9802 matches found
[SECURITY] [DSA 137-1] New mm packages fix insecure temporary file creation
-------------------------------------------------------------------------- Debian Security Advisory DSA 137-1 [email protected] http://www.debian.org/security/ Martin Schulze July 30th, 2002 - -------------------------------------------------------------------------- Package : mm Vulnerability...
KPMG-2002034: Jigsaw Webserver DOS device DoS
-------------------------------------------------------------------- Title: Jigsaw Webserver DOS device DoS BUG-ID: 2002034 Released: 17th Jul 2002 -------------------------------------------------------------------- Problem: ======== A malicious user can tie up working threads on the web server...
KPMG-2002033: Resin DOS device path disclosure
-------------------------------------------------------------------- Title: Resin DOS device path disclosure BUG-ID: 2002033 Released: 17th Jul 2002 -------------------------------------------------------------------- Problem: ======== It is possible to disclose the physical path to the webroot...
Apache Web Server ap_log_rerror() function discloses full path to CGI script
Overview There is a vulnerability in Apache 2.0 through 2.035 that could disclose the real path to a CGI script or other file. Description A vulnerability in the Apache web server could disclose sensitive information. Quoting from the Apache Change Log: Security Added the APLOGTOCLIENT flag to...
Icecast list_directory Function Traversal File/Directory Enumeration
The remote server does not return the same error codes when it is requested a nonexistent directory and an existing one. An attacker may use this flaw to deduct the presence of several key directory on the remote server, and therefore gain further knowledge about it. %NASLMINLEVEL 70300 C Tenable...
Sun SunPCi II VNC Software 2.3 - Password Disclosure
Sun SunPCi II VNC Software 2.3 - Password Disclosure // source: https://www.securityfocus.com/bid/5146/info The SunPCi II card is a co-processor for a number of Solaris based systems, and provides PC software compatibility, including the ability to run Microsoft Windows. Driver software is...
DSA-135 libapache-mod-ssl -- buffer overflow / DoS
Bulletin has no description...
Revised OpenSSH Security Advisory (adv.iss)
This is the 2nd revision of the Advisory. 1. Versions affected: Serveral versions of OpenSSH's sshd between 2.3.1 and 3.3 contain an input validation error that can result in an integer overflow and privilege escalation. All versions between 2.3.1 and 3.3 contain a bug in the...
OpenSSH 3.x - Challenge-Response Buffer Overflow (1)
source: https://www.securityfocus.com/bid/5093/info The OpenSSH team has reported two vulnerabilities in OpenSSH that are remotely exploitable and may allow for unauthenticated attackers to obtain root privileges. The conditions are related to the OpenSSH SSH2 challenge-response mechanism. They...
KPMG-2002021: Resin Large Parameter Denial of Service
-------------------------------------------------------------------- Title: Resin Large Parameter Denial of Service BUG-ID: 2002021 Released: 17th Jun 2002 -------------------------------------------------------------------- Problem: ======== It is possible for a malicious user to cause a Denial ...
Microsoft Windows ICMP Type 9 Packet Remote DoS
It was possible to crash the remote machine by flooding it with ICMP type 9 packets. An attacker may use this attack to make this host crash continuously, preventing you from working. C Tenable Network Security, Inc. p-smash Script audit and contributions from Carmichael Security Erik Anderson...
Xerver Web Server < 2.20 Crafted C:/ Request Remote DoS
It is possible to crash the Xerver web server by sending a long URL to its administration port. C Tenable Network Security, Inc. Script audit and contributions from Carmichael Security Erik Anderson nb: domain no longer exists Added BugtraqID and CAN From Bugtraq : Date: Fri, 8 Mar 2002 18:39:39...
[SECURITY] [DSA-130-1] memory allocation error in ethereal
Package: ethereal Vulnerability: remotely triggered memory allocation error Debian-specific: no Ethereal versions prior to 0.9.3 were vulnerable to an allocation error in the ASN.1 parser. This can be triggered when analyzing traffic using the SNMP, LDAP, COPS, or Kerberos protocols in ethereal...
[SECURITY] [DSA-129-1] in.uucpd string truncation problem
Package: uucp Vulnerability: remote dos Debian-specific: yes We have received reports that in.uucpd, an authentication agent in the uucp package, does not properly terminate certain long input strings. This has been corrected in uucp package version 1.06.1-11potato3 for Debian 2.2 potato and in...
Gafware's CFXImage vulnerability
Procheckup Ltd www.procheckup.com Procheckup Security Bulletin PR02-12 Description: Gafware's CFXImage showtemp program file reading vulnerability Date: 23/5/2002 Vulnerable OS: Microsoft Windows. Not Vulnerable OS: N/A Platform: Microsoft Windows. Severity: Anonymous attackers can read any files...
AMANDA security issues
================================================================== Security advisory: AMANDA ================================================================== Package: AMANDA Version: 2.3.0.4 Date: 26/05/2002 Issue: Local and remote overflows Risk: Medium since this is an old package Credits:...
Apache JServ Nonexistent JSP Request XSS
Older versions of JServ including the version shipped with Oracle9i App Server v1.0.2 are vulnerable to a cross-site scripting attack using a request for a nonexistent .JSP file. %NASLMINLEVEL 70300 This script was written by Matt Moore See the Nessus Scripts License for details Changes by Tenabl...
[NEWS] Lotus Domino Bindsock Notes_ExecDirectory Buffer Overflow Vulnerability
The following security advisory is sent to the securiteam mailing list, and can be found at the SecuriTeam web site: http://www.securiteam.com - - promotion When was the last time you checked your server's security? How about a monthly report? http://www.AutomatedScanning.com - Know that you're...
[NEWS] Lotus Domino Bindsock PATH Buffer Overflow Vulnerability
The following security advisory is sent to the securiteam mailing list, and can be found at the SecuriTeam web site: http://www.securiteam.com - - promotion When was the last time you checked your server's security? How about a monthly report? http://www.AutomatedScanning.com - Know that you're...
sudo vulnerable to heap corruption via -p parameter
Overview Sudo is susceptible to a locally exploitable heap overflow vulnerability. Description Sudo is a common utility used to allow a system administrator to give users or groups of users rights to run certain programs as root or as another user. A locally exploitable heap overflow can lead to...