phpGB: mysql injection bug

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ppp-design found the following mysql-injection-bug in phpGB: Details - ------- Product: phpGB Affected Version: 1.20 and maybe all versions before Immune Version: 1.40 OS affected: all OS with php Vendor-URL: http://www.walzl.net Vendor-Status:...

[Mantis Advisory/2002-01] SQL poisoning vulnerability in Mantis

Mantis Advisory/2002-01 SQL poisoning vulnerability in Mantis 0. Table of Contents 1. Introduction 2. Summary / Impact analysis 3. Affected versions 4. Workaround / Solution 5. Detailed explanation 6. Contact details 1. Introduction Mantis is an Open Source web-based bugtracking system, written i...

A bug in the Kerberos4 ftp client may cause heap overflow which leads to remote code execution

Kerberos4 ftp client is a simple ftp client, with the extensions defined by RFC 2228. When authentication fails with AUTH, client will use USER/PASS command as other ones. A bug in the code may cause a heap overflow which leads to remote code execution. The overflow occurs when the server respond...

MHonArc v2.5.2 Script Filtering Bypass Vulnerability

MHonArc v2.5.2 Script Filtering Bypass Vulnerability ==================================================== Affected: --------- MHonArc v2.5.2 http://www.mhonarc.org/ Fixed: ------ MHonArc v2.5.3 http://www.mhonarc.org/MHonArc/CHANGES Problem: -------- MHonArc has a feature which filters out...

Security Update: [CSSA-2002-SCO.3] UnixWare 7: message catalog environment variable vulnerability

To: [email protected] [email protected] [email protected] Caldera International, Inc. Security Advisory Subject: UnixWare 7: message catalog environment variable vulnerability Advisory number: CSSA-2002-SCO.3 Issue date: 2002 February 7 Cross reference: 1. Problem Descripti...

AtheOS: escaping from a chroot jail

------- AtheOS ------- AtheOS is a free desktop operating system under the GPL license. AtheOS currently run on Intel, AMD and other compatible processors and support the Intel Multi Processor architecture. AtheOS home page is : http://www.atheos.cx ------- Vulnerability ------- A chroot call is...

def-2001-01: ImageCast IC3 Control Center DoS

====================================================================== Defcom Labs Advisory def-2001-01 ImageCast IC3 Control Center DoS Author: Peter Grьndl [email protected] Release Date: 2001-01-08 ======================================================================...

PT-2000-1640 · Pccs · Pccs Mysqldatabase Admin Tool Manager

Name of the Vulnerable Software and Affected Versions: PCCS MySQLDatabase Admin Tool Manager versions 1.2.4 and earlier Description: The issue allows remote attackers to obtain sensitive information, such as the administrative password, because the file dbconnect.inc is installed within the web...

PT-1997-1165 · Rusers · Rusers

Name of the Vulnerable Software and Affected Versions: rusers affected versions not specified Description: The issue exposes valid user information to any entity on the network due to a version of rusers being run. Recommendations: At the moment, there is no information about a newer version that...