Moozatech: WZFTPD Denial Of Service

23/09/03 Moozatech Advisory http://www.moozatech.com/mt-23-09-2003.txt ------------------------------------------------------- Application: wzdftpd FTP Server Web Site: http://www.wzdftpd.net Versions: 0.1rc5 Platform: Windows 2000,WindowsXP,UNIX systems might also be affected. Risk: Remote DOS...

Moozatech: MyServer Buffer Overflow vulnerability

12/09/03 Moozatech Advisory http://www.moozatech.com/mt-12-09-2003.txt ------------------------------------------------------- Application: MyServer Web Server Web Site: http://myserverweb.sf.net Versions: 0.4.3 Platform: Windows98,Windows2000,Linux Bug: Buffer Overflow. Risk: Remote DOS and...

Integer overflow in OpenBSD kernel

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Local security bug in OpenBSD semaphore handling Product: OpenBSD kernel 3.3-release, -current before 10/09/2003 Impact: Root may bypass securelevel Bug class: Integer overflow Vendor notified: Yes Fix available: Yes Details: An integer overflow...

Stunnel-3.x Daemon Hijacking

Product: Stunnel Versions: = 3.24, 4.00 URL: http://stunnel.mirt.net Impact: Daemon Hijacking Bug class: Leaked Descriptor Vendor notified: Yes Fix available: Yes Date: 09/03/03 Issue: ====== Stunnel leaks a critical file descriptor that can be used to takeover hijack stunnel's service. Details:...

[Full-Disclosure] R7-0015: Multiple Vulnerabilities Apple QuickTime/Darwin Streaming Server

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Rapid7, Inc. Security Advisory Visit http://www.rapid7.com/ to download NeXpose, the world's most advanced vulnerability scanner. Linux and Windows 2000/XP versions are available now! Rapid7 Advisory R7-0015 Multiple Vulnerabilities Apple...

TextPortal Default Password Vulnerability

TextPortal Default Password Vulnerability Advisory ID: B$H-2003:001 Advisory URL: http://www.tar.hu/bsh/reports/bsh-2003-001.txt Date: 2003.05.22. Original Advisory Date: 2003.05.10. Discovery date: 2003.05.10. Type: Vulnerability / Exploit Product: TextPortal Affected versions: All as of discove...

PT-2003-1220 · Unknown · Db4Web Server

Name of the Vulnerable Software and Affected Versions: DB4Web server affected versions not specified Description: The issue allows remote attackers to use the DB4Web server as a proxy and attempt TCP connections to other systems, effectively performing a port scan. This is achieved by requesting ...

ISMAIL (All Versions) Remote Buffer Overrun

NGSSoftware Insight Security Research Advisory Name: ISMAIL v 1.25 & v 1.4.3 Remote Buffer Overrun Systems Affected: WinNT, Win2K, XP Severity: High Risk Category: Remote Buffer Overrun Vendor URL: http://instantservers.com/ismail.html Author: Mark Litchfield [email protected] Date: 27th...

[VulnWatch] Efficient Networks 5861 DSL Router

Product: Efficient Networks 5861 DSL Router http://www.efficient.com/ebz/5800.html Tested version: 5.3.80 Latest firmware Advisory date: 10/01/2003 Severity: Moderate Background "Efficient Networks® Business Class IDSL, ADSL, or SDSL Routers provide DSL access for up to 100 or more users with...

PT-2002-2655 · Pingtel · Xpressa

Name of the Vulnerable Software and Affected Versions: Pingtel xpressa SIP-based voice-over-IP phone versions 1.2.5 through 2.0.1 Description: The issue allows attackers to obtain sensitive information, including the MD5 hash of the Admin password, MD5 hash of the physical password, and other...

PT-2002-2636 · Bsd · Bsd

Name of the Vulnerable Software and Affected Versions: Multiple BSD-based operating systems affected versions not specified Description: The issue allows local users to cause a denial of service, specifically execution prevention, by utilizing the flock function to lock the /var/log/acculog file...

Uninets StatsPlus 1.25 script injection vulnerabilities

Uninets StatsPlus 1.25 script injection vulnerabilities discovered by BrainRawt [email protected] About StatsPlus: ------------------- StatsPlus provides a convient way to get indepth statistics about visitors to your site. Statistics Produced by StatsPlus are similar to those from a server...

Gaim abritary Email Reading

Date: Sun May 12 Problem App: Gaim Messenger Client Problem: Permissions Problem Severity: Low/Medium Results: A local attacker can gain full access to other gaim users hotmail accounts Evidence: See the end of this email for a shell example of this issue Exploitable: Simple if gaim is running,...

[AP] awhttpd v2.2 local DoS

-- ------------------------- -- - AngryPacket Security Advisory - -- ------------------------- -- - +--------------------- -- - + advisory information +------------------ -- - author: methodic [email protected] release date: 01/03/2002 homepage: http://sec.angrypacket.com...

Advisory for Jana server

Advisory for Jana Webserver Site: http://www.janaserver.de by nemesystm of the DHC http://dhcorp.cjb.net - [email protected] ADV-0112 /-|=explanation=|- Jana Webserver is well, a webserver. It has a hex-encoded dot dot bug and a denial of service. /-|=who is vulnerable=|- Tested to be...

Advisory for Spynet Chat

Advisory for Spynet Chat Spynet Chat is made by Spytech Site: http://www.spytech-web.com by nemesystm of the DHC http://dhcorp.cjb.net - [email protected] ADV-0120 /-|=explanation=|- Spynet Chat is a chat server. It suffers from a denial of service. /-|=who is vulnerable=|- Spynet Chat 6.5 ha...

A Serious Security Vulnerability Found in BearShare (Directory Traversal)

The following security advisory is sent to the securiteam mailing list, and can be found at the SecuriTeam web site: http://www.securiteam.com SUMMARY http://www.bearshare.com/ BearShare is a Windows file sharing program from Free Peers, Inc. that lets you, your friends, and everyone in the world...

Advisory for Netcruiser

Advisory for NetCruiser 0.1.2.8 Netcruiser is made by Netcuiser Software Site: http://www.netcruiser-software.com by nemesystm of the DHC http://dhcorp.cjb.net - [email protected] ADV-0110 /-|=explanation=|- Netcruiser is a webserver. It has a simple path revealance bug. /-|=who is...

CheckBO Win9x memo overflow

Author: Auriemma Luigi PRODUCT: CheckBO, www.checkbo.com OPERATIVE SYSTEM: ONLY Win9x INTRODUCTION: CheckBO is a program that go in listening mode on some trojan virus ports like 12345, 20034, ... and alert the user when someone do scanning for searching virus servers. It is a very old program la...

Advisory for SimpleServer:WWW (analogX)

Advisory for SimpleServer:WWW analogX SimpleServer:WWW is made by Analogx. Site: http://www.analogx.com by nemesystm of the DHC http://dhcorp.cjb.net - [email protected] ADV-0103 /-|=explanation=|- SimpleServer:WWW is a webserver. It has a simple denial of service problem. /-|=who is...