b-WsMP3dvuln.txt

========================================== INetCop Security Advisory 2003-0x82-017.b ========================================== Title: Remote Heap Corruption Overflow vulnerability in WsMp3d Again 0x01. Description WsMp3d is webserver daemon that can enjoy mp3. shoutcast-server There is WsMp3 Hea...

Critical: Red Hat Security Advisory: : Updated sendmail packages fix critical security issues

Updated Sendmail packages are available to fix a vulnerability that may allow remote attackers to gain root privileges by sending a carefully crafted message. These packages also fix a security bug if sendmail is configured to use smrsh. Sendmail is a widely used Mail Transport Agent MTA which is...

Security bug in CGI::Lite::escape_dangerous_chars() function

SUBJECT Security bug in CGI::Lite::escapedangerouschars function, part of the CGI::Lite 2.0 package, and earlier revisions thereof. SUMMARY The CGI::Lite::escapedangerouschars function fails to escape the entire set of special characters that may have significance to the underlying shell command...

Moderate: Red Hat Security Advisory: : : : Updated wget packages fix directory traversal bug

The wget packages shipped with Red Hat Linux 6.2 through 8.0 contain a security bug which, under certain circumstances, can cause local files to be written outside the download directory. Updated 10 July 2003 Added packages for Red Hat Linux on IBM iSeries and pSeries systems Versions of wget pri...

DSA-200 samba - remote exploit

Bulletin has no description...

IceWarp 3.4.5 XSS *AGAIN*

DarC KonQuesT IceWarp 3.4.5 XSS Release Product: IceWarp Webmail 3.4.5 Vendor: IceWarp Software - E-mail: [email protected] Web: www.icewarp.com Problem: Cross Site Scripting Severity: Mild Operating Systems: Tested against Win2k Discovered: October 29, 2002 Vendor Notified: October 29, 2002 Publi...

GLSA: kgpg

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - - -------------------------------------------------------------------- GENTOO LINUX SECURITY ANNOUNCEMENT 200211-002 - - -------------------------------------------------------------------- PACKAGE : kgpg SUMMARY : keys generated in wizard have an...

Netscreen SSH1 CRC32 Compensation Denial of service

Discovered by: HD Moore Products Tested: Netscreen-25 All models expected to be vulnerable Vendor contacted: October 23rd Vendor confirmed: October 23rd CVE: CVE-2001-0144 covered this bug. Original Bug discovered by: Michal Zalewski of the BindView RAZOR Team. In February of 2001, BindView's RAZ...

vBulletin XSS Security Bug

.:: vBulletin XSS Security Bug vBulletin is a powerful and widely used bulletin board system, based on PHP language and MySQL database. One of its features is the usage of templates to modify the boards look. I discovered lately a Cross-Site Scripting vulnerability that would attackers to inject...

Another small metacharacter bug in Penguin Traceroute v1.0

Hi, As I was surfing through some older Securityfocus archives I stumbled across the article about Penguin traceroute v1.0 http://online.securityfocus.com/archive/1/263285 This article described some metacharacter bugs in this CGI script, also it included a suggested fix. quote Fix === Open up th...

CVE-2002-0498

CVE-2002-0498 affects Etnus TotalView 5.0.0-4, where certain files are installed with UID 5039 and GID 59. This ownership mishandling could allow local users with that UID/GID to modify those files and gain privileges as other TotalView users. No exploit details are provided in the supplied docum...

wbbboard 1.1.1 registration _new_users_vulnerability_

wbbboard 1.1.1 registration newusersvulnerability -------------------------------------------------- wbbboard : i cant find any contact info in credits : i send a message to wbbhacks.de and mywbb.de support forums, they didnt reply for 3 days i think enough Affected program : wbbboard 1.1.1 Vendo...

CVE-2001-0699

CVE-2001-0699 describes a buffer overflow in the cb_reset function of the System Service Processor (SSP) package on SunOS 5.8, enabling a local user to execute arbitrary code by supplying a long argument. The provided documents do not include a concrete mitigation, patch version, or explicit expl...

Phorum Discussion Board Security Bug (Email Disclosure)

Concerning latest Phorum version 3.3.2 A bug in the PHP based forum script Phorum makes it possible to obtain the email addresses of the 10 most active users. In the 'admin/' directory of the forum there is a script called 'stats.php' that allows administrators and anyone else, since there is no...

(Repost) CwpApi : GetRelativePath() returns invalid paths (security advisory)

ACD Incorporated Security Advisory Project: Comprehensive Web Programming API Synopsis: GetRelativePath in CwpApi.php returns paths outside of the HTTP ServerRoot. Advisory date: January 18, 2002 New version: 1.1.1 1. In Brief: An updated CwpApi release is available which fixes a minor security b...

CVE-1999-1373

FORE PowerHub (pre-5.0.1) is affected by a denial-of-service vulnerability: remote TCP SYN scans with TCP/IP OS fingerprinting (e.g., via nmap) can cause a hang. The available sources (NVD/NVD entry) confirm the attack vector is network-based and the impact is a partial availability loss. No reme...

security bug Internet Explorer 5

There is a security bug in the Internet Explorer 5 I haven't tested it on other browsers. It is possible to read some textfiles others than cookies from the client's hard disk. If there is for example in the directory 'C:WINNT' a textfile 'test.txt' with content: us="stefaan" passwd="mypasswd" th...

Fw: [net-com] Bug in Mirc v5.82

----- Original Message ----- From: Trax [email protected] To: opers-xnet [email protected] Cc: net-com-xnet [email protected] Sent: Sunday, April 22, 2001 1:40 PM Subject: net-com Bug in Mirc v5.82 There is a bug in mirc v5.82 that allows remote control of clients via /quote and /ctcp not the ctcp...

Security bug in Internet Explorer - MSScriptControl.ScriptControl

Georgi Guninski security advisory 41, 2001 Security bug in Internet Explorer - MSScriptControl.ScriptControl Systems affected: IE 5.5 Win2K probably others versions/platforms, have not tested Risk: High Date: 31 March 2001 Legal Notice: This Advisory is Copyright c 2001 Georgi Guninski. You may...

PHP Security Advisory - Apache Module bugs

Problems ========= 1 PHP supports a configuration mechanism that allows users to configure PHP directives on a per-directory basis. Under Apache, this is usually done using .htaccess files. Due to a bug in the Apache module version of PHP, remote 'malicious users' might be able to create a specia...