High Risk Vulnerability in L-Soft's LISTSERV Server

Peter Winter-Smith of NGSSoftware has discovered a number of vulnerabilities in L-Soft's LISTSERV list management system. The worst of these carries a high risk rating. Affected versions include: - LISTSERV version 14.3, including LISTSERV Lite and HPO - LISTSERV version 1.8e, including LISTSERV...

CVE-2004-0069

Format string vulnerability in HD Soft Windows FTP Server 1.6 and earlier allows remote attackers to execute arbitrary code via format string specifiers in the username, which is processed by the wscanf function...

CVE-2004-0069

HD Soft Windows FTP Server 1.6 and earlier is affected by CVE-2004-0069 due to a format string vulnerability in the username parameter, which is processed by wscanf. This allows remote attackers to induce arbitrary code execution on vulnerable installations. The vulnerability is described in the ...

CVE-2004-0069

Format string vulnerability in HD Soft Windows FTP Server 1.6 and earlier allows remote attackers to execute arbitrary code via format string specifiers in the username, which is processed by the wscanf function...

CVE-2004-0069: Undefined Security Weakness

Format string vulnerability in HD Soft Windows FTP Server 1.6 and earlier allows remote attackers to execute arbitrary code via format string specifiers in the username, which is processed by the wscanf function...

HD Soft Windows FTP Server format string bug

Format string bug during authentication...

L-Soft 1.8 - Listserv Multiple Cross-Site Scripting Vulnerabilities

L-Soft 1.8 - Listserv Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/9307/info Multiple cross-site scripting vulnerabilities have been reported in L-Soft Listserv. An attacker may exploit these issues by embedding hostile HTML and script code in a link to ...

L-Soft 1.8 - Listserv Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/9307/info Multiple cross-site scripting vulnerabilities have been reported in L-Soft Listserv. An attacker may exploit these issues by embedding hostile HTML and script code in a link to a site hosting the software. This could permit theft of cookie-based...

STG-Jeus-Eng.txt

STG Security Advisory: JEUS Web Application Server Cross Site Scripting Vulnerability Revision: 1.1 Date Published: 2003-06-17 KST Last Update: 2003-06-17 Product Description ========= JEUS Java Enterprise User Solution is a J2EE compatible web application server, developed by Tmax Soft, providin...

Tmax Soft JEUS 3.1.4 p1 - URL.jsp Cross-Site Scripting

Tmax Soft JEUS 3.1.4 p1 - URL.jsp Cross-Site Scripting source: https://www.securityfocus.com/bid/7969/info Reportedly, Tmax Soft JEUS is vulnerable to a cross site-scripting attack. The vulnerability is present in the url.jsp script of the Tmax Soft JEUS server. An attacker may exploit this...

Tmax Soft JEUS 3.1.4 p1 - URL.jsp Cross-Site Scripting

source: https://www.securityfocus.com/bid/7969/info Reportedly, Tmax Soft JEUS is vulnerable to a cross site-scripting attack. The vulnerability is present in the url.jsp script of the Tmax Soft JEUS server. An attacker may exploit this vulnerability by enticing a victim user to follow a maliciou...

CVE-2002-0792: Undefined Security Weakness

The web management interface for Cisco Content Service Switch CSS 11000 switches allows remote attackers to cause a denial of service soft reset via 1 an HTTPS POST request, or 2 malformed XML data...

CVE-2002-0139: Undefined Security Weakness

Pi-Soft SpoonFTP 1.1 and earlier allows remote attackers to redirect traffic to other sites aka FTP bounce via the PORT command...

Cisco Content Service Switch performs soft reset when XML data is sent to web management interface

Overview The Cisco Content Service Switch contains a denial-of-service vulnerability that allows remote attackers to perform a soft reset on affected devices. Description The Cisco Content Service Switch CSS products include support for the session and application layers. This additional...

Security Advisory: Content Service Switch HTTP Processing Vulnerabilities

-----BEGIN PGP SIGNED MESSAGE----- Cisco Security Advisory: Content Service Switch HTTP Processing Vulnerabilities Revision 1.0: INTERIM For Public Release 2002 May 15 18:00 GMT - ------------------------------------------------------------------------------- Please provide your feedback on this...

CVE-2002-0139

Pi-Soft SpoonFTP 1.1 and earlier allows remote attackers to redirect traffic to other sites aka FTP bounce via the PORT command...

CVE-2001-0634

Sun Chili!Soft ASP has weak permissions on various configuration files, enabling a local attacker to gain additional privileges and cause a denial of service. Affected product: Sun Chili!Soft ASP. Root cause: insecure/weak permissions on configuration files. CVSS v2 base score 7.2 (HIGH) with loc...

CVE-2001-0634

Sun Chili!Soft ASP has weak permissions on various configuration files, which allows a local attacker to gain additional privileges and create a denial of service...

CVE-2001-0634: Undefined Security Weakness

Sun Chili!Soft ASP has weak permissions on various configuration files, which allows a local attacker to gain additional privileges and create a denial of service...

Bounce vulnerability in SpoonFTP 1.1.0.1

The vulnerability: The FTP server is vulnerable to the FTP bounce attack, even against ports lower than 1024. Vendor Response: Pi-Soft have created a new version that among other things fix this vulnerability. Their response was very nice and quick. /Arne Vidstrom, http://ntsecurity.nu...