[Full-Disclosure] CactuSoft CactuShop 5.0 Lite shopping cart software backdoor

S-Quadra Advisory 2004-02-06 Topic: CactuSoft CactuShop 5.0 Lite shopping cart software backdoor Severity: High Vendor URL: http://www.cactushop.com Advisory URL: http://www.s-quadra.com/advisories/Adv-20040206.txt Release date: 06 Feb 2004 1. DESCRIPTION CactuShop is an ASP application for runni...

[Full-Disclosure] QuadComm Q-Shop ASP Shopping Cart Software multiple security vulnerabilities

S-Quadra Advisory 2004-01-23 Topic: QuadComm Q-Shop ASP Shopping Cart Software multiple security vulnerabilities Severity: High Vendor URL: http://www.quadcomm.com Advisory URL: http://www.s-quadra.com/advisories/Adv-20040123.txt Release date: 23 Jan 2004 1. DESCRIPTION Q-Shop is a shopping cart...

CVE-2003-1279

S-PLUS 6.0 allows local users to overwrite arbitrary files and possibly elevate privileges via a symlink attack on 1 /tmp/F8499 by Sqpe, 2 /tmp/PRINT.$$.out by PRINT, 3 /tmp/SUBST$PID.TXT and /tmp/ed.cmds$PID by mustfix.hlinks, 4 /tmp/file.1 and /tmp/file.2 by sasget, 5 /tmp/file.1 by sasvars, an...

CVE-2003-0564

Multiple vulnerabilities in multiple vendor implementations of the Secure/Multipurpose Internet Mail Extensions S/MIME protocol allow remote attackers to cause a denial of service and possibly execute arbitrary code via an S/MIME email message containing certain unexpected ASN.1 constructs, as...

CVE-2003-0564

Multiple vulnerabilities in multiple vendor implementations of the Secure/Multipurpose Internet Mail Extensions S/MIME protocol allow remote attackers to cause a denial of service and possibly execute arbitrary code via an S/MIME email message containing certain unexpected ASN.1 constructs, as...

CVE-2003-0564

The CVE-2003-0564 issue affects S/MIME parsing in NSS/Mozilla stacks. The NISCC-derived notes describe bugs in NSS versions prior to 3.9 where parsing unexpected ASN.1 structures in S/MIME data could cause a crash or high memory use, potentially enabling remote denial of service and, in some case...

Multiple vulnerabilities in S/MIME implementations

Overview Multiple vulnerabilities exist in different vendors' S/MIME Secure/Multipurpose Internet Mail Extensions implementations. The impacts of these vulnerabilities are varied and range from denial of service to potential remote execution of arbitrary code. Description The U.K. National...

Buffer overflow in man

Buffer overflow on -S key, MANPL variable...

Secure HyperText Transfer Protocol (S-HTTP) Detection

The remote web server accepts connections encrypted using Secure HyperText Transfer Protocol S-HTTP, a cryptographic layer that was defined in 1999 by RFC 2660 and never widely implemented. C Tenable Network Security, Inc. include"compat.inc"; ifdescription scriptid11720; scriptversion "1.20";...

[SECURITY] [DSA 276-1] New Linux kernel packages (s390) fix local root exploit

-------------------------------------------------------------------------- Debian Security Advisory DSA 276-1 [email protected] http://www.debian.org/security/ Martin Schulze April 3rd, 2003 http://www.debian.org/security/faq -...

[SECURITY] [DSA 276-1] New Linux kernel packages (s390) fix local root exploit

-------------------------------------------------------------------------- Debian Security Advisory DSA 276-1 [email protected] http://www.debian.org/security/ Martin Schulze April 3rd, 2003 http://www.debian.org/security/faq -...

S-plus /tmp usage

INTRODUCTION S-PLUS is a Statistical analysis, graphics and programming tool http://www.statsci.com/ http://www.insightful.com/ PROBLEM As installed on UNIX machines, Splus uses files in /tmp in an unsafe way. DETAILS The main Sqpe binary, and various shell script modules, use files in /tmp:...

Symbolik link problem in S-Plus

Multiple modules create temporary files with predictable names...

Outlook Express Remote Code Execution in Preview Pane (S/MIME)

Outlook Remote Code Execution in Preview Pane S/MIME ------------------------------------------------------------------------ Article reference: http://www.securiteam.com/windowsntfocus/6D00B005PU.html SUMMARY The S/MIME standard attempts to raise the level of trust of email messages by enabling...

Security Bulletin MS02-058: Unchecked Buffer in Outlook Express S/MIME Parsing Could Enable System Compromise (Q328676)

---------------------------------------------------------------------- Title: Unchecked Buffer in Outlook Express S/MIME Parsing Could Enable System Compromise Q328676 Date: 10 October 2002 Software: Outlook Express Impact: Run code of attacker's choice. Max Risk: Critical Bulletin: MS02-058...

Outlook S/MIME Vulnerability

======================================================================= Outlook S/MIME Vulnerability 09/02/02 Mike Benham [email protected] http://www.thoughtcrime.org ======================================================================= Abstract Outlook's S/MIME implementation is vulnerab...

ASN.1 parsing errors exist in implementations of SSL, TLS, S/MIME, PKCS#7 routines

Overview Abstract Syntax Notation number One ASN.1 is an international standard used to describe and transmit data packets between applications and across networks. There is a vulnerability related to ASN.1 that could permit an attacker to cause a denial of service or potentially execute arbitrar...

CVE-2002-0434

The CVE-2002-0434 issue centers on the directory.php script by Marcus S. Xenakis, which allows remote attackers to execute arbitrary commands via shell metacharacters in the dir parameter. Connected sources (OpenVAS NASL and Tenable plugin) confirm a remote command-execution vulnerability in the ...

CVE-2001-1169

CVE-2001-1169 affects S/Key’s keyinit, where initialization of a one‑time password sequence does not require authentication. The vulnerability allows an attacker who already has user privileges to create new one‑time passwords, potentially enabling access to other services that use S/Key authenti...

CVE-2001-1169

keyinit in S/Key does not require authentication to initialize a one-time password sequence, which allows an attacker who has gained privileges to a user account to create new one-time passwords for use in other activities that may use S/Key authentication, such as sudo...