Happy Labor Day from Snosoft

For your reading pleasure I have attached some of the communication between myself and CERT regarding the issues recently released at: ftp://ftp1.support.compaq.com/public/unix/v5.1/T64V51B19-C0136901-15143-ES-20020817.txt We are in the process of making our formal advisories out of these...

CVE-2002-0994

SunPCi II VNC uses a weak authentication scheme, which allows remote attackers to obtain the VNC password by sniffing the random byte challenge, which is used as the key for encrypted communications...

Ruslan Communications BodyBuilder - Authentication Bypass

Ruslan Communications BodyBuilder - Authentication Bypass source: https://www.securityfocus.com/bid/5008/info Ruslan Communications Builder is a tool designed to assist a user in creating a website. It allows for remote administration through a web interface, and is implemented in Java. Reportedl...

[LBYTE] Ruslan Communications <BODY>Builder SQL modification

Title: BODYBuilder SQL modification Author: mam0nt of Limpid Byte http://lbyte.void.ru/ Vendor: Ruslan Communications Vendor URL: http://ruslan-com.ru/ Vendor Status: Contacted, not replied Released: June, 13 2002 Background: BodyBuilder is a site building engine by Ruslan Communications writen i...

Ruslan Communications <Body>Builder - Authentication Bypass

source: https://www.securityfocus.com/bid/5008/info Ruslan Communications Builder is a tool designed to assist a user in creating a website. It allows for remote administration through a web interface, and is implemented in Java. Reportedly, user input supplied as the login password is not...

CVE-2001-0364

SSH Communications Security sshd 2.4 for Windows allows remote attackers to create a denial of service via a large number of simultaneous connections...

CVE-2001-0364

Technical details for CVE-2001-0364 are not publicly available in the provided documents; monitor for updates.

CVE-2001-0364: Undefined Security Weakness

SSH Communications Security sshd 2.4 for Windows allows remote attackers to create a denial of service via a large number of simultaneous connections...

CVE-2001-0364

SSH Communications Security sshd 2.4 for Windows allows remote attackers to create a denial of service via a large number of simultaneous connections...

CVE-2000-0806

The CVE-2000-0806 issue affects Check Point VPN-1/FireWall-1 4.1 and earlier, specifically the inter-module authentication mechanism (FWA1). The vulnerability allows remote attackers to cause a denial of service via inter-module communications bypass. The root cause is a flaw in FWA1 authenticati...

CVE-2000-0806: Undefined Security Weakness

The inter-module authentication mechanism fwa1 in Check Point VPN-1/FireWall-1 4.1 and earlier may allow remote attackers to conduct a denial of service, aka "Inter-module Communications Bypass."...

Weak CRC allows RC4 encrypted SSH1 packets to be modified without notice

Overview There is an information integrity vulnerability in the SSH1 protocol that allows RC4 encrypted packets to be modified without notice. Description Preconditions: Client has requested RC4 and server supports it. Compression is disabled. When using the RC4 stream cipher, SSH1 uses a cyclic...

CVE-2000-0269: Undefined Security Weakness

Emacs 20 does not properly set permissions for a slave PTY device when starting a new subprocess, which allows local users to read or modify communications between Emacs and the subprocess...

Axis Communications StorPoint CD - Authentication Bypass

Axis Communications StorPoint CD - Authentication Bypass source: https://www.securityfocus.com/bid/1025/info Axis StorPoint CD and Axis StorPoint CD/T are CD ROM servers actual hardware unitssold by Axis Communications. Both of these appliances support remote management via SNMP MIB-II and privat...

Axis Communications StorPoint CD - Authentication Bypass

source: https://www.securityfocus.com/bid/1025/info Axis StorPoint CD and Axis StorPoint CD/T are CD ROM servers actual hardware unitssold by Axis Communications. Both of these appliances support remote management via SNMP MIB-II and private enterprise MIB as well as from the web via a...

FreeBSD 3.3 - Seyon SetGID Dialer

FreeBSD 3.3 - Seyon SetGID Dialer source: https://www.securityfocus.com/bid/838/info FreeBSD 3.3-RELEASE ships with Seyon, a communications program which is known to have several vulnerabilities which can allow for a malicious user to elevate priviliges. The vulnerability, however, is that seyon ...

Sky Communications Skyfull 1.1.4 Mail Server - MAIL FROM Buffer Overflow

Sky Communications Skyfull 1.1.4 Mail Server - MAIL FROM Buffer Overflow // source: https://www.securityfocus.com/bid/759/info The Skyfull mail server version 1.1.4 has an unchecked buffer into which the argument from the MAIL FROM command is placed. This buffer can be overwritten and arbitrary...

Sky Communications Skyfull 1.1.4 Mail Server - MAIL FROM Buffer Overflow

// source: https://www.securityfocus.com/bid/759/info The Skyfull mail server version 1.1.4 has an unchecked buffer into which the argument from the MAIL FROM command is placed. This buffer can be overwritten and arbitrary code can be executed...

ssh-insertion-attack.txt

------------------------------------------------------------------------------- CORE SDI S.A. Buenos Aires, Argentina Security Advisory June 11th, 1998 SSH insertion attack ------------------------------------------------------------------------------- This advisory addresses a vulnerability...

WinWebserver-exploit.txt

http://www.sddt.com/files/library/98/06/25/tbc.html Source Programmers Discover Internet Server Bug Daily Transcript Business Report June 25, 1998 Programmers at San Diego Source, the online news service of the San Diego Daily Transcript, have discovered a security hole affecting Web server...