Linux Kernel sctp_setsockopt() Integer Overflow

Product: Linux Kernel Versions: = 2.4.25 Bug: Integer overflow Impact: Attackers may be able to execute arbitrary code with kernel-level privileges. Risk: High Date: May 11, 2004 Author: Shaun Colley Email: shaunige yahoo co uk WWW: http://www.nettwerked.co.uk Introduction The Linux Kernel is the...

imgSvr.txt

Donato Ferrante Application: imgSvr http://adaimgsvr.sourceforge.net/ Version: 0.4 Bug: Index viewing Author: Donato Ferrante e-mail: [email protected] web: www.autistici.org/fdonato xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx 1. Description 2. The bug 3. The code ...

Broadcast client buffer-overflow in Terminator 3 1.0

Luigi Auriemma Application: Terminator 3: War of the Machines http://www.t3war.com Versions: 1.0 Platforms: Windows Bug: broadcast client's buffer-overflow Risk: very high Exploitation: remote and automatic, versus clients Date: 19 Mar 2004 Author: Luigi Auriemma e-mail: [email protected] web...

Security bug in Xerox Document Centre

CONTACT INFORMATION =============================================================================== Name : J.A. Gutierrez E-mail : [email protected] Reported this to the vendor on Mon Dec 15 2003 using feedback form at http://www.xerox.com, since I couldn't find a security contact. TECHNICA...

[Full-Disclosure] Get admin rights using Doro (pdf creator)

Hi, a few days ago i discovered a bug in Doro. Doro is a free tool to create pdf files from any windows program. After installing Doro you have a new printer called 'Doro PDF Writer'. If you select 'Print' the spooler calls the printer filter 'doro.dll'. The 'doro.dll' then starts 'doro.exe' and ...

Virginity Security Advisory 2003-002 : Tritanium Bulletin Board - Read and write from/to internal (protected) Threads

-------------------------------------------------------------------- Virginity Security Advisory 2003-002 - - - -------------------------------------------------------------------- DATE : 2003-10-31 22:59 GMT TYPE : remote VERSIONS AFFECTED : == Tritanium Bulletin Board 1.2.3...

Integer overflow in OpenBSD kernel

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Local security bug in OpenBSD semaphore handling Product: OpenBSD kernel 3.3-release, -current before 10/09/2003 Impact: Root may bypass securelevel Bug class: Integer overflow Vendor notified: Yes Fix available: Yes Details: An integer overflow...

DSA-362 mindi - insecure temporary file

Bulletin has no description...

Critical: Red Hat Security Advisory: : : : Updated sendmail packages fix vulnerabilities

Updated Sendmail packages are available for Red Hat Linux on IBM iSeries and pSeries systems to fix a vulnerability that allows local and possibly remote attackers to gain root privileges as well as a vulnerability that may allow remote attackers to gain root privileges by sending a carefully...

wzdftpd remote DoS

Title: wzdftpd remote DoS Affected: wzdftpd = 0.1rc4 URL: http://www.wzdftpd.net Risk: High Exploitable: Yes Remote: Yes Date: June, 27 2003 Overview: "A portable, modular and efficient ftp server, supporting SSL, winsock, multithreaded, modules ,externals scripts. unix-like permissions+acls,...

b-WsMP3dvuln.txt

========================================== INetCop Security Advisory 2003-0x82-017.b ========================================== Title: Remote Heap Corruption Overflow vulnerability in WsMp3d Again 0x01. Description WsMp3d is webserver daemon that can enjoy mp3. shoutcast-server There is WsMp3 Hea...

Critical: Red Hat Security Advisory: : Updated sendmail packages fix critical security issues

Updated Sendmail packages are available to fix a vulnerability that may allow remote attackers to gain root privileges by sending a carefully crafted message. These packages also fix a security bug if sendmail is configured to use smrsh. Sendmail is a widely used Mail Transport Agent MTA which is...

Security bug in CGI::Lite::escape_dangerous_chars() function

SUBJECT Security bug in CGI::Lite::escapedangerouschars function, part of the CGI::Lite 2.0 package, and earlier revisions thereof. SUMMARY The CGI::Lite::escapedangerouschars function fails to escape the entire set of special characters that may have significance to the underlying shell command...

Moderate: Red Hat Security Advisory: : : : Updated wget packages fix directory traversal bug

The wget packages shipped with Red Hat Linux 6.2 through 8.0 contain a security bug which, under certain circumstances, can cause local files to be written outside the download directory. Updated 10 July 2003 Added packages for Red Hat Linux on IBM iSeries and pSeries systems Versions of wget pri...

DSA-200 samba - remote exploit

Bulletin has no description...

IceWarp 3.4.5 XSS *AGAIN*

DarC KonQuesT IceWarp 3.4.5 XSS Release Product: IceWarp Webmail 3.4.5 Vendor: IceWarp Software - E-mail: [email protected] Web: www.icewarp.com Problem: Cross Site Scripting Severity: Mild Operating Systems: Tested against Win2k Discovered: October 29, 2002 Vendor Notified: October 29, 2002 Publi...

GLSA: kgpg

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - - -------------------------------------------------------------------- GENTOO LINUX SECURITY ANNOUNCEMENT 200211-002 - - -------------------------------------------------------------------- PACKAGE : kgpg SUMMARY : keys generated in wizard have an...

Netscreen SSH1 CRC32 Compensation Denial of service

Discovered by: HD Moore Products Tested: Netscreen-25 All models expected to be vulnerable Vendor contacted: October 23rd Vendor confirmed: October 23rd CVE: CVE-2001-0144 covered this bug. Original Bug discovered by: Michal Zalewski of the BindView RAZOR Team. In February of 2001, BindView's RAZ...

vBulletin XSS Security Bug

.:: vBulletin XSS Security Bug vBulletin is a powerful and widely used bulletin board system, based on PHP language and MySQL database. One of its features is the usage of templates to modify the boards look. I discovered lately a Cross-Site Scripting vulnerability that would attackers to inject...

Another small metacharacter bug in Penguin Traceroute v1.0

Hi, As I was surfing through some older Securityfocus archives I stumbled across the article about Penguin traceroute v1.0 http://online.securityfocus.com/archive/1/263285 This article described some metacharacter bugs in this CGI script, also it included a suggested fix. quote Fix === Open up th...