837 matches found
Mandrake Linux Security Advisory : php (MDKSA-2004:068)
"Stefan Esser discovered a remotely exploitable vulnerability in PHP where a remote attacker could trigger a memorylimit request termination in places where an interruption is unsafe. This could be used to execute arbitrary code. As well, Stefan Esser also found a vulnerability in the handling of...
[Full-Disclosure] [Fwd: DansGuardian Hex Encoding URL Banned Extension Filter Bypass Vulnerability]
DansGuardian Hex Encoding URL Banned Extension Filter Bypass Vulnerability ========================================================================== Original Release Date: 2004-07-29 Author: Ruben Molina a.k.a fradiavolo Email: [email protected] !!! VIVA COLOMBIA !!! 1. Systems affected: All...
RHEL 3 : httpd (RHSA-2004:342)
Updated httpd packages that fix a buffer overflow in modssl and a remotely triggerable memory leak are now available. The Apache HTTP server is a powerful, full-featured, efficient, and freely-available Web server. A stack-based buffer overflow was discovered in modssl that could be triggered if...
RHEL 3 : quagga (RHSA-2003:315)
Updated Quagga packages that close a locally-exploitable denial of service vulnerability are now available. Quagga is an open source implementation of TCP/IP routing software. Herbert Xu reported that Quagga can accept spoofed messages sent on the kernel netlink interface by other users on the...
FreeBSD-SA-04:05.openssl
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ============================================================================= FreeBSD-SA-04:05.openssl Security Advisory The FreeBSD Project Topic: Denial-of-service vulnerability in OpenSSL Category: crypto Module: openssl Announced: 2004-03-17...
Cisco default install of IBM Director agent fails to authenticate users for remote administration
Overview Cisco IBM Director agent fails to authenticate users for remote administration. Description Cisco voice products e.g. CallManager, IP Interactive Voice Response, IP Call Center Express that run on IBM servers install IBM Director agent to provide administrative management. The default...
pound remotely exploitable vulnerability
An unknown remotely exploitable vulnerability was disclosed. Robert Segall writes: a security vulnerability was brought to my attention many thanks to Akira Higuchi. Everyone running any previous version should upgrade to 1.6 immediately - the vulnerability may allow a remote exploit. No exploits...
Infinity CGI Exploit Scanner Multiple Vulnerabilities
The remote is running Infinity Exploit Scanner, a web-based CGI vulnerability scanner implemented in perl and stored under the name 'nph-exploitscanget.cgi'. There is a flaw in this CGI that lets an attacker execute arbitrary commands on this host. In addition to this, there is a flaw in this CGI...
Snitz Forums 2000 3.4.0.3 - Multiple Vulnerabilities
Snitz Forums 2000 3.4.0.3 - Multiple Vulnerabilities Snitz Forums 2000 Multiple Vulnerabilities Vendor: Snitz Communications Product: Snitz Forums 2000 Version: alertdocument.cookie Cookie Authentication Bypass Vulnerability: In order to steal another users identity, all an attacker needs to know...
DSA-271 ecartis - unauthorized password change
Bulletin has no description...
ISC BIND < 9.2.2 DNS Resolver Functions Remote Overflow
The remote BIND 9 DNS server, according to its version number, is vulnerable to a buffer overflow which may allow an attacker to gain a shell on this host or to disable this server. C Tenable Network Security, Inc. Ref: https://www.isc.org/downloads/bind/...
Multiple implementations of the Session Initiation Protocol (SIP) contain multiple types of vulnerabilities
Overview Oulu University has discovered a variety of vulnerabilities affecting products that implement the Session Initiation Protocol SIP. These vulnerabiltites affect a wide variety of products, with impacts ranging from denial of service to execution of arbitrary code. SIP is used in Voice Ove...
Lotus Domino Web Server iNotes Overflow (#NISR17022003b)
NGSSoftware Insight Security Research Advisory Name: Lotus Domino Web Server iNotes Overflow Systems Affected: Release 6.0 Severity: Critical Risk Category: Remote System Buffer Overrun Vendor URL: http://www.lotus.com Author: Mark Litchfield [email protected] Date: 17th February 2003 Advisory...
Important: Red Hat Security Advisory: apache security update
Updated apache and httpd packages are available which fix a number of security issues for Red Hat Linux Advanced Server 2.1. Updated 06 Feb 2003 Added fixed packages for Advanced Workstation 2.1 The Apache HTTP server is a powerful, full-featured, efficient, and freely-available Web server. Buffe...
[SECURITY] [DSA 219-1] New dhcpcd packages fix remote command execution vulnerability
-------------------------------------------------------------------------- Debian Security Advisory DSA 219-1 [email protected] http://www.debian.org/security/ Martin Schulze December 31st, 2002 http://www.debian.org/security/faq -...
DSA-212 mysql - multiple problems
Bulletin has no description...
DSA-199 mhonarc - cross site scripting
Bulletin has no description...
[SECURITY] [DSA 194-1] New masqmail packages fix buffer overflows
-------------------------------------------------------------------------- Debian Security Advisory DSA 194-1 [email protected] http://www.debian.org/security/ Martin Schulze November 12th, 2002 http://www.debian.org/security/faq -...