Microsoft Office Web Components unauthorized access

A number of unsafe functions...

SGI IRIX rpc.xfsmd uses weak authentication mechanism for RPC authentication

Overview The XFS file system on SGI systems allows anonymous remote users to call xfs-related RPC functions. Description XFS is a 64-bit compliant journaling file system. The XFS journaling filesystem daemon rpc.xfsmd on SGI systems uses the default AUTHUNIX authentication mechanism a client-base...

Important: Red Hat Security Advisory: glibc security update

Updated glibc packages are available which fix a buffer overflow in the XDR decoder and two vulnerabilities in the resolver functions. updated 8 aug 2002 Updated packages have been made available, as the original errata introduced a bug which could cause calloc to crash on 32-bit platforms when...

Microsoft Internet Explorer 56 Konqueror 2.2.23.0 Weblogic Server 567 - Invalid X.509 Certificate Chain

Microsoft Internet Explorer 56 Konqueror 2.2.23.0 Weblogic Server 567 - Invalid X.509 Certificate Chain source: https://www.securityfocus.com/bid/5410/info A flaw has been reported in the handling of X.509 certificates by a number of products, including several web browsers. It may be possible fo...

Important: Red Hat Security Advisory: : Updated glibc packages fix vulnerabilities in resolver

Updated glibc packages are available to fix two vulnerabilities in the resolver functions. The glibc package contains standard libraries which are used by multiple programs on the system. A buffer overflow vulnerability has been found in the way the glibc resolver handles the resolution of networ...

CVE-2002-0359

xfsmd for IRIX 6.5 through 6.5.16 uses weak authentication, which allows remote attackers to call dangerous RPC functions, including those that can mount or unmount xfs file systems, to gain root privileges...

Macromedia JRun 3/4 - Administrative Authentication Bypass

source: https://www.securityfocus.com/bid/5118/info Macromedia JRun is prone to an issue which may allow remote attackers to bypass the authentication page for the admin server. This may be exploited by adding an extraneous '/' to a request for the administrative authentication page...

CVE-1999-1362

Win32k.sys in Windows NT 4.0 before SP2 allows local users to cause a denial of service crash by calling certain WIN32K functions with incorrect parameters...

mod_python imported modules inderect calls

It's possible to inderectly call unsafe function via imported module...

PHP problem

This is not really an advisory, but a warning for sysadmins running webservers with PHP. I noticed that it was possible to rebuild the user database Unix even when safemode prevented from reading /etc/passwd and openbasedir prevented from accessing /etc. The implementation of getpwuid,nam functio...

Buffer overflows in Compaq Tru64 Unix

Buffer overflow in libc locale functions and -session switch of dtprintinfo...

Bypassing safe mode in PHP

It's possible to bypass safe mode limitation by using moveuploadedfile call and MySQL library functions to access files of different users...

Denial of Service (DoS)

Overview Affected versions of this package are vulnerable to Denial of Service DoS. Multiple signedness errors mixed signed and unsigned numbers in the I/O functions of rsync 2.4.6, 2.3.2, and other versions allow remote attackers to cause a denial of service and execute arbitrary code in the rsy...

SapporoWorks Black JumboDog 2.6.42.6.5 - HTTP Proxy Buffer Overflow

SapporoWorks Black JumboDog 2.6.42.6.5 - HTTP Proxy Buffer Overflow // source: https://www.securityfocus.com/bid/3858/info Black JumboDog 2.6.4 and 2.6.5 HTTP proxy is vulnerable to an exploitable buffer overflow. The buffer overflow can be exploited by sending excessively long "expires",...

SapporoWorks Black JumboDog 2.6.4/2.6.5 - HTTP Proxy Buffer Overflow

// source: https://www.securityfocus.com/bid/3858/info Black JumboDog 2.6.4 and 2.6.5 HTTP proxy is vulnerable to an exploitable buffer overflow. The buffer overflow can be exploited by sending excessively long "expires", "if-modified-since", and "LastModified" strings containing executable code....

ASI Oracle Security Alert: Oracle Home Environment Variable Buffer Overflow

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Oracle Home Environment Variable Buffer Overflow For additional details, the official advisories from Oracle Corporation can be downloaded from: http://otn.oracle.com/deploy/security/pdf/dbsmpalert.pdf Summary: By setting a long ORACLEHOME value more...

Обратный путь в директориях в функциях fts из libc (directory traversal)

Сконструировав специальные имена файлов можно выйти за пределы дерева директорий...

NetBSD Security Advisory 2001-016: unsafe chdir usage in fts(3)

-----BEGIN PGP SIGNED MESSAGE----- NetBSD Security Advisory 2001-016 ================================= Topic: unsafe chdir usage in fts3 Version: All NetBSD releases prior to July 9, 2001. Severity: Local users can trick processes that walk file system trees to perform their actions in the wrong...

Обход защиты в CylantSecure (protection bypass)

Из-за зажержки в обработке, программа может подгрузить модель с перенаправлением функций для обхода защиты...

Несанкционированный доступ в Active Web Classifieds (unauthorized access)

Ко многим конфигурационным функциям можно обратиться в обход защиты паролем...