ShopCartCGI 2.3 - genindexpage.cgi Traversal Arbitrary File Access

source: https://www.securityfocus.com/bid/9670/info It has been reported that ShopcartCGI is prone to a remote file disclosure vulnerability. This issue is due to insufficient validation of user-supplied input. Upon successful exploitation of this issue an attacker may be able to gain access to...

mnGoSearch buffer overflow in UdmDocToTextBuf()

Jedi/Sector One reported the following on the full-disclosure list: Every document is stored in multiple parts according to its sections description, body, etc in databases. And when the content has to be sent to the client, UdmDocToTextBuf concatenates those parts together and skips metadata...

finjanSurfinGate.txt

VENDOR: Finjan www.finjan.com PRODUCT: SurfinGate recently renamed “Vital Security” VERSIONS: All releases of versions 6 & 7 as of 1/22/2004. Older versions have not been tested. NOTIFICATION: The vendor has known of the problem over a year DESCRIPTION...

KnowledgeBuilder 2.02.13.0 - Remote File Inclusion

KnowledgeBuilder 2.02.13.0 - Remote File Inclusion source: https://www.securityfocus.com/bid/9292/info KnowledgeBuilder is prone to a remote file include vulnerability. An attacker could exploit this to cause hostile PHP scripts to be included and executed from a remote server. This would occur i...

Opera Browser 6.0 6 - URI Display Obfuscation

Opera Browser 6.0 6 - URI Display Obfuscation source: https://www.securityfocus.com/bid/9281/info A weakness has been reported in Opera that may allow attackers to obfuscate the URI for a visited page. The problem is said to occur when a URI that is designed to access a specific location with a...

CuteNews 1.3 - Debug Query Information Disclosure

CuteNews 1.3 - Debug Query Information Disclosure source: https://www.securityfocus.com/bid/9130/info An information disclosure weakness has been reported in CuteNews 1.3, that may expose sensitive server configuration data. The problem occurs due to CuteNews accepting a debug query that will...

Effect Office 2.9 buffer overflow

Слышал когда нить о такоя проге как "Эффект офисEffectOffice"..... http://www.effectoffice.com/ Это система документа оборота от компании "Гарант Интернэшнел" и она используется многими организациями для "Эффективного" документаоборота организацииМы её хотели себе ставить.... Дык вот к чему енто...

phpBB 2.0.x - 'profile.php' SQL Injection

source: https://www.securityfocus.com/bid/8994/info A SQL injection vulnerability has been reported for phpBB systems. phpBB, in some cases, does not sufficiently sanitize user-supplied input, which is used when constructing SQL queries to execute on the underlying database. As a result, it is...

Ledscripts LedForums - Multiple HTML Injections

source: https://www.securityfocus.com/bid/8934/info It has been reported that LedForums is prone to a HTML injection vulnerability that may allow an attacker to execute HTML code in a user's browser. The issue is reported to be present in the 'topmessage' and 'topic' fields. This problem is due t...

Macromedia Flash Player 6.0.x - Flash Cookie Predictable File Location

source: https://www.securityfocus.com/bid/8900/info Macromedia Flash Player is reported to store Flash cookies .sol files in a predictable location on client systems. Other attacks are possible given the ability to store content on a system in a predictable location, such as referencing the conte...

IRCnet IRCD 2.10 - Local Buffer Overflow

// source: https://www.securityfocus.com/bid/8817/info IRCnet IRCD has been reported prone to a buffer overflow vulnerability that may be exploited by local users. This issue may be exploited to crash the affected server. Although unconfirmed, due to the nature of this vulnerability it has been...

CVE-2003-0681

A "potential buffer overflow in ruleset parsing" for Sendmail 8.12.9, when using the nonstandard rulesets 1 recipient 2, final, or 3 mailer-specific envelope recipients, has unknown consequences...

easyfile12.txt

Vulnerabilities in Easy File Sharing Web Server 1.2 NEW. +-----------------------------+ Vendor: www.sharing-file.com Version: 1.2 new Date: Sep 22, 2003 Size: 2115KB Mini-description: "Easy File Sharing Web Server contains several built-in systems including HTTP Web Server,multi-threads database...

leafnode 1.9.3 - 1.9.41 security announcement SA-2003-01

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 leafnode-SA-2003:01.fetchnews-hang Topic: potential denial of service in leafnode Announcement: leafnode-SA-2003:01 Writer: Matthias Andree Version: 1.01 Announced: 2003-09-04 Category: main Type: potential denial of service Impact: fetchnews hangs, n...

Yahoo! Messenger 4.05.0 - Remote Denial of Service

Yahoo! Messenger 4.05.0 - Remote Denial of Service source: https://www.securityfocus.com/bid/8523/info It has been reported that multiple PC2Phone products are prone to a remote denial of service condition. The problem is said to occur when processing excessive data passed to the programs via a U...

DeskSoft CheckMail 1.2 - Password Disclosure

DeskSoft CheckMail 1.2 - Password Disclosure source: https://www.securityfocus.com/bid/8449/info It has been reported that a password disclosure issue exists in CheckMail allowing a local user to access sensitive authentication information through the Windows Registry. The software stores user...

MDaemon 5.0.5 authentication vulnerability

Hello, There is a security problem on MDaemon 5.0.5 maybe other versions affected as well regarding smtp authentication. Blank password authenticates any valid user: For primary domain: User: VALIDUSER or [email protected] Password: blank password For secondary domains: User:...

Symantec Norton AntiVirus 20022003 - Device Driver Memory Overwrite

Symantec Norton AntiVirus 20022003 - Device Driver Memory Overwrite source: https://www.securityfocus.com/bid/8329/info It has been reported that a memory corruption vulnerability affects the Symantec Norton AntiVirus Device Driver. According to the report, one of the device control operation...

Trend Micro Emanager Detection

The Trend Micro Emanager software resides on this server. %NASLMINLEVEL 70300 This script was written by John [email protected] See the Nessus Scripts License for details Changes by Tenable: - Removed CVE and bid, changed description 09/24/19 include'deprecatednasllevel.inc';...

Speak Freely <=7.5 multiple remote and local vulnerabilities (the Hackademy Audit)

-- Summary -- Speak Freely is a free and open-sourced software used for efficient and secure encrypted voice communication over the Internet. It was written by John Walker, and runs on Windows and Unix. Homepage : http://www.fourmilab.ch/speakfree/ During a source code audit, the Hackademy staff...