Allaire's JRUN Unauthenticated Access to WEB-INF directory

Foundstone, Inc. http://www.foundstone.com "Securing the Dot Com World" Security Advisory Allaire's JRUN ---------------------------------------------------------------------- FS Advisory ID: FS-102300-12-JRUN Release Date: October 23, 2000 Product: JRun 3.0 Vendor: Allaire Inc...

Allaire JRUN 2.3 Arbitrary File Retrieval

Foundstone, Inc. http://www.foundstone.com "Securing the Dot Com World" Security Advisory Allaire JRUN 2.3 ---------------------------------------------------------------------- FS Advisory ID: FS-102300-13-JRUN Release Date: October 23, 2000 Product: Allaire JRUN 2.3 Vendor: Allaire Inc...

DST2K0036: Price modification possible in CyberOffice Shopping Ca rt

All, We have released this with the permission of the vendor. Rgds Ollie ----- Ollie Whitehouse Security Team Leader tel: +44 020 79160200 ============================================================================ Delphis Consulting Plc...

DST2K0042.txt

----- Forwarded message from "Whitehouse, Ollie" ----- Approved-By: [email protected] Delivered-To: [email protected] Delivered-To: [email protected] X-Mailer: Internet Mail Service 5.5.2650.21 Date: Thu, 28 Sep 2000 17:13:46 +0100 Reply-To: "Whitehouse, Ollie" From:...

FS-073100-10-BEA.txt

Foundstone, Inc. http://www.foundstone.com "Securing the Dot Com World" Security Advisory BEA's WebLogic .jsp/.jhtml remote command execution ---------------------------------------------------------------------- FS Advisory ID: FS-073100-10-BEA Release Date: July 31, 2000 Product: WebLogic Vendo...

BEA's WebLogic *.jsp/*.jhtml remote command execution

Foundstone, Inc. http://www.foundstone.com "Securing the Dot Com World" Security Advisory BEA's WebLogic .jsp/.jhtml remote command execution ---------------------------------------------------------------------- FS Advisory ID: FS-073100-10-BEA Release Date: July 31, 2000 Product: WebLogic Vendo...

AnalogX "SimpleServer:WWW" dot dot bug

Foundstone, Inc. http://www.foundstone.com "Securing the Dot Com World" Security Advisory AnalogX "SimpleServer:WWW" dot dot bug ---------------------------------------------------------------------- FS Advisory ID: FS-072600-8-ANA Release Date: July 26, 2000 Product: SimpleServer:WWW Vendor:...

FS-072600-8-ANA.txt

Foundstone, Inc. http://www.foundstone.com "Securing the Dot Com World" Security Advisory AnalogX "SimpleServer:WWW" dot dot bug ---------------------------------------------------------------------- FS Advisory ID: FS-072600-8-ANA Release Date: July 26, 2000 Product: SimpleServer:WWW Vendor:...

FS-071000-5-JWS

Foundstone, Inc. http://www.foundstone.com "Securing the Dot Com World" Security Advisory Sun's Java Web Server ---------------------------------------------------------------------- FS Advisory ID: FS-071000-5-JWS Release Date: July 10, 2000 Product: Java Web Server Vendor: Sun Microsystems...

DST2K0018.txt

============================================================================ ==== Delphis Consulting Plc ============================================================================ ==== Security Team Advisories 19/06/2000 [email protected] http://www.delphisplc.com/thinking/whitepapers...

Advisory CA-2000-05

-----BEGIN PGP SIGNED MESSAGE----- CERT Advisory CA-2000-05 Netscape Navigator Improperly Validates SSL Sessions Original release date: May 12, 2000 Source: ACROS, CERT/CC A complete revision history is at the end of this file. Systems Affected Systems running Netscape Navigator 4.72, 4.61, and...

zeus.null.txt

This morning Zeus Technology Limited was informed of a serious security bug in the Zeus Webserver by 'The Relay Group' http://relaygroup.com. This document describes the scope of the problem and its solution. Versions affected ----------------- Zeus 3.1.x / 3.3.x Severity -------- High- this bug...