ecurity Advisory: Cisco IOS HTTP Server Query Vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Cisco IOS HTTP Server Query Vulnerability Revision 1.0 For public release 2000 October 25 at 08:00 US/Pacific UTC+0700 Summary A defect in multiple releases of Cisco IOS software will cause a Cisco router or switch to halt and reload if the IOS HTTP service is...

VIGILANTE-2000011.txt

Lotus Domino ESMTP Service Buffer overflow Advisory Code: VIGILANTE-2000011 Release Date: September 11, 2000 Systems Affected: Lotus Domino Release 5.0.2a Intl ESMTP Service on OS/2 Warp 4.5 Lotus Domino Release 5.0.2c Intl ESMTP Service on OS/2 Warp 4.5 Earlier versions of the ESMTP service can ...

Netauth: Web Based Email Management System

This is just a quick note of a simple hole in the Netauth system. What is Netauth? Netauth is a web based eMail management system for Windows NT and most Unix platforms. What is the hole? The nethauth.cgi file http://server/cgi-bin/netauth.cgi?cmd=show&page=../../../../../../../../.. /etc/passwd...

Remote DoS attack in Networks Associates PGP Certificate Server Version 2.5 Vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Remote DoS attack in Networks Associates PGP Certificate Server Version 2.5 Vulnerability USSR Advisory Code: USSR-2000044 Release Date: June 13, 2000 Systems Affected: PGP Certificate Server Version 2.5.0 Solaris/Windows PGP Certificate Server Versio...

[JOLT2] Remote Denial of Service against Be/OS.

AUX Technologies - Brazil. Security Advisory. Advisory: JOLT2 Remote Denial of Service against Be/OS. Release Date: Jun 1, 2000. Status: No fix yet. Vulnerable version: Be/OS Personal 5.0 build feb 212000 4:43:00. Shoutz: AUX aghi, obiwan ksyms and awgnantifork. Description: If someone run jolt2...

Security Advisory: Cisco IOS HTTP Server Vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Cisco IOS HTTP Server Vulnerability Revision 1.0 For public release 2000 May 14 at 09:00 US/Eastern UTC+0400 ------------------------------------------------------------------------ Summary A defect in multiple releases of Cisco IOS software will cause a Cisco...

Ipchains!

Ipchains buffer overflow with debian 2.2.10 Kernel. -------------------------------------------------- there is a buffer overflow hang in linux debian distributin kernel 2.2.10 with ipchains 1.3.8, 27-Oct-1998. here is the explanation. We tested with a linux running with debian above version of...

PT-2000-1304 · Concurrent Versions · Cvs

Name of the Vulnerable Software and Affected Versions: Concurrent Versions Software CVS affected versions not specified Description: The issue allows local users to cause a denial of service by creating the lock directory before it is created for use by a legitimate user. This is due to the use o...

PT-2000-1059 · Cybercash · Cybercash Merchant Connection Kit

Name of the Vulnerable Software and Affected Versions: CyberCash Merchant Connection Kit MCK affected versions not specified Description: The issue allows local users to modify files via a symlink attack. Recommendations: At the moment, there is no information about a newer version that contains ...

cdda2cdr_bof.txt

Greetings, There is a buffer overflow vulnerability in cdda2cdr distributed with at least package cdwtools-0.93-78. This program is sgid disk by default and thus any malicious user who gains disk privs will have r/w access to your entire hard drives in the form of /dev/hd. This is obviously a qui...

PT-1999-1852 · Yahoo · Yahoo Pager/Messenger

Name of the Vulnerable Software and Affected Versions: Yahoo Pager/Messenger client affected versions not specified Description: A buffer overflow issue exists, allowing remote attackers to cause a denial of service by sending a long URL within a message. Recommendations: At the moment, there is ...

[SECURITY] Current versions of seyon may contain malicious code

One year ago, we have received a report from SGI that a vulnerability has been discovered in the seyon program which can lead to a root compromise. Any user who can execute the seyon program can exploit this vulnerability. However, the license of Seyon doesnt permit us to provide a fix, now is th...

PT-1999-1310 · Debian · Smtp-Refuser

Name of the Vulnerable Software and Affected Versions: Debian smtp-refuser affected versions not specified Description: The issue affects the logging facility of the Debian smtp-refuser package, allowing local users to delete arbitrary files using symbolic links. Recommendations: At the moment,...

PT-1999-1091 · Digital · Digital Unix

Name of the Vulnerable Software and Affected Versions: Digital Unix affected versions not specified Description: The issue is related to a buffer overflow in the Digital Unix Networker program nsralist, which allows local users to obtain root privilege. Recommendations: At the moment, there is no...

PT-1999-1058 · Lynx · Lynx

Name of the Vulnerable Software and Affected Versions: Lynx affected versions not specified Description: The issue allows a local user to overwrite sensitive files through /tmp symlinks, potentially leading to security breaches. Recommendations: At the moment, there is no information about a newe...

PT-1999-1201 · Microsoft · Windows Nt

Name of the Vulnerable Software and Affected Versions: Windows NT affected versions not specified Description: The issue concerns a Windows NT system's registry audit policy, which does not log an event for success or failure when non-critical registry keys are accessed. Recommendations: At the...

PT-1999-1030 · Microsoft · Telnet +1

Name of the Vulnerable Software and Affected Versions: Windows NT Resource Kit affected versions not specified Description: The issue is related to a denial of service in telnet, caused by opening and then immediately closing a connection. Recommendations: At the moment, there is no information...

PT-1999-1188 · Unix · Unix

Name of the Vulnerable Software and Affected Versions: Unix affected versions not specified Description: The issue concerns a Unix account with a name other than "root" that has UID 0, effectively granting it root privileges. Recommendations: At the moment, there is no information about a newer...

PT-1999-1249 · Qbik · Wingate

Name of the Vulnerable Software and Affected Versions: WinGate affected versions not specified Description: General information about the issue is not provided. There is no mention of the estimated number of potentially affected devices worldwide or details about real-world incidents where this...

PT-1999-1184 · Undefined · Undefined

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned. Description: The issue concerns an SSH server that permits authentication via the .rhosts file. Recommendations: At the moment, there is no information about a newer version that contains a fix...