[SECURITY] [DSA 142-1] New OpenAFS packages fix integer overflow bug

-------------------------------------------------------------------------- Debian Security Advisory DSA 142-1 [email protected] http://www.debian.org/security/ Martin Schulze August 5th, 2002 - -------------------------------------------------------------------------- Package : openafs...

TZ Advisores - Buffer Overflow in IBM U2 UniVerse ODBC

Systems Affecteds: All UniVerse versions with UV/ODBC Explanation: Trying to make an invalid query the client crashes and make the server slow with 5sec to 2min lag what could crash the server. Expoit: Make a query accessing UV/ODBC I've used CrystalReports all versions and make a valid/invalid...

Advisory CA-2002-21 Vulnerability in PHP

-----BEGIN PGP SIGNED MESSAGE----- CERT Advisory CA-2002-21 Vulnerability in PHP Original release date: July 22, 2002 Last revised: -- Source: CERT/CC A complete revision history can be found at the end of this file. Systems Affected Systems running PHP versions 4.2.0 or 4.2.1 Overview A...

PHP fails to properly parse the headers of HTTP POST requests

Overview A vulnerability has been discovered in PHP. This vulnerability could be used by a remote attacker to execute arbitrary code or crash PHP and/or the web server. Description PHP is a popular scripting language in widespread use. For more information about PHP, see...

Connection flood DoS against BEA Weblogic

If Performance Pack installed server crashes on connection flood...

CVE-2002-0092

CVE-2002-0092 affects CVS prior to 1.10.8, where an improperly initialized global variable can be exploited by a remote attacker to crash the CVS server via the diff capability, causing a denial of service. The connected Debian advisory and OpenVAS entry confirm the issue and point to upgrading C...

CVE-2002-0092

CVS before 1.10.8 does not properly initialize a global variable, which allows remote attackers to cause a denial of service server crash via the diff capability...

CVE-2002-0092: Undefined Security Weakness

CVS before 1.10.8 does not properly initialize a global variable, which allows remote attackers to cause a denial of service server crash via the diff capability...

AnalogX SimpleServer:WWW 1.16 - Web Server Buffer Overflow

AnalogX SimpleServer:WWW 1.16 - Web Server Buffer Overflow // source: https://www.securityfocus.com/bid/5006/info Reportedly, version 1.16 of SimpleServer:WWW is prone to a buffer overflow vulnerability. A remote attacker is able to connect to SimpleServer via telnet and makes an invalid request ...

NewAtlanta ServletExec/ISAPI 4.1 JSPServlet - Denial of Service

// source: https://www.securityfocus.com/bid/4796/info ServletExec/ISAPI is a plug-in Java Servlet/JSP engine for Microsoft IIS. It runs with IIS on Microsoft Windows NT/2000/XP systems. A denial of service condition occurs when the JSPServlet is sent an overly long request either directly or via...

3CDaemon DoS exploit

3Cdaemon 2.0 revision 10 for the Windows platform contains a BOF vulnerability at all times, including the login prompt. When 400+ chars are sent to the FTP server, it crashes emmediatly. Remote exploit is included. For more details see the exploit as well. greets, skyrim - [email protected] MaD...

iXsecurity.20020314.csadmin_fmt.a

iXsecurity Security Vulnerability Report No: iXsecurity.20020314.csadminfmt.a ======================================== Vulnerability Summary --------------------- Problem: Cisco Secure ACS webserver has a format string vulnerability. Threat: An attacker could send an "invalid" URL to the webserve...

Oracle9i TSN DoS Attack

name : Oracle date : 28/3/2002 description : Oracle9i TSN DoS Attack severity : High risk homepage : www.oracle.com versions : 9.0.1.1 another version may be too Bug description : For crash Oracle9i you need sent ONE TCP packet $00 = 1 byte to 1521 port and you can fogot about Oracle CPU - 100.Yo...

CVE-2002-0092

CVS before 1.10.8 does not properly initialize a global variable, which allows remote attackers to cause a denial of service server crash via the diff capability...

[SECURITY] [DSA 117-1] New CVS packages fix potential security problems

-------------------------------------------------------------------------- Debian Security Advisory DSA 117-1 [email protected] http://www.debian.org/security/ Martin Schulze March 5th, 2002 - -------------------------------------------------------------------------- Package : cvs Vulnerability...

SecurityOffice Security Advisory:// Essentia Web Server DoS Vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Essentia Web Server DoS Vulnerability Type: DoS, crashes Daemon Release Date: February 22, 2002 Product / Vendor: The Essentia Web Server provides Enhanced Web Application and Communication Services. Whether you are setting up a simple Web Site on you...

Squid 2.0-4 - Cache FTP Proxy URL Buffer Overflow

Squid 2.0-4 - Cache FTP Proxy URL Buffer Overflow // source: https://www.securityfocus.com/bid/4148/info A buffer overflow exists in the Squid proxy server's FTP URL handling. If a user has the ability to use the Squid process to proxy FTP requests, it may be possible for the user make a maliciou...

Squid 2.0-4 - Cache FTP Proxy URL Buffer Overflow

// source: https://www.securityfocus.com/bid/4148/info A buffer overflow exists in the Squid proxy server's FTP URL handling. If a user has the ability to use the Squid process to proxy FTP requests, it may be possible for the user make a malicious request. By sending a custom-crafted ftp:// URL...

ScriptEase MiniWeb Server DoS Vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ScriptEase MiniWeb Server DoS Vulnerability Type: DoS, crashes Daemon Release Date: February 19, 2002 Product / Vendor: The ScriptEase MiniWeb Server, written entirely in ScriptEase, is being distributed free by Nombas. This server is not intended to...

Ximian Mozilla: The 2618 Bug

NOTE TO THE MODERATOR: This was sent yesterday but i guess didn't make it since this doesn't seem to affect a redhat itself, it affects the mozilla packages distrbuted by Ximian: The test system look like: bash rpm -qa | grep mozilla mozilla-0.9.8-1.ximian.2 mozilla-mail-0.9.8-1.ximian.2...