Samhain Labs 1.x - HSFTP Remote Format String

Samhain Labs 1.x - HSFTP Remote Format String / source: https://www.securityfocus.com/bid/9715/info hsftp has been found to be prone to a remote print format string vulnerability. This issue is due to the application improper use of a format printing function. Ultimately this vulnerability could...

[Full-Disclosure] Zone Labs Security Advisory ZL04-08 - SMTP processing vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Zone Labs Security Advisory ZL04-008 Zone Labs SMTP Processing Vulnerability Date Published February 18, 2004 Date Last Revised February 18, 2004 Severity Medium Overview ======== A security vulnerability exists in specific versions of ZoneAlarm,...

ZH2004-05SA.txt

ZH2004-05SA security advisory: Sql Injection Vulnerability in BosDates Published: 11 february 2004 Released: 11 february 2004 Name: BosDates Affected Systems: current and prior versions Issue: Sql Injection Vulnerability Author: G00db0y from Zone-h Security Labs - [email protected] Vendor:...

ZH2004-04SA.txt

ZH2004-04SA security advisory: Multiple Sql Injection Vulnerabilities in ReviewPost PHP Pro Published: 04 february 2004 Released: 04 february 2004 Name: ReviewPost PHP Pro Affected Systems: current and prior versions Issue: Sql Injection Vulnerability Author: G00db0y from Zone-h Security Labs -...

ZH2004-03SA.txt

ZH2004-03SA security advisory: Photopost PHP Pro 4.6 Sql Injection Vulnerability Published: 02 february 2004 Released: 02 february 2004 Name: Photopost PHP Pro Affected Systems: 4.6 and prior versions Issue: Sql Injection Vulnerability Author: G00db0y from Zone-h Security Labs - [email protected]...

ZH2004-02SA (security advisory): PJ CGI Neo review (NeoBoard review) Remote arbitrary file retrieving

ZH2004-02SA security advisory: PJ CGI Neo review NeoBoard review Remote arbitrary file retrieving Published: 29 january 2004 Released: 29 january 2004 Name: PJ CGI Neo review NeoBoard review Affected Systems: Current version Issue: Remote file retrieving Author: Zone-h Security Labs Vendor:...

ZH2004-01SA (security advisory): Web Blog 1.1 Remote arbitrary files retrieving

ZH2004-01SA security advisory: Web Blog 1.1 Remote arbitrary files retrieving Published: 28 january 2004 Released: 28 january 2004 Name: Web Blog Affected Systems: 1.1 Issue: Remote file retrieving Author: Zone-h Security Labs Vendor: http://leifwright.com Description Zone-h Security Team has...

ZH2004-02SA.txt

ZH2004-02SA security advisory: PJ CGI Neo review NeoBoard review Remote arbitrary file retrieving Published: 29 january 2004 Released: 29 january 2004 Name: PJ CGI Neo review NeoBoard review Affected Systems: Current version Issue: Remote file retrieving Author: Zone-h Security Labs Vendor:...

ZH2004-01SA.txt

ZH2004-01SA security advisory: Web Blog 1.1 Remote arbitrary files retrieving Published: 28 january 2004 Released: 28 january 2004 Name: Web Blog Affected Systems: 1.1 Issue: Remote file retrieving Author: Zone-h Security Labs Vendor: http://leifwright.com Description Zone-h Security Team has...

Xsok v1.02 ""-xsokdir"" local buffer overflow game exploit

No description provided by source. / 0x333xsok 2 = xsok 1.02 local game exploit Happy new year ! 2 : coded by c0wboy c 0x333 Outsiders Security Labs / www.0x333.org / include stdio.h include unistd.h define BIN "/usr/games/xsok" define RETADD 0xbffffa3c define SIZE 200 unsigned char shellcode = /...

Xsok v1.02 "-xsokdir" local buffer overflow game exploit

Exploit for linux platform in category local exploits ======================================================== Xsok v1.02 "-xsokdir" local buffer overflow game exploit ======================================================== / 0x333xsok 2 = xsok 1.02 local game exploit Happy new year ! 2 : coded ...

hztty 2.0 Local root exploit (Tested on Red Hat 9.0)

Exploit for linux platform in category local exploits ==================================================== hztty 2.0 Local root exploit Tested on Red Hat 9.0 ==================================================== / 0x333hztty = hztty 2.0 local root exploit more info : Debian Security Advisory DSA...

hztty 2.0 (RedHat 9.0) - Local Privilege Escalation

hztty 2.0 RedHat 9.0 - Local Privilege Escalation / 0x333hztty = hztty 2.0 local root exploit more info : Debian Security Advisory DSA 385-1 note I adjusted some part of hztty's code since there were some errors. hope this will not influence exploitation : tested against Red Hat 9.0 : c0wboy@0x33...

security issues in pine

Upgraded pine packages are available for Slackware 8.1, 9.0 and - -current. These fix two security problems found by iDEFENSE Labs which could lead to arbitrary code execution when a specially crafted email is processed by Pine. This problem is fixed in Pine 4.58. Sites which use the Pine mail...

Multiple Vulnerabilities in Sun-One Application Server

Multiple Vulnerabilities in Sun-One Application Server ------------------------------------------------------- Release Date: May 27, 2003 System Affected Sun-ONE Application Server 7.0 for Windows 2000/XP Description During a brief audit of a SunONE Application Server installation on Windows 2000...

Xeneo Web Server 2.2.9.0 - Denial of Service

Xeneo Web Server 2.2.9.0 - Denial of Service !/usr/bin/perl Xeneo Web Server DoS Vulnerable systems: Xeneo. Web Server 2.2.9.0 Written by badpack3t For SP Research Labs 04/21/2003 www.security-protocols.com usage: perl sp-xeneo.pl use IO::Socket; use strict; print ".:."x 20; print "\nXeneo Web...

CVE-2001-1373

Vulnerability (CVE-2001-1373) affects Zone Labs ZoneAlarm 2.6 and earlier, and ZoneAlarm Pro 2.6 and 2.4, where the MailSafe component does not block prohibited file types with long file names. Root cause: the filter fails to enforce type/name restrictions for attachments, enabling remote attacke...

The SUPER Bug

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 / SAVE DEFCON..HELP GOBBLES..SAVE DEFCON..HELP GOBBLES When GOBBLES say he and he security team are non-profit. He really mean NON-profit. This means GOBBLES and he GOBBLES Security Labs GSL friends do not have much funds. GOBBLES was hoping to receiv...

Remote Hole in IRC Client and Stuff

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 GOBBLES http://www.bugtraq.org ================================ GOBBLES Security Labs GSL is currently the largest non-profit security team in the world, with over 17 active members that are dedicated to bringing cutting edge material to the public th...

ACME Labs thttpd 2.20 - Cross-Site Scripting

ACME Labs thttpd 2.20 - Cross-Site Scripting source: https://www.securityfocus.com/bid/4601/info thttpd is a web server product maintained by ACME Labs. thttpd has been compiled for Linux, BSD and Solaris, as well as other Unix like operating systems. Cross Site Scripting issues has been reported...