My-forum.org cookies vulnerability - data bug

I discovered a security issue that affects the following my-forum.org release: FOROS v.3.2 - http://my-forum.org/index.php?id=Ingles When you are logged in with an account, you need edit the cookie of the site and change the value where your username is and replace it for the victim's username...

CVE-2004-1661

MailWorks Professional is affected by CVE-2004-1661, where remote attackers can bypass authentication and gain privileges using a cookie containing auth=1 and uId=1. The issue enables partial confidentiality and integrity/availability impact per the NVD CVSS2 metrics (AV:N, AC:L, Au:N, C:P, I:P, ...

CVE-2004-0869

CVE-2004-0869 describes a vulnerability in Internet Explorer where cookies set over HTTP can be sent to the same domain over HTTPS/SSL, enabling a cookie to leak across security boundaries and potentially allow session hijacking. The cross security boundary cookie injection could occur even when ...

security flaw

Konqueror in KDE 3.2.3 and earlier allows web sites to set cookies for country-specific top-level domains, such as .ltd.uk, .plc.uk and .firm.in, which could allow remote attackers to perform a session fixation attack and hijack a user's HTTP session...

[UNIX] PlaySMS SQL Injection via Cookie

The following security advisory is sent to the securiteam mailing list, and can be found at the SecuriTeam web site: http://www.securiteam.com - - promotion The SecuriTeam alerts list - Free, Accurate, Independent. Get your security news from a reliable source...

IkonBoard FUNC.pm lang Cookie Arbitrary Command Execution

Binary data 1537.prm...

RHEL 2.1 : vnc (RHSA-2003:068)

Updated VNC packages are available to fix a weak cookie vulnerability. VNC is a tool for providing a remote graphical user interface. The VNC server acts as an X server, but the script for starting it generates an MIT X cookie which is used for X authentication without using a strong enough rando...

Microsoft IIS Cookie information disclosure

The remote host is running Microsoft IIS with what appears to be a a vulnerable disclosure of cookie usage. That is, when sent a Cookie with the '=' character, Microsoft IIS will either respond with an error if actually processing the cookie via a specific asp page or disclose information of the...

Apple Safari 1.x - Cookie Directory Traversal

source: https://www.securityfocus.com/bid/9841/info Multiple vendor Internet Browsers have been reported to be prone to a cookie path argument restriction bypass vulnerability. The issue presents itself due to a failure to properly sanitize encoded URI content, this may make it possible for an...

CitrusDB 0.3.6 - Remote Authentication Bypass

CitrusDB 0.3.6 - Remote Authentication Bypass source: https://www.securityfocus.com/bid/12560/info CitrusDB is reportedly affected by an authentication bypass vulnerability. This issue is due to the application using a static value during the creation of user cookie information. An attacker could...

CitrusDB 0.3.6 - Remote Authentication Bypass

source: https://www.securityfocus.com/bid/12560/info CitrusDB is reportedly affected by an authentication bypass vulnerability. This issue is due to the application using a static value during the creation of user cookie information. An attacker could exploit this vulnerability to log in as any...

CVE-2003-0770

CVE-2003-0770 affects IkonBoard, specifically versions 3.1.2a and earlier (including 3.1.1). The root cause is that the FUNC.pm code does not properly cleanse the lang cookie when it contains illegal characters, allowing a remote attacker to trigger arbitrary code execution via a Perl evaluation ...

PT-2003-1735 · Witango +1 · Witango Application Server +1

Name of the Vulnerable Software and Affected Versions: WiTango Application Server affected versions not specified Tango 2000 affected versions not specified Description: The issue allows remote attackers to execute arbitrary code via a long cookie to Witango UserReference. This is a buffer overfl...

Witango Server 5.0.1.061 - Remote Cookie Buffer Overflow

source: https://www.securityfocus.com/bid/8224/info Witango Server is prone to a remote buffer overflow vulnerability. Remote users may be able to send an HTTP request to a Witango server with a cookie containing a specific variable set to an excessively large value. Remote code execution is...

Invision Power Board Plaintext Password Disclosure Vuln

Invision Power Board Plaintext Password Disclosure Vuln ------------------------------------------------------- Version: All? Problem: Invision Power Board gives an admin the option to create a pass protected forum. The problem with this is that the password is then stored in the cookie fully...

Moderate: Red Hat Security Advisory: vnc security update

Updated VNC packages are available to fix a weak cookie vulnerability. VNC is a tool for providing a remote graphical user interface. The VNC server acts as an X server, but the script for starting it generates an MIT X cookie which is used for X authentication without using a strong enough rando...

Moderate: Red Hat Security Advisory: : : : Updated VNC packages fix replay and cookie vulnerabilities

Updated VNC packages are available, fixing a challenge replay and a weak cookie vulnerability. Updated 10 July 2003 Added packages for Red Hat Linux on IBM iSeries and pSeries systems. VNC is a tool for providing a remote graphical user interface. Two vulnerabilities have been found in versions o...

CVE-2002-1152

Konqueror in KDE 3.0 through 3.0.2 does not properly detect the "secure" flag in an HTTP cookie, which could cause Konqueror to send the cookie across an unencrypted channel, which could allow remote attackers to steal the cookie via sniffing...

ArGoSoft Web-Mail security problem

ArGoSoft Web-Mail security problem. A vulnerability affects ArGoSoft Mail Server Pro for WinNT/2000/XP Version 1.8.1.9 I did not test other versions, this is the only I have, but others should be vulnerable too. The problem is in the Web-Mail interface, it is posible to execute javascript by...

Multiple Buffer Overflow vulnerabilities in SteelArrow (#NISR19082002B)

NGSSoftware Insight Security Research Advisory Name: Multiple Remote Buffer Overruns TOMAHAWKS' STEELARROW Systems Affected: WinNT, Win2K Not tested on other platforms Severity: High Risk Category: Remote System Buffer Overrun Vendor URL: http://www.tomahawk.com Author: Mark Litchfield...