Directory Traversal Vulnerabilities in FTP Clients

Summary Title: Directory Traversal Vulnerabilities in FTP Clients Date: December 10, 2002 Author: Steve Christey [email protected] Revision: 1.3 Product: Multiple FTP and web clients OS/Platform: Multiple Vendor: Multiple Vendor Status: Vendors informed individually and through CERT/CC Risk: Medium...

Moderate: Red Hat Security Advisory: : : : Updated wget packages fix directory traversal bug

The wget packages shipped with Red Hat Linux 6.2 through 8.0 contain a security bug which, under certain circumstances, can cause local files to be written outside the download directory. Updated 10 July 2003 Added packages for Red Hat Linux on IBM iSeries and pSeries systems Versions of wget pri...

PHP-Nuke 6.0 - News Message HTML Injection

source: https://www.securityfocus.com/bid/5796/info Problems with PHPNuke could make it possible to execute arbitrary script code in a vulnerable client. PHPNuke does not sufficiently filter potentially malicious HTML code from news posts. As a result, when a user views a news posting that contai...

Cisco VPN 5000 Client - Buffer Overrun (2)

// source: https://www.securityfocus.com/bid/5734/info Buffer overrun vulnerabilities have been reported in the Cisco VPN 5000 UNIX clients available for Linux and Solaris systems. The condition affects the binaries 'closetunnel' and 'opentunnel', both installed setuid root by default. Malicious...

CVE-2002-0971

CVE-2002-0971 affects VNC, TightVNC, and TridiaVNC. Local users can run arbitrary code as LocalSystem by abusing the Win32 Messaging System to bypass the VNC GUI and reach the "+Add new clients+" dialogue box. Root cause indicated by vendor descriptions is access through GUI-bypass via messaging ...

CVE-2002-0485

Norton Anti-Virus NAV allows remote attackers to bypass content filtering via attachments whose Content-Type and Content-Disposition headers are mixed upper and lower case, which is ignored by some mail clients...

Remote Hole in IRC Client and Stuff

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 GOBBLES http://www.bugtraq.org ================================ GOBBLES Security Labs GSL is currently the largest non-profit security team in the world, with over 17 active members that are dedicated to bringing cutting edge material to the public th...

eDonkey 2000 ed2k: URL Buffer Overflow

Background: eDonkey 2000 http://www.edonkey2000.com is a popular peer to peer file sharing network with clients for Windows, Mac and Linux. One of the attractive features of the client is the addition of the ed2k 'virtual' protocol which allows for URLs which can start a download through the clie...

MIME::Tools Perl module and virus scanners

Background ---------- MIME::Tools is a very nice Perl module for parsing and constructing MIME-encoded mail messages. The latest stable version is 5.411a. MIME::Tools works very well on valid MIME messages. However, there are a number of problems if you use it to implement server-based mail...

Multiple Vulnerabilities in MDaemon + WorldClient

Advisory Title: Multiple Vulnerabilities in MDaemon + WorldClient Release Date: 07/05/2002 Application: WorldClient and MDaemon Platform: Windows Clients. Version: MDaemon/WorldClient 5.0.5.0 - and probably earlier versions Severity: Several Vulnerabilities - one of which gives system access...

Windows 2000 DCOM clients may leak sensitive information onto the network

BindView Security Advisory -------- Windows 2000 DCOM clients may leak sensitive information onto the network Issue Date: April 2, 2002 Contact: [email protected] Topic: Windows 2000 DCOM system may leak sensitive data onto the network Overview: Due to a flaw in Windows 2000's DCOM layer,...

CVE-2001-1154

CVE-2001-1154 affects Cyrus mail servers (versions 2.0.15, 2.0.16, and 1.6.24) running on BSDi 4.2 with IMAP enabled. The issue allows remote attackers to cause a denial-of-service condition (hang) by leveraging PHP IMAP clients. The available documents confirm the affected software stack and the...

CVE-2001-1154

Cyrus 2.0.15, 2.0.16, and 1.6.24 on BSDi 4.2, with IMAP enabled, allows remote attackers to cause a denial of service hang using PHP IMAP clients...

PT-2002-1073 · Red Hat +2 · Red Hat +2

Name of the Vulnerable Software and Affected Versions: OpenSSH versions 2.0 through 3.0.2 openssh-askpass-3.1p1 openssh-askpass-gnome-3.1p1 openssh-clients-3.1p1 openssh-server-3.1p1 openssh-3.1p1 Description: The issue is related to an off-by-one error in the channel code of OpenSSH, allowing...

CVE-2000-0892

Some telnet clients allow remote telnet servers to request environment variables from the client that may contain sensitive information, or remote web servers to obtain the information via a telnet: URL...

CVE-2000-0892

CVE-2000-0892 describes a vulnerability where some telnet clients may disclose environment variables to remote telnet servers or via telnet: URLs, due to RFC 1572 (NEW-ENVIRON). The underlying issue is the ability of a server to request environment variables before authentication, potentially exp...

SECURITY.NNOV: few vulnerabilities in multiple RADIUS implementations

Topic : Vulnerabilities in multiple RADIUS clients and servers Author : 3APA3A [email protected] Released : December, 18 2001 Public release : March, 04 2002 Affected Software : Cistron = 1.6.4 12 Cistron 1.6.5 2 XtRadius = 1.1-pre1 12 FreeRADIUS = 0.3 12 ICRadius = 0.18.1 12 YARD Radius =...

Gator installer Plugin allows any software to be installed

Advisory Title: Gator installer Plugin allows any software to be installed Release Date: 21/01/2002 Application: Gator installer plugin for Internet Explorer GAIN Platform: Windows clients with Internet Explorer. DLL version - 3.0.6.1 Severity: Malicious users can install backdoor software and ga...

[ GFISEC04102001 ] Internet Explorer and Access allow macros to be executed automatically

GFI Security Labs Advisory http://www.gfi.com/ ----Title: GFISEC04102001 Internet Explorer and Access allow macros to be executed automatically ----Published: 12.FEB.2002 ----Vendor Status: Microsoft has been informed and we have worked with them to release a patch. ----Systems Affected: Windows...

CVE-2001-1515

Macintosh clients, when using NT file system volumes on Windows 2000 SP1, create subdirectories and automatically modify the inherited NTFS permissions, which may cause the directories to have less restrictive permissions than intended...