Sun Solaris SSH Daemon fails to properly log client IP addresses

Overview The Sun Solaris Secure Shell Daemon sshd may incorrectly log client IP addresses. Description SSH is a program used to provide secure connection and communications between client and servers. Upon connecting to the service, the client's IP address is logged. There is a vulnerability in t...

CVE-2004-1357

The Secure Shell SSH Daemon SSHD in Sun Solaris 9 does not properly log IP addresses when SSHD is configured with the ListenAddress as 0.0.0.0, which makes it easier for remote attackers to hide the source of their activities...

Format string bug in IGI 2: Covert Strike 1.3

Luigi Auriemma Application: IGI 2: Covert Strike http://www.igi2-game.com Versions: = 1.3 Platforms: Windows, Linux Bug: format string bug Risk: high Exploitation: remote, versus server Date: 05 Apr 2004 Author: Luigi Auriemma e-mail: [email protected] web: http://aluigi.altervista.org 1...

Multiple IRIX ftpd DoS

DoS, logging bypass...

PicoPhone buffer overflow

Buffer overflow during logging...

Buffer overflow in PicoPhone 1.63

Luigi Auriemma Application: Picophone http://www.vitez.it/picophone/ Versions: = 1.63 Platforms: Windows Bug: buffer overflow in the logging function Risk: high Exploitation: remote Date: 24 Mar 2004 Author: Luigi Auriemma e-mail: [email protected] web: http://aluigi.altervista.org 1...

CVE-2004-0168

Unknown vulnerability in CoreFoundation for Mac OS X 10.3.2, related to "notification logging."...

CVE-2004-0168

Technical details about CVE-2004-0168 (affected product/version, root cause, impact, fix) are not provided in the supplied documents beyond the basic description; monitor for updates from official advisories.

CVE-2004-0168

Unknown vulnerability in CoreFoundation for Mac OS X 10.3.2, related to "notification logging."...

CVE-2004-0168: Undefined Security Weakness

Unknown vulnerability in CoreFoundation for Mac OS X 10.3.2, related to "notification logging."...

Symantec AntiVirus Scan Engine for Red Hat Linux symbolic links problem

Symbolic links problem during LiveUpdate logging...

PT-2003-1990 · Freescripts · Freescripts Visitorbook Le

Name of the Vulnerable Software and Affected Versions: FreeScripts VisitorBook LE affected versions not specified Description: The issue allows remote attackers to spoof the origin of their incoming requests, facilitating cross-site scripting XSS attacks. This is possible because the FreeScripts...

EEYE: Windows Workstation Service Remote Buffer Overflow

Windows Workstation Service Remote Buffer Overflow Release Date: November 11, 2003 Date Reported: September 15, 2003 Severity: High Remote Code Execution Systems Affected: Windows 2000 Windows XP Description: eEye Digital Security has discovered a remote buffer overflow in the Windows Workstation...

Liteserve buffer overflow

Buffer overflow in logging...

Linksys BEFSX41 System Log Viewer Log_Page_Num Variable Overflow DoS

The remote host seems to be a Linksys EtherFast Cable Firewall/Router. This product is vulnerable to a remote denial of service attack : if logging is enabled, an attacker can specify a long URL which results in the router becoming unresponsive. %NASLMINLEVEL 70300 Linksys EtherFast Cable/DSL...

BRSwebweaver.txt

=:=:=::=:=:=::=:=:=::=:=:=::=:=:=::=:=:=::=:=:=::= topic: BRS WebWeaver: Anonymous Surfing product: BRS WebWeaver 1.06 vendor: http://www.brswebweaver.com risk: high date: 09/24/2k3 discovered by: euronymous /F0KP advisory urls: http://f0kp.iplus.ru/bz/027en http://f0kp.iplus.ru/bz/027ru contact...

CVE-2003-0779

CVE-2003-0779 corresponds to an SQL injection in the Asterisk Call Detail Record (CDR) logging. A remote attacker can modify the CallerID string to cause arbitrary SQL execution due to unsafe query construction in the CDR logging path. The NVD/metrics indicate a CVSSv2 base score of 7.5 (HIGH) wi...

CVE-2003-0779: Undefined Security Weakness

SQL injection vulnerability in the Call Detail Record CDR logging functionality for Asterisk allows remote attackers to execute arbitrary SQL via a CallerID string...

CVE-2003-0651

Buffer overflow in the mylolog logging function for modmylo 0.2.1 and earlier allows remote attackers to execute arbitrary code via a long HTTP GET request...

Novell GroupWise Internet Agent 6.5.1

Novacoast Security Advisory Novell GroupWise 6.5 Vulnerability Synopsis: Novacoast has discovered a vulnerability in the Novell GroupWise 6.5 Wireless Webaccess logging functionality. The software exposes all username and passwords within the log file in clear text. This information could be used...