Mandrake Security may make unexpected system modifications

Overview The Mandrake Security utility included with Mandrake Linux may make unexpected modifications that affect system security. Description Mandrake Linux includes a tool named Mandrake Security msec that allows system administrators to manage and audit various system parameters associated wit...

CVE-2001-1366

netscript before 1.6.3 parses dynamic variables, which could allow remote attackers to alter program behavior or obtain sensitive information...

Linux kernel IP Masquerading "destination loose" (DLOOSE) configuration passes arbitrary UDP traffic

Overview The default configuration of the IP Masquerade feature of certain Linux 2.2 kernels may allow unsolicited inbound UDP packets to traverse a NAT gateway and reach a translated network. Description As defined in RFC 1631, Network Address Translation NAT provides a means to translate a loca...

Endymion SakeMail and MailMan File Disclosure Vulnerability

Product: SakeMail - Webmailsystem http://www.endymion.com Problem Description: due to missing input-validation it is possible to read xml/other files with sakemails permissions read THIS javanullbyte.html for additional infos on nullbytes and java-classes! Example: a HTTP-request to:...

Microsoft IIS 5.0 - False Content-Length Field Denial of Service

source: https://www.securityfocus.com/bid/3667/info Microsoft IIS 5.0 may be prone to a denial of service condition when sent a specially crafted malformed HTTP GET header. If an IIS 5.0 web server is sent a crafted HTTP GET request which contains a falsified and excessive "Content-Length" field,...

CVE-2001-1069

libCoolType library as used in Adobe Acrobat acroread on Linux creates the AdobeFnt.lst file with world-writable permissions, which allows local users to modify the file and possibly modify acroread's behavior...

Internet Explorer DHTML"Download Behavior" can be tricked into exposing local files

Overview The download behavior of Internet Explorer 5.0 can be used to perform arbitrary operations on local files. Description Internet Explorer 5.0 includes a dynamic HTML DHTML behavior called "download behavior." A "behavior" is a software object that specifies some behavior of a web page...

Vulnerability: CylantSecure

Summary: CylantSecure is a kernel patch and system that analyses behavior and kills programs that deviates from the "normal" system behaviour. The vulnerability lies in the processessing delay that occurs between a process violating some security rule and the actual killing of the process a user...

reading from execve()ed setuid memory

Posted to bugzilla.redhat.com: Tue, 15 May 2001 06:43:27 -0400 This was then made unaccessable, and I've seen nothing that looks like a fix yet. A month and a half seems like long enough to work it out. Contents of https://bugzilla.redhat.com/bugzilla/showbug.cgi?id=40658 as posted before the pag...

TrendMicro InterScan VirusWall shared folder problem

I could not find any reference to this particular issue on bugtraq, and as it seems rather serious I decided to submit it. This message concerns what seems to be a security 'feature' in all versions of InterScan SMTP VirusWall for Windows NT at least through version 3.4. The problem is not with t...

Security Advisory: FreeBSD-SA-00:70.ppp-nat

-----BEGIN PGP SIGNED MESSAGE----- ============================================================================= FreeBSD-SA-00:70 Security Advisory FreeBSD, Inc. Topic: ppp "denyincoming" does not correctly deny incoming packets Category: core Module: ppp Announced: 2000-11-14 Credits: Robin...

XFree86 server overflow

XFree86 3.3.6 and probably 4.0.0 as well ; - by running X server no matter it's setuid, or called from setuid Xwrapper - works in both cases, seems to me Xwrapper in default RH 6.x distro is rather dumb ; with -xkbmap parameter and over 2100 of 'A's or shellcode, again, it's rather trivial to...

TCP/IP 'Chorusing' Windows DoS

Microsoft Windows 95 and 98 clients have the ability to bind multiple TCP/IP stacks on the same MAC address, simply by having the protocol added more than once in the Network Control panel. The remote host has several TCP/IP stacks with the same IP bound on the same MAC address. As a result, it...

IE5_download_vuln.txt

The following is a Security Bulletin from the Microsoft Product Security Notification Service. Please do not reply to this message, as it was sent from an unattended mailbox. Microsoft Security Bulletin MS99-040 -------------------------------------- Patch Available for "Download Behavior"...

IE5_vuln.txt

After hearing of some confusion regarding this vulnerability I thought it might be useful to post the description from our SF database to the list. This was written up by Eric Schultze and myself, and we would like to thank Georgi Guninski, Steve Lipner, and David LeBlanc for their help. Thanks...

Microsoft Internet Explorer 5 - Download Behaviour

Microsoft Internet Explorer 5 - Download Behaviour Microsoft Internet Explorer 5.0 for Windows 95/Windows 98/Windows NT 4 Download Behavior Vulnerability source: https://www.securityfocus.com/bid/674/info The "download behavior" feature of Microsoft's Internet Explorer 5 may allow a malicious web...

Microsoft Internet Explorer 5 - Download Behaviour

Microsoft Internet Explorer 5.0 for Windows 95/Windows 98/Windows NT 4 Download Behavior Vulnerability source: https://www.securityfocus.com/bid/674/info The "download behavior" feature of Microsoft's Internet Explorer 5 may allow a malicious web site operator to read files on an IE5 client...

shadow.root.uid.65536.txt

Date: Mon, 24 May 1999 20:44:28 +0200 From: Lord Evil To: [email protected] Subject: UID 65536 and shadow-19990307 Recently one of our admins installed the shadow-19990307 package. While playing around I noticed that if a new user is created with UID 65536, he will become root upon login. No...

inn.2.x.inndstart.txt

Date: Tue, 11 May 1999 11:24:06 -0400 From: Forrest J. Cavalier III Reply-To: [email protected] To: [email protected] Subject: INN 2.0 and higher. Root compromise potential Copyright 1999 Forrest J. Cavalier III, Mib Software This information is provided by Mib Software,...

msie4-persistent-connect.txt

Date: Fri, 22 Jan 1999 14:15:32 -0600 From: Joel Moses To: [email protected] Subject: IE4 Persistent Connection Bug Hi, everyone. Working with MCI/WorldCom, we've identified a problem with IE 4 which may or may not have security implications, but is definately naughty behavior, in our opinions...