D.o.S Vulnerability in vqServer

DHC Advisory Advisory for vqServer 1.4.49 vqServer is made by vqSoft. Site: http://www.vqsoft.com by nemesystm of the DHC http://dhcorp.cjb.net - [email protected] /-|=explaination=|- When sending vqServer version 1.4.49 a malformed URL request it will crash the service. This has been verifi...

Gnapster Vulnerability Compromises User-readable Files

Gnapster Vulnerability Compromises User-readable Files This vulnerability was discovered at the Center for Education and Research in Information Assurance and Security CERIAS at Purdue University http://www.cerias.purdue.edu by: Tom Daniels [email protected] Florian Buchholz...

PT-2000-1091 · E Smartcart · E Smartcart

Name of the Vulnerable Software and Affected Versions: SmartCart affected versions not specified Description: The issue allows remote users to modify sensitive purchase information via hidden form fields in the SmartCart shopping cart application. Recommendations: At the moment, there is no...

PT-1999-1035 · Linux · Linux

Name of the Vulnerable Software and Affected Versions: Linux affected versions not specified Description: A buffer overflow issue in the Linux su command allows local users to gain root access. Recommendations: At the moment, there is no information about a newer version that contains a fix for...

PT-1999-1194 · Sendmail · Sendmail

Name of the Vulnerable Software and Affected Versions: Sendmail affected versions not specified Description: The issue allows input to be piped to a program through a Sendmail alias. Recommendations: At the moment, there is no information about a newer version that contains a fix for this...

PT-1999-1010 · Finger · Finger

Name of the Vulnerable Software and Affected Versions: finger affected versions not specified Description: The issue allows the 'finger' command to potentially disclose information about user accounts on certain systems when used with specific syntax, such as '0@host'. Recommendations: At the...

PT-1999-1252 · Undefined · Undefined

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned. Description: A system-critical program, library, or file has a checksum or other integrity measurement that indicates it has been modified. Recommendations: At the moment, there is no informatio...

PT-1999-1246 · Undefined · Undefined

Name of the Vulnerable Software and Affected Versions: No specific software or versions mentioned. Description: A component service related to NIS+ is running. Recommendations: At the moment, there is no information about a newer version that contains a fix for this issue...

PT-1998-1081 · Linux · Linux Pam

Name of the Vulnerable Software and Affected Versions: Linux PAM affected versions not specified Description: The issue allows local users to gain root access using temporary files. Recommendations: At the moment, there is no information about a newer version that contains a fix for this...

PT-1997-1040 · Bisonware · Bisonware Ftp Server

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned. Description: Remote attackers can cause a denial of service in FTP by issuing multiple PASV commands, causing the server to run out of available ports. Recommendations: At the moment, there is n...

PT-1997-1156 · Undefined · Undefined

Name of the Vulnerable Software and Affected Versions: No specific software or versions mentioned. Description: The issue is related to a guessable password for accessing a WWW URL. Recommendations: At the moment, there is no information about a newer version that contains a fix for this...

PT-1996-1028 · Perl · Suidperl +1

Name of the Vulnerable Software and Affected Versions: sperl affected versions not specified suidperl affected versions not specified Description: The issue concerns the suidperl and sperl programs, which fail to relinquish root privileges when switching UIDs back to the original users. This allo...

PT-1988-1001 · Sendmail · Sendmail

Name of the Vulnerable Software and Affected Versions: Sendmail affected versions not specified Description: The issue concerns the debug command in Sendmail, which is enabled, allowing attackers to execute commands as root. Recommendations: At the moment, there is no information about a newer...