Microsoft IIS FTP服务器递归列表拒绝服务漏洞(MS09-053)

BUGTRAQ ID: 36273 CVE ID: CVE-2009-2521 Microsoft Internet信息服务（IIS）是Microsoft Windows自带的一个网络信息服务器，其中包含HTTP服务功能。 IIS的FTPd的Glob功能在处理递归目录列表请求时存在栈溢出漏洞，拥有对目录写访问权限的远程攻击者可以通过提交包含有通配符（如“”）的请求触发这个溢出，导致FTP服务崩溃。 Microsoft IIS 7.0 Microsoft IIS 6.0 Microsoft IIS 5.1 Microsoft IIS 5.0 临时解决方法：...

Stream 0day principles+practice-vulnerability warning-the black bar safety net

-gxm &ãƒÿ Kiba メ Kaka B. S. T&EEST First of all as I am, gxm, very pleased with Kaka in the 2 Number 3 of the morning 2am more common study of the flow of data in this subject. Thanks Kaka selfless dedication. Technology sharing. Only allow this stream to fully play his strength. A principle Firs...

Stream 0day-vulnerability warning-the black bar safety net

gxm Inscription: First of all as I am, gxm, very pleased with Kaka in the 2 Number 3 of the morning 2am more common study of the flow of data in this subject. Thanks Kaka selfless dedication. Technology sharing. Only allow this stream to fully play his strength. A principle First said, the NTFS...

XX antivirus Avira when NTFS permissions vulnerability-vulnerability warning-the black bar safety net

ＸＸ and other mollusc in the processing of the NTFS partition to have special permissions when a file will avoid the check, or direct skip, cause any virus can escape the antivirus check. Currently known Kaspersky the memory of killing there is no such vulnerability, but the file scan will skip...

Sun One WebServer source code disclosure

It's possible to obtains page source code via alternate NTFS streams http://server/hello.jsp::$DATA...

Crack Windows encryption protection: EFS decryption through-vulnerability warning-the black bar safety net

EFSEncrypting File System, Encrypting File Systemencryption is based on the NTFS disk art encryption technology. EFS encryption is based on Public Key Policies. Using EFS to encrypt a file or folder, the system will first generate a pseudo-random number consisting of a FEKFile Encryption Key file...

MDVA-2008:086 : drakxtools

This drakxtools and drakconf update provides fixes for the harddrake auto-configuration tool mostly for live systems and for the live system installer. It also allows mounting ntfs-3g partitions from diskdrake. Finally, it detects the USB cellular devices controlled by the hso driver. %NASLMINLEV...

Mandriva Linux Security Advisory : ruby (MDVSA-2008:140)

Multiple vulnerabilities have been found in the Ruby interpreter and in Webrick, the webserver bundled with Ruby. Directory traversal vulnerability in WEBrick in Ruby 1.9.0 and earlier, when using NTFS or FAT filesystems, allows remote attackers to read arbitrary CGI files via a trailing 1 + plus...

MDVA-2008:096 : ntfs-3g

In certain rare circumstances, any area of an NTFS volume, excluding the NTFS boot sector, could get corrupted. The chances for this to happen are greater when the disk is close to full utilization and when using one of the more uncommon, less than 4096 byte cluster sizes. The updated packages...

Mandriva Linux Security Advisory : ruby (MDVSA-2008:141)

Multiple vulnerabilities have been found in the Ruby interpreter and in Webrick, the webserver bundled with Ruby. Directory traversal vulnerability in WEBrick in Ruby 1.8 before 1.8.5-p115 and 1.8.6-p114, and 1.9 through 1.9.0-1, when running on systems that support backslash path separators or...

Mandriva Update for drakxtools MDVA-2008:086 (drakxtools)

Check for the Version of drakxtools OpenVAS Vulnerability Test Mandriva Update for drakxtools MDVA-2008:086 drakxtools Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify...

Mandriva Update for ntfs-3g MDVA-2008:096 (ntfs-3g)

Check for the Version of ntfs-3g OpenVAS Vulnerability Test Mandriva Update for ntfs-3g MDVA-2008:096 ntfs-3g Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under...

Mandriva Update for drakxtools MDVA-2008:086 (drakxtools)

Check for the Version of drakxtools OpenVAS Vulnerability Test Mandriva Update for drakxtools MDVA-2008:086 drakxtools Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify...

CVE-2008-6528

NTFS TmaxSoft JEUS 5 before Fix 26 allows remote attackers to read the source code for scripts by appending ::$DATA to the URL, which accesses the alternate data stream...

Code injection

NTFS TmaxSoft JEUS 5 before Fix 26 allows remote attackers to read the source code for scripts by appending ::$DATA to the URL, which accesses the alternate data stream...

CVE-2008-6528

NTFS TmaxSoft JEUS 5 before Fix 26 allows remote attackers to read the source code for scripts by appending ::$DATA to the URL, which accesses the alternate data stream...

CVE-2008-6528

CVE-2008-6528 affects NTFS on TmaxSoft JEUS 5 before Fix 26. The vulnerability allows remote attackers to read the source code of scripts by appending ::$DATA to the URL, which accesses the NTFS alternate data stream. This exposure could disclose script source contents. The NVD entry lists a CVSS...

Fedora Update for ntfs-3g FEDORA-2007-2295

The remote host is missing an update for the SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

Fedora Update for ntfs-3g FEDORA-2007-2295

Check for the Version of ntfs-3g OpenVAS Vulnerability Test Fedora Update for ntfs-3g FEDORA-2007-2295 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...

Fwd: TmaxSoft JEUS Alternate Data Streams Vulnerability

Dear bugtraq, Thanks for your concern. I saw BID 32804. It is one incorrect information. Tmax Soft JEUS 5 Fix26 is not vulnerable. The vendor informs that users upgrade to this versionFix 26. Please change this information. Sincerely, Simon ---------- Forwarded message ---------- From: Simon Ryeo...