Re: slocate bug.

Heres the details on Mandrake Linux elguapo@linux elguapo$ ls -al which slocate -rwxr-sr-x 2 root slocate 24956 Apr 6 2001 /usr/bin/slocate elguapo@linux elguapo$ uname -a Linux linux.ckfr.com 2.4.3-20mdk 1 Sun Apr 15 23:03:10 CEST 2001 i686 unknown elguapo@linux elguapo$ cat /etc/redhat-release...

ROTOS Remote SNMP Attack Tool

Internet Security Systems Security Alert February 12, 2002 PROTOS Remote SNMP Attack Tool Synopsis: ISS X-Force has learned of a powerful SNMP Simple Network Management Protocol attack tool that may be circulating in the computer underground. The PROTOS SNMP stress-testing tool sends thousands of...

Holes in Actinic E-commerce services.

http://www.actinic.com http://www.actinic.co.uk/ http://www.actinic-europe.com/ Versions : 4.7.0 & - With the files : bb|000|001|.pl ca| |002| os| |003| sh| |004| ss| |005| | |006| | |007| | |009| | |010| | |011| | |012| | |020| | |036| | |045| | |046| | |137| | |143| | |410| referrer.pl...

Problems with the scripts by Solution Scripts

!/possible/exploits/by/b0iler scripts from: http://solutionscripts.com don't take anything I say too seriously in this, as it is mostly guess work. Problems with the scripts by Solution Scripts solution script's powerlist script: It seems the author doesn't check for anything when removing user's...

Anonymous Mail Forwarding Vulnerabilities in FormMail 1.9

A more easy-on-the-eyes Postscript version of the following advisory may be viewed at: http://www.monkeys.com/anti-spam/formmail-advisory.ps An entertaining working demonstration of a 100 client-side Javascript exploit for older and already well-known FormMail 1.6 version security flaws may be...

Security flaws in tinc

Security flaws in tinc Jerome Etienne [email protected] Abstract This text describes security flaws in Tinc. It includes a description of the security see section 1 and lists the possible attacks see section 2. An attacker can modify packets, replay them and learn pattern of the plain text. 1 Security...

Ultimate Bulletin Board 5.46.06.2 - Cross-Agent Scripting

Ultimate Bulletin Board 5.46.06.2 - Cross-Agent Scripting source: https://www.securityfocus.com/bid/3829/info UBB Ultimate Bulletin Board is commercial web forums/community software that is written in Perl. It runs on various Unix/Linux variants, as well as Microsoft Windows NT/2000. UBB is prone...

SECURITY.NNOV: file locking and security

Hello bugtraq, Topic : File locking and security Author : 3APA3A [email protected] Affected software : Windows NT 4.0, Windows 2000 and may be another systems Exploitable : Yes Remotely exploitable : No Category : Design flow Background: Application can lock the file after file description ...

Redhat 7.0 local root (via uucp) (attempt 2)

Affects: RedHat 7.0 possibly others 28 Aug 2001 01:27:24 +1200 uucp vulnerability exposed to vendor 9 Nov 2001 07:14:15 +1300 this makewhatis vulnerability exposed to vendor /usr/sbin/makewhatis An earlier version1 of makewhatis had a fault in the handling of compressed files that allowed executi...

hack-hm-1.0.txt

Sure: Title Hotmail Security Alert Hack HM1.0! 5/10/2000 By: Da Hawaiian HaXorS "Give back da aina!" Disclaimer In no event shall Da Hawaiian HaXorS be held liable for any special, indirect or consequential damages or any damages whatsoever resulting from loss of use, data or profits, whether in ...

fingerd-cgi.txt

++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ ++++++++++++++GOBBLES+SECURITY+RESEARCH+TEAM+INCORPORATED+++++++++++++++++ ALERT! ALERT! BERKELEY FINGER VULNERABILITY! ALERT! ALERT! ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ This is NOT...

more RADIUS authentication attack scenarios

Hello bugtraq, There is also problem with some vendor-specific RADIUS authentication implementation. For example Microsoft has it's specific attributes defined in RFC 2548. These attributes allow MS-CHAP and MS-CHAPv2 authentication via RADIUS. There is design flow in this authentication scenario...

Various problems in Baltimore WebSweeper URL filtering

Tuesday 4 September 2001 Various problems in Baltimore WebSweeper URL filtering ====================================================== Product Background ------------------ WEBSweeper is Baltimore Technologies' Web Content Security solution. It enables customers to implement Content Security...

Various problems in Baltimore's WEBSweeper Script filtering

Sunday 12 August 2001 eDvice Security Services Advisory Various problems in Baltimore's WEBSweeper Script filtering =========================================================== Product Background ------------------- WEBsweeper is Baltimore Technologies' Web Content Security solution. It enables...

Various problems in Ternd Micro AppletTrap Script filtering

Sunday 29 July 2001 Various problems in Ternd Micro AppletTrap Script filtering =========================================================== This is a different advisory than the one we posted on July 9 http://archives.neohapsis.com/archives/bugtraq/2001-07/0129.html. Product Background...

SERIOUS BUG IN PHPNUKE

Yes, phpnuke.org, was contacted.... First take a look at: http://phpnuke.org/user.php?op=userinfo&uname=MegaHz Then, read this................. PHPnuke Bugs. After testing just a few scripts on phpnuke I have noticed the following: Some fields in the registration form allow code and fail to filte...

Softek MailMarshal 4 Trend Micro ScanMail 1.0 - SMTP Attachment Protection Bypass

Softek MailMarshal 4 Trend Micro ScanMail 1.0 - SMTP Attachment Protection Bypass source: https://www.securityfocus.com/bid/3097/info At least two SMTP gateway products have been identified which contain flaws in the handling of restricted filetypes as attachments. An attacker can insert extraneo...

Various problems in Ternd Micro AppletTrap URL filtering

Monday 9 July 2001 eDvice Security Services Advisory - Various problems in Trend Micro AppletTrap URL filtering Product Background ------------------ Trend Micro AppletTrap is a product for blocking malicious Java applets, malicious JavaScript and unsecured ActiveX controls at the gateway. The...

Проблемы с беспроводными устройствами (SNMP authentication flaw, Wired-side SNMP key exposure)

Возможно несанкционированное подключение по 802.11...

IPC@Chip Security

Sentry Research Labs www.sentry-labs.de.vu product: IPC@Chip Beck GmbH vendor informed: 21th of May status: unanswered Note: The demonstration tool and a german version there is also an english download version of this report is available form our website. Siberian...