[waraxe-2004-SA#038 - Multiple vulnerabilities in Event Calendar module for PhpNuke]

================================================================================ waraxe-2004-SA038 ================================================================================ Multiple vulnerabilities in Event Calendar module for PhpNuke...

SecureAction Research Secure Network Messenger 1.4.x - Remote Denial of Service

SecureAction Research Secure Network Messenger 1.4.x - Remote Denial of Service source: https://www.securityfocus.com/bid/11670/info A remote denial of service vulnerability affects SecureAction Research Secure Network Messenger. This issue is due to a failure of the application to properly handl...

SecureAction Research Secure Network Messenger 1.4.x - Remote Denial of Service

source: https://www.securityfocus.com/bid/11670/info A remote denial of service vulnerability affects SecureAction Research Secure Network Messenger. This issue is due to a failure of the application to properly handle exceptional network data. An attacker may leverage this issue to cause a...

CVE-2004-0871

Mozilla does not prevent cookies that are sent over an insecure channel HTTP from also being sent over a secure channel HTTPS/SSL in the same domain, which could allow remote attackers to steal cookies and conduct unauthorized activities, aka "Cross Security Boundary Cookie Injection."...

Qualcomm Eudora < 5.2 Long Attachment Filename Handling DoS

Binary data 1283.prm...

Pine C-Client IMAP Client literal_size Remote Overflow

Binary data 1099.prm...

SLMail SMTP Multiple Overflows

Binary data 2036.prm...

Pavuk HTTP Location header overflow

When pavuk sends a request to a web server and the server sends back the HTTP status code 305 Use Proxy, pavuk copies data from the HTTP Location header in an unsafe manner. This leads to a stack-based buffer overflow with control over EIP...

PHPix 2.0.3 - Arbitrary Command Execution

PHPix 2.0.3 - Arbitrary Command Execution source: https://www.securityfocus.com/bid/9458/info It has been reported that PHPix is vulnerable to a remote command execution vulnerability due to poor handling of externally supplied data such as shell metacharacters. This issue may allow unauthorized...

lionmax software www file share pro 2.4x - Multiple Vulnerabilities (2)

lionmax software www file share pro 2.4x - Multiple Vulnerabilities 2 // source: https://www.securityfocus.com/bid/9425/info WWW File Share Pro has been reported prone to multiple remote vulnerabilities. The first reported issue is that a remote attacker may employ the "upload" functionality of t...

Directory traversal in NucaWeb Server

Product: Nuca WebServer Version: 0.01 OffSite: http://www.geocities.com/nucainterface Problem: Directory traversal ------------------------------------------------ NucaWebServer - server, written in Delphi. This server have a large problem - Atacker may view all files on hard disk. The server doe...

Mod_Survey ENV tag vulnerability

Attached is a security advisory for ModSurvey, which is a modperl module for apache see attachment. The advisory was first published 2003-03-23 at http://gathering.itm.mh.se/modsurvey/SA20030323.txt More info about ModSurvey can be found on its home page, which is available at...

Trillian 0.x IRC Module - Remote Buffer Overflow

source: https://www.securityfocus.com/bid/5373/info A buffer overflow condition has been reported in the Trillian IRC module. The condition is due to insecure handling of data extracted from server responses. An attacker in control of a malicious server may exploit vulnerable clients who have...

codeblue remote root

/ Demonstration linux-x86 remote root against codeblue v1.1 from file header Otherwise it's known as CodeBlue v4 This is a rather trivial to exploit... From getsmtpreply "We'll loop infinately, receiving 1 byte at a time until we receive a carriage return or line-feed character, signifying the en...

CVE-1999-0601

CVE-1999-0601 affects a network intrusion detection system (IDS) and is caused by improper handling of data within TCP handshake packets. The public records (NVD, CVE list, Red Hat entry) describe the vulnerability as an IDS failing to process TCP handshake data correctly, with a base CVSS v2.0 s...