[Full-disclosure] SEC-CONSULT SA-20050629-0

SEC-CONSULT Security Advisory 20050629-0 ================================================================================== title: IE6 javaprxy.dll COM instantiation heap corruption vulnerability program: Internet Explorer vulnerable version: 6.0.2900.2180 homepage: www.microsoft.com found:...

ZH2005-13SA.txt

ZH2005-13SA security advisory: NEXTWEB iSite™ multiple vulnerabilities Published: 1 June 2005 - GOOD MONTH EVERYBODY ;- Released: 1 June 2005 Name: iSite™ Affected Versions: ALL Issue: SQL injections, exception handling, unsafe directories Author: Trash-80 - [email protected] Vendor:...

[ZH2005-13SA] NEXTWEB (i)Site website management multiple vulnerabilities

ZH2005-13SA security advisory: NEXTWEB iSite™ multiple vulnerabilities Published: 1 June 2005 - GOOD MONTH EVERYBODY ;- Released: 1 June 2005 Name: iSite™ Affected Versions: ALL Issue: SQL injections, exception handling, unsafe directories Author: Trash-80 - [email protected] Vendor:...

CVE-2005-1743

CVE-2005-1743 affects BEA WebLogic Server/Express versions 8.1 (SP3) and 7.0 (SP5). The root cause: when a security provider throws an exception, WebLogic may use an incorrect thread identity and may fail to audit security exceptions. Implications noted: potential partial impact on confidentialit...

CVE-2005-1743

BEA WebLogic Server and WebLogic Express 8.1 through Service Pack 3 and 7.0 through Service Pack 5 does not properly handle when a security provider throws an exception, which may cause WebLogic to use incorrect identity for the thread, or to fail to audit security exceptions...

CVE-2005-1330

AppKit in Mac OS X 10.3.9 allows attackers to cause a denial of service Cocoa application crash via a malformed TIFF image that causes the NXSeek to use an incorrect offset, leading to an unhandled exception...

CVE-2005-1330

AppKit in Mac OS X 10.3.9 allows attackers to cause a denial of service Cocoa application crash via a malformed TIFF image that causes the NXSeek to use an incorrect offset, leading to an unhandled exception...

CrystalFTP Pro 2.8 - Remote Buffer Overflow

/ CrystalFTP Pro v2.8 Buffer Overflow Exploit 04/25/2005 despite the fact that nobody uses CrystalFTP i had to release a new version that replaces the first one. this overwrites the structured exception handler with a "pop edx pop eax ret" in kernel32.dll. this takes us to a pointer of the next...

CrystalFTP Pro 2.8 - Remote Buffer Overflow

CrystalFTP Pro 2.8 - Remote Buffer Overflow / CrystalFTP Pro v2.8 Buffer Overflow Exploit 04/25/2005 despite the fact that nobody uses CrystalFTP i had to release a new version that replaces the first one. this overwrites the structured exception handler with a "pop edx pop eax ret" in...

CVE-2005-1060

Technical details about CVE-2005-1060 are not publicly available in the provided documents. Monitor for updates.

CVE-2004-0963

Buffer overflow in Microsoft Word 2002 10.6612.6714 SP3, and possibly other versions, allows remote attackers to cause a denial of service application exception and possibly execute arbitrary code in winword.exe via certain unexpected values in a .doc file, including 1 an offset that triggers an...

War FTP Daemon 1.8 - Remote Denial of Service

War FTP Daemon 1.8 - Remote Denial of Service source: https://www.securityfocus.com/bid/12384/info War FTP Daemon is reported prone to a remote denial of service vulnerability. This issue arises because the application fails to handle exceptional conditions in a proper manner. War FTP Daemon...

War FTP Daemon 1.8 - Remote Denial of Service

source: https://www.securityfocus.com/bid/12384/info War FTP Daemon is reported prone to a remote denial of service vulnerability. This issue arises because the application fails to handle exceptional conditions in a proper manner. War FTP Daemon 1.82.00-RC9 is reported prone to this issue. It is...

AlShare Software NetNote Server 2.2 - Remote Denial of Service

// source: https://www.securityfocus.com/bid/11677/info NetNote server is reported prone to a remote denial of service vulnerability. This issue occurs because the application does not handle exceptional conditions properly. NetNote server 2.2 build 230 is reported vulnerable to this issue,...

AlShare Software NetNote Server 2.2 - Remote Denial of Service

AlShare Software NetNote Server 2.2 - Remote Denial of Service // source: https://www.securityfocus.com/bid/11677/info NetNote server is reported prone to a remote denial of service vulnerability. This issue occurs because the application does not handle exceptional conditions properly. NetNote...

IPSwitch WhatsUp Gold 8.03 Remote Buffer Overflow Exploit

No description provided by source. !/usr/bin/perl LoWNOISE NotmuchG.pl v.1.5 ================================================ IPSWITCH WhatsUp Gold ver8.03 Remote Buffer Overflow Exploit ================================================ Exploit by ET LoWNOISE Colombia etatcyberspace.org Oct/2004...

IPSwitch WhatsUp Gold 8.03 - Remote Buffer Overflow

IPSwitch WhatsUp Gold 8.03 - Remote Buffer Overflow !/usr/bin/perl LoWNOISE NotmuchG.pl v.1.5 ================================================ IPSWITCH WhatsUp Gold ver8.03 Remote Buffer Overflow Exploit ================================================ Exploit by ET LoWNOISE Colombia...

IPSwitch WhatsUp Gold 8.03 - Remote Buffer Overflow

!/usr/bin/perl LoWNOISE NotmuchG.pl v.1.5 ================================================ IPSWITCH WhatsUp Gold ver8.03 Remote Buffer Overflow Exploit ================================================ Exploit by ET LoWNOISE Colombia etatcyberspace.org Oct/2004 Tested on WIN2K SP4 The exploit take...

Apache mod_ssl 2.0.x - Remote Denial of Service

Apache modssl 2.0.x - Remote Denial of Service source: https://www.securityfocus.com/bid/11154/info Apache 2.x modssl is reported prone to a remote denial of service vulnerability. This issue likely exists because the application fails to handle exceptional conditions. The vulnerability originate...

Ipswitch WhatsUp Gold 7.0/8.0 - Notification Instance Name Remote Buffer Overflow

source: https://www.securityfocus.com/bid/11109/info The Ipswitch WhatsUp Gold web interface is prone to a remotely exploitable buffer overflow vulnerability. This may be exploited by authenticated users of the interface to execute arbitrary code in the context of the program. !/usr/bin/perl...