Vulnerability in IBM Windows XP: default hidden Administrator account allows local Administrator access

Vulnerability in IBM Windows XP default hidden Administrator account allows local Administrator access Systems: IBM Workstations, Laptops, etc. Vulnerable: IBM Systems with preinstalled Microsoft Windows XP Professional RTM and SP1 Not Vulnerable: IBM Systems without Windows XP Professional...

Oracle Database Server contains several vulnerabilities

Overview Several vulnerabilities exist in the Oracle Database Server and Listener. According the the Oracle Security Alert, exploitation of these vulnerabilities would require the attacker to have network access, but not a valid user account on the vulnerable system. Description Oracle Database 1...

7a69Adv#13 - USRobotics AP Wireless Denial of Service

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - ------------------------------------------------------------------ 7a69ezine Advisories 7a69Adv13 - ------------------------------------------------------------------ http://www.7a69ezine.org 02/08/2004 -...

MySQL Authentication Bypass

NGSSoftware Insight Security Research Advisory Name: MySQL Authentication Bypass / Buffer Overflow Systems Affected: MySQL 4.1 prior to 4.1.3, and MySQL 5.0. Severity: High Vendor URL: http://www.mysql.com Author: Chris Anley [email protected] Date of Advisory: 1st July 2004 Whitepaper We hav...

[Full-Disclosure] CYBSEC - Security Advisory: Denial of Service in IBM WebSphere Edge Server

The following advisory is also available in pdf for download at http://www.cybsec.com/vuln/IBM-WebSphere-Edge-Server-DOS.pdf CYBSEC S.A. www.cybsec.com Advisory Name: Denial of Service in WebSphere Edge Server. Vulnerability Class: Denial of Service Release Date: June 2nd 2004 Affected...

IBM acpRunner Activex Dangerous Methods Vulnerability

IBM acpRunner Activex Dangerous Methods Vulnerability Release Date: June 15, 2004 Date Reported: February 20, 2004 Patch Development Time In Days: 116 Severity: High Remote Code Execution Vendor: IBM Systems Affected: acpRunner Activex Version 1.2.5.0 Overview: eEye Digital Security has discovere...

[Full-Disclosure] VP-ASP Shopping Cart Multiple Vulnerabilities

VP-ASP Shopping Cart Multiple Vulnerabilities Release Date: June 14, 2004 Severity: High Vendor: Virtual Programming Software: VP-ASP Shopping Cart Version 5.x Remote: Remotely executable Vulnerabilities: Cross Site Scripting SQL Injection Technical Details: Cross Site Scripting Vulnerability was...

[Full-Disclosure] SSH URI handler remote arbitrary code execution

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Adv: safari0x06 Release Date: 24/05/2004 Affected Products: MacOSX = 10.3.3, Various Browsers, possibly others platforms/browsers Fixed in: Not fixed. Impact: Remote code execution. Severity: High. Vendors: Notified 20-23/02/04 Author: [email protected]...

Network Intelligence Advisory - Denial of Service Vulnerability in ColdFusion MX

Name: Denial of Service Vulnerability in ColdFusion MX Systems Affected: Version 6.0 and earlier Severity: Medium-High Category: Denial of Service Vendor URL: Macromedia ColdFusion MX Discovered by: Network Intelligence I Pvt. Ltd. www.nii.co.in Online location: http://www.nii.co.in/vuln/cfdos.ht...

Multiple XSS vulnerabilities in Microsoft SharePoint Portal Server 2001

-- Security Advisory -- Multiple XSS vulnerabilities in Microsoft SharePoint Portal Server 2001 -- Author: Ory Segal , Sanctum inc. http://www.SanctumInc.com -- Release Date: April 5th. 2004 -- Product: Microsoft SharePoint Portal Server 2001 -- Severity: High -- CVE: CAN-2004-0379 -- Description...

Adv-20040331.txt

S-Quadra Advisory 2004-03-31 Topic: CactuSoft CactuShop v5.x shopping cart software multiple security vulnerabilities Severity: High Vendor URL: http://www.cactushop.com Advisory URL: http://www.s-quadra.com/advisories/Adv-20040331.txt Release date: 31 Mar 2004 1. DESCRIPTION CactuShop is an ASP...

Norton Internet Security Remote Command Execution (#NISR19042004b)

NGSSoftware Insight Security Research Advisory Name: Norton Internet Security Remote Command Execution Systems Affected: XP not confirmed on 2000; NIS & NIS Pro 2004, not confirmed on previous versions. Severity: High Vendor URL: http://www.symantec.com Author: Mark Litchfield [email protected]...

PHP Code Injection Vulnerabilities in ezContents 2.0.2 and prior

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 PHP Code Injection Vulnerabilities in ezContents 2.0.2 and prior Summary : ezContents a free open source content management system has been found to be vulnerable to Multiple PHP Code Injection vulnerabilities. They enable a malicious user to access...

[Full-Disclosure] Oracle Database 9ir2 Interval Conversion Functions Buffer Overflow

Security Advisory Name: Oracle Database 9ir2 Interval Conversion Functions Buffer Overflow. System Affected : Oracle Database 9ir2, previous versions could be affected too. Severity : High Remote exploitable : Yes Author: Cesar Cerrudo. Date: 02/05/04 Advisory Number: CC020401 Legal Notice: This...

Arbitrary File Disclosure Vulnerability in phpMyAdmin 2.5.5-pl1 and prior

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Arbitrary File Disclosure Vulnerability in phpMyAdmin 2.5.5-pl1 and prior Summary : phpMyAdmin is a tool written in PHP intended to handle the administration of MySQL over the WWW. There is a vulnerability in the current stable version of phpMyAdmin...

phpMyAdmin255pl1.txt

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Arbitrary File Disclosure Vulnerability in phpMyAdmin 2.5.5-pl1 and prior Summary : phpMyAdmin is a tool written in PHP intended to handle the administration of MySQL over the WWW. There is a vulnerability in the current stable version of phpMyAdmin...

phpGedView_v2.txt

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 PHP Code Injection Vulnerabilities in phpGedView 2.65.1 and prior Summary : phpGedView is an open source system for online viewing Gedcom information family tree and genology information. Multiple PHP Code Injection vulnerabilities exist in the...

SRT2004-01-18-0747 - IBM Informix IDS 9.4 contains multiple vulnerabilities

п»їSecure Network Operations, Inc. http://www.secnetops.com/research Strategic Reconnaissance Team researchatsecnetops.com Team Lead Contact kfatsecnetops.com Spam Contact rm -rf /@snosoft.com Our Mission: Secure Network Operations offers expertise in Networking, Intrusion Detection Systems IDS,...

[Full-Disclosure] Directory Traversal in Accipiter Direct Server 6.0

Severity: High Title: Accipiter Direct Server Date: January 09, 2004 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Synopsis ======== A security vulnerability has been found in Accipiter Direct...

Cyrus IMSP remote root vulnerability

n.runs GmbH http://www.nruns.com/ [email protected] n.runs-SA-2003.001 15-Dec-2003 Vendor: Andrew Systems Group, Carnegie Mellon cmu.edu Product: Cyrus IMSP Vulnerability: Buffer overflow in address book handling Affected Releases: 1.4, 1.5a6, 1.6a3, 1.7 NOT Affected Releases: - Severty: HIGH CE...