Multiple pServ Remote Buffer Overflow Vulnerabilities

There are multiple buffer overflow bugs in pServ that could lead to a remote root? compromise of public servers running the daemon: ABSTRACT Pico Server pServ is a freeware web server available at pserv.sourceforge.net running on many POSIX compliant platforms. The package contains several...

ISS Security Brief: Solaris fs.auto Remote Compromise Vulnerability

-----BEGIN PGP SIGNED MESSAGE----- ISS X-Force Security Brief November 25, 2002 Solaris fs.auto Remote Compromise Vulnerability Synopsis: ISS X-Force has discovered a vulnerability in the Sun Microsystems implementation of the "X Window Font Service", or "XFS". The XFS service was designed as a...

Microsoft PPTP Server and Client remote vulnerability

phion Security Advisory 26/09/2002 Microsoft PPTP Server and Client remote vulnerability Summary ----------------------------- The Microsoft PPTP Service shipping with Windows 2000 and XP contains a remotely exploitable pre-authentication bufferoverflow. Affected Systems...

Multiple OpenVMS WASD HTTP Server Vulnerabilities

Description Multiple vulnerabilities have been reported in WASD HTTP Server for OpenVMS. The consequences of successful exploitation of these issues may range from information disclosure to varying degrees of remote compromise. Technologies Affected WASD WASD HTTP Server 7.1.0 WASD WASD HTTP Serv...

idefense.webmin.txt

Reference: http://www.securiteam.com/unixfocus/5CP0R1P80G.html Webmin Vulnerability Leads to Remote Compromise RPC CGI ------------------------------------------------------------------------ SUMMARY Webmin is a web-based interface for system administration for Linux/UNIX. Using any browser that...

ISS Brief: Remote Compromise and Denial of Service Vulnerability in PHP

TO UNSUBSCRIBE: email "unsubscribe alert" in the body of your message to [email protected] Contact [email protected] for help with any problems! --------------------------------------------------------------------------- -----BEGIN PGP SIGNED MESSAGE----- This document is an ISS X-Force Securit...

Advisory 02/2002: PHP remote vulnerability

e-matters GmbH www.e-matters.de -= Security Advisory =- Advisory: Remote Compromise/DOS Vulnerability in PHP Release Date: 2002/07/22 Last Modified: 2002/07/22 Author: Stefan Esser [email protected] Application: PHP 4.2.0, 4.2.1 Severity: A vulnerability within the multipart/form-data handler...

ISS Advisory: OpenSSH Remote Challenge Vulnerability

Internet Security Systems Security Advisory June 26, 2002 OpenSSH Remote Challenge Vulnerability Synopsis: ISS X-Force has discovered a serious vulnerability in the default installation of OpenSSH on the OpenBSD operating system. OpenSSH is a free version of the SSH Secure Shell communications...

Directory traversal and format string bug in Cisco Secure ACS

Any html, htm, class, jpg, jpeg or gif files can be remotely accessed. Format string bug can lead to remote server compromise...

Advisory 012002: PHP remote vulnerabilities

e-matters GmbH www.e-matters.de -= Security Advisory =- Advisory: Multiple Remote Vulnerabilites within PHP's fileupload code Release Date: 2002/02/27 Last Modified: 2002/02/27 Author: Stefan Esser [email protected] Application: PHP v3.10-v3.18, v4.0.1-v4.1.1 Severity: Several vulnerabilities ...

Multiple PHP Vulnerabilities - Remote Compromise Exploit in Circulation

Internet Security Systems Security Alert February 27, 2002 Multiple PHP Vulnerabilities: Remote Compromise Exploit in Circulation Synopsis: ISS X-Force has learned of multiple buffer overflow vulnerabilities present in the PHP Hypertext Preprocessor scripting language. PHP is a popular server-sid...

Remote Compromise in Oracle 9i Database Server

NGSSoftware Insight Security Research Advisory Name: Oracle Remote Compromise Systems Affected: Oracle 9, 8 Platforms: All Operating Systems Severity: High Risk Vendor URL: http://www.oracle.com/ Author: David Litchfield [email protected] Date: 6th February 2002 Advisory number: NISR06022002A...

Trend Micro Interscan VirusWall 3.01 vulnerability

Trend Micro Interscan VirusWall 3.01 vulnerability Release Date: April 12, 2001 Systems Affected: Linux Systems with Interscan VirusWall 3.01 and most likely older versions Remote Administration Enabled. Other Unix variants are most likely vulnerable also. Description: A combination of bugs found...

FreeBSD-SA-01:05.stunnel

-----BEGIN PGP SIGNED MESSAGE----- ============================================================================= FreeBSD-SA-01:05 Security Advisory FreeBSD, Inc. Topic: stunnel contains potential remote compromise Category: ports Module: stunnel Announced: 2001-01-15 Credits: Lez , Brian Hatch...

Vulnerabilities in KTH Kerberos IV

OVERVIEW Kerberos is a network authentication protocol which by using secret-key cryptography provides authentication over insecure networks. There are at least two common free Kerberos implementations: MIT and KTH Royal Institute of Techology, Sweden. The latter is included in OpenBSD and FreeBS...

SuSE Security Announcement: cfengine

-----BEGIN PGP SIGNED MESSAGE----- SuSE Security Announcement Package: cfengine Date: Wednesday, October 11th, 2000 19:15 MEST Affected SuSE versions: 5.3, 6.0, 6.1, 6.3, 6.4, 7.0 Vulnerability Type: remote root compromise Severity 1-10: 5 SuSE default package: no Other affected systems: Linux...

NAI Net Tools PKI Server 1.0 - strong.exe Remote Buffer Overflow

NAI Net Tools PKI Server 1.0 - strong.exe Remote Buffer Overflow source: https://www.securityfocus.com/bid/1536/info Certain versions of Network Associates Inc.'s Net Tools PKI Public Key Infrastructure server ship with a buffer overflow vulnerability which could lead to a remote compromise of th...

NAI Net Tools PKI Server 1.0 - 'strong.exe' Remote Buffer Overflow

source: https://www.securityfocus.com/bid/1536/info Certain versions of Network Associates Inc.'s Net Tools PKI Public Key Infrastructure server ship with a buffer overflow vulnerability which could lead to a remote compromise of the system running the PKI server. The problem lies within the...

Security Announcement: tnef

-----BEGIN PGP SIGNED MESSAGE----- SuSE Security Announcement Package: tnef 0-124 Date: Mon Jul 10 19:19:16 CEST 2000 Affected SuSE versions: 6.3-6.4 Vulnerability Type: remote compromise SuSE default package: no Other affected systems: all unix systems using this package A security hole was...

Check Point Software Firewall-1 3.0 Script - Tag Checking Bypass

Check Point Software Firewall-1 3.0 Script - Tag Checking Bypass source: https://www.securityfocus.com/bid/954/info Firewall-1 includes the ability to alter script tags in HTML pages before passing them to the client's browser. This alteration invalidates the tag, rendering the script unexecutabl...