[security bulletin] SSRT2339 (ypxfrd) and SSRT2368 (ypserv) HP Tru64 UNIX Potential Security Vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 SECURITY BULLETIN REVISION: 0 TITLE: SSRT2339 ypxfrd and SSRT2368 ypserv HP Tru64 UNIX Potential Security Vulnerability NOTICE: There are no restrictions for distribution of this Bulletin provided that it remains complete and intact. RELEASE DATE: 07...

JAWmail XSS

JAWmail XSS PROGRAM: JAWmail VENDOR: Rudi Benkovic [email protected] et al. HOMEPAGE: http://www.jawmail.org/ VULNERABLE VERSIONS: 1.0-rc1, possibly others IMMUNE VERSIONS: 2.0-rc1 and later LOGIN REQUIRED: no SEVERITY: high DESCRIPTION: JAWmail Just Another Web Mail is a pretty ambitious web mail...

Xoops RC3 script injection vulnerability

-------------------------------------------- | Xoops RC3 script injection vulnerability | -------------------------------------------- PROGRAM: Xoops VENDOR: http://www.xoops.org/ VULNERABLE VERSIONS: RC3.0.4,possibly previous versions IMMUNE VERSIONS: no immune current versions SEVERITY: high...

ECHU Alert #2: IMG Attack in the news : 6 CMS vulnerables

---------------------------------------------- | IMG Attack in the news : 6 CMS vulnerables | ---------------------------------------------- PROGRAM: XOOPS, PHP-NUKE, NPDS, daCode, Drupal, phpWebSite VULNERABLE VERSIONS: I believe that all versions are vulnerables IMMUNE VERSIONS: no immune curre...

More Vulnerabilities with Pingtel xpressa SIP-based IP phones

The Sys-Security Group Security Advisory "More Vulnerabilities with Pingtel xpressa SIP-based IP Phones" Release Date: 08/20/2002 Affected Platforms: Pingtel xpressa SIP IP phones model PX-1 with software version 2.0.1 and below; Pingtel instant xpressa softphones with software version 2.0.1 and...

NSSI-2002-tpfw: Tiny Personal Firewall 3.0 Denial of Service Vulnerabilities

NSSI-Research Labs Security Advisory http://www.nssolution.com Ph "Maximum e-security" http://nssilabs.nssolution.com Tiny Personal Firewall 3.0 Denial of Service Vulnerabilities Author: Aaron Tan Lu / b45h3r e-Mail: [email protected] / [email protected] Advisory Code: NSSI-2002-tpfw Tested...

Kerio Mail Server Multiple Security Vulnerabilities

Good Day. The information below is the same as the security advisory regarding kerio mail server. Thank YOU! ==================CUT======================= NSSI-Research Labs Security Advisory http://www.nssolution.com "Maximum e-security" http://nssilabs.nssolution.com Kerio Mail Server 5.0 Multip...

Immunity Canvas: CMSD_XDRARRAY

Name| cmsdxdrarray ---|--- CVE| CVE-2002-0391 Exploit Pack| CANVAS Description| cmsdxdrarray Notes| References: http://sunsolve.sun.com/pub-cgi/retrieve.pl?doc=fsalert%2F46122 CVE Name: CVE-2002-0391 VENDOR: Sun Date public: Jul 30, 2002 CERT Advisory: http://www.cert.org/advisories/CA-2002-25.ht...

EEYE: Macromedia Shockwave Flash Malformed Header Overflow

Macromedia Shockwave Flash Malformed Header Overflow Release Date: August 8, 2002 Severity: High Remote Code Execution Systems Affected: Macromedia Shockwave Flash - All Versions; Unix and Windows; Netscape and Internet Explorer Description: While working on some pre-release eEye Retina CHAM tool...

Easy Guestbook Vulnerabilities

AresU Advisory 19/July/2002 Easy Guestbook Vulnerabilities Severity : High Possible to edit member homepage Systems Affected: Easy Guestbook v1.0 Vendor URL : http://www.easyscripts.co.uk Vuln Type : It does not use Access Validation to delete the entries and login as Admin Control. Author : Ares...

ezContents multiple vulnerabilities

ezContents multiple vulnerabilities PROGRAM: ezContents VENDOR: Marek Lyczba et al. [email protected] HOMEPAGE: http://www.visualshapers.com/ VULNERABLE VERSIONS: 1.40, 1.41, possibly others as well NOT VULNERABLE VERSIONS: none one hole fixed in 1.41 LOGIN REQUIRED: yes some issues, no some...

SQL Server 2000 Buffer Overflows and SQL Inyection vulnerabilities.

Security Advisory Name: SQL Server 2000 Buffer Overflows and SQL Inyection vulnerabilities. System Affected : Sql Server 2000 all Service Packs. Severity : High. Author: Cesar Cerrudo. Date: 07/25/2002 Advisory Number: CC070205 Overview: Database Consistency Checkers DBCCs are command console...

Geeklog XSS and CRLF Injection

Geeklog XSS and CRLF Injection PROGRAM: Geeklog VENDOR: Tony Bibbs et al. [email protected] HOMEPAGE: http://geeklog.sourceforge.net/ VULNERABLE VERSIONS: 1.3.5sr1, possibly earlier versions as well NOT VULNERABLE VERSIONS: 1.3.5sr2 LOGIN REQUIRED: no SEVERITY: high DESCRIPTION:...

SQL Server 7 & 2000 Installation process and Service Packs write encoded passwords to a file

Security Advisory Name: SQL Server 7 & 2000 Installation process and Service Packs write encoded passwords to a file. System Affected : Sql Server 7 & 2000, latest Service Packs. Severity : High. Author: Cesar Cerrudo. Date: 07/11/2002 Advisory Number: CC070204 Overview: When installing Microsoft...

Foundstone Advisory - Buffer Overflow in MyWebServer

---------------------------------------------------------------------- FS Advisory ID: FS-070302-24-MWSX Release Date: July 3rd, 2002 Product: MyWebServer Vendor: MyWebServer http://www.mywebserver.org Vendor Advisory: See vendor web site Type: Buffer Overflow Severity: High Author: Robin Keir...

Foundstone Advisory - Buffer Overflow in AnalogX Proxy

---------------------------------------------------------------------- FS Advisory ID: FS-070102-23-AXPR Release Date: July 1st, 2002 Product: AnalogX Proxy Vendor: AnalogX http://www.analogx.com Vendor Advisory: See vendor web site Type: Buffer Overflow Severity: High Author: Robin Keir...

Foundstone Advisory - Buffer Overflow in AnalogX SimpleServer:Shout

---------------------------------------------------------------------- FS Advisory ID: FS-062502-22-AXSH Release Date: June 25, 2002 Product: AnalogX SimpleServer:Shout Vendor: AnalogX http://www.analogx.com Vendor Advisory: See vendor web site Type: Buffer Overflow Severity: High Author: Robin...

BasiliX multiple vulnerabilities

BasiliX multiple vulnerabilities PROGRAM: BasiliX VENDOR: Murat Arslan [email protected] et al. HOMEPAGE: http://basilix.org/ VULNERABLE VERSIONS: 1.1.0 and all previous versions LOGIN REQUIRED: yes some issues, no some issues SEVERITY: high DESCRIPTION: "BasiliX is a webmail application based ...

CBMS: XSS and SQL Injection holes

CBMS: XSS and SQL Injection holes PROGRAM: CBMS VENDOR: Voxel Dot Net, Inc. [email protected] HOMEPAGE: http://www.voxel.net/projects/cbms/ VULNERABLE VERSIONS: 0.7 and possibly earlier versions as well LOGIN REQUIRED: yes SEVERITY: high VERSION OF THIS ADVISORY: 1.1 DESCRIPTION: "The CBMS is a full...

Foundstone Advisory - Buffer Overflow in Ipswitch Imail 7.1 and prior

Date: Mon, 20 May 2002 13:24:26 -0700 From: Foundstone Labs [email protected] To: [email protected] Subject: Foundstone Advisory - Buffer Overflow in Ipswitch Imail 7.1 and prior Please disregard the previous email. Can you please forward this to the bugtraq mailing list? Thanks, Marshall...