Security Bulletin MS02-037: Server Response To SMTP Client EHLO Command Results In Buffer Overrun (Q326322)

---------------------------------------------------------------------- Title: Server Response To SMTP Client EHLO Command Results In Buffer Overrun Q326322 Date: 24 July 2002 Software: Microsoft Exchange 5.5 Impact: Ability to run arbitrary code Max Risk: Medium Bulletin: MS02-037 Microsoft...

Security Bulletin MS02-038: Cumulative Patch for SQL Server 2000 Service Pack 2 (Q316333)

-----BEGIN PGP SIGNED MESSAGE----- - ---------------------------------------------------------------------- Title: Cumulative Patch for SQL Server 2000 Service Pack 2 Q316333 Date: 24 July 2002 Software: Microsoft SQL Server 2000, Microsoft Desktop Engine MSDE 2000 Impact: Two vulnerabilities, bo...

Security Bulletin MS02-034: Cumulative Patch for SQL Server (Q316333)

-----BEGIN PGP SIGNED MESSAGE----- - ---------------------------------------------------------------------- Title: Cumulative Patch for SQL Server Q316333 Date: 10 July 2002 Software: SQL Server 2000 Impact: Elevation of privilege Max Risk: Moderate Bulletin: MS02-034 Microsoft encourages custome...

Remotely Exploitable Buffer Overruns in Microsoft's Commerce Server 2000/2 (#NISRNISR03062002)

NGSSoftware Insight Security Research Advisory Name: Microsoft Commerce Server 2000 & Commerce Server 2002 Systems Affected: WinNT, Win2K, XP Severity: High Risk Category: Buffer Overrun & Command Execution Vendor URL: http://www.microsoft.com/ Authors: Mark Litchfield [email protected] & Davi...

NetBSD Security Advisory 2002-006: buffer overrun in libc DNS resolver

-----BEGIN PGP SIGNED MESSAGE----- NetBSD Security Advisory 2002-006 ================================= Topic: buffer overrun in libc DNS resolver Version: NetBSD-current: source prior to June 26, 2002 NetBSD-1.6 beta:source prior to June 26, 2002 NetBSD-1.5.2: affected NetBSD-1.5.1: affected...

Apache 1.x2.0.x - Chunked-Encoding Memory Corruption (2)

Apache 1.x2.0.x - Chunked-Encoding Memory Corruption 2 // source: https://www.securityfocus.com/bid/5033/info When processing requests coded with the 'Chunked Encoding' mechanism, Apache fails to properly calculate required buffer sizes. This is believed to be due to improper signed interpretatio...

Apache 1.x/2.0.x - Chunked-Encoding Memory Corruption (2)

// source: https://www.securityfocus.com/bid/5033/info When processing requests coded with the 'Chunked Encoding' mechanism, Apache fails to properly calculate required buffer sizes. This is believed to be due to improper signed interpretation of an unsigned integer value. Consequently, several...

Apache 1.x/2.0.x - Chunked-Encoding Memory Corruption (1)

// source: https://www.securityfocus.com/bid/5033/info When processing requests coded with the 'Chunked Encoding' mechanism, Apache fails to properly calculate required buffer sizes. This is believed to be due to improper signed interpretation of an unsigned integer value. Consequently, several...

Apache 1.x2.0.x - Chunked-Encoding Memory Corruption (1)

Apache 1.x2.0.x - Chunked-Encoding Memory Corruption 1 // source: https://www.securityfocus.com/bid/5033/info When processing requests coded with the 'Chunked Encoding' mechanism, Apache fails to properly calculate required buffer sizes. This is believed to be due to improper signed interpretatio...

Security Bulletin MS02-028: Heap Overrun in HTR Chunked Encoding Could Enable Web Server Compromise (Q321599)

---------------------------------------------------------------------- Title: Heap Overrun in HTR Chunked Encoding Could Enable Web Server Compromise Q321599 Date: 12 June 2002 Software: Internet Information Server Impact: Run Code of Attacker's Choice Max Risk: Moderate Bulletin: MS02-028...

Oracle Reports Server Buffer Overflow (#NISR12062002B)

NGSSoftware Insight Security Research Advisory Name: Oracle 9iAS Reports Server Systems: All Severity: High Risk Category: Remote Buffer Overrun Vulnerability Vendor URL: http://www.oracle.com/ Author: David Litchfield [email protected] Advisory URL:...

Security Bulletin MS02-026: Unchecked Buffer in ASP.NET Worker Process (Q322289)

---------------------------------------------------------------------- Title: Unchecked Buffer in ASP.NET Worker Process Q322289 Date: 06 June 2002 Software: .NET Framework Impact: Denial of service, potentially run code of attacker's choice Max Risk: Moderate Bulletin: MS02-026 Microsoft...

RE: Reading local files in Netscape 6 and Mozilla (GM#001-NS)

Disturbing. Netscape sure must be in financial problems since they are selling out on their users security for a lousy $1000. I know for one that I personally will release any future Netscape advisories with full public disclosure and without prior Netscape notification. As a matter of fact, why...

IRIX syslogd vulnerability

-----BEGIN PGP SIGNED MESSAGE----- SGI Security Advisory Title: IRIX syslogd vulnerability Number: 20020405-01-I Date: April 24, 2002 Reference: CAN-1999-0171 Reference: CVE-1999-0566 - ----------------------- - --- Issue Specifics --- - ----------------------- It's been reported that under certa...

WebTrends Reporting Center

NGSSoftware Insight Security Research Advisory Name: WebTrends Reporting Center 4.0d Systems Affected: WinNT, Win2K, XP Severity: High Risk Category: Remote System Buffer Overrun Vendor URL: http://www.webtrends.com Author: Mark Litchfield [email protected] Advisory URL:...

KPMG-2002010: Microsoft IIS .htr ISAPI buffer overrun

-------------------------------------------------------------------- -=Microsoft IIS .htr ISAPI buffer overrun=- courtesy of KPMG Denmark BUG-ID: 2002010 CVE: CAN-2002-0071 Released: 11th Apr 2002 -------------------------------------------------------------------- Problem: ======== There is a...

Security Bulletin MS02-018 : Cumulative Patch for Internet Information Services (Q319733)

Title: Cumulative Patch for Internet Information Services Q319733 Date: 10 April 2002 Software: Microsoft Internet Information Server 4.0, Microsoft Internet Information Services 5.0, Microsoft Internet Information Services 5.1 Impact: Ten new vulnerabilities, the most serious of which could enab...

Fw: Multiple Vulnerabilties in Sambar Server

----- Original Message ----- From: NGSSoftware Insight Security Research Advisory NISR To: [email protected] Sent: Monday, April 01, 2002 12:07 PM Subject: Multiple Vulnerabilties in Sambar Server NGSSoftware Insight Security Research Advisory Name: Sambar Server 5.0 server.exe Systems...

MS02-006: Malformed SNMP Management Request Remote Overflow (314147)

A buffer overrun is present in the SNMP service on the remote host. By sending a malformed management request, an attacker could cause a denial of service and possibly cause code to run on the system in the LocalSystem context. C Tenable Network Security, Inc. include"compat.inc"; if description...

Phusion-web.txt

------oOo---------------- Phusion Webserver Directory Traversal, DoS Vulnerabilities and BufferOverrun, Released exploits Codes. ------oOo---------------- Phusion Webserver for Windows 9x/NT/2000 contains remote vulnerabilities which allow users to see and retrieve any file on the server. Exploit...