749 matches found
Stunnel format bug
Macaroon Advisory Hi, ppl We have recently discovered a format bug in stunnel= 3.8 in which the log function calls directly the syslog with only two parameters: sysloglevel, text. It should be sysloglevel, "s", text. If a user can pass any string that is written to the log file, he can exploit th...
FireWall-1 Fastmode Vulnerability
Hi there, service pack 3 is available for FireWall-1 4.1 and in addition to the things listed in the release notes it fixes the following little... errrrm... idiosyncrasy. The HTML version of the advisory is available at http://www.dataprotect.com/fw1/ Merry Christmas and a happy New Year -Thomas...
Lyris List Manager Administration Hole
Versions 3 and 4 of the Lyris List Manager allow any mailing list subscriber to gain access to the administrative interface of that list. After a user has logged in, they may modify the generated web page as follows to gain access: Save the html to disk, and add the full path to the server into t...
FTP Serv-U 2.5e vulnerability.
================================================================= Blue Panda Vulnerability Announcement: FTP Serv-U 2.5e 04/08/2000 dd/mm/yyyy [email protected] http://bluepanda.box.sk/ ================================================================= Problem: Sending FTP Serv-U a string...
BluePanda Vulnerability Announcement: WFTPD/WFTPD Pro 2.41 RC11
================================================================ BluePanda Vulnerability Announcement: WFTPD/WFTPD Pro 2.41 RC11 21/07/2000 dd/mm/yyyy [email protected] http://bluepanda.box.sk/ ================================================================ Problem: STAT command devulges...
KNapster Vulnerability Compromises User-readable Files
KNapster Vulnerability Compromises User-readable Files This vulnerability was discovered at the Center for Education and Research in Information Assurance and Security CERIAS at Purdue University http://www.cerias.purdue.edu by: Tom Daniels [email protected] Florian Buchholz...
Cisco Catalist позволяет любому пользователю получить администраторские привелегии.
В версии П/О 5.41 можно обойти проверку enable-пароля. Исправлено в 5.42...
