ZH2004-02SA (security advisory): PJ CGI Neo review (NeoBoard review) Remote arbitrary file retrieving

ZH2004-02SA security advisory: PJ CGI Neo review NeoBoard review Remote arbitrary file retrieving Published: 29 january 2004 Released: 29 january 2004 Name: PJ CGI Neo review NeoBoard review Affected Systems: Current version Issue: Remote file retrieving Author: Zone-h Security Labs Vendor:...

ZH2004-02SA.txt

ZH2004-02SA security advisory: PJ CGI Neo review NeoBoard review Remote arbitrary file retrieving Published: 29 january 2004 Released: 29 january 2004 Name: PJ CGI Neo review NeoBoard review Affected Systems: Current version Issue: Remote file retrieving Author: Zone-h Security Labs Vendor:...

ZH2004-01SA.txt

ZH2004-01SA security advisory: Web Blog 1.1 Remote arbitrary files retrieving Published: 28 january 2004 Released: 28 january 2004 Name: Web Blog Affected Systems: 1.1 Issue: Remote file retrieving Author: Zone-h Security Labs Vendor: http://leifwright.com Description Zone-h Security Team has...

Cisco IOS H.323 Protocol Implementation Flaws

According to its version number, the remote host is running a vulnerable version of Cisco IOS. The affected versions have multiple buffer overflow vulnerabilities in the H.323 processing routines. H.323 is a standard that defines several protocols used for audio/visual applications, including IP...

CVE-2003-0819

Buffer overflow in the H.323 filter of Microsoft Internet Security and Acceleration Server 2000 allows remote attackers to execute arbitrary code in the Microsoft Firewall Service via certain H.323 traffic, as demonstrated by the NISCC/OUSPG PROTOS test suite for the H.225 protocol...

CVE-2004-0054

CVE-2004-0054 affects Cisco IOS with H.323 support (releases 11.3T through 12.2T). The issue is in the H.323 message processing that can be exploited to cause a denial of service and, potentially, remote code execution as demonstrated by the NISCC/OUSPG PROTOS test suite for H.225. Multiple sourc...

CVE-2004-0056

Multiple vulnerabilities in the H.323 protocol implementation affect Nortel Networks BCM, Succession 1000 IP Trunk/IP Peer Networking, and 802.11 Wireless IP Gateway. The issues enable remote denial of service and possibly arbitrary code execution, demonstrated via the H.225 protocol test suite (...

CVE-2004-0056

Multiple vulnerabilities in the H.323 protocol implementation for Nortel Networks Business Communications Manager BCM, Succession 1000 IP Trunk and IP Peer Networking, and 802.11 Wireless IP Gateway allow remote attackers to cause a denial of service and possibly execute arbitrary code, as...

CVE-2004-0054

Multiple vulnerabilities in the H.323 protocol implementation for Cisco IOS 11.3T through 12.2T allow remote attackers to cause a denial of service and possibly execute arbitrary code, as demonstrated by the NISCC/OUSPG PROTOS test suite for the H.225 protocol...

CVE-2003-0819

CVE-2003-0819 is a buffer-overflow vulnerability in the H.323 filter of Microsoft ISA Server 2000 that could allow remote code execution in the Microsoft Firewall Service via crafted H.323 traffic. OpenVAS entries corroborate a remote-code-execution risk; affected product is ISA Server 2000 (Gold...

Cisco Security Advisory: Vulnerabilities in H.323 Message Processing

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Cisco Security Advisory: Vulnerabilities in H.323 Message Processing Document ID: 47843 Revision 1.0 - INTERIM For Public Release 2004 January 13 UTC 1200 - -------------------------------------------------------------------------- Contents ========...

CERT Advisory CA-2004-01 Multiple H.323 Message Vulnerabilities

-----BEGIN PGP SIGNED MESSAGE----- CERT Advisory CA-2004-01 Multiple H.323 Message Vulnerabilities Original release date: January 13, 2004 Last revised: -- Source: CERT/CC, NISCC A complete revision history can be found at the end of this file. Systems Affected Many software and hardware systems...

Microsoft Security Bulletin MS04-001

Microsoft Security Bulletin MS04-001 Vulnerability in Microsoft Internet Security and Acceleration Server 2000 H.323 Filter Could Allow Remote Code Execution 816458 Issued: January 13, 2004 Version: 1.0 Summary Who should read this document: Customers who use Microsoft® Internet Security and...

Multiple bugs in H.323 implementations

No description provided...

Vulnerabilities in H.323 Message Processing

...

Multiple vulnerabilities in H.323 implementations

Overview A number of vulnerabilities have been discovered in various implementations of the multimedia telephony protocols H.323 and H.225. Voice over Internet Protocol VoIP and video conferencing equpiment and software can use these protocols to interoperate over a variety of computer networks...

Vulnerabilities in H.323 implementations

The NISCC and the OUSPG developed a test suite for the H.323 protocol. This test suite has uncovered vulnerabilities in several H.323 implementations with impacts ranging from denial-of-service to arbitrary code execution. In the FreeBSD Ports Collection, pwlib' is directly affected. Other...

CVE-2003-1248

H-Sphere WebShell 2.3 allows remote attackers to execute arbitrary commands via shell metacharacters in the 1 mode and 2 zipfile parameters in a URL request...

CVE-2003-1247

Multiple buffer overflows in H-Sphere WebShell 2.3 allow remote attackers to execute arbitrary code via 1 a long URL content type in CGI::readFile, 2 a long path in diskusage, and 3 a long fname in flist...

ZH2003-28SA (security advisory): file inclusion vulnerability in PayPal Store Front

ZH2003-28SA security advisory: file inclusion vulnerability in PayPal Store Front Published: 08 October 2003 Name: PayPal Store Front Affected Versions: 3.0 and other versions? Vendor: http://www.muziqpakistan.net/taz/ Issue: file inclusion vulnerability Author: Astharot at Zone-H.org Description...