ACSSEC-2005-11-25-3.txt

-=+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++=- ACS Security Assessment Advisory - XSS Scripting Vulnerability ID: ACSSEC-2005-11-25 - 0x3 Class: Cross-Site-Scripting XSS Package: FTGate 4.4 Build 4.4.000 Oct 26 2005 Build: Windows NT/2k/XP/2k3 Notified: Dec 01, 2005 Released: Dec...

[Full-disclosure] [ACSSEC-2005-11-25-0x3] FTGate 4.4 [Build 4.4.000 Oct 26 2005] Cr oss Site Scripting Vulnerability

-=+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++=- ACS Security Assessment Advisory - XSS Scripting Vulnerability ID: ACSSEC-2005-11-25 - 0x3 Class: Cross-Site-Scripting XSS Package: FTGate 4.4 Build 4.4.000 Oct 26 2005 Build: Windows NT/2k/XP/2k3 Notified: Dec 01, 2005 Released: Dec...

Microsoft Windows Graphics Rendering Engine WMF Format Code Execution Vulnerability

Description Microsoft Windows WMF graphics rendering engine is affected by a remote code execution vulnerability. The problem presents itself when a user views a malicious WMF formatted file, triggering the vulnerability when the engine attempts to parse the file. A malicious file can cause an...

CuteNews 1.4.1 - template Traversal Arbitrary File Access

CuteNews 1.4.1 - template Traversal Arbitrary File Access source: https://www.securityfocus.com/bid/15295/info CuteNews is affected by a directory traversal vulnerability. An unauthorized attacker can retrieve or upload arbitrary files by supplying directory traversal strings '../' through an...

CuteNews 1.4.1 - show_archives.php Traversal Arbitrary File Access

CuteNews 1.4.1 - showarchives.php Traversal Arbitrary File Access source: https://www.securityfocus.com/bid/15295/info CuteNews is affected by a directory traversal vulnerability. An unauthorized attacker can retrieve or upload arbitrary files by supplying directory traversal strings '../' throug...

CuteNews 1.4.1 - 'show_archives.php' Traversal Arbitrary File Access

source: https://www.securityfocus.com/bid/15295/info CuteNews is affected by a directory traversal vulnerability. An unauthorized attacker can retrieve or upload arbitrary files by supplying directory traversal strings '../' through an affected URI parameter. Exploitation of this vulnerability...

CuteNews 1.4.1 - 'template' Traversal Arbitrary File Access

source: https://www.securityfocus.com/bid/15295/info CuteNews is affected by a directory traversal vulnerability. An unauthorized attacker can retrieve or upload arbitrary files by supplying directory traversal strings '../' through an affected URI parameter. Exploitation of this vulnerability...

High Risk Vulnerability in Sun Directory Server

Peter Winter-Smith of NGSSoftware has discovered high risk vulnerability in Sun Directory Server. This flaw can permit an unauthenticated attacker to remotely compromise the Directory server. Affected versions include: Sun Directory Server 5.2 patch 3 and below This issue has been resolved in the...

Zotob Worm Detection

A Microsoft Windows shell is running on port 8888. This may indicate an infection by the Zotob worm, although other worms may also create a shell on this port. C Tenable Network Security, Inc. include"compat.inc"; ifdescription scriptid19429; scriptversion"1.10"; scriptnameenglish:"Zotob Worm...

indows Plug and Play Remote Compromise

nternet Security Systems Protection Advisory August 9, 2005 Windows Plug and Play Remote Compromise Summary: X-force has discovered a vulnerability in the Windows Plug and Play service. This vulnerability is remotely exploitable in the default configuration of Windows 2000, and is present in all...

ISS Protection Brief: Cisco VoIP Call Manager Remote Compromise

-----BEGIN PGP SIGNED MESSAGE----- Internet Security Systems Protection Brief July 13, 2005 Cisco VoIP Call Manager Remote Compromise Summary: ISS has shipped protection for a flaw X-Force has discovered in Cisco's Call Manager platform. Call Manager is the software-based call processing componen...

eRoom Multiple Security Issues

/ $ An open security advisory 9 - eRoom v6. Vulnerabilities 1: Bug Researcher: c0ntex - c0ntexbatgmail.com 2: Bug Released: July 06 2005 3: Bug Impact Rate: Medium / Hi 4: Bug Scope Rate: Remote $ This advisory and/or proof of concept code must not be used for commercial gain. Documentum eRoom...

Internet Explorer PNG Overflow

Internet Security Systems Protection Advisory June 14, 2005 Internet Explorer PNG Overflow Summary: ISS has shipped protection for a flaw X-Force has discovered in the PNG image processing library used in software such as Microsoft's Internet Explorer web browser. By crafting a PNG file in a...

GLSA-200505-11 : Mozilla Suite, Mozilla Firefox: Remote compromise

The remote host is affected by the vulnerability described in GLSA-200505-11 Mozilla Suite, Mozilla Firefox: Remote compromise The Mozilla Suite and Firefox do not properly protect 'IFRAME' JavaScript URLs from being executed in context of another URL in the history list CAN-2005-1476. The Mozill...

Orenosv HTTP/FTP Server 0.8.1 - 'CGISSI.exe' Remote Buffer Overflow (PoC)

source: https://www.securityfocus.com/bid/13549/info Orenosv HTTP/FTP server is prone to a remote buffer overflow vulnerability that affects 'cgissi.exe'. This issue presents itself when the application handles excessive values supplied through an SSI command name. A successful attack can result ...

ISS Protection Brief: Microsoft Exchange Remote Compromise

-----BEGIN PGP SIGNED MESSAGE----- Internet Security Systems Protection Advisory April 12, 2005 Microsoft Exchange Remote Compromise Summary: ISS has shipped protection for a flaw X-Force has discovered in Microsoft.s Exchange SMTP Server. Exchange is a dominant corporate email platform, and is...

ISS Protection Brief: Windows IP Options Remote Compromise

-----BEGIN PGP SIGNED MESSAGE----- Internet Security Systems Protection Brief April 12, 2005 Windows IP Options Remote Compromise Summary: X-force has discovered a vulnerability in Windows NT-based IP Stack drivers. This vulnerability affects most modern Windows operating systems, and could allow...

ISS Protection Brief: Mozilla Foundation GIF Overflow

-----BEGIN PGP SIGNED MESSAGE----- Internet Security Systems Protection Brief March 23, 2005 Mozilla Foundation GIF Overflow Summary: ISS has shipped protection for a flaw X-Force has discovered in the GIF image processing library used in software developed by the Mozilla Foundation. This library...

[Full-Disclosure] Jabberd2.x remote BuffJabberd2.x remote Buffer Overflowser Overflows

Security Advisory Advisory: ADLAB-04002Jabberd2.x remote Buffer Overflows Authors: [email protected] Class: Boundary Condition Error CVE:CAN-2004-0953 Remote: Yes, could allow remote compromise Vulnerable: Jabberd 2. Unvulnerable: Jabberd 1.4 Vendor: http://jabberd.jabberstudio.org/ I.INFO:...

Debian DSA-404-1 : rsync - heap overflow

The rsync team has received evidence that a vulnerability in all versions of rsync prior to 2.5.7, a fast remote file copy program, was recently used in combination with a Linux kernel vulnerability to compromise the security of a public rsync server. While this heap overflow vulnerability could...