PHP 4.3.x/5.0 - 'openlog()' Buffer Overflow

source: https://www.securityfocus.com/bid/7210/info A buffer overflow has been reported in the PHP openlog function. By passing an argument of excessive size to the function, it may be possible for an attacker to overwrite memory, resulting in a denial of service. It is also possible for an...

phpsquidpass: unauthorized user deleting

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ppp-design found the following design error in phpsquidpass: Details - ------- Product: phpsquidpass Affected Version: 0.11 and maybe all versions before Immune Version: 0.2 OS affected: all OS with php Vendor-URL:...

Bug in QPopper (All Versions?)

Description: When sending a string that has 2048+ characters in it, the in.qpopper or popper process will begin to use massive amounts of CPU and will not stop until it is manually killed. Versions Affected: I tested this on 4.0.1 and 4.0.3. 4.0.2 is probably vulnerable also. Older versions may...

twlc advisory: all versions of php nuke are vulnerable...

twlc security divison 24/09/2001 Php nuke BUGGED. Found by: LucisFero and supergate ./twlc Summary This time the bug is really dangerous...it allows you to 'cp' any file on the box... or even upload files... Systems Affected all the versions ARE vulnerable except '5.0 RC1' i wonder why a released...

scx-sa-13.txt

============================================================================= Securax-SA-13 Security Advisory belgian.networking.security Dutch ============================================================================= Topic: all tty's can be written to when connecting Announced: 2001-01-01...

CVE-2000-0985

Buffer overflow in All-Mail 1.1 allows remote attackers to execute arbitrary commands via a long "MAIL FROM" or "RCPT TO" command...

CVE-2000-0985

Buffer overflow in All-Mail 1.1 allows remote attackers to execute arbitrary commands via a long "MAIL FROM" or "RCPT TO" command...

CVE-2000-0985

CVE-2000-0985 describes a buffer overflow in All-Mail 1.1 that allows remote attackers to execute arbitrary commands via a long MAIL FROM or RCPT TO command. The provided documents confirm the vulnerability description but do not include specific affected file versions beyond All-Mail 1.1, nor re...

@stake Advisory: All-Mail buffer overrun vulnerability (A101200-2 )

The signature was botched on the first one. Please use this is possible. -weld -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 @stake Inc. www.atstake.com Security Advisory Advisory Name: All-Mail buffer overrun vulnerability Release Date: 10/12/2000 Application: Nevis Systems All-Mail 1.1 Platform...

Дырка в All-Mail

Многочисленные переполнения буфера позволяют выполнение кода...

BEA's WebLogic *.jsp/*.jhtml remote command execution

Foundstone, Inc. http://www.foundstone.com "Securing the Dot Com World" Security Advisory BEA's WebLogic .jsp/.jhtml remote command execution ---------------------------------------------------------------------- FS Advisory ID: FS-073100-10-BEA Release Date: July 31, 2000 Product: WebLogic Vendo...

All Users startup folder left open if unattended install and OEMP reinstall=1

About a month ago I posted the following to the win2ksecadvice list. However, I received no response. I thought I'd try again since I consider this problem to be pretty serious since it will allow any user to introduce a code stream on another user. I recently noticed a problem with Windows 2000...

ns4.5-mail-passwd.txt

Date: Wed, 4 Nov 1998 18:29:55 +0100 From: Holger van Lengerich To: [email protected] Subject: Communicator 4.5 stores EVERY mail-password in preferences.js Hi! The Netscape Communicator 4.5 stores the crypted version of used mail-passwords for imap and pop3 even if you tell Netscape to not...

Visual Studio 2026 Security Update (18.5.2)

This security update applies to all editions of Visual Studio 2026, and will update client machines on the Stable channel to version 18.5.2. The client machines must be enabled to receive this administrator update, and by default Visual Studio must be closed on the client in order for the update ...

Visual Studio 2022 Security Update (17.12.22)

This security update applies to all editions of Visual Studio 2022, and will update client machines on the LTSC channel to version 17.12.22. The client machines must be enabled to receive this administrator update, and by default Visual Studio must be closed on the client in order for the update ...

Visual Studio 2022 version 17.14.17 update

This security update applies to all editions of Visual Studio 2022, and will update client machines on the Current channel to version 17.14.17. The client machines must be enabled to receive this administrator update, and by default Visual Studio must be closed on the client in order for the upda...

Microsoft Visual Studio 2010 Express for Windows Phone - All Languages

Microsoft Visual Studio 2010 Express for Windows Phone - ENU, DEU, ESN, FRA, ITA all languages...

Microsoft Visual Studio 2010 SP1 Express for Windows Phone - All Languages

Microsoft Visual Studio 2010 SP1 Express for Windows Phone - ENU, DEU, ESN, FRA, ITA all languages...

Security update 1970-01-01

...

Visual Studio 2022 Security Update (17.12.18)

This security update applies to all editions of Visual Studio 2022, and will update client machines on the LTSC channel to version 17.12.18. The client machines must be enabled to receive this administrator update, and by default Visual Studio must be closed on the client in order for the update ...