Directory Manager edit_image.php Arbitrary Command Execution

Directory Manager is installed and does not properly filter user input. A remote attacker may use this flaw to execute arbitrary commands. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; ifdescription scriptid11104; scriptversion"1.26";...

ISS Alert: Remote Denial of Service Vulnerability in ISC BIND

TO UNSUBSCRIBE: email "unsubscribe alert" in the body of your message to [email protected] Contact [email protected] for help with any problems! --------------------------------------------------------------------------- -----BEGIN PGP SIGNED MESSAGE----- Internet Security Systems Security Aler...

CVE-2001-0760

Citrix Nfuse 1.51 is affected: a malformed request to launch.asp that omits the session field can disclose the absolute path of the web root to remote attackers, enabling partial disclosure of server information. No remediation or exploitation details are provided in the connected documents.

CVE-2001-0658: Undefined Security Weakness

Cross-site scripting CSS vulnerability in Microsoft Internet Security and Acceleration ISA Server 2000 allows remote attackers to cause other clients to execute certain script or read cookies via malicious script in an invalid URL that is not properly quoted in an error message...

CVE-2001-0547: Undefined Security Weakness

Memory leak in the proxy service in Microsoft Internet Security and Acceleration ISA Server 2000 allows local attackers to cause a denial of service resource exhaustion...

CVE-2001-0546: Undefined Security Weakness

Memory leak in H.323 Gatekeeper Service in Microsoft Internet Security and Acceleration ISA Server 2000 allows remote attackers to cause a denial of service resource exhaustion via a large amount of malformed H.323 data...

PT-2001-2618 · Microsoft · Internet Security/Acceleration (Isa) Server 2000

Name of the Vulnerable Software and Affected Versions: Microsoft Internet Security and Acceleration ISA Server 2000 Description: The issue allows remote attackers to cause a denial of service via a flood of fragmented UDP packets. The vendor disputes this issue, stating that it requires high...

ZoneAlarm Pro Local Internet not only Locally!

ZoneAlarm Pro is firewall for Windows home-users. The following was tested with ZoneAlarm Pro latest version: 2.6.357 Im not sure if it also works with the free version but I can't imagine why it wouldn't. Similair to Internet Explorer ZoneAlarm Pro ZAP has security settings for Local and Interne...

CVE-2001-0658

Cross-site scripting CSS vulnerability in Microsoft Internet Security and Acceleration ISA Server 2000 allows remote attackers to cause other clients to execute certain script or read cookies via malicious script in an invalid URL that is not properly quoted in an error message...

CVE-2001-0239

CVE-2001-0239 affects Microsoft Internet Security and Acceleration (ISA) Server 2000 Web Proxy. The vulnerability allows remote attackers to cause a denial of service by sending a long web request with a specific type. The provided documents do not specify the exact vulnerable component version, ...

CVE-2001-0239

Microsoft Internet Security and Acceleration ISA Server 2000 Web Proxy allows remote attackers to cause a denial of service via a long web request with a specific type...

CVE-2001-0239: Undefined Security Weakness

Microsoft Internet Security and Acceleration ISA Server 2000 Web Proxy allows remote attackers to cause a denial of service via a long web request with a specific type...

CVE-1999-1168

install.iss installation script for Internet Security Scanner ISS for Linux, version 5.3, allows local users to change the permissions of arbitrary files via a symlink attack on a temporary file...

CVE-1999-1168: Undefined Security Weakness

install.iss installation script for Internet Security Scanner ISS for Linux, version 5.3, allows local users to change the permissions of arbitrary files via a symlink attack on a temporary file...

CVE-2001-0589

NetScreen ScreenOS prior to 2.5r6 on the NetScreen-10 and Netscreen-100 can allow a local attacker to bypass the DMZ 'denial' policy via specific traffic patterns...

ISS Security Advisory: Wired-side SNMP WEP key exposure in 802.11 b Access Points

Internet Security Systems Security Advisory June 20, 2001 Wired-side SNMP WEP key exposure in 802.11b Access Points Synopsis: Internet Security Systems ISS X-Force has discovered a vulnerability in several 802.11b Access Point devices. This problem may reveal the Wired Equivalent Privacy WEP key...

IBM DB2 SQL DOS

1.Description The DB2 Universal Database builds upon the stability and performance of DB2 on the mainframe and provides the features required in a distributed database product. DB2 Universal Database UDB is IBM's relational database server solution for the UNIX, OS/2 and Windows NT/2000 operating...

Hardware Exploit - Gets network Down

Subject: Allegro-Software-RomPager/2.10 vulnerable to Dos Attack Risk: Serious! Timescape / Advisory TS002 ------------------------------------------- Allegro-Software-RomPager is an http server which is used in network hardware like switches to provide a web interface to remotely configure your...

Newsletter 35

RSA Web site defaced Amazon.com, eBay & CNN all targeted with DDoS President Clinton convenes meeting on internet security Infosec professionals like yourself can't afford to miss out on late breaking news, in-depth analysis, product reviews and more in each issue of Information Security Magazine...

tinyftpd.exploit.txt

Hello, I translated a following message in BUGTRAQ-JPJapanese by proxy and forward this here. ------- Forwarded Message From: UNYUN To: [email protected] Hi, This is UNYUN@ShadowPenguinSecurity. Tiny FTPd 0.52 beta3 that is Windows FTP server has a buffer overflow vulnerability in...