savant31.txt

Release Date: 09/22/2003 TITLE ===== Savant Web Server - Remote DoS DESCRIPTION =========== "Savant is a full-featured open source / freeware web server designed to be run under any 32-bit version of Microsoft Windows including Windows 95, 98, ME, XP, NT, and 2000. Savant was designed to be easy ...

MS03-031: Cumulative Patch for MS SQL Server (815495)

The remote Microsoft SQL server is vulnerable to several flaws : - Named pipe hijacking - Named Pipe Denial of Service - SQL server buffer overrun These flaws could allow a user to gain elevated privileges on this host. C Tenable Network Security, Inc. include"compat.inc"; if description...

Sambar Server Multiple CGI Environment Variable Disclosure

The remote web server appears to be Sambar Server and makes available the 'environ.pl' and/or 'testcgi.exe' CGI scripts. These are included by default and reveal the server's installation directory along with other information that could prove useful to an attacker. Note that this version is also...

[NT] Multiple Buffer Overflow Vulnerabilities Found in MERCUR Mail Server

The following security advisory is sent to the securiteam mailing list, and can be found at the SecuriTeam web site: http://www.securiteam.com - - promotion Beyond Security in Canada Toronto-based Sunrays Technologies is now Beyond Security's representative in Canada. We welcome ISPs, system...

Multiple Dangerous CGI Script Detection

It is possible that the remote web server contains one or more dangerous CGI scripts. Note that this plugin does not actually test for the underlying flaws but instead only searches for scripts with the same name as those with known vulnerabilities. %NASLMINLEVEL 70300 This script was written by...

BaSoMail SMTP Multiple Command Remote Overflow DoS

The remote SMTP server crashes when it is issued a HELO, MAIL FROM, or RCPT TO command with an argument longer than 2100 characters. A remote attacker could exploit this by crashing the server, or possibly executing arbitrary code. It is likely the remote SMTP server is running BaSoMail, though...

D-Link DI-614 DoS

Access server hangs or reboots on some well known IP attacks...

CERT Advisory CA-2003-11 Multiple Vulnerabilities in Lotus Notes and Domino

-----BEGIN PGP SIGNED MESSAGE----- CERT Advisory CA-2003-11 Multiple Vulnerabilities in Lotus Notes and Domino Original release date: March 26, 2003 Last revised: -- Source: CERT/CC A complete revision history can be found at the end of this file. Systems Affected Lotus Notes and Domino versions...

Multiple FTP Server Traversal Arbitrary File/Directory Access

The remote FTP server allows anybody to switch to the root directory and read potentially sensitive files. TRUSTED...

MS02-061: Microsoft SQL Server Multiple Vulnerabilities (uncredentialed check)

The remote MS SQL server is affected by several overflows that could be exploited by an attacker to gain SYSTEM access on that host. Note that a worm sapphire is exploiting these vulnerabilities in the wild. C Tenable Network Security, Inc. ping code taken from mssqlping by H D Moore MS02-061...

[VulnWatch] administrivia: cross-site tracing

There's been a lot of back and forth about the recent WhiteHat Security XST bug. Sensationalism aside, the fact still remains: 1. Access to cookies, particularly the 'httponly' add-on by IE, is limited by browser security restrictions. And I don't recall any browser being able to legitimately...

PlatinumFTPServer Multiple Vulnerabilities

Platinum FTP server for Win32 has several vulnerabilities in the way it checks the format of command strings passed to it. This leads to the following vulnerabilities in the server : - The 'dir' command can be used to examine the filesystem of the machine and gather further information about the...

RealNetworks HELIX Server Buffer Overflow Vulnerabilities (#NISR20122002)

NGSSoftware Insight Security Research Advisory Name: Muliple Buffer overruns RealNetworks Helix Universal Server 9.0 Systems Affected: Windows, FreeBSD, HP-UX, AIX, Linux, Sun Solaris 2.7 & 2.8 Severity: High Risk Category: Buffer Overrun Vendor URL: http://www.real.com/ Author: Mark Litchfield...

Directory Traversal Vulnerabilities in FTP Clients

Summary Title: Directory Traversal Vulnerabilities in FTP Clients Date: December 10, 2002 Author: Steve Christey [email protected] Revision: 1.3 Product: Multiple FTP and web clients OS/Platform: Multiple Vendor: Multiple Vendor Status: Vendors informed individually and through CERT/CC Risk: Medium...

Multipel bugs in Webster Web Server

Buffer overflows, crossite scripting, directory traversal...

Multiple vulnerabilities in Tiny HTTPd

======================================== INetCop Security Advisory 2002-0x82-001 ======================================== Title: Multiple vulnerabilities in Tiny HTTPd. 0x01. Description Tiny HTTP daemon is web server that do simple very. Vulnerability and executable vulnerability that this web...

iDEFENSE Security Advisory 10.03.2002: Apache 1.3.x shared memory scoreboard vulnerabilities

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 iDEFENSE Security Advisory 10.03.2002 Apache 1.3.x shared memory scoreboard vulnerabilities 16:00 GMT, October 3, 2002 I. BACKGROUND The Apache Software Foundation's HTTP Server is an effort to develop and maintain an open-source HTTP server for moder...

Security Bulletin MS02-056: Cumulative Patch for SQL Server (Q316333)

---------------------------------------------------------------------- Title: Cumulative Patch for SQL Server Q316333 Date: 02 October 2002 Software: Microsoft SQL Server 7.0 Microsoft Data Engine MSDE 1.0 Microsoft SQL Server 2000 Microsoft Desktop Engine MSDE 2000 Impact: Four vulnerabilities,...

CVE-2002-1080

The Administration console for Abyss Web Server 1.0.3 before Patch 2 allows remote attackers to gain privileges and modify server configuration via direct requests to CHL files such as 1 srvstatus.chl, 2 consport.chl, 3 general.chl, 4 srvparam.chl, and 5 advanced.chl...

Security Bulletin MS02-033: Unchecked Buffer in Profile Service Could Allow Code Execution in Commerce Server (Q322273)

---------------------------------------------------------------------- Title: Unchecked Buffer in Profile Service Could Allow Code Execution in Commerce Server Q322273 Date: June 26, 2002 Software: Microsoft Commerce Server 2000, Commerce Server 2002 Impact: Four vulnerabilities, each of which...