Apache Web Server vulnerable to DoS via crafted HTTP request

Overview Some versions of the Apache Web server are vulnerable to denial-of-service attacks by crafted HTTP requests. Description A vulnerability exists in some versions the Apache Web HTTPD Server running on Windows 98SE, Windows 2000 SP1, and OS/2. The vulnerability appears to be a bounds...

Denial of Service in Sphereserver

H Zero Seven Security Advisory 15.02.2002 ------------------------------------------- SphereServer Denial of Service Vulnerability -------------------------------------------- Summary: The SphereServer is an Ultima Online Roleplay Server Multiplayer. Some people use this inofficial Server to host...

ScriptEase:WebServer Edition vulnerability

Program: ScriptEase:WebServer Edition Url: www.nombas.com Problem: Any user can read files on server using one of examle scripts: comment2.jse Systems affected: Linux, Novell Netware, Windows 9x/NT/2k Example: WindowsNovell Netware:...

Buffer overflow vulnerability in grpck command line utility

Overview The CERT/CC has received a public report of a local buffer overflow vulnerability in the grpck utility. Description The grpck utility performs syntax checking of /etc/group and /etc/gshadow group information files. This utility contains a buffer overflow vulnerability in the section of...

IBM WebSphere on UNIX security alert !

====================================================================== IBM Websphere reveals system root password. Author : Heikki Tunkelo [email protected] Date : 13.12.2001 ====================================================================== === Brief description === It is possible...

Advisory CA-2001-30 Multiple Vulnerabilities in lpd

CERT Advisory CA-2001-30 Multiple Vulnerabilities in lpd Original release date: November 05, 2001 Last revised: -- Source: CERT/CC A complete revision history can be found at the end of this file. Systems Affected BSDi BSD/OS Version 4.1 and earlier Debian GNU/Linux 2.1 and 2.1r4 FreeBSD All...

def-2001-30

====================================================================== Defcom Labs Advisory def-2001-30 Oracle9iAS Web Cache/2.0.0.1.0 Multiple DoS and Buffer Overflow Authors: George Hedfors [email protected] Andreas Junestam [email protected] Release Date: 2001-10-18...

Security Update: [CSSA-2001-SCO.23] Open Unix, UnixWare 7: dtsession environment buffer overflow

To: [email protected] [email protected] [email protected] [email protected] Caldera International, Inc. Security Advisory Subject: Open Unix, UnixWare 7: dtsession environment buffer overflow Advisory number: CSSA-2001-SCO.23 Issue date: 2001 Octobe...

getty_ps creates temporary files insecurely

Overview gettyps is an open-source software package designed to support logons to the console and terminals. Some implementations create temporary files insecurely with predictable names, leading to corruption of arbitrary files via symbolic link attack. Description Under certain circumstances,...

suse: sdbsearch.cgi vulnerability

Hello, I found weakness in sdbsearch.cgi script which is a part of Suse distribution. This is perl script and since Suse 7.1 they have introduced some form of protection interpreter is called with tainting checking. However, I think it isn't enough and this bug still may produce danger...

Multiple Remote DoS vulnerabilities in Microsoft DCE/RPC deamons

BindView Security Advisory -------- Multiple Remote DoS vulnerabilities in Microsoft DCE/RPC deamons Issue Date: July 30, 2001 Contact: [email protected] Topic: Many Microsoft DCE/RPC servers are vulnerable to remote DoS attacks Overview: Many DCE/RPC servers don't do proper parameter...

[SEC] Hole in PHPLib 7.2 prepend.php3

The PHPLib Team announces phplib-7.2d, availible now. This release fixes the recently discovered hole in prepend.php3 that can allow a remote attacker to inject non-local code into any phplib based script. Please note that this affects all applications that depend on PHPLib. Some apps have decide...

SA2001-04 : Solaris dtmail Buffer Overflow Vulnerability

NSFOCUS Security AdvisorySA2001-04 Topic: Solaris dtmail Buffer Overflow Vulnerability Release DateЈє 2001-7-24 CVE CAN ID : CAN-2001-0548 BUGTRAQ ID : 3081 Affected system: ================ Sun Solaris 2.6 SPARC/x86 Sun Solaris 7 SPARC/x86 Not affected system: ==================== Sun Solaris 8...

Microsoft Services for UNIX Telnet server is vulnerable to denial of service via memory leak

Overview The telnet server included in the Microsoft Services for Unix package contains a denial-of-service vulnerability that may cause the system to become unstable or crash. Description The telnet server included in the Microsoft Services for Unix SFU package contains a memory leak that can le...

Check Point FireWall-1 RDP Bypass Vulnerability

FOR PUBLIC RELEASE ------------------------------------------------------------------------ Inside Security GmbH Vulnerability Notification Revision 1.2 2001-07-09 ------------------------------------------------------------------------ The latest version of this document is available at...

BisonFTP Server V4R1 *.bdl upload Directory Traversal

BisonFTP Server V4R1 .bdl upload Directory Traversal AFFECTED SYSTEMS Bison FTP Server V4R1 DESCRIPTION BisonFTP Server V4R1 allows any user to upload .bdl a file format invented to make links to directories : PUT local.bdl remote.bdl We don't even need to append a dot, we can just upload it If w...

Broker 5.9.5.0 Directory Traversal

Broker 5.9.5.0 Directory Traversal AFFECTED SYSTEMS Broker 5.9.5.0 DESCRIPTION Broker has the same .lnk upload vulnerability than the one I recently found in WFTPD, with : PUT local.lnk remote.lnk. We can create our own link, this way, we can traverse the homedirectory. It's even easier than the...

su-wrapper 1.1.1 Local root exploit.

/ - su-wrapper.c - / // / /usr/sbin/su-wrappersu-wrapper 1.1.1 local root exploit. / / / / Package Description: / / su-wrapper is an little util which lets special users execute / / processes under another uid/gid. / / / / Vulnerability Description: / / If a long line on the first argument is...

kosch suid wrapper 1.1.1 - Local Buffer Overflow

// source: https://www.securityfocus.com/bid/2837/info A boundary condition error exists in suid wrapper or 'su-wrapper.' The overflow occurs when a string exceeding approximately 1032 characters is given as the first argument when the program is run. Because the program is installed setuid root,...

WFTPD 32-bit (X86) 3.00 R5 Directory Traversal / Buffer Overflow / DoS

WFTPD 32-bit X86 3.00 R5 Directory Traversal / Buffer Overflow / DoS AFFECTED SYSTEMS WFTPD 32-bit X86 version 3.00 R5, probably others DESCRIPTION 1 Directory Traversal WFTPD v3.00 R5 is vulnerable to a directory traversal bug that allows remote users to browse through any directory on the...