PTL-2002-03 Betsie XSS Vuln

PenTest Limited www.pentest-limited.com Security Advisory XSS bug in Betsie Announcement date: 1st July 2002 Reference: ptl-2002-03 Advisory Details ---------------- Product: Betsie Vulnerable versions: 1.5.11 and all versions before Vulnerability Type : Input Validation Error Platforms: All...

Moderate: Red Hat Security Advisory: : : : Updated OpenSSH packages fix various security issues

Updated openssh packages are now available for Red Hat Linux 7, 7.1, 7.2, and 7.3. These updates fix an input validation error in OpenSSH. Updated 16 April 2003 Added packages for Red Hat Linux on IBM iSeries and pSeries systems. OpenSSH provides an implementation of the SSH secure shell protocol...

Revised OpenSSH Security Advisory (adv.iss)

This is the 2nd revision of the Advisory. 1. Versions affected: Serveral versions of OpenSSH's sshd between 2.3.1 and 3.3 contain an input validation error that can result in an integer overflow and privilege escalation. All versions between 2.3.1 and 3.3 contain a bug in the...

[ARL02-A13] Multiple Security Issues in GeekLog

+/---------------- ALPER Research Labs ------/--------/+ +/---------------- Security Advisory -----/---------/+ +/---------------- ID: ARL02-A13 ----/----------/+ +/---------------- [email protected] ---/-----------/+ Advisory Information -------------------- Name : Multiple Security Issues in...

[ARL02-A15] Multiple Security Issues in MyHelpdesk

+/---------------- ALPER Research Labs ------/--------/+ +/---------------- Security Advisory -----/---------/+ +/---------------- ID: ARL02-A15 ----/----------/+ +/---------------- [email protected] ---/-----------/+ Advisory Information -------------------- Name : Multiple Security Issues in...

[ARL02-A14] ZenTrack System Information Path Disclosure Vulnerability

+/---------------- ALPER Research Labs ------/--------/+ +/---------------- Security Advisory -----/---------/+ +/---------------- ID: ARL02-A14 ----/----------/+ +/---------------- [email protected] ---/-----------/+ Advisory Information -------------------- Name : ZenTrack System Information...

[ARL02-A12] PHP(Reactor) Cross Site Scripting Vulnerability

+/---------------- ALPER Research Labs ------/--------/+ +/---------------- Security Advisory -----/---------/+ +/---------------- ID: ARL02-A12 ----/----------/+ +/---------------- [email protected] ---/-----------/+ Advisory Information -------------------- Name : phpReactor Cross Site Scripti...

BadBlue Web Server v1.7.0 Directory Contents Disclosure

BadBlue Web Server v1.7.0 Directory Contents Disclosure Author: p0p t4rtz and Bit Release Date: May 31, 2002 Class: Input Validation Error Remote/Local: Remote Object: BadBlue v1.7.0 and below Abstract:: ^^^^^^^^^^ BadBlue is a well known small-scale web server for sharing files with remote users...

Snitz Forums 2000 remote SQL query manipulation vulnerability

vulnerable ---------- Product : Snitz Forums 2000 Version : 3.3 3.3.01 3.3.02 3.3.03 last stable version Object : members.asp Class : Input validation error remote SQL query manipulation vulnerability Vendor-URL : http://forum.snitz.com/ Vendor-Status : informed, not patched Remote-Exploit : yes...

Snitz Forums 2000 remote SQL query manipulation vulnerability

vulnerable ---------- Product : Snitz Forums 2000 Version : 3.3 3.3.01 3.3.02 3.3.03 last stable version Object : members.asp Class : Input validation error remote SQL query manipulation vulnerability Vendor-URL : http://forum.snitz.com/ Vendor-Status : informed, not patched Remote-Exploit : yes...

vuln in wwwisis: remote command execution and get files

Name : wwwisis remote command execution and get files Software Package : wwwisis possibly affected : JavaISIS and other tools based on wwwisis Vendor Homepage : http://www.bireme.br/isis/I/wwwi.htm Vulnerable Versions: 3.45 verified, probably others Platforms : Linux verified, probably others...

[ARL02-A09] Board-TNK Cross Site Scripting Vulnerability

+/---------------- ALPER Research Labs ------/--------/+ +/---------------- Security Advisory -----/---------/+ +/---------------- ID: ARL02-A09 ----/----------/+ +/---------------- [email protected] ---/-----------/+ Advisory Information -------------------- Name : Board-TNK Cross Site Scriptin...

[ARL02-A07] ARSC Really Simple Chat System Information Path Disclosure Vulnerability

+/--------------- ALPER Research Labs -----/--------/+ +/--------------- Security Advisory ----/---------/+ +/--------------- ID: ARL02-A07 ---/----------/+ +/--------------- [email protected] --/-----------/+ Advisory Information -------------------- Name : ARSC Really Simple Chat System...

[ARL02-A11] Big Sam (Built-In Guestbook Stand-Alone Module) Multiple Vulnerabilities

+/---------------- ALPER Research Labs ------/--------/+ +/---------------- Security Advisory -----/---------/+ +/---------------- ID: ARL02-A11 ----/----------/+ +/---------------- [email protected] ---/-----------/+ Advisory Information -------------------- Name : Big Sam Built-In Guestbook...

[ARL02-A08] BG Guestbook Cross Site Scripting Vulnerability

+/---------------- ALPER Research Labs ------/--------/+ +/---------------- Security Advisory -----/---------/+ +/---------------- ID: ARL02-A08 ----/----------/+ +/---------------- [email protected] ---/-----------/+ Advisory Information -------------------- Name : BG Guestbook Cross Site...

[ARL02-A10] News-TNK Cross Site Scripting Vulnerability

+/---------------- ALPER Research Labs ------/--------/+ +/---------------- Security Advisory -----/---------/+ +/---------------- ID: ARL02-A10 ----/----------/+ +/---------------- [email protected] ---/-----------/+ Advisory Information -------------------- Name : News-TNK Cross Site Scripting...

[ARL02-A06] Black Tie Project System Information Path Disclosure Vulnerability

+/--------------- ALPER Research Labs -----/--------/+ +/--------------- Security Advisory ----/---------/+ +/--------------- ID: ARL02-A06 ---/----------/+ +/--------------- [email protected] --/-----------/+ Advisory Information -------------------- Name : Black Tie Project System Information...

[ARL02-A05] PHP FirstPost System Information Path Disclosure Vulnerability

+/--------------- ALPER Research Labs -----/--------/+ +/--------------- Security Advisory ----/---------/+ +/--------------- ID: ARL02-A05 ---/----------/+ +/--------------- [email protected] --/-----------/+ Advisory Information -------------------- Name : PHP FirstPost System Information Path...

[ARL02-A03] DCP-Portal Cross Site Scripting Vulnerability

+/--------------- ALPER Research Labs -----/--------/+ +/--------------- Security Advisory ----/---------/+ +/--------------- ID: ARL02-A03 ---/----------/+ +/--------------- [email protected] --/-----------/+ Advisory Information -------------------- Name : DCP-Portal Cross Site Scripting...

Mrtg Path Disclosure Vulnerability (Revised)

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 /This is Mrtg Web Frontend 14all.cgi bug. You may find the revised security announcement below/ Mrtg/RRD 14all.cgi Path Disclosure Vulnerability Type: Input Validation Error Release Date: February 4, 2002 Product / Vendor: 14all.cgi is a CGI script to...