libpam-ldap authentication bypass

Result of an attempt to authenticate against an LDAP server that does not set an optional data field is ignored...

Apache-SSL optional client certificate vulnerability

From the Apache-SSL security advisory: If configured with SSLVerifyClient set to 1 or 3 client certificates optional and SSLFakeBasicAuth, Apache-SSL 1.3.28+1.52 and all earlier versions would permit a client to use real basic authentication to forge a client certificate. All the attacker needed ...

CVE-2003-1031

Cross-site scripting XSS vulnerability in register.php for vBulletin 3.0 Beta 2 allows remote attackers to inject arbitrary HTML or web script via optional fields such as 1 "Interests-Hobbies", 2 "Biography", or 3 "Occupation."...

Microsoft BizTalk Server 2002 - HTTP Receiver Buffer Overflow

Microsoft BizTalk Server 2002 - HTTP Receiver Buffer Overflow source: https://www.securityfocus.com/bid/7469/info Microsoft BizTalk Server 2002 contains a boundary condition error that could allow a buffer to be overrun. Successful exploitation could allow arbitrary code execution in the security...

Microsoft BizTalk Server 2002 - HTTP Receiver Buffer Overflow

source: https://www.securityfocus.com/bid/7469/info Microsoft BizTalk Server 2002 contains a boundary condition error that could allow a buffer to be overrun. Successful exploitation could allow arbitrary code execution in the security context of the IIS Server hosting the application. It is...

Detectoid for 929735 -- targetting specific locales

Certain locales will receive this update as a Recommended/AU update and the rest of the locales will be offered the update as an Optional/Non-AU update...