiple payload handling flaws in isakmpd, again

0 Preface On 2003/11/06 a bug fix for a payload handling flaw in isakmpd described in http://securityfocus.com/archive/1/343173 was committed to CVS. Other payload handling flaws, which were not presented on a silver platter, but only mentioned in side notes, still remain unfixed. This posting wi...

[NEWS] Multiple Payload Handling Flaws in ISAKMPd

The following security advisory is sent to the securiteam mailing list, and can be found at the SecuriTeam web site: http://www.securiteam.com - - promotion The SecuriTeam alerts list - Free, Accurate, Independent. Get your security news from a reliable source...

PHP-Nuke Path Disclosure Vulnerability

PHP-Nuke Path Disclosure Vulnerability Published: 18 October 2003 Released: 16 October 2003 Affected Systems: PHP-Nuke 7.0 and possibly earlier versions. Vendor: http://www.phpnuke.org Description: ============ PHP-Nuke is a Web Portal System, storytelling software, news system, online community ...

Minihttpserver File-Sharing for NET Directory Traversal Vulnerability

Minihttpserver File-Sharing for NET Directory Traversal Vulnerability Affected Systems: File-Sharing for NET version: 1.5 and possibly earlier versions Vendor: Minihttpserver - http://www.minihttpserver.net Issue: Directory Traversal Vulnerability Released: 2 October 2003 Introduction:...

Comment Board XSS Vulnerability

Comment Board XSS Vulnerability Published: 24 September 2003 Released: 24 September 2003 Affected Systems: Comment Board Vendor: http://www.ymonda.co.uk Issue: Remote attackers can inject XSS script. Description: ============ "Comment Board works straight away with little or no configuration...

Thread-ITSQL XSS Vulnerability

Thread-ITSQL XSS Vulnerability Published: 24 September 2003 Released: 24 September 2003 Affected Systems: Thread-ITSQL Vendor: http://www.ymonda.co.uk Issue: Remote attackers can inject XSS script. Description: ============ "Thread-ITSQL message board product is designed specifically for SQL Serv...

uninitialized buffer in midnight commander

Midnight Commander is using uninitialized buffer for handling symlinks in VFS tar, cpio. See vfs/direntry.c, handling of buf at vfssresolvesymlink. I wonder but it works almost properly ;- On linux-i386 I can reach stack buffer overflow using specially crafted archive. Open...

Sendmail contains buffer overflow in ruleset parsing

Overview Sendmail contains a buffer overflow vulnerability in the code that parses rulesets. This vulnerability could allow a remote attacker to execute arbitrary code or cause a denial of service on a vulnerable system.This vulnerability does not affect the default configuration. Description...

NSFOCUS SA2003-06 : Microsoft Windows RPC DCOM Interface Heap Overflow Vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 NSFOCUS Security AdvisorySA2003-06 Topic: Microsoft Windows RPC DCOM Interface Heap Overflow Vulnerability Release Date: 2003-09-11 CVE CAN ID: CAN-2003-0528 http://www.nsfocus.com/english/homepage/research/0306.htm Affected system: ==================...

ZH2003-24SA (security advisory): ChitChat.NET XSS Vulnerability

ZH2003-24SA security advisory: ChitChat.NET XSS Vulnerability Published: 13 august 2003 Released: 13 august 2003 Name: ChitChat.NET Affected Systems: 2.0 Issue: Remote attackers can inject XSS script Author: [email protected] Vendor: http://clickcess.com/ Description Zone-h Security Team has...

Microsoft Windows 2000 RPC DCOM Interface DOS AND Privilege Escalation Vulnerability

Microsoft Windows 2000 RPC DCOM Interface DOS AND Privilege Escalation Vulnerability 1.Description: There is a vulnerability in the part of RPC that deals with message exchange over TCP/IP. The failure results because of incorrect handling of malformed messages. By sending a malformed messages to...

ZH2003-3SA (security advisory): Storefront sql injection: users info disclosure

ZH2003-3SA security advisory: Storefront sql injection: users info disclosure Published: 12/07/2003 Released: 12/07/2003 Name: Storefront sql injection: users info disclosure Affected Systems: StoreFront 6.0 and older versions? Issue: Remote attackers can obtain users info Author:...

Multiple Buffer Overflow Vulnerabilities Found in FTGate Pro Mail Server v. 1.22 (1328)

Multiple Buffer Overflow Vulnerabilities Found in FTGate Pro Mail Server v. 1.22 1328 http://www.ftgate.com Discovered by Dennis Rand www.Infowarfare.dk ------------------------------------------------------------------------ -----SUMMARY FTGatePro is Floosietek's flagship server. The comprehensi...

MS Windows SMB Authentication Remote Exploit

Exploit for unknown platform in category remote exploits ============================================ MS Windows SMB Authentication Remote Exploit ============================================ Exploit for "Authentication flaw in Windows SMB protocol" Release Date: April 24, 2003 Code by Haamed...

Windows 2003 win2k.sys vulnerability

BRIEF SYNOPSIS SUMMARY Under Windows NT5.2, all software that uses "EngTextOut" are exposed to BSOD when attempting to print non-ASCII characters. POINT OF INTEREST "win32k.sys" at 0xbf8bc8d7 Tue Mar 25 00:40:49 2003. IMPLICATIONS Envisage it. SYSTEMS AFFECTED Windows 2003 web...