Security Bulletin (MS00-021)

Microsoft Security Bulletin MS00-021 - -------------------------------------- Patch Available for "Malformed TCP/IP Print Request" Vulnerability Originally Posted: March 30, 2000 Summary ======= Microsoft has released a patch that eliminates a security vulnerability in the TCP/IP Printing Service...

ms-clipart.txt

@Stake Inc. L0pht Research Labs www.atstake.com www.L0pht.com Security Advisory Advisory Name: ClipArt Gallery Overflow Advisory Released: 03/06/00 Application: Microsoft Office 2000 Severity: An attacker can seize control of a Windows 95, 98, NT, or 2000 machine via any HTML source, including...

htdig.txt

software: ht://Dig URL: http://www.htdig.org/ Version: 3.1.4, 3.2.0b1 and previous Platforms: Unix, Win32, MacOS, Mac OS X Server Type: CGI, Input validation problem Vendor status: Notified, patch already available Date: 02/28/2000 Summary: Any remote user can view arbitrary files on your system...

AltaVista Intranet Search CGI query Traversal Arbitrary File Access

It is possible to read the content of any files on the remote host such as your configuration files or other sensitive data by using the Altavista Intranet Search service, and performing the request: %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc';...

Cobalt RaQ2 cgiwrap Multiple Vulnerabilities

The remote host has 'cgiwrap' is installed. If you are running an unpatched Cobalt RaQ, the version of cgiwrap distributed with that system has a known security flaw that lets anyone execute arbitrary commands with the privileges of the http daemon root or nobody. This flaw exists only on the...

linux_segment_limit_bug.txt

Subject: Linux 2.0.37 segment limit bug To: [email protected] Hello, Linux 2.0.37 released last month introduces the support for more than 1 GB of physical memory on x86 which wasn't supported in earlier 2.0 kernels. It is now possible to increase the limit, at the expense of reducing the...

bluestone.txt

Subject: Security Spoofed Id in Bluestone Sapphire/Web To: [email protected] INTRINsec Security Advisory Release Date : September 02, 1999 Software : Bluestone Sapphire/Web V5 Operating System: Solaris Impact : The attacker can access the session of other connected clients. Author :...

FreeBSD-SA-99:02.profil

-----BEGIN PGP SIGNED MESSAGE----- ============================================================================= FreeBSD-SA-99:02 Security Advisory FreeBSD, Inc. Topic: Profiling Across Exec Calls Category: core Module: kernel Announced: 1999-09-04 Affects: FreeBSD 3.2 and earlier FreeBSD-current...

ms.winhlp32.exe.bof.txt

The following is a Security Bulletin from the Microsoft Product Security Notification Service. Please do not reply to this message, as it was sent from an unattended mailbox. Microsoft Security Bulletin MS99-015 -------------------------------------- Patch Available for "Malformed Help File"...

hhp-pine_adv0004.txt

The hhp presents... The hhp-pine remote exploit advisory. 6/22/99 By: elaich aka LoopHole of the hhp. http://hhp.hemp.net/ --------------------------------------------------------- A few months ago I found a bigger problem with the charset bug then imagined. With a uuencode/uudecode method in the...

ksrt.accelerated-x.bof.txt

Date: Sat, 26 Jun 1999 15:40:54 -0400 From: "KSRT Contact Account" To: [email protected] Subject: KSRT 011: Accelerated-X KSRT Advisory 011 Date: June 25, 1999 ID : accelx-bo-011 Affected Program: Xi Graphics, Inc.'s Accelerated-X Server 4.x, 5.x and possibly earlier versions. Author: Jordan...

exchange.ldap.txt

Date: Mon, 15 Mar 1999 21:55:24 -0500 EST From: X-Force To: [email protected] Cc: X-Force Subject: ISSalert: ISS Security Advisory: LDAP Buffer overflow against Microsoft Directory Services TO UNSUBSCRIBE: email "unsubscribe alert" in the body of your message to [email protected] Contact...

solaris.snmpd.txt

Date: Mon, 2 Nov 1998 17:47:32 -0500 From: X-Force To: [email protected] Subject: ISS Security Advisory: Hidden community string in SNMP implementation -----BEGIN PGP SIGNED MESSAGE----- ISS Security Advisory November 2nd, 1998 Hidden community string in SNMP implementation Synopsis: Internet...

msie.fixes.4.99.txt

Date: Wed, 21 Apr 1999 18:13:39 -0700 From: [email protected] To: [email protected] Subject: Microsoft Security Bulletin MS99-011 The following is a Security Bulletin from the Microsoft Product Security Notification Service. Please do not reply to this message, as it was sent from an...

ms-excel-macros-dll.txt

Microsoft Excel macros can execute DLL functions. Microsoft Excel - a spreadsheet program created by Microsoft - is vulnerable to an exploit that allows the execution DLL functions without user intervention or knowledge. Microsoft Excel has a function named "CALL" which can be embedded in...

kde.kmail.tmp.dir.txt

Date: Wed, 9 Jun 1999 14:52:49 -0700 From: [email protected] Reply-To: X-Force To: [email protected] Subject: ISSalert: ISS Security Advisory: KDE K-Mail File Creation Vulnerability TO UNSUBSCRIBE: email "unsubscribe alert" in the body of your message to [email protected] Contact...

mutt.txt

Date: Tue, 28 Jul 1998 20:17:57 +0200 From: Paul Boehm Subject: mutt x.x Hi, all newer?? versions of mutt have got an overflowable buffer in parse.c. When sending an specially formated Content-Type in the header you can, when putting special purpose shellcode that doesn't contain any / ; \n and...

lyris.txt

Date: Sun, 20 Sep 1998 01:40:16 -0400 From: Jimmy Lee Alderson Subject: Vulnerability in Lyris Listserver The following is associated with a post to NTbugtraq. The original post vaguely describes a security problem inherent in a popular server. I recently found this problem on my own, and was goi...

ms.personal.webserver.txt

Date: Sat, 27 Mar 1999 11:29:56 -0800 From: [email protected] To: [email protected] Subject: Microsoft Security Bulletin MS99-010 The following is a Security Bulletin from the Microsoft Product Security Notification Service. Please do not reply to this message, as it was sent from an...

FreeBSD-SA-98:07.rst

-----BEGIN PGP SIGNED MESSAGE----- ============================================================================= FreeBSD-SA-98:07 Security Advisory FreeBSD, Inc. Topic: TCP RST denial of sevice Category: core Module: kernel Announced: 1998-10-13 Affects: FreeBSD 2.2. before 2.2.8R, FreeBSD-stable...