CVE-2004-2561

Multiple SQL injection vulnerabilities in Internet Software Sciences Web+Center 4.0.1 allow remote attackers to execute arbitrary SQL commands via 1 the ISSTECHCENTERLOGIN cookie in search.asp and 2 one or more cookies in DoCustomerOptions.asp...

Debian DSA-196-1 : bind - several vulnerabilities

Bind version 9, the bind9 package, is not affected by these problems. ISS X-Force has discovered several serious vulnerabilities in the Berkeley Internet Name Domain Server BIND. BIND is the most common implementation of the DNS Domain Name Service protocol, which is used on the vast majority of...

webcenterSQL.txt

Internet Software Sciences's Web+Center SQL Injection Summary Internet Software Sciences's Web+Center is "A suite of web based customer support applications including: Customer+Center Tech+Center Business+Center Pocket+Center". The Web+Center does a good job of filtering out malicious content fro...

[NT] Internet Software Sciences's Web+Center SQL Injection

The following security advisory is sent to the securiteam mailing list, and can be found at the SecuriTeam web site: http://www.securiteam.com - - promotion The SecuriTeam alerts list - Free, Accurate, Independent. Get your security news from a reliable source...

DSA-196 bind - several vulnerabilities

Bulletin has no description...

ISC INN 2.02.12.2.x - Multiple Local Format String Vulnerabilities

ISC INN 2.02.12.2.x - Multiple Local Format String Vulnerabilities source: https://www.securityfocus.com/bid/4501/info The Internet Software Consortium ISC Internet News INN project is a powerful, mature implementation of a usenet system, including a NNTP server and a newsreading server. It is...

CVE-2001-0788

Internet Software Solutions Air Messenger LAN Server AMLServer 3.4.2 allows remote attackers to obtain an absolute path for the server directory by viewing the Location header...

CVE-2001-0788

Internet Software Solutions Air Messenger LAN Server AMLServer 3.4.2 allows remote attackers to obtain an absolute path for the server directory by viewing the Location header...

CVE-2001-0786

Vulnerability summary (CVE-2001-0786) : Internet Software Solutions Air Messenger LAN Server (AMLServer) 3.4.2 stores usernames and passwords in plaintext in the pUser.Dat file. The issue affects the authentication data, enabling potential privacy disclosure if the password file is exposed. The N...

CVE-2001-0785

Directory traversal in Webpaging interface in Internet Software Solutions Air Messenger LAN Server AMLServer 3.4.2 allows allows remote attackers to read arbitrary files via a .. dot dot attack...

CVE-2001-0788

CVE-2001-0788 affects Internet Software Solutions Air Messenger LAN Server (AMLServer) 3.4.2. Remote attackers can obtain the server's absolute directory path by viewing the Location header; no remediation details are provided in the supplied documents.

ISC BIND 8.2.2-P5 - Denial of Service

source: https://www.securityfocus.com/bid/1923/info BIND is the Berkeley Internet Name Daemon, a free Name Resolution software package maintained by the Internet Software Consortium. A Denial of Service exists in current implementations. The problem occurs in the Compressed Zone Transfer ZXFR...

ISC BIND (LinuxBSD) - Remote Buffer Overflow (1)

ISC BIND LinuxBSD - Remote Buffer Overflow 1 / source: https://www.securityfocus.com/bid/134/info A buffer overflow exists in certain versions of BIND, the nameserver daemon currently maintained by the Internet Software Consortium ISC. BIND fails to properly bound the data recieved when processin...

ISC BIND (Multiple OSes) - Remote Buffer Overflow (2)

ISC BIND Multiple OSes - Remote Buffer Overflow 2 / source: https://www.securityfocus.com/bid/134/info A buffer overflow exists in certain versions of BIND, the nameserver daemon currently maintained by the Internet Software Consortium ISC. BIND fails to properly bound the data recieved when...

ISC BIND (Multiple OSes) - Remote Buffer Overflow (2)

/ source: https://www.securityfocus.com/bid/134/info A buffer overflow exists in certain versions of BIND, the nameserver daemon currently maintained by the Internet Software Consortium ISC. BIND fails to properly bound the data recieved when processing an inverse query. Upon a memory copy,...