Secunia Research: Multiple Browsers Tabbed Browsing Vulnerabilities

====================================================================== Secunia Research 20/10/2004 - Multiple Browsers Tabbed Browsing Vulnerabilities - ====================================================================== Table of Contents Affected...

[SECURITY] [DSA 573-1] New cupsys packages fix arbitrary code execution

-------------------------------------------------------------------------- Debian Security Advisory DSA 573-1 [email protected] http://www.debian.org/security/ Martin Schulze October 21st, 2004 http://www.debian.org/security/faq -...

[SECURITY] [DSA 572-1] New ecartis packages fix unauthorised access to admin interface

-------------------------------------------------------------------------- Debian Security Advisory DSA 572-1 [email protected] http://www.debian.org/security/ Martin Schulze October 21st, 2004 http://www.debian.org/security/faq -...

Vypress Tonecast 1.3 - Remote Denial of Service

Vypress Tonecast 1.3 - Remote Denial of Service source: https://www.securityfocus.com/bid/11462/info Vypress Tonecast is reported prone to a remote denial of service vulnerability. It is reported that, when handled, a sufficiently malformed audio stream will cause the affected software to crash. ...

[SECURITY] [DSA 556-2] New netkit-telnet packages really fix denial of service

-------------------------------------------------------------------------- Debian Security Advisory DSA 556-2 [email protected] http://www.debian.org/security/ Martin Schulze XXXXX 8th, 2004 http://www.debian.org/security/faq -...

[SECURITY] [DSA 569-1] New netkit-telnet-ssl packages fix denial of service

-------------------------------------------------------------------------- Debian Security Advisory DSA 569-1 [email protected] http://www.debian.org/security/ Martin Schulze October 18th, 2004 http://www.debian.org/security/faq -...

YahooPOPs 1.6 - SMTP Remote Buffer Overflow

//Diabolic Crab's exploit for YahooPOPs include include include include include include char scode = //Bind shell on port 101, taken from the windows exploit by class101 "\xEB" "\x0F\x58\x80\x30\x88\x40\x81\x38\x68\x61\x63\x6B\x75\xF4\xEB\x05\xE8\xEC\xFF\xFF"...

Yak! Chat Client 2.x - FTP Server Directory Traversal

source: https://www.securityfocus.com/bid/11433/info Yak! Chat Client FTP server is reported prone to a remote directory traversal vulnerability. This issue presents itself due to insufficient sanitization of user-supplied data. This issue can ultimately allow an attacker to compromise a computer...

Yak! Chat Client 2.x - FTP Server Directory Traversal

Yak! Chat Client 2.x - FTP Server Directory Traversal source: https://www.securityfocus.com/bid/11433/info Yak! Chat Client FTP server is reported prone to a remote directory traversal vulnerability. This issue presents itself due to insufficient sanitization of user-supplied data. This issue can...

[SECURITY] [DSA 458-3] New python2.2 packages really fix buffer overflow and restore functionality

-------------------------------------------------------------------------- Debian Security Advisory DSA 458-3 [email protected] http://www.debian.org/security/ Martin Schulze October 10th, 2004 http://www.debian.org/security/faq -...

Helix Universal Server Remote Integer Handling DoS

The remote host is running Helix Universal Server, a digital media delivery platform. There is a flaw in the remote version of this software that could allow an attacker to crash this service by sending a malformed POST request to the remote host. C Tenable Network Security, Inc...

ArGoSoft FTP Server XCWD Remote Overflow

The remote host is running the ArGoSoft FTP server. It was possible to shut down the remote FTP server by issuing a XCWD command followed by a too long argument. This problem allows an attacker to prevent the remote site i from sharing some resources with the rest of the world. C Tenable Network...

CubeCart index.php cat_id Parameter SQL Injection

There is a SQL injection issue in the remote version of CubeCart that could allow an attacker to execute arbitrary SQL statements on the remote host and to potentially overwrite arbitrary files on the remote system, by sending a malformed value to the 'catid' argument of the file 'index.php'...

WordPress 'wp-login.php' HTTP Response Splitting

According to its banner, the remote version of WordPress is vulnerable to an HTTP-splitting attack wherein an attacker can insert CR LF characters and then entice an unsuspecting user into accessing the URL. The client will parse and possibly act on the secondary header which was supplied by the...

[SECURITY] [DSA 600-1] New samba packages fix arbitrary file access

-------------------------------------------------------------------------- Debian Security Advisory DSA 600-1 [email protected] http://www.debian.org/security/ Martin Schulze October 7th, 2004 http://www.debian.org/security/faq -...

yahooPOPS.txt

Hat-Squad Advisory: Remote Buffer overflow Vulnerability in YahooPOPS September 22, 2004 Product: YahooPOPS! Vendor URL: http://yahoopops.sourceforge.net Version: YahooPOPS v0.4 up to v0.6 Vulnerability: Remote Buffer overflows Release Date: 27 September 2004 Vendor Status: Informed on 24 Septemb...

Debian DSA-422-1 : cvs - remote vulnerability

The account management of the CVS pserver which is used to give remote access to CVS repositories uses a CVSROOT/passwd file in each repository which contains the accounts and their authentication information as well as the name of the local unix account to use when a pserver account is used. Sin...

MSSQL 7.0 - Remote Denial of Service

MSSQL 7.0 - Remote Denial of Service / Microsoft mssql 7.0 server is vulnerable to denial of service attack By sending a large buffer with specified data an attacker can stop the service "mssqlserver" the error noticed is different according to services' pack but the result is always the same one...

Microsoft SQL Server 7.0 - Remote Denial of Service (1)

Microsoft SQL Server 7.0 - Remote Denial of Service 1 // source: https://www.securityfocus.com/bid/11265/info Reportedly Microsoft SQL Server is affected by a remote denial of service vulnerability. This issue is due to a failure of the application to handle irregular network communications. An...

Pinnacle ShowCenter Skin DoS

The remote host runs the Pinnacle ShowCenter web-based interface. The remote version of this software is vulnerable to a remote denial of service due to a lack of sanity checks on skin parameter. With a specially crafted URL, an attacker can deny service of the ShowCenter web-based interface...