cdwrite 1.3 insecure tmp file handling vulnerability.

Application: cdwrite 1.3 Versions: 1.3 Vendor: Cezary M. Kruk & H. P. de Vries Impact: Could allow attacker to overwrite/manipulate files as the user running cdwrite. Vendor status: Vendor contacted, no reply yet. Date: 06/12/03 Introduction "Cdwrite is the shell for creation of data and audio...

Security hole in MatrikzGB

Security hole in MatrikzGB Guestbook 15/8/2003 Vulnerable Versions: Version 2.0 and prior Version 3 not tested Summary: MatrikzGB was written by Thomas Hempel for www.onsite.org. A bug in index.php allows a user with a regular user account to give administrator rights to himself. Details: The bug...

S21SEC-023 - Vignette multiple Cross Site Scripting vulnerabilities

ID: S21SEC-023-en Title: Multiple Cross Site Scripting vulnerabilities in Vignette Date: 03/04/2003 Status: Vendor contacted and solution available Scope: HTML code Execution in client browsers Platforms: All Author: rpinuaga Location: http://www.s21sec.com/es/avisos/s21sec-023-en.txt Release:...

S21SEC-018 - Vignette memory leak AIX Platform

ID: S21SEC-018-en Title: Vignette memory leak AIX Platform Date: 15/03/2003 Status: Vendor contacted and solution available Scope: Revelation of memory variables Platforms: AIX Author: ecruz Location: http://www.s21sec.com/es/avisos/s21sec-018-en.txt Release: External S 2 1 S E C...

Multiple Vulnerabilities in Mirabilis ICQ Pro 2003a client

Advisory ID Internal CORE-2003-0303 Advisory Information: Date Published: 2003-05-05 Last Update: 2003-05-02 Advisory ID: CORE-2003-0303 Bugtraq IDs:7461, 7462, 7463, 7464, 7465, 7466 CVE Names:CAN-2003-0235, CAN-2003-0236, CAN-2003-0237, CAN-2003-0238, CAN-2003-0239 CERT:VU936164, VU792988,...

Unchecked Buffer in Opera 7.02

Tested version : Opera 7.02 Build 2668 Vendor Status : Vendor was contacted on 8-4-2003 Description : Opera web browser has an unchecked buffer in his code that allow a malicious website to crash it and in certain circumstances , execute code with user priviliges . To reproduce the bug open this...

@(#)Mordred Security Labs - RSA ClearTrust Cross Site Scripting issues

-----BEGIN PGP SIGNED MESSAGE----- //@ Mordred Security Labs advisory Release date: March 14, 2003 Name: RSA ClearTrust Cross Site Scripting issues Risk: low Author: Sir Mordred [email protected], http://mslabs.iwebland.com I. Description: The RSA ClearTrust is a Web access management solution...

SFAD02-002: Calisto Internet Talker Remote DOS

================================================================= ...............: S e c u r i t y F r e a k s :............... .................: www.securityfreaks.com :.................. ================================================================= Title : Calisto Internet Talker Remote DO...

The ScrollKeeper Root Trap

Release date : September 2 2002 Author : Spybreak [email protected] Package : Scrollkeeper Version : 0.3.4, 0.3.11 Severity : Medium to High Vendor homepage : scrollkeeper.sourceforge.net Status : vendor contacted Problem : Insecure creation of tempfiles in /tmp Local : yes Remote : no 1...

Using the backbutton in IE is dangerous

---..---..---..---..---..---..---..---..---..---..---..---..---- Title: Using the backbutton in IE is dangerous. Date: 2002-04-15 Software: At least Internet Explorer 6.0. Tested env: Windows 2000 pro, XP. Rating: Medium because user interaction is needed. Impact: Read cookies/local files and...

SECURITY.NNOV: The Bat! <cr> bug

SECURITY.NNOV URL: http://www.security.nnov.ru Topic: The Bat! cr bug Application: The Bat! 1.51 latest Vendor: RitLabs Category: Denial of Service Risk Factor: Low Remote: Yes Vendor Contacted: 13.04.2001 Software URL: http://www.thebat.net Vendor URL: http://www.ritlabs.com +Introduction: The...

Cgisecurity.com advisory #4 The Free On-line Dictionary of Computing

The vendor has been contacted on this issue and it is being fixed. please visit his page for further updates. Just so all the script kids know it does allow partial command execution. The only limit to this is commands with arguements. EX: limited to single commands like ls,ps Debian also has thi...

RFP2101: RFPlutonium to fuel your PHP-Nuke

-----/ RFP2101 /-------------------------------/ rfp.labs / wiretrip/---- RFPlutonium to fuel your PHP-Nuke SQL hacking user logins in PHP-Nuke web portal ------------------------------------/ rain forest puppy / [email protected] Table of contents: -/ 1 / Standard advisory information -/ 2 / High...

vulnerability in Connection Manager Control binary in Oracle 8.1.5 Linux Platform.

Hello Elias Colud you make public this advisory. Oracle people dont send an answer in 6 days. Please cut this lines. Thanks WWW.PLAZASITE.COM System & Security Division Title: Vulnerability in cmctl in Oracle 8.1.5 Date: 13-11-2000 Platform: Only tested in Linux, but can be exported to others...

vulnerability in Oracle Internet Directory in Oracle 8.1.6

WWW.PLAZASITE.COM System & Security Division Title: Vulnerability in oidldapd in Oracle 8.1.6 Date: 16-10-2000 Platform: Only tested in Linux, but can be exported to others. Impact: Any user gain euid=oracle. Author: Juan Manuel Pascual [email protected] Status: Vendor Contacted but no answers...

sambar-http.txt

Sambar Server search CGI vulnerability + Advisory by dethy www.synnergy.net |==============================================| Advisory 13 Vulnerable: Sambar Server 4.4 Beta 3 Systems : WinNT, Win95 OSR2, possibly Linux affected Product : http://www.sambar.com Discovery : [email protected]...

The Bat! X-BAT-FILES

"The Bat!" by RitLabs is extremely convenient mail agent with a lot of features for Windows platforms. One of "The Bat!" features is storing files attached to e-mail messages apart from messages bodies. In this case "The Bat!" puts attached files in preconfigured folder and removes according MIME...

roverpop3.dos.txt

Local / Remote Remote DoS Attack in Rover POP3 Server V1.1 NT From aVirt USSR Advisory Code: USSR-99025 Release Date: December 27, 1999 1/5 Systems Affected: Rover POP3 Server V1.1 NT and possibly others versions. About The Software: Rover POP3 Server V1.1 NT From aVirt, is a full-featured...

dns-pro.dos.txt

Remote D.o.S Attack in DNS PRO v5.7 WinNT From FBLI Software Vulnerability USSR Advisory Code: 22 Release Date: December 21, 1999 Systems Affected: DNS PRO v5.7 and possibly others. About The Software: The first DNS Server for Windows NT - Database engine five time faster. - Tabs now work in the...

worldclient.2.0.0.0.dos.txt

Remote DoS Attack in WorldClient Server v2.0.0.0 Vulnerability PROBLEM: UssrLabs found a buffer overflow in WorldClient Server v2.0.0.0 where they do not use proper bounds checking. The following all result in a Denial of Service against the service in question. affected services: WorldClient: Po...