NSFOCUS SA2000-09 : AHG EZshopper Loadpage.cgi File List Disclosure Vulnerability

NSFOCUS Security AdvisorySA2000-09 Topic: AHG EZshopper Loadpage.cgi File List Disclosure Vulnerability Release DateЈє Dec 13rd, 2000 CVE Candidate Numbers: CAN-2000-1092 Affected system: ================ Alex Heiphetz Group EZshopper v.3.0 for Unix Alex Heiphetz Group EZshopper v.2.0 for Unix...

OpenBSD Exploit

HP2 advisory HP2 advisory HP2 advisory HP2 advisory HP2 advisory - | | | www.hackphreak.org | | | | Version : Hackphreak advisory 2 of many | | Author : RLoxleyhackphreak / condemnation / EHAP / RSH / ZSH soon| | Contributed : All of Team Hackphreak thanks alot & SSG | | Topic : A non-privledged...

NSFOCUS SA2000-07 : Microsoft IIS 4.0/5.0 CGI File Name Inspection Vulnerability

NSFOCUS Security AdvisorySA2000-07 Topic: Microsoft IIS 4.0/5.0 CGI File Name Inspection Vulnerability Release DateЈє Nov 7th, 2000 CVE Candidate Numbers: CAN-2000-0886 BUGTRAQ ID : 1912 Affected system: ================ - Microsoft IIS 4.0 SP6 - Microsoft IIS 5.0 Not affected system:...

Ultraseek 3.1.x Remote DoS Vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Ultraseek 3.1.x Remote DoS Vulnerability USSR Advisory Code: USSR-2000056 Public Disclosure Date: October 30, 2000 Vendors Affected: Ultraseek Corporation. http://www.ultraseek.com. Systems Affected: Ultraseek 3.1 Sun Solaris Ultraseek 3.1 Microsoft...

Advisory def-2000-02: Cisco Catalyst remote command execution

====================================================================== Defcom Labs Advisory def-2000-02 Cisco Catalyst remote command execution Author: Olle Segerdahl [email protected] Release Date: 2000-10-26 ======================================================================...

CVE-2000-1214

Buffer overflows in the 1 outpack or 2 buf variables of ping in iputils before 20001010, as distributed on Red Hat Linux 6.2 through 7J and other operating systems, may allow local users to gain privileges...

D.o.S Vulnerability in vqServer

DHC Advisory Advisory for vqServer 1.4.49 vqServer is made by vqSoft. Site: http://www.vqsoft.com by nemesystm of the DHC http://dhcorp.cjb.net - [email protected] /-|=explaination=|- When sending vqServer version 1.4.49 a malformed URL request it will crash the service. This has been verifi...

Roxen security alert: Problems with URLs containing null characters.

Roxen 2.0 up to version 2.0.68 has a vulnerability where using URLs containing null characters can gain the browser access to information he is not authorized to: Directory listings in directories with index files In normal filesystems: the sourcecode for RXML files, Pike scripts, CGIs etc...

Oracle Web Listener for AIX DoS

Oracle Web Listener for AIX DoS Advisory Code: VIGILANTE-2000002 Release Date: July 4, 2000 Systems Affected: OracleWebListener/4.0.7.0.0 for AIX OracleWebListener/4.0.8.1.0 for AIX Possibly other operating systems as well, this has not been tested. Systems not Affected: OracleWebListener/4.0.8.0...

KDE::KApplication feature?

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - ------ TESO Security Advisory 2000/05/29 KDE KApplication configfile vulnerability Summary =================== A bug within the KDE configuration-file management has been discovered. Due to insecure creation of configuration files via...

Alert: Carello File Creation flaw

Cerberus Information Security Advisory CISADV000524b http://www.cerberus-infosec.co.uk/advisories.shtml Released : 24th May 2000 Name : Carello Web file overwriting vulnerability Affected Systems : Windows NT running IIS Issue : Remote attackers can write to a server and view source of .asp files...

sses-sshauth.txt

Sword & Shield Enterprise Security, Inc. - Security Advisory www.sses.net, Copyright c 2000 Advisory: Secure Shell Authentication Vulnerability Release Date: May 10, 2000 Application: sshd Severity: High - A user local or remote can log into any account with a valid login shell. Status: Affected...

CISADV000505.txt

Cerberus Information Security Advisory CISADV000505 http://www.cerberus-infosec.co.uk/advisories.shtml Released : 5th May 2000 Name : DNewsweb Buffer Overflow Affected Systems : nix/Win32 Web Servers running Dnewsweb Issue : Attackers can remotely execute arbitrary code Author : Mark Litchfield...

CISADV000503.txt

Cerberus Information Security Advisory CISADV000503 http://www.cerberus-infosec.co.uk/advisories.shtml Released : 3rd May 2000 Name : Listserv Web Archives Buffer Overflow Affected Systems : nix/Win32 Web Servers running Issue : Attackers can remotely execute arbitrary code Author : David...

Alert: DMailWeb buffer overflow

Cerberus Information Security Advisory CISADV000504 http://www.cerberus-infosec.co.uk/advisories.shtml Released : 4th May 2000 Name : Dmailweb Buffer Overflow Affected Systems : nix/Win32 Web Servers running Issue : Attackers can remotely execute arbitrary code Author : David Litchfield...

spj-003-000 - S0ftPj Advisory

SPJ-003-000: .::::::::+ s0ftpr0ject 99 +::::::::. ::::+ Digital Security for Y2K +:::: :::'""""'""""'""""'""""'""'""::: ::'.gS$"$Sn. .gS$"$Sn. Sn.:: :: $$$$$ $$$$$ $$$$$ $$$$$ $$$$ :: :: $$$$$ $$$$$ $$$$$ $$$$ :: :: $$$$$$$$$n $$$$$ $$$$$ $$$$ :: :: $$$$$ $$$$$s$$$$' $$$$ :: :: $$$$$ $$$$$ $$$$$...

bindview.syskey.txt

BindView Security Advisory -------- Windows NT's SYSKEY feature Issue date: December 16, 1999 Contact: Todd Sabin Topic: Vulnerability in Windows NT's SYSKEY encryption Overview: SYSKEY does not fully protect the SAM from off-line attacks. Specifically, dictionary and brute-force password crackin...

smartserver3.remote.txt

BindView Security Advisory SmartServer3 Remote Buffer Overflow Technical Advisory Issue date: 11/11/99 Contact: Andrew Reiter Topic ----- There is a buffer overflow in NetCPlus' SmartServer3 POP3 server which can allow a remote attacker to execute arbitrary code on the machine. Affected Systems...

freebsd_root_exploit.txt

Subject: FreeBSD and other BSDs? local root explot To: [email protected] -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 / c 1999 babcia padlina ltd. bug in ftsprint function allows to overwrite any file in system, when running /etc/security script executed from 'daily' scripts. affected...

dtspcd_vuln.txt

Subject: Vulnerability in dtspcd To: [email protected] Hello, I discovered the following security problem in dtspcd, part of CDE: Description ----------- The CDE subprocess daemon /usr/dt/bin/dtspcd contains an insufficient check on client credentials. Impact ------ The insufficient check...