CVE-2003-1126

Unknown vulnerability in SunOne/iPlanet Web Server SP3 through SP5 on Windows platforms allows remote attackers to cause a denial of service...

[Full-Disclosure] Bugtraq Security Systems XMAS Advisory 0001

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Bugtraq Security Systems, Incorporated www.bugtraq.org Security Advisory Advisory Name: Command Injection Issue in Squirrelmail Release Date: 12/24/2003 Application: Squirrelmail Platform: Linux IA32 Linux sparc Linux sparc64 Linux hppa Linux ppc Linu...

Directory traversal bug in DCAM server <= 8.2.5

Luigi Auriemma Application: DCAM WebCam server http://www.hyperionx.com http://sourceforge.net/projects/dcamserver/ Versions: = 8.2.5 Platforms: Windows Bug: Directory traversal bug Risk: high Exploitation: remote with browser Date: 22 Dec 2003 Author: Luigi Auriemma e-mail: [email protected]...

Mozilla/5.0 (Windows; U; Windows NT 5.0; en-US; rv:1.4) Gecko/20030624 Netscape/7.1 (ax)

Westpoint Security Advisory Title: VisitorBook LE Mail Relay and Cross Site Scripting Risk Rating: Moderate Software: FreeScripts VisitorBook LE Platforms: Most Unix Vendor URL: http://www.freescripts.com/ Author: Paul Johnston [email protected] Date: 10th December 2003 Advisory ID: wp-03-000...

surfboard-1.1.8.txt

Luigi Auriemma Application: Surfboard webserver http://surfd.sourceforge.net Versions: From the website: "Surfboard is a trivial web server, written by Meredydd Luff." ======= 2 Bugs ======= Directory traversal ------------------- The webserver checks the dot-dot pattern only if there is a '?' in...

Multiple vulnerability in NetServe 1.0.7

/ | For Contacts: | nimber | e-mail: [email protected] | [email protected] |Home Page: www.nimber.plux.ru |ICQ: 132614 Advisory Information: ================= Application : NetServe Web Server Date : 17.11.2003 Vendor Homepage : http://www.starlots.com/netx/index.html Versions : 1.0.7 maybe older...

netserve107.txt

/ | For Contacts: | nimber | e-mail: [email protected] | [email protected] |Home Page: www.nimber.plux.ru |ICQ: 132614 \ Advisory Information: ================= Application : NetServe Web Server Date : 17.11.2003 Vendor Homepage : http://www.starlots.com/netx/index.html Versions : 1.0.7 maybe older...

Opera 7.x - Directory Traversal

Opera 7.x - Directory Traversal source: https://www.securityfocus.com/bid/9279/info Opera is prone to a file corruption vulnerability. This issue is exposed when a user is presented with a file dialog, which will cause the creation of a temporary file. It is possible to specify a relative path to...

Directory traversal in The TelCondex SimpleWebserver 2.13.31027 Build 3289.

/ Gr33tz: ZeT, JLx, euronymous and all my friends. :D : : For Contacts: 000000 : /./ | /. : Email : [email protected] : [email protected] : HomePage: www.nimber.plux.ru : : ====================== : Advisory Information: //----------------------------------------o =====================// Application...

[OpenSSL Advisory] Denial of Service in ASN.1 parsing

-----BEGIN PGP SIGNED MESSAGE----- OpenSSL Security Advisory 4 November 2003 Denial of Service in ASN.1 parsing ================================== Previously, OpenSSL 0.9.6k was released on the 30 September 2003 to address various ASN.1 issues. The issues were found using a test suite from NISCC...

Nullsoft SHOUTcast 1.9.2 - icy-nameicy-url Memory Corruption (1)

Nullsoft SHOUTcast 1.9.2 - icy-nameicy-url Memory Corruption 1 source: https://www.securityfocus.com/bid/8954/info Nullsoft SHOUTcast Server is prone to a memory corruption vulnerability that may lead to denial of service attacks or code execution. This is due to insufficient bounds checking of...

Nullsoft SHOUTcast 1.9.2 - 'icy-name/icy-url' Memory Corruption (1)

source: https://www.securityfocus.com/bid/8954/info Nullsoft SHOUTcast Server is prone to a memory corruption vulnerability that may lead to denial of service attacks or code execution. This is due to insufficient bounds checking of server commands supplied by authenticated users, specifically...

Nullsoft SHOUTcast 1.9.2 - 'icy-name/icy-url' Memory Corruption (2)

// source: https://www.securityfocus.com/bid/8954/info Nullsoft SHOUTcast Server is prone to a memory corruption vulnerability that may lead to denial of service attacks or code execution. This is due to insufficient bounds checking of server commands supplied by authenticated users, specifically...

DoS in Plug and Play Web Server Proxy Server

DoS in Plug and Play Web Server Proxy Server ============================== Plug & Play server is a HTTP/FTP/NEWS/MAIL/TELNET/DNS/DHCP/HTTP-PROXY server, running on Windows platforms. Version: 1.0002c -------- Vendor: www.pandpsoft.com ------- Vulnerability: -------------- Sending the following...

Nullsoft SHOUTcast 1.9.2 - icy-nameicy-url Memory Corruption (2)

Nullsoft SHOUTcast 1.9.2 - icy-nameicy-url Memory Corruption 2 // source: https://www.securityfocus.com/bid/8954/info Nullsoft SHOUTcast Server is prone to a memory corruption vulnerability that may lead to denial of service attacks or code execution. This is due to insufficient bounds checking o...

Sun Java Plugin 1.4.2 _01 - Cross-Site Applet Sandbox Security Model Violation

source: https://www.securityfocus.com/bid/8857/info A vulnerability has been reported in Java implementations that may potentially allow Java applets from two different domains to violate the sandbox security model and share read/write access to data areas. This violates the principle of isolatio...

Apache Httpd < 1.3.31 : Allow/Deny parsing on big-endian 64-bit platforms

A bug in the parsing of Allow/Deny rules using IP addresses without a netmask on big-endian 64-bit platforms causes the rules to fail to match...

JBoss 3.0.8/3.2.1 - HSQLDB Remote Command Injection

source: https://www.securityfocus.com/bid/8773/info A remote command-injection vulnerability has been reported in JBoss. The issue is reportedly exposed via the HSQLDB component, which is a SQL database server that manages JMS connections. Because of a number of flaws, an attacker can pass comman...

JBoss 3.0.83.2.1 - HSQLDB Remote Command Injection

JBoss 3.0.83.2.1 - HSQLDB Remote Command Injection source: https://www.securityfocus.com/bid/8773/info A remote command-injection vulnerability has been reported in JBoss. The issue is reportedly exposed via the HSQLDB component, which is a SQL database server that manages JMS connections. Becaus...

Buffer Overflow in WideChapter Browser

Buffer Overflow in WideChapter Browser Advisory Information: ===================== Application: WideChapter Browser Vendor Homepage: http://www.widechapter.com Versions: 3.0 and earlier versions Platforms: Windows all Severity: High Date: 12.09.03 Introduction: ============= "WideChapter is the...