Cisco Security Advisory: Cisco Collaboration Server Vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Cisco Security Advisory: Cisco Collaboration Server Vulnerability Revision 1.0 For Public Release 2004 June 30 1600 UTC GMT ======================================================================== Contents ======== Summary Affected Products Details...

Microsoft Security Bulletin MS03-049

Microsoft Security Bulletin MS03-049 Print Buffer Overrun in the Workstation Service Could Allow Code Execution 828749 Issued: November 11, 2003 Version Number: 1.0 See all Windows bulletins released November, 2003 Summary Who Should Read This Document: Customers using Microsoft® Windows® Impact ...

Microsoft Security Bulletin MS03-042

Microsoft Security Bulletin MS03-042 Buffer Overflow in Windows Troubleshooter ActiveX Control Could Allow Code Execution 826232 Issued: October 15, 2003 Version Number: 1.0 Summary Who Should Read This Document: Customers using Microsoft® Windows® Impact of Vulnerability: Remote Code Execution...

Microsoft Security Bulletin MS03-041

Microsoft Security Bulletin MS03-041 Vulnerability in Authenticode Verification Could Allow Remote Code Execution 823182 Issued: October 15, 2003 Version Number: 1.0 Summary Who Should Read This Document: Customers using Microsoft® Windows® Impact of Vulnerability: Remote Code Execution Maximum...

Microsoft Security Bulletin MS03-04

Microsoft Security Bulletin MS03-044 Buffer Overrun in Windows Help and Support Center Could Lead to System Compromise 825119 Issued: October 15, 2003 Version Number: 1.0 Summary Who Should Read This Document: Customers using Microsoft® Windows® Impact of Vulnerability: Remote Code Execution...

Proxy Web Server XSS

The remote host is running a proxy web server that fails to adequately sanitize request strings of malicious JavaScript. By leveraging this issue, an attacker may be able to cause arbitrary HTML and script code to be executed in a user's browser within the security context of the affected site. C...

BEA WebLogic Server and Express 7.x Passwords Disclosure

------------------------------------------------------------ BEA WebLogic Server and Express 7.x Passwords Disclosure ------------------------------------------------------------ Affected Versions ----------------- BEA WebLogic Server 7.x BEA WebLogic Express 7.x ADVISORY -------- This...

SPI ADVISORY: Remote Administration of BEA WebLogic Server and Express

Remote Administration of BEA WebLogic Server and Express Release Date: March 18, 2003 Severity: High Systems Affected: • WebLogic Server and Express 6.0 • WebLogic Server and Express 6.1 • WebLogic Server and Express 7.0 Description: SPI Labs and S21sec have identified a serious vulnerability tha...

Cross-Referencing Linux vulnerability

Info. ----- + Type: To gain visibility + Software: Cross-Referencing Linux. + Verions: until 0.9.2 + Exploit: Si. + Autor: Albert Puigsech Galicia + Contact: [email protected] Introduction. ------------- Cross-Referencing Linux, as known as LXR, allow read all linux kernel source using a web...

Microsoft SQL Server 2000 contains stack buffer overflow in SQL Server Resolution Service

Overview Microsoft SQL Server 2000 contains a remotely exploitable stack buffer overflow that allows attackers to execute arbitrary code with the same privileges as the SQL server. Description The SQL Server Resolution Service SSRS was introduced in Microsoft SQL Server 2000 to provide referral...

Advisory CA-2002-10 Format String Vulnerability in rpc.rwalld

CERT Advisory CA-2002-10 Format String Vulnerability in rpc.rwalld Original release date: May 1, 2002 Last revised: -- Source: CERT/CC A complete revision history can be found at the end of this file. Systems Affected Sun Solaris 2.5.1, 2.6, 7, and 8 Overview The rwall daemon rpc.rwalld is a...

BEA WebLogic Null Byte Request JSP Source Disclosure

BEA WebLogic may be tricked into revealing the source code of JSP scripts by adding an encoded character %00x at the end of the request. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. This script was written by Renaud Deraison and is based on BEAweblogicRevealsourcecode.nasl Script audit an...

Security Bulletin MS02-017 Q311967: Unchecked buffer in the Multiple UNC Provider Could Enable File Execution

Title: Q311967: Unchecked buffer in the Multiple UNC Provider Could Enable Code Execution Date: 04 April 2002 Software: - - Microsoft Windows NT 4.0 Workstation - - Microsoft Windows NT 4.0 Server - - Microsoft Windows NT 4.0 Server, Enterprise Edition - - Microsoft Windows NT 4 Terminal Server...

top format string bug exploit code (exploitable)

hi. It still seems to be affected under 3.5beta9 including this version someone said it's not the problem of exploitable vulnerability about 8 month ago , but it's possible to exploit though situation is difficult. following code and some procedure comments demonstrate it. possible to get kmem...

Advisory CA-2001-21

-----BEGIN PGP SIGNED MESSAGE----- CERT Advisory CA-2001-21 Buffer Overflow in telnetd Original release date: July 24, 2001 Last revised: -- Source: CERT/CC A complete revision history can be found at the end of this file. Systems Affected Systems running versions of telnetd derived from BSD...

PT-2001-2499 · Texas Imperial · Wftpd

Name of the Vulnerable Software and Affected Versions: WFTPD version 3.00 Description: The issue allows remote attackers to read arbitrary files by uploading a file that ends in a ".lnk" extension, which bypasses WFTPD's check for a ".lnk" extension. Recommendations: For WFTPD version 3.00,...

Vulnerability in viewsrc.cgi

----- Begin Hush Signed Message from [email protected] ----- Vulnerability in viewsrc.cgi Overview viewsrc.cgi v2.0 is a source-code viewing CGI script available from http://www.mimanet.com/scripts. A vulnerability exists which allows a remote user to view any file on the server. Details The...

ISC BIND 8.2.2-P6 vulnerable to DoS when processing SRV records, aka the "srv bug"

Overview There is a denial-of-service vulnerability in several versions of the Internet Software Consortium's ISC BIND software. This vulnerability is referred to by the ISC as the "srv bug" and affects ISC BIND versions 8.2 through 8.2.2-P6. Description This vulnerability can cause affected DNS...

Savant 3.0 web server vulnerability

Vendor Name: Savant Product: Savant 3.0 web server Discoverd by: Xatrix Url: www.xatrix.org 1. About software Savant web server has been written by Michael Lamont http://savant.sourceforge.com it is very configurable freeware http deamon for win95/98. It's current version is 3.0 2. Full Detail It...

Cisco IOS software vulnerable to DoS via HTTP request containing "%%"

Overview There is a denial-of-service vulnerability in several Cisco switch and router products which allows an attacker to force affected devices to crash and reboot. Description A vulnerability exists in multiple versions of Cisco's Internetworking Operating System IOS software which allows an...