Multiple phpNuke Modules Vulnerable to Cross-Site Scripting

phpNuke Module Vulnerabilities Enable Identity Theft Systems Affected: phpNuke 6.5b1 and prior all operating systems Risk: High Impact: Identity Theft/Impersonation/Privilege Elevation Scenario: Cross-site scripting flaws enabling cookie theft Description phpNuke is a popular, and very complex...

acFTP Authentication Issue

acFTP is an open-source FTP daemon for Windows platforms http://www.sourceforge.net/projects/acftp that offers more functionality than many proprietary servers including the MS FTP service. The authentication code of acFTP contains a flaw -- specifically, the server treats users as logged in...

CVE-2002-1230

NetDDE Agent on Windows NT 4.0, 4.0 Terminal Server Edition, Windows 2000, and Windows XP allows local users to execute arbitrary code as LocalSystem via "shatter" style attack by sending a WMCOPYDATA message followed by a WMTIMER message, as demonstrated by GetAd, aka "Flaw in Windows WMTIMER...

[A3SC] MS IIS out of process privilege elevation vulnerability(A3CR@K-Vul-2002-06-002)

A3 Security Consulting: CR@K Vulnerability Research Title : MS IIS out of process privilege elevation vulnerabilityA3CR@K-Vul-2002-06-002 Reporter : li0n [email protected] Affected software : IIS 4.0, 5.0, 5.1 Risk : High Local/Remote : Local Category : Windows - IIS - Privilege elevation Date :...

CVE-2002-0869

Unknown vulnerability in the hosting process dllhost.exe for Microsoft Internet Information Server IIS 4.0 through 5.1 allows remote attackers to gain privileges by executing an out of process application that acquires LocalSystem privileges, aka "Out of Process Privilege Elevation."...

Microsoft Security Bulletin MS02-062: Cumulative Patch for Internet Information Service (Q327696)

-----BEGIN PGP SIGNED MESSAGE----- - ---------------------------------------------------------------------- Title: Cumulative Patch for Internet Information Service Q327696 Date: 30 October 2002 Software: Internet Information Service Impact: Four vulnerabilities, the most serious of which could...

Microsoft SQL Server Webtasks privilege upgrade (#NISR17102002)

NGSSoftware Insight Security Research Advisory Name: Microsoft SQL Server Webtasks privilege elevation Systems: Microsoft SQL Server 2000 and 7 Severity: High Risk Vendor URL: http://www.microsoft.com/ Author: David Litchfield [email protected] Advisory URL:...

MS02-042: Flaw in Network Connection Manager Could Enable Privilege Elevation (326886)

The remote host contains a flaw in the Network Connection Manager that may allow a local user to elevate his privileges. To exploit this vulnerability, a user needs to send a specially- crafted code to the Network Manager handle to execute arbitrary code with the privileges of the SYSTEM. C Tenab...

Security Bulletin MS02-042: Flaw in Network Connection Manager Could Enable Privilege Elevation (Q326886)

---------------------------------------------------------------------- Title: Flaw in Network Connection Manager Could Enable Privilege Elevation Q326886 Date: 14 August 2002 Software: Microsoft Windows 2000 Impact: Privilege elevation Max Risk: Critical Bulletin: MS02-042 Microsoft encourages...

Microsoft Windows XP2000NT 4.0 - Window Message Subsystem Design Error (4)

Microsoft Windows XP2000NT 4.0 - Window Message Subsystem Design Error 4 // source: https://www.securityfocus.com/bid/5408/info A serious design error in the Win32 API has been reported. The issue is related to the inter-window message passing system. This vulnerability is wide-ranging and likely...

Security Bulletin MS02-036: Authentication Flaw in Microsoft Metadirectory Services Could Allow Privilege Elevation (Q317138)

---------------------------------------------------------------------- Title: Authentication Flaw in Microsoft Metadirectory Services Could Allow Privilege Elevation Q317138 Date: 24 July 2002 Software: Microsoft Metadirectory Services 2.2 Impact: Elevation of privilege Max Risk: Medium Bulletin:...

CVE-2002-0373

The Windows Media Device Manager WMDM Service in Microsoft Windows Media Player 7.1 on Windows 2000 systems allows local users to obtain LocalSystem rights via a program that calls the WMDM service to connect to an invalid local storage device, aka "Privilege Elevation through Windows Media Devic...

Security Bulletin MS02-032: 26 June 2002 Cumulative Patch for Windows Media Player (Q320920)

---------------------------------------------------------------------- Title: 26 June 2002 Cumulative Patch for Windows Media Player Q320920 Date: 26 June 2002 Software: Windows Media Player Impact: Three new vulnerabilities, the most serious of which could run code of attacker's choice Max Risk:...

CVE-2001-1264

HP-UX 11.04 running VirtualVault Operating System (VVOS) 4.0/4.5 contains a privilege-escalation vulnerability in the /sbin/mkacct program (mkacct) that could allow unauthorized privileged access. The issue is documented under CVE-2001-1264 and is referenced by HP Security Bulletin #0161. Remedia...

Security Bulletin MS02-017 Q311967: Unchecked buffer in the Multiple UNC Provider Could Enable File Execution

Title: Q311967: Unchecked buffer in the Multiple UNC Provider Could Enable Code Execution Date: 04 April 2002 Software: - - Microsoft Windows NT 4.0 Workstation - - Microsoft Windows NT 4.0 Server - - Microsoft Windows NT 4.0 Server, Enterprise Edition - - Microsoft Windows NT 4 Terminal Server...

IRIX rpc/HOSTALIASES vulnerability

Malformed RPC packet can result DoS against system. Priveleged application can be overflowed by HOSTALIASES environment variable resulting to local privelege elevation...

CVE-2001-0507

IIS 5.0 uses relative paths to find system files that will run in-process, which allows local users to gain privileges via a Trojan horse file, aka the "System file listing privilege elevation" vulnerability...

CVE-2001-0506

Buffer overflow in ssinc.dll in IIS 5.0 and 4.0 allows local users to gain system privileges via a Server-Side Includes SSI directive for a long filename, which triggers the overflow when the directory name is added, aka the "SSI privilege elevation" vulnerability...

CVE-2001-0507

CVE-2001-0507 describes a privilege-elevation flaw in IIS 5.0 where local users can gain privileges by abusing relative path resolution to system files used to run in-process Trojan horse files. OpenVAS/NVD entries corroborate an IIS remote/content-exploitation lineage around early MS01-044 era; ...

nCipher Security Advisory #2: SNMP vulnerabilities

SUMMARY ======= SNMP agents supplied by nCipher, as well as those required to run other nCipher SNMP aupport software, could be vulnerable to buffer overflow attacks including denial of service and privilege elevation. BACKGROUND ========== nCipher supplies a range of Hardware Security Modules HS...