Microsoft Internet Explorer PNG Deflate Heap Corruption Vulnerability

Description A heap corruption vulnerability has been reported for Microsoft Internet Explorer. The vulnerability is related to the way that Microsoft Internet Explorer interprets PNG image data. The function that handles the deflation of PNG images does not properly handle some invalid data withi...

Microsoft Data Access Components RDS Buffer Overflow Vulnerability

Description Microsoft Data Access Components MDAC contains a buffer overflow in a Remote Data Services RDS component. The server side RDS component affected is called the RDS Data Stub, while the client side is called the Data Space control. Successful exploitation of this vulnerability could all...

TCPDump / LIBPCap Trojan Horse Vulnerability

Description It has been announced that the server hosting tcpdump and libpcap, www.tcpdump.org, was compromised recently. It has been reported that the intruder made modifications to the source code of tcpdump and libpcap to include trojan horse code. Downloads of the source code of tcpdump and...

[SECURITY] [DSA 179-1] New gnome-gv packages fix buffer overflow

-------------------------------------------------------------------------- Debian Security Advisory DSA 179-1 [email protected] http://www.debian.org/security/ Martin Schulze October 18th, 2002 http://www.debian.org/security/faq -...

Undocumented account vulnerability in Avaya P550R/P580/P880/P882 switches

Undocumented account vulnerability in Avaya P550R/P580/P880/P882 switches 1. Problem Description Two undocummented accounts with default passwords allow access via telnet and the web interface to Cajun P550R/P580/P880/P882 switches. Both accounts give developer access to the switch. The...

JSP source code exposure in Tomcat 4.x

Tomcat 4.x JSP source exposure security advisory 1. Summary Tomcat 4.0.4 and 4.1.10 probably all other earlier versions also are vulnerable to source code exposure by using the default servlet org.apache.catalina.servlets.DefaultServlet. 2. Details: Let say you have valid URL like...

Multiple OpenVMS WASD HTTP Server Vulnerabilities

Description Multiple vulnerabilities have been reported in WASD HTTP Server for OpenVMS. The consequences of successful exploitation of these issues may range from information disclosure to varying degrees of remote compromise. Technologies Affected WASD WASD HTTP Server 7.1.0 WASD WASD HTTP Serv...

AppSocket Half-open Connection Remote DoS

It seems that it is possible to lock out your printer from the network by opening a few connections and keeping them open. Note that the AppSocket protocol is so crude that Nessus cannot check if it is really running behind this port. C Tenable Network Security, Inc. include"compat.inc"; if...

Xinet K-Talk Appletalk(tm) xkas vulnerability on IRIX

-----BEGIN PGP SIGNED MESSAGE----- SGI Security Advisory Title: Xinet K-Talk Appletalktm xkas vulnerability Number: 20020604-01-I Date: June 10, 2002 Reference: CAN-2002-0213 - ----------------------- - --- Issue Specifics --- - ----------------------- It's been reported that the Appletalktm...

blackshell2: zml.cgi remote exploit

-----BEGIN PGP SIGNED MESSAGE----- --blackshell security advisory no2-- --zml.cgi remote exploit-- vendor details & history zml.cgi for webservers by jero.cc http://www.jero.cc/zml/zml.html details of exploit this is a classic CGI bug which uses ../../../../ to read remote files. example:...

RADIX1112200101

Team RADIX Research Report: RADIX1112200101 Date Published: 11-12-2001 Research Report ID: RADIX1112200101 Bugtraq ID: 3185 CVE CAN: N/A Title: RunAs Service Pipe Authentication Failure Class: Privilege Escalation and Information Disclosure Remotely Exploitable: No Locally Exploitable: Yes...

majordomo.1.94.4.txt

Hi, I found something to discuss, this time involving majordomo. This was tested on a Slackware linux 8.0 kernel 2.4.8; majordomo version 1.94.4, I also tested the other versions and all default installs had the same problem, note that the versions 1.94.1 an 1.94.2 should NOT be used anymore, tho...

Fwd: Microsoft Word macro vulnerability advisory MS01-034

Hi, Within minutes of Microsoft posting the bulletin on their site, my mailbox was swamped with emails from people asking the same two questions. I am therefore forwarding the below email minus the sample document! to the BugTraq mailing list to reach a wide audience and answer the two questions ...

IIS HACKING

Hi Folks, i have just compiled the well-known IIS tricks. I hope it will be helpful for securing your server. any comment,suggestion or insult...? wellcome MAB- SECURING IIS by BREAKING ===================================================== by Mount Ararat Blossom 9/15/2000...

Apache 1.3.14 available

Several security problems have been found in the Apache web server software. It is recommended that all users of Apache upgrade to the latest stable release to fix these problems. Apache is included in our N software series in the apache.tgz package. A new apache.tgz package including Apache 1.3....

MySQL Short Check String Authentication Bypass

The remote version of MySQL is older than or as old as version 3.22.30 or 3.23.10. Thus, it may allow attacker who knows a valid username to access database tables without a valid password. C Tenable Network Security, Inc. include 'compat.inc' ; if description scriptid10343; scriptversion"1.31";...

Samba Web Administration Tool (SWAT) Detection

The remote host is running SWAT, the Samba Web Administration Tool. SWAT is a web-based configuration tool for Samba administration that also allows for network-wide MS Windows network password management. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid10273;...

jetdirect.crash.txt

--SLDf9lqlvOQaIe6s Content-Type: text/plain; charset=us-ascii Content-Transfer-Encoding: quoted-printable Hi folks! I just played with our network printer a HP LaserJet 4500 and -- boom -- it crashed ;-=20 The HP JetDirect J3111A module with firmware G.05.35 suffers from a buffer overflow in it's...

FreeBSD-SA-99:03.ftpd

-----BEGIN PGP SIGNED MESSAGE----- ============================================================================= FreeBSD-SA-99:03 Security Advisory FreeBSD, Inc. Topic: Three ftp daemons in ports vulnerable to attack. Category: ports Module: wu-ftpd and proftpd Announced: 1999-09-05 Reissued:...

nt4.java-vm.y2k.txt

Date: Tue, 23 Mar 1999 20:27:54 -0500 From: Andrew Kunz To: [email protected] Subject: additionally NT Y2K issue post SP4 It should also be pointed out that the java virtual machine that installs with IE on the sp4 CD is not y2k compliant either and needs to be upgraded...