[SA15366] Avaya CMS/IR Xsun and Xprt Server Font Handling Vulnerabilities

---------------------------------------------------------------------- Want a new IT Security job? Vacant positions at Secunia: http://secunia.com/secuniavacancies/ ---------------------------------------------------------------------- TITLE: Avaya CMS/IR Xsun and Xprt Server Font Handling...

CVE-2005-0770

Format string vulnerability in DataRescue Interactive Disassembler and Debugger IDA Pro 4.7.0.830 allows remote attackers or local users to cause a denial of service CPU consumption or application crash and possibly execute arbitrary code via format string specifiers in a dynamic link library DLL...

DataRescue Interactive Disassembler Pro (IDA Pro disassembler/debugger) buffer overflow and format string bug

Buffer overflow on oversized inported library name, format string bug in library name...

ADVISORY: DataRescue Interactive Disassembler Pro Debugger Format String Vulnerability

DataRescue Interactive Disassembler Pro Debugger Format String Vulnerability by Piotr Bania [email protected] http://pb.specialised.info Severity: High / Medium - code execution. Versions affected: Probably all versions, however tested on 4.7.0.830. I. BACKGROUND "The IDA Pro Disassembler and...

[UNIX] Buffer Overflow in OSH

The following security advisory is sent to the securiteam mailing list, and can be found at the SecuriTeam web site: http://www.securiteam.com - - promotion The SecuriTeam alerts list - Free, Accurate, Independent. Get your security news from a reliable source...

CVE-2005-0115

DataRescue Interactive Disassembler Pro (IDA Pro) 4.7 is affected by a stack-based buffer overflow in the PE import directory parsing (Import Address Table). The vulnerability allows arbitrary code execution under the user’s context when a target opens a malicious PE file containing a long import...

CVE-2005-0115: Undefined Security Weakness

Stack-based buffer overflow in DataRescue Interactive Disassembler IDA Pro 4.7 allows attackers to execute arbitrary code via a PE file with an Import Address Table containing a long import library name...

iDEFENSE Security Advisory 01.24.05: DataRescue Interactive Disassembler Pro Buffer Overflow Vulnerability

DataRescue Interactive Disassembler Pro Buffer Overflow Vulnerability iDEFENSE Security Advisory 01.24.05 www.idefense.com/application/poi/display?id=189&type=vulnerabilities January 24, 2005 I. BACKGROUND DataRescue Inc.'s IDA Pro is a Windows or Linux hosted multi-processor disassembler and...

CVE-2003-1562

sshd in OpenSSH 3.6.1p2 and earlier, when PermitRootLogin is disabled and using PAM keyboard-interactive authentication, does not insert a delay after a root login attempt with the correct password, which makes it easier for remote attackers to use timing differences to determine if the password...

DEBIAN-CVE-2003-1562

sshd in OpenSSH 3.6.1p2 and earlier, when PermitRootLogin is disabled and using PAM keyboard-interactive authentication, does not insert a delay after a root login attempt with the correct password, which makes it easier for remote attackers to use timing differences to determine if the password...

Xpressions Interactive - Multiple SQL Injections

Xpressions Interactive - Multiple SQL Injections source: https://www.securityfocus.com/bid/7804/info Several software products maintained by Xpressions Interactive are prone to SQL injection attacks. The vulnerability exists in the login.asp page. Specifically, user-supplied input is not...

Xpressions Interactive Multiple Products login.asp SQL Injection

The remote host appears to be running a software suite truConnect, FlowerLink, eVision, or Website Integration from Xpressions Software. The software in question has multiple SQL injection vulnerabilities that could allow an attacker to gain administrative access. This could lead to the exposure ...

Microsoft Security Bulletin MS03-013: Buffer Overrun in Windows Kernel Message Handling could Lead to Elevated Privileges (811493)

-----BEGIN PGP SIGNED MESSAGE----- - ---------------------------------------------------------------------- Title: Buffer Overrun in Windows Kernel Message Handling could Lead to Elevated Privileges 811493 Date: 16 April 2003 Software: Microsoft Windows NT 4.0, Windows 2000, and Windows XP Impact...

CVE-2002-0542

Technical details about CVE-2002-0542 are not publicly provided in the supplied documents. Monitor for updates from CVE lists and vendor advisories.

Wordit Logbook 098b3 - Logbook.pl Remote Command Execution

Wordit Logbook 098b3 - Logbook.pl Remote Command Execution source: https://www.securityfocus.com/bid/7043/info A remote command execution vulnerability has been discovered in the Wordit Logbook application. This issue occurs due to insufficient sanitization of externally supplied data to the...

SSH Secure Shell without PTY setsid() Function Privilege Escalation

According to its banner, the version of SSH Secure Shell running on the remote host is between 2.0.13 and 3.2.1. There is a bug in such versions that may allow a non-interactive shell session, such as used in scripts, to obtain higher privileges due to a flaw in the way setsid is used. C Tenable...

CVE-2001-0804

CVE-2001-0804 affects Interactive Story prior to version 1.4, via a directory traversal in story.pl. The vulnerability allows remote attackers to read arbitrary server files by manipulating the next parameter (e.g., ..\ or ../../.. paths). Exploitation details from the Nessus plugin show requests...

CVE-2001-0804

Directory traversal vulnerability in story.pl in Interactive Story 1.3 allows a remote attacker to read arbitrary files via a .. dot dot attack on the "next" parameter...

CVE-2001-0804: Undefined Security Weakness

Directory traversal vulnerability in story.pl in Interactive Story 1.3 allows a remote attacker to read arbitrary files via a .. dot dot attack on the "next" parameter...

CVE-2001-0804

Directory traversal vulnerability in story.pl in Interactive Story 1.3 allows a remote attacker to read arbitrary files via a .. dot dot attack on the "next" parameter...