[SECURITY] [DSA 120-1] New mod_ssl and Apache/SSL packages fix buffer overflow

-------------------------------------------------------------------------- Debian Security Advisory DSA 120-1 [email protected] http://www.debian.org/security/ Martin Schulze March 10th, 2002 - -------------------------------------------------------------------------- Package :...

IBM DB2 Multiple CGI Single Byte Request Remote DoS

It was possible to crash the IBM DB2 database service by connecting to the affected service and sending just one byte to it. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if description scriptid10871; scriptversion"1.23";...

[SECURITY] [DSA 117-1] New CVS packages fix potential security problems

-------------------------------------------------------------------------- Debian Security Advisory DSA 117-1 [email protected] http://www.debian.org/security/ Martin Schulze March 5th, 2002 - -------------------------------------------------------------------------- Package : cvs Vulnerability...

[SECURITY] [DSA 116-1] New CFS packages fix security problems

-------------------------------------------------------------------------- Debian Security Advisory DSA 116-1 [email protected] http://www.debian.org/security/ Martin Schulze March 2nd, 2002 - -------------------------------------------------------------------------- Package : cfs Vulnerability...

xtell 2.6.1 - User Status Remote Information Disclosure

source: https://www.securityfocus.com/bid/4196/info xtell is a simple network messaging program. It may be used to transmit terminal messages between users and machines. xtell is available for Linux, BSD and most other Unix based operating systems. An information disclosure vulnerability has been...

[SECURITY] [DSA 114-1] New GNUJSP packages fix directory and script source disclosure

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - -------------------------------------------------------------------------- Debian Security Advisory DSA 114-1 [email protected] http://www.debian.org/security/ Martin Schulze February 21th, 2002 -...

[SECURITY] [DSA 110-1] New CUPS packages fix buffer overflow

-------------------------------------------------------------------------- Debian Security Advisory DSA 110-1 [email protected] http://www.debian.org/security/ Martin Schulze February 13th, 2002 - -------------------------------------------------------------------------- Package : cupsys...

ICQ remote buffer overflow vulnerability

This is very similar to the AIM overflow recently discovered. ICQ protocol uses the same TLV 2711 packet and there is a similar weakness in the parsing of the packet. The details of this vulnerability will not be released until a further time when a patch has been implemented, probably. ICQ2000...

rsync 2.5.1 - Remote (2)

rsync 2.5.1 - Remote 2 / 7350rsync - rsync include include include include include include include include include include define MAXPATHLEN 4096 define VERSION "@RSYNCD: 26\n" define PORT 873 define NULLOFFSET -48 define STARTNULLBRUTE -44 define ENDNULLBRUTE -56 define BRUTEBASE 0xbfff7777 defi...

rsync 2.5.1 - Remote (1)

/ 7350fuqnut - rsync include include include include include include include include include define MAXPATHLEN 4096 define VERSION "@RSYNCD: 26\n" define PORT 873 define NULLOFFSET -48 define STARTNULLBRUTE -44 define ENDNULLBRUTE -56 define BRUTEBASE 0xbfff7777 define INCREMENT 512 define ALLIGN...

Alchemy Eye/Network Monitor Traversal Arbitrary Command Execution

Alchemy Eye and Alchemy Network Monitor are network management tools for Microsoft Windows. The product contains a built-in HTTP server for remote monitoring and control. This HTTP server allows arbitrary commands to be run on the server by a remote attacker. %NASLMINLEVEL 70300 This script was...

GNOME libgtop Daemon Remote Format String

It seems that libgtop is/was running on this port and is vulnerable to a format string attack which may allow an attacker to gain a shell on this host with the privileges of 'nobody'. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid10812; scriptversion"1.20";...

CVE-2001-0687

The CVE-2001-0687 entry concerns Broker FTP Server 5.9.5 for Windows NT/9x. The vulnerability allows a remote attacker to disclose information from the web server by (1) issuing a CD command (CD C:) followed by LS, and (2) specifying arbitrary paths in UNC format (\computername\sharename). The av...

ISSalert: ISS Advisory: Remote Buffer Overflow Vulnerability in HP-UX Line Printer Daemon

TO UNSUBSCRIBE: email "unsubscribe alert" in the body of your message to [email protected] Contact [email protected] for help with any problems! --------------------------------------------------------------------------- -----BEGIN PGP SIGNED MESSAGE----- Internet Security Systems Security...

QDAV-2001-7-3

Interactive Story File Disclosure Vulnerability qDefense Advisory Number QDAV-2001-7-3 Product: Interactive Story Vendor: Valerie Mates http://www.valeriemates.com Severity: Remote; Attacker may read arbitrary file Versions Affected: Version 1.3 Vendor Status: Vendor contacted; has released new...

PT-2001-2499 · Texas Imperial · Wftpd

Name of the Vulnerable Software and Affected Versions: WFTPD version 3.00 Description: The issue allows remote attackers to read arbitrary files by uploading a file that ends in a ".lnk" extension, which bypasses WFTPD's check for a ".lnk" extension. Recommendations: For WFTPD version 3.00,...

Netscape Enterprise Server Long Traversal Request Remote DoS

The remote web server seems to crash when it is issued a too long request with dots ie: ../../../../ 1000 times. An attacker may use this flaw to disable the remote server. C Tenable Network Security, Inc. include 'compat.inc' ; ifdescription scriptid10689; scriptversion "1.26";...

Solaris rpc.yppasswdd username Remote Overflow

The remote RPC service 100009 yppasswdd is vulnerable to a buffer overflow which allows any user to obtain a root shell on this host. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid10684; scriptversion"1.37"; scriptcvsdate"Date: 2018/11/15 20:50:22";...

MS01-023: Microsoft IIS 5.0 Malformed HTTP Printer Request Header Remote Buffer Overflow (953155) (uncredentialed check)

The remote version of the IIS web server contains a bug which might be used by an attacker to execute arbitrary code on the remote system. To exploit this vulnerability, an attacker would need to send a malicious HTTP/1.1 request to the remote host. %NASLMINLEVEL 70300 C Tenable Network Security,...

[SECURITY] [DSA 043-2] New versions of Zope fix vulnerabilities

---------------------------------------------------------------------------- Debian Security Advisory DSA-043-2 [email protected] http://www.debian.org/security/ Martin Schulze April 26, 2001 - ---------------------------------------------------------------------------- Packages : zope...