Apache 2.0.3940 - Oversized STDERR Buffer Denial of Service

Apache 2.0.3940 - Oversized STDERR Buffer Denial of Service // source: https://www.securityfocus.com/bid/5787/info Apache is prone to a denial of service condition when an excessive amount of data is written to stderr. This condition reportedly occurs when the amount of data written to stderr is...

Apache 2.0.39/40 - Oversized STDERR Buffer Denial of Service

// source: https://www.securityfocus.com/bid/5787/info Apache is prone to a denial of service condition when an excessive amount of data is written to stderr. This condition reportedly occurs when the amount of data written to stderr is over the default amount allowed by the operating system. Thi...

Strange Attractors and TCP/IP Sequence Number Analysis - One Year Later

Hello, Over a year ago, I published a paper that attempted to analyze the randomness of PRNGs used in TCP/IP stacks on several operating systems. The approach I've chosen resulted in detecting some non-trivial dependencies in several generators, and some amusing 3D pictures. The original RAZOR...

Cisco Security Advisory: Cisco VPN Client Multiple Vulnerabilities - Second Set

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Cisco Security Advisory: Cisco VPN Client Multiple Vulnerabilities - Second Set Revision 1.0 For Public Release 2002 September 05 UTC 1500 ---------------------------------------------------------------------- Contents Summary Affected Products Detail...

CVE-2002-0854

Buffer overflows in ISDN Point to Point Protocol PPP daemon ipppd in the i4l package on SuSE 7.3, 8.0, and possibly other operating systems, may allow local users to gain privileges...

SGI IRIX 6.5.x - FAM Arbitrary Root Owned Directory File Listing

source: https://www.securityfocus.com/bid/5487/info fam is a freely available, open source file alteration monitor. It is maintained and distributed by SGI, and will work on the Linux and Unix operating systems. It is possible for a user to execute fam to discover a list of monitored files. This...

CVE-2002-0854

Buffer overflows in ISDN Point to Point Protocol PPP daemon ipppd in the i4l package on SuSE 7.3, 8.0, and possibly other operating systems, may allow local users to gain privileges...

CVE-2002-0768

Buffer overflow in lukemftp FTP client in SuSE 6.4 through 8.0, and possibly other operating systems, allows a malicious FTP server to execute arbitrary code via a long PASV command...

CVE-2002-0661

Directory traversal vulnerability in Apache 2.0 through 2.0.39 on Windows, OS2, and Netware allows remote attackers to read arbitrary files and execute commands via .. dot dot sequences containing \ backslash characters...

ISDN4Linux 3.1 - IPPPD Device String SysLog Format String (1)

// source: https://www.securityfocus.com/bid/5437/info isdn4linux is a freely available, open source package of isdn compatibility tools. It is available for Linux operating systems. isdn4linux contains a format string vulnerability in the ipppd utility. In some installations, this utility is...

ISDN4Linux 3.1 - IPPPD Device String SysLog Format String (1)

ISDN4Linux 3.1 - IPPPD Device String SysLog Format String 1 // source: https://www.securityfocus.com/bid/5437/info isdn4linux is a freely available, open source package of isdn compatibility tools. It is available for Linux operating systems. isdn4linux contains a format string vulnerability in t...

[SNS Advisory No.55] Eudora 5.x for Windows Buffer Overflow Vulnerability

---------------------------------------------------------------------- SNS Advisory No.55 Eudora 5.x for Windows Buffer Overflow Vulnerability Problem first discovered: 6 Jun 2002 Published: 5 Aug 2002 ---------------------------------------------------------------------- Overview: --------- Eudo...

Fake Identd 0.91.x - Client Query Remote Buffer Overflow

Fake Identd 0.91.x - Client Query Remote Buffer Overflow // source: https://www.securityfocus.com/bid/5351/info Fake Identd is an open source Ident server designed to return the same information to all incoming requests. It is implemented by Tomi Ollila, and available for Linux and a number of...

xwall.s

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 GOBBLES SECURITY ADVISORY 32 ALERT! REMOTE ROOT HOLE IN DEFAULT INSTALL OF POPULAR OPERATING SYSTEM! ALERT! Forward: so was fydor trying to make his code unreadable when he write nmap? or was that just the fallout of poor planning? this is awful if...

Foundstone Advisory - Buffer Overflow in AnalogX Proxy

---------------------------------------------------------------------- FS Advisory ID: FS-070102-23-AXPR Release Date: July 1st, 2002 Product: AnalogX Proxy Vendor: AnalogX http://www.analogx.com Vendor Advisory: See vendor web site Type: Buffer Overflow Severity: High Author: Robin Keir...

phpsquidpass: unauthorized user deleting

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ppp-design found the following design error in phpsquidpass: Details - ------- Product: phpsquidpass Affected Version: 0.11 and maybe all versions before Immune Version: 0.2 OS affected: all OS with php Vendor-URL:...

CVE-2001-0797

Buffer overflow in login in various System V based operating systems allows remote attackers to execute arbitrary commands via a large number of arguments through services such as telnet and rlogin...

Interbase 6.0 - GDS_Drop Interbase Environment Variable Buffer Overflow (2)

Interbase 6.0 - GDSDrop Interbase Environment Variable Buffer Overflow 2 // source: https://www.securityfocus.com/bid/5044/info Interbase is a database distributed and maintained by Borland. It is available for Unix and Linux operating systems. A buffer overflow has been discovered in the gdsdrop...

Interbase 6.0 - GDS_Drop Interbase Environment Variable Buffer Overflow (1)

Interbase 6.0 - GDSDrop Interbase Environment Variable Buffer Overflow 1 source: https://www.securityfocus.com/bid/5044/info Interbase is a database distributed and maintained by Borland. It is available for Unix and Linux operating systems. A buffer overflow has been discovered in the gdsdrop...

mcNews 1.x - File Disclosure

mcNews 1.x - File Disclosure source: https://www.securityfocus.com/bid/4770/info mcNews is a set of scripts for allowing users to post news stories on a webpage. It will run on most Linux and Unix variants as well as Microsoft Windows operating systems. mcNews does not sufficiently filter...