MERCUR Mailserver advisory/remote exploit

2c79cbe14ac7d0b8472d3f129fa1df55 Security Adisory 3 PRODUCT Atrium Software International's MERCUR Mailserver, All Versions DESCRIPTION MERCUR Mailserver's Control-Service, installed and activated by default on port 32000, is vulnerable to the classic buffer overflow on it's password argument.. a...

ALERT: Xitami 2.5b5

I have notified iMatix via [email protected] of multiple flaws in the GSL templates of Xitami 2.5 Beta. The e-mail was sent out today, so I will release technical details later on, but I did want to release a workaround: In defaults.cfg, users can set "use-error-script" in the "Server" section t...

Oracle Application Server XSQL Stylesheet Arbitrary Java Code Execution

The Oracle XSQL Servlet allows arbitrary Java code to be executed by an attacker by supplying the URL of a malicious XSLT stylesheet when making a request to an XSQL page. %NASLMINLEVEL 70300 This script was written by Matt Moore See the Nessus Scripts License for details Changes by Tenable: -...

FreeBSD-SA-00:09.mtr

-----BEGIN PGP SIGNED MESSAGE----- ============================================================================= FreeBSD-SA-00:09 Security Advisory FreeBSD, Inc. Topic: mtr port contains a local root exploit. Category: ports Module: mtr Announced: 2000-03-15 Affects: Ports collection before the...

netscape.4.51.url.sniffing.txt

Date: Thu, 25 Mar 1999 20:07:52 +0200 From: Georgi Guninski To: [email protected] Subject: Netscape Communicator 4.51 allows sniffing of URLs from another window There is a bug in Netscape Communicator 4.51,4.5/Win95, 4.08/WinNT probably others?, which allows sniffing URLs from another window...

PT-1990-1003 · At&T +1 · Korn Shell +1

Name of the Vulnerable Software and Affected Versions: HP Apollo Domain/OS versions sr10.2 through sr10.3 beta Description: The issue is related to the /etc/suid exec program and the Korn Shell ksh in HP Apollo Domain/OS. Recommendations: For HP Apollo Domain/OS versions sr10.2 through sr10.3 bet...