cvsweb: remote shell for cvs committers

Cvsweb 1.80 contains a hole that provides attackers who have write access to a cvs repository with shell access. Thus, attackers who have write access to a cvs repository but not shell access can obtain a shell. In addition, anyone with write access to a cvs repository that is viewable with cvswe...

BitchX /ignore bug

I don't know whether this is the right place to put it, but i'm going to anyway : Because of a simple /invite nickname sssssssss, BitchX will segfault and coredump. This is a small programming error, you can find a patch at this location: http://root66.org/karin/BitchX-bug-patch-3-juli-2000.tar.g...

ALERT: Bypassing Warnings For Invalid SSL Certificates In Internet Explorer

=====BEGIN-ACROS-REPORT===== ========================================================================= ACROS Security Problem Report 1999-12-15-1-PUB ------------------------------------------------------------------------- Bypassing Warnings For Invalid SSL Certificates In Internet Explorer...

Microsoft Windows Media Services 4.04.1 - Denial of Service (MS00-038)

Microsoft Windows Media Services 4.04.1 - Denial of Service MS00-038 // source: https://www.securityfocus.com/bid/1282/info Windows Media Encoder is part of Windows Media Services. It's purpose is to convert content into a suitable format for video or audio streaming through the Media Services. I...

Alert: Buffer overflow in Rockliffe's MailSite

Cerberus Information Security Advisory CISADV000524a http://www.cerberus-infosec.co.uk/advisories.shtml Released : 24th May 2000 Name : Rockliffe Mailsite Buffer Overflow Affected Systems : Windows NT running MailSite-HTTPMA/4.2.1.0 Issue : Remote attackers can execute arbitrary code Author : Dav...

Security Bulletin (MS00-029)

Microsoft Security Bulletin MS00-029 - -------------------------------------- Patch Available for "IP Fragment Reassembly" Vulnerability Originally Posted: May 19, 2000 Summary ======= Microsoft has released a patch that eliminates a security vulnerability in Microsoftr Windowsr 95, Windows 98,...

Advisory: Office 2000 Scripting

@Stake Inc. L0pht Research Labs www.atstake.com www.L0pht.com Security Advisory Advisory Name: Microsoft Office 2000 UA Control Scripting Release Date: 5-12-2000 Application: Microsoft Office 2000 Platform: Windows 95/98, NT 4.0 and 2000 Severity: Malicious active content can execute regardless o...

Allaire Security Bulletin (ASB00-06)

Allaire Security Bulletin ASB00-06 Patch Available for Allaire Forums 2.0.5 security issue. Originally Posted: April 3, 2000 Last Updated: April 3, 2000 Summary Allaire has recently been notified of a security issue in the Allaire Forums 2.0.5 software. This behavior allows users to view and post...

Security Bulletin (MS00-021)

Microsoft Security Bulletin MS00-021 - -------------------------------------- Patch Available for "Malformed TCP/IP Print Request" Vulnerability Originally Posted: March 30, 2000 Summary ======= Microsoft has released a patch that eliminates a security vulnerability in the TCP/IP Printing Service...

ms-clipart.txt

@Stake Inc. L0pht Research Labs www.atstake.com www.L0pht.com Security Advisory Advisory Name: ClipArt Gallery Overflow Advisory Released: 03/06/00 Application: Microsoft Office 2000 Severity: An attacker can seize control of a Windows 95, 98, NT, or 2000 machine via any HTML source, including...

htdig.txt

software: ht://Dig URL: http://www.htdig.org/ Version: 3.1.4, 3.2.0b1 and previous Platforms: Unix, Win32, MacOS, Mac OS X Server Type: CGI, Input validation problem Vendor status: Notified, patch already available Date: 02/28/2000 Summary: Any remote user can view arbitrary files on your system...

AltaVista Intranet Search CGI query Traversal Arbitrary File Access

It is possible to read the content of any files on the remote host such as your configuration files or other sensitive data by using the Altavista Intranet Search service, and performing the request: %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc';...

Cobalt RaQ2 cgiwrap Multiple Vulnerabilities

The remote host has 'cgiwrap' is installed. If you are running an unpatched Cobalt RaQ, the version of cgiwrap distributed with that system has a known security flaw that lets anyone execute arbitrary commands with the privileges of the http daemon root or nobody. This flaw exists only on the...

linux_segment_limit_bug.txt

Subject: Linux 2.0.37 segment limit bug To: [email protected] Hello, Linux 2.0.37 released last month introduces the support for more than 1 GB of physical memory on x86 which wasn't supported in earlier 2.0 kernels. It is now possible to increase the limit, at the expense of reducing the...

bluestone.txt

Subject: Security Spoofed Id in Bluestone Sapphire/Web To: [email protected] INTRINsec Security Advisory Release Date : September 02, 1999 Software : Bluestone Sapphire/Web V5 Operating System: Solaris Impact : The attacker can access the session of other connected clients. Author :...

FreeBSD-SA-99:02.profil

-----BEGIN PGP SIGNED MESSAGE----- ============================================================================= FreeBSD-SA-99:02 Security Advisory FreeBSD, Inc. Topic: Profiling Across Exec Calls Category: core Module: kernel Announced: 1999-09-04 Affects: FreeBSD 3.2 and earlier FreeBSD-current...

ms.winhlp32.exe.bof.txt

The following is a Security Bulletin from the Microsoft Product Security Notification Service. Please do not reply to this message, as it was sent from an unattended mailbox. Microsoft Security Bulletin MS99-015 -------------------------------------- Patch Available for "Malformed Help File"...

hhp-pine_adv0004.txt

The hhp presents... The hhp-pine remote exploit advisory. 6/22/99 By: elaich aka LoopHole of the hhp. http://hhp.hemp.net/ --------------------------------------------------------- A few months ago I found a bigger problem with the charset bug then imagined. With a uuencode/uudecode method in the...

ksrt.accelerated-x.bof.txt

Date: Sat, 26 Jun 1999 15:40:54 -0400 From: "KSRT Contact Account" To: [email protected] Subject: KSRT 011: Accelerated-X KSRT Advisory 011 Date: June 25, 1999 ID : accelx-bo-011 Affected Program: Xi Graphics, Inc.'s Accelerated-X Server 4.x, 5.x and possibly earlier versions. Author: Jordan...

msie.fixes.4.99.txt

Date: Wed, 21 Apr 1999 18:13:39 -0700 From: [email protected] To: [email protected] Subject: Microsoft Security Bulletin MS99-011 The following is a Security Bulletin from the Microsoft Product Security Notification Service. Please do not reply to this message, as it was sent from an...