squid -- confusing results on empty acl declarations

Applying an empty ACL list results in unexpected behavior: anything will match an empty ACL list. For example, The meaning of the configuration gets very confusing when we encounter empty ACLs such as acl something src "/path/to/emptyfile.txt" httpaccess allow something somewhere gets parsed with...

Unchecked returns from kernel_read() in linux-2.6.10-rc2 kernel

Greetings, Fortify Software engineering team has looked at linux-2.6.10-rc2 and performed static analysis of the code. We have discovered several instances of the same potential vulnerability in the kernel code. Below we provide a more detailed description of the issues. 1. We have found several...

VulnCheck KEV: CVE-2004-0839

Internet Explorer in Windows XP SP2, and other versions including 5.01 and 5.5, allows remote attackers to install arbitrary programs via a web page that uses certain styles and the AnchorClick behavior, popup windows, and drag-and-drop capabilities to drop the program in the local startup...

Cyrus IMAPd -- APPEND command uses undefined programming construct

To support MULTIAPPENDS the cmdappend handler uses the global stage array. This array is one of the things that gets destructed when the fatal function is triggered. When the Cyrus IMAP code adds new entries to this array this is done with the help of the postfix increment operator in combination...

CAN-2004-0814: Linux terminal layer races

Linux 2.6.9 fixes a set of race conditions in the Linux terminal subsystem which are believed to go back to 2.2 kernels if not earlier. The race shows up problematically in two places. Firstly a user can cause crashes and other undefined behaviour by issuing a TIOCSETLD ioctl on a terminal...

RKDetect - behaviour based rootkit detection utility

Rkdetect is a little anomaly detection tool which can find services hidden by generic Windows rootkits like Hacker Defender. Tool very simply. It enumerates services on remote computer through WMI user level and Services Control Manager kernel level, compare result and display difference. In this...

MS Internet Explorer Overly Trusted Location Cache Exploit

No description provided by source. html body bfont size="5"Overly Trusted Location Variant Method Cache Vulnerability/font/b brbr a href="refresh" onclick="setTimeout'document.execCommand'Refresh'',1000;"font size=4 color=redGO!/font/abr +br This vulnerability seems to be unstable. For some...

security flaw

The kernel strncpy function in Linux 2.4 and 2.5 does not %NUL pad the buffer on architectures other than x86, as opposed to the expected behavior of strncpy as implemented in libc, which could lead to information leaks...

WFTPD Server GUI 3.21 - Remote Denial of Service

source: https://www.securityfocus.com/bid/9908/info WFTPD server front end GUI has been reported to be prone to a denial of service. The issue is reported to present itself if a user who is logged into the affected service issues an FTP request with a large parameter. This will cause the server G...

brk_poc.asm

The following program can be used to test if a x86 Linux system is vulnerable to the dobrk exploit; use at your own risk. $ nasm brkpoc.asm -o a.out $ chmod 755 a.out $ uname -a Linux test3 2.4.22-10mdk 1 Thu Sep 18 12:30:58 CEST 2003 i686 unknown unknown GNU/Linux $ ./a.out & 1 1698 $ cat...

E107 - 'Chatbox.php' Denial of Service

source: https://www.securityfocus.com/bid/8930/info It has been reported that E107 may be prone to a denial of service vulnerability. The issue has been reported to exist due to improper handling of user-supplied data in the form of HTML or script code to the 'Name:' field of Chatbox.php script...

[Full-Disclosure] SRT2003-07-07-0913 - Abnormal suid behavior in several applications

Secure Network Operations, Inc. http://www.secnetops.com Strategic Reconnaissance Team [email protected] Team Lead Contact [email protected] Our Mission: Secure Network Operations offers expertise in Networking, Intrusion Detection Systems IDS, Software Security Validation, and...

D-Link DI-704P - Syslog.HTM Denial of Service

D-Link DI-704P - Syslog.HTM Denial of Service source: https://www.securityfocus.com/bid/7686/info D-Link DI-704P has been reported prone to a remote denial of service vulnerability. The issue presents itself in a D-Link web interface page. It has been reported that when excessive is data passed U...

CVE-2002-1406

Unknown vulnerability in passwd for VVOS HP-UX 11.04, with unknown impact, related to "Unexpected behavior."...

CVE-2002-1406

Technical details about CVE-2002-1406 are not publicly provided in the supplied documents. No concrete affected product/version, root cause, or remediation is described here. Monitor updates from the CVE entries and connected sources for new information.

CVE-2002-1406

Unknown vulnerability in passwd for VVOS HP-UX 11.04, with unknown impact, related to "Unexpected behavior."...

Sun JDK/SDK 1.3/1.4 / IBM JDK 1.3.1 / BEA Systems WebLogic 5/6/7 - java.util.zip Null Value Denial of Service (2)

source: https://www.securityfocus.com/bid/7109/info Several implementations of the Java Virtual Machine have been reported to be prone to a denial of service condition. This vulnerability occurs in several methods in the java.util.zip class. The methods can be called with certain types of...

Sun JDKSDK 1.31.4 IBM JDK 1.3.1 BEA Systems WebLogic 567 - java.util.zip Null Value Denial of Service (3)

Sun JDKSDK 1.31.4 IBM JDK 1.3.1 BEA Systems WebLogic 567 - java.util.zip Null Value Denial of Service 3 source: https://www.securityfocus.com/bid/7109/info Several implementations of the Java Virtual Machine have been reported to be prone to a denial of service condition. This vulnerability occur...

CERT Advisory CA-2003-06 Multiple vulnerabilities in implementations of the Session Initiation Protocol (SIP)

-----BEGIN PGP SIGNED MESSAGE----- CERT Advisory CA-2003-06 Multiple vulnerabilities in implementations of the Session Initiation Protocol SIP Original release date: February 21, 2003 Last revised: -- Source: CERT/CC A complete revision history can be found at the end of this file. Systems Affect...

SILLY BEHAVIOR : Internet Explorer 5.5 - 6.0

Wednesday, August 14, 2002 The following represents a trivial yet elaborate method of injecting arbitrary html into the "My Computer" zone on win98 using the Internet Explorer series of browsers. Internet Explorer enjoys a unique component called the "Web Folder" component. This is a selectable...