Crashs in Master of Orion III 1.2.5

Luigi Auriemma Application: Master of Orion III http://moo3.quicksilver.com Versions: = 1.2.5 Platforms: Windows and MacOS Bugs: - allocation error - big nicknames crash Exploitation: remote, versus server Date: 27 October 2004 Author: Luigi Auriemma e-mail: [email protected] web:...

Full path disclosure and sql injection on CubeCart 2.0.1

-------------------------------------------------------- Full path disclosure and sql injection on CubeCart 2.0.1 -------------------------------------------------------- 1Introduction 2The Problem 3The Solution 4Timeline 5Feddback 1Introduction "CubeCart is an eCommerce script written with PHP &...

Broadcast buffer-overflow in Vypress Messenger 3.5.1

Luigi Auriemma Application: Vypress Messenger http://www.vypress.com/products/messenger/ Versions: = 3.5.1 Platforms: Windows Bug: buffer overflow Risk: critical Exploitation: remote, broadcast Date: 01 October 2004 Author: Luigi Auriemma e-mail: [email protected] web:...

Microsoft WordPerfect 5.x Converter Heap Overflow

NGSSoftware Insight Security Research Advisory Name: Microsoft WordPerfect 5.x Converter Heap Overflow Systems Affected: Microsoft Office, Microsoft FrontPage, Microsoft Publisher and Microsoft Works Suite Severity: Medium Risk Vendor URL: http://www.microsoft.com/ Author: Peter Winter-Smith...

[Full-Disclosure] Freeze in Pigeon Server 3.02.0143

Luigi Auriemma Application: Pigeon Server http://www.tech-noel.com Versions: = 3.02.0143 Platforms: Windows Bug: freeze Risk: medium Exploitation: remote, versus server Date: 16 September 2004 Author: Luigi Auriemma e-mail: [email protected] web: http://aluigi.altervista.org 1 Introduction 2...

[Full-Disclosure] XSS in 12Planet Chat Server 2.9

Donato Ferrante Application: 12Planet Chat Server http://www.12planet.com Version: 2.9 Bug: cross site scripting Date: 05-Jul-2004 Author: Donato Ferrante e-mail: [email protected] web: www.autistici.org/fdonato xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx 1...

[Full-Disclosure] NetBSD kernel swapctl(2) vulnerability

Name: NetBSD kernel swapctl2 vulnerability Date: 11 June 2004 CVE candidate: not assigned Author: Evgeny Demidov Description: There exists a integer handling vulnerability in NetBSD swapctl2 system call. It seems that this vulnerability can not be exploited to gain super-user privilegies, but any...

Format string bug in IGI 2: Covert Strike 1.3

Luigi Auriemma Application: IGI 2: Covert Strike http://www.igi2-game.com Versions: = 1.3 Platforms: Windows, Linux Bug: format string bug Risk: high Exploitation: remote, versus server Date: 05 Apr 2004 Author: Luigi Auriemma e-mail: [email protected] web: http://aluigi.altervista.org 1...

Pegasi022.txt

Donato Ferrante Application: Pegasi Web Server PWS http://pws.sourceforge.net Version: 0.2.2 Bugs: Multiple Vulnerabilities Author: Donato Ferrante e-mail: [email protected] web: www.autistici.org/fdonato xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx 1. Description 2...

Multiple Vulnerabilities in PWS 0.2.2

Donato Ferrante Application: Pegasi Web Server PWS http://pws.sourceforge.net Version: 0.2.2 Bugs: Multiple Vulnerabilities Author: Donato Ferrante e-mail: [email protected] web: www.autistici.org/fdonato xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx 1. Description 2...

directory traversal in GWeb 0.6

Donato Ferrante Application: GWeb HTTP Server http://freshmeat.net/projects/gweb/ Version: 0.6 Bug: directory traversal bug Author: Donato Ferrante e-mail: [email protected] web: www.autistici.org/fdonato xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx 1. Description 2...

gwebTraversal.txt

Donato Ferrante Application: GWeb HTTP Server http://freshmeat.net/projects/gweb/ Version: 0.6 Bug: directory traversal bug Author: Donato Ferrante e-mail: [email protected] web: www.autistici.org/fdonato xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx 1. Description 2...

Remote server crash in Haegemonia <= 1.07

Luigi Auriemma Application: Haegemonia http://www.haegemonia.com Versions: = 1.07 Platforms: Windows Bug: reading of unallocated memory crash Risk: high Exploitation: remote, versus server Date: 24 Feb 2004 Author: Luigi Auriemma e-mail: [email protected] web: http://aluigi.altervista.org 1...

Denial Of Service in Vizer Web Server 1.9.1

Donato Ferrante Application: Vizer Web Server http://sourceforge.net/projects/vizerwebserver/ Version: 1.9.1 Bug: Denial Of Service Author: Donato Ferrante e-mail: [email protected] web: www.autistici.org/fdonato xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx 1...

[Full-Disclosure] php-ping: Executing arbritary commands

ppp-design found the following design error in php-ping: Details ------- Product: php-ping Affected Version: no version information included in the script Immune Version: latest version OS affected: all OS with php Vendor-URL: http://www.theworldsend.net/ Vendor-Status: informed, new version...

Invision Power Board (IP.Board) 2.0 Alpha 3 - SQL Injection (PoC)

Invision Power Board IP.Board 2.0 Alpha 3 - SQL Injection PoC IP.Board SQL Injection Vendor: Invision Power Services Product: IP.Board Version: 0 OR pinned=1 ORDER BY pinned DESC,...

Invision Power Board (IP.Board) < 2.0 Alpha 3 - SQL Injection (PoC)

IP.Board SQL Injection Vendor: Invision Power Services Product: IP.Board Version: 0 OR pinned=1 ORDER BY pinned DESC, ProblemIsHere DESC LIMIT 0,15 mySQL error: You have an error in you...

Moozatech: WZFTPD Denial Of Service

23/09/03 Moozatech Advisory http://www.moozatech.com/mt-23-09-2003.txt ------------------------------------------------------- Application: wzdftpd FTP Server Web Site: http://www.wzdftpd.net Versions: 0.1rc5 Platform: Windows 2000,WindowsXP,UNIX systems might also be affected. Risk: Remote DOS...

Moozatech: MyServer Buffer Overflow vulnerability

12/09/03 Moozatech Advisory http://www.moozatech.com/mt-12-09-2003.txt ------------------------------------------------------- Application: MyServer Web Server Web Site: http://myserverweb.sf.net Versions: 0.4.3 Platform: Windows98,Windows2000,Linux Bug: Buffer Overflow. Risk: Remote DOS and...

Integer overflow in OpenBSD kernel

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Local security bug in OpenBSD semaphore handling Product: OpenBSD kernel 3.3-release, -current before 10/09/2003 Impact: Root may bypass securelevel Bug class: Integer overflow Vendor notified: Yes Fix available: Yes Details: An integer overflow...