Georgi Guninski security advisory #68, 2004

Georgi Guninski security advisory 68, 2004 Buffer overflows in exim, yet still exim much better than windows Systems affected: two bugs in exim 3.35 one of them present in exim 4.32 Risk: Medium - not in default install Date: 6 May 2004 Legal Notice: This Advisory is Copyright c 2004 Georgi...

Arbitrary file overwriting in Unreal engine through UMOD

Luigi Auriemma Application: Unreal engine http://unreal.epicgames.com Versions: any game based on this engine that supports the UMOD installation. An example are Unreal Tournament = 451b and Unreal Tournament 2003 = 2225. A full list of vulnerable games is not available. Platforms: Windows and...

[SCSA-028] Nuked-Klan Multiple Vulnerabilities

================================================= Security Corporation Security Advisory SCSA-028 Nuked-Klan Multiple Vulnerabilities ================================================= PROGRAM: Nuked-KlaN HOMEPAGE: http://www.nuked-klan.org VULNERABLE VERSIONS: b1.4, b1.5, SP2 RISK: MEDIUM/HIGH...

[Full-Disclosure] Texutil symlink vulnerability.

Product: texutil Versions: All Bug: Symlink bug Impact: Attackers can overwrite arbitrary files with the privileges of the invoking user Risk: Medium Date: April 4, 2004 Author: Shaun Colley Email: shaunige yahoo co uk WWW: http://www.nettwerked.co.uk Introduction Vendor description: --- "When...

Abrior.txt

================================================================== Product : Abrior's Encore WebForum Versions : Unchecked maybe version I Bug : Remote Command Execution via Display.cgi Impact : Attackers can execute remote command Risk : Medium/High Date : April 3, 2004 Bug found by : k159 from...

Remote crash in Etherlords I 1.07 and II 1.03

Luigi Auriemma Application: - Etherlords I http://www.etherlords.com/etherlords1/ - Etherlords II http://www.etherlords.com Versions: Etherlords I = 1.07 Etherlords II = 1.03 Platforms: Windows Bug: reading of unallocated memory crash Risk: medium Exploitation: remote, versus server and client...

Chrome 1.2.0.0 server crash

Luigi Auriemma Application: Chrome http://www.chromethegame.com Versions: = 1.2.0.0 Platforms: Windows Bug: reading and writing into unallocated memory crash Risk: medium/high Exploitation: remote, versus server Date: 18 Mar 2004 Author: Luigi Auriemma e-mail: [email protected] web:...

Invision Power Board v1.3 Final Cross Site Scripting Vulnerabillity

Software: Invision Power Board Vendor: http://www.invisionboard.com/ Versions: U v1.3 Final Bug: Cross Site Scripting Vulnerabillity Risk: Medium Exploitation: Remote with browser Date: 29 Feb 2004 Author: Rafel Ivgi, The-Insider E-Mail: [email protected] Web: http://theinsider.deep-ice.com 1...

NAV bugs!

Subject: NAV bugs! Published: Friday, 05 March, 2004 Updated: 06-Mar-04 Discovered By: Bipin Gautam hUNT3R Product Version: Norton Antivirus 2002 ver: 8.00.58 Only tested On... Risk Impact: Low-Medium Details: During a 'manual scan' of a folder, if Norton Antivirus NAV encounters a file /folder...

virtuanews103.txt

Software: VirtuaNews Admin Panel Vendor: http://www.virtuanews.co.uk Versions: 1.0.3 Pro Platforms: Unix/Windows Bug: Cross Site Scripting Vulnerabillity Risk: Medium Exploitation: Remote with browser Date: 19 Feb 2004 Author: Rafel Ivgi, The-Insider e-mail: [email protected] web:...

invision13.txt

Software: Invision Power Board Vendor: http://www.invisionboard.com/ Versions: U v1.3 Final Bug: Cross Site Scripting Vulnerabillity Risk: Medium Exploitation: Remote with browser Date: 29 Feb 2004 Author: Rafel Ivgi, The-Insider E-Mail: [email protected] Web: http://theinsider.deep-ice.com 1...

LAN SUITE Web Mail 602Pro Multiple Vulnerabilities

Application: LAN SUITE Web Mail Server: WEB602/1.04 Vendors: Software602, Inc http://www.software602.com Versions: 602Pro Platforms: Windows Bug: Directory Listing, Local Path Disclosure and Cross Site Scripting Risk: Medium Exploitation: Remote with browser Date: 28 Feb 2004 Author: Rafel Ivgi,...

SCSA027.txt

====================================================================== Security Corporation Security Advisory SCSA-027 PHP-Nuke 6.9 SQL Injection Vulnerability ====================================================================== PROGRAM: PHP-Nuke HOMEPAGE: http://www.phpnuke.org VULNERABLE...

nextplace.txt

Software: NextPlace.com E-Commerce ASP Engine Vendor: http://www.nextplace.com/ Versions: Single version was created Bug: Cross Site Scripting Risk: Medium E-Commerce makes this irregular Exploitation: Remote with browser Date: 24 Jan 2004 Author: Rafel Ivgi, The-Insider E-Mail: [email protected]...

novellNetware.txt

Software: Novell Netware Vendor: http://www.Novell.com Versions: NetWare-Enterprise-Web-Server/5.1/6.0 Platforms: Windows Bug: Multiple Vulnerabilities Risk: Medium Exploitation: Remote with browser Date: 6 Jan 2004 Author: Rafel Ivgi, The-Insider e-mail: [email protected] web:...

[SCSA-026] DUWARE Products Admin Access and Arbitrary File Upload Vulnerability

====================================================================== Security Corporation Security Advisory SCSA-026 DUWARE Products Admin Access and Arbitrary File Upload Vulnerability ====================================================================== PROGRAM: DUWARE Products HOMEPAGE:...

goahead2.txt

Luigi Auriemma Application: Goahead webserver http://www.goahead.com/webserver/webserver.htm Versions: = 2.1.8 Platforms: multiplatform Bug: bypassing of special directories management with the effect of downloading cgi-bin files and more Risk: medium/high Exploitation: remote with browser Date: ...

Directories management bypassing in Goahead webserver <= 2.1.8

Luigi Auriemma Application: Goahead webserver http://www.goahead.com/webserver/webserver.htm Versions: = 2.1.8 Platforms: multiplatform Bug: bypassing of special directories management with the effect of downloading cgi-bin files and more Risk: medium/high Exploitation: remote with browser Date: ...

Denial of service in Getware's built-in webserver (Webcam Live and Photohost)

Luigi Auriemma Application: Getware's built-in webserver http://www.getware.com Versions: WebCam Live = 2.01 Photohost = 4.0 Platforms: Windows Bug: Denial of service Risk: medium Exploitation: remote Date: 19 Jan 2004 Author: Luigi Auriemma e-mail: [email protected] web:...

[SCSA-025] Invision Power Board SQL Injection Vulnerability

====================================================================== Security Corporation Security Advisory SCSA-025 Invision Power Board SQL Injection Vulnerability ====================================================================== PROGRAM: Invision Power Board HOMEPAGE:...