KDE Security Advisory: Konqueror SSL vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 KDE Security Advisory: Konqueror SSL vulnerability Original Release Date: 2002-08-18 URL: http://www.kde.org/info/security/advisory-20020818-1.txt 0. References http://online.securityfocus.com/archive/1/286290/2002-07-31/2002-08-06/0...

DSA-154 fam - privilege escalation

Bulletin has no description...

Cobalt Qube WebMail readmsg.php mailbox Parameter Traversal Arbitrary File Access

The file '/base/webmail/readmsg.php' was detected on the remote web server. Some versions of this CGI allow remote users to read local files with the permission of the web server. Nessus just checked the presence of this file but did not try to exploit the flaw. %NASLMINLEVEL 70300 C Tenable...

Sun AnswerBook2 Web Server dwhttpd GET Request Remote Format String

The remote web server is vulnerable to a format string attack. An attacker may exploit this vulnerability to cause the web server to crash continually or even execute arbitrary code on the system. C Tenable Network Security, Inc. Script audit and contributions from Carmichael Security Erik Anders...

DSA-150 interchange - illegal file exposition

Bulletin has no description...

DSA-146 dietlibc - integer overflow

Bulletin has no description...

DSA-145 tinyproxy - doubly freed memory

Bulletin has no description...

LabVIEW Web Server HTTP Get Newline DoS

It was possible to kill the web server by sending a request that ends with two LF characters instead of the normal sequence CR LF CR LF CR = carriage return, LF = line feed. An attacker can exploit this vulnerability to make this server and all LabView applications crash. C Tenable Network...

DSA-142 openafs - integer overflow

Bulletin has no description...

[AP] Cisco vpnclient buffer overflow

-- ------------------------- -- - AngryPacket Security Advisory - -- ------------------------- -- - +--------------------- -- - + advisory information +------------------ -- - author: methodic [email protected] release date: 05/28/2002 homepage: http://sec.angrypacket.com advisory...

Apache web servers fail to handle chunks with a negative size

Overview There is a remotely exploitable vulnerability in the way that Apache web servers or other web servers based on their source code handle data encoded in chunks. This vulnerability is present by default in configurations of Apache web server versions 1.2.2 and above, 1.3 through 1.3.24, an...

Cisco 12000 Series Router ICMP Unreachable DoS

The remote device appears to be a Cisco 12000 Series router. According to its version number, it is vulnerable to a denial of service issue. Forcing it to send a large number of ICMP unreachable packets can slow down throughput. A remote attacker could use this to degrade the performance of the...

Yahoo! Messenger is vulnerable to DoS via multiple messages from spoofed names

Overview Yahoo! Messenger is an instant messaging client. A report indicates that there is a vulnerability that permits an attacker to spoof the source user name of a Yahoo! Messenger message. Description Yahoo! Messenger permits a user to place users on an ignore list. A vulnerability exists tha...

Nortel Networks CVX 1800 discloses privileged information

Overview The Nortel Networks CVX 1800 Multi-Service Access Switch discloses privileged information. Description The CVX 1800 Multi-Service Access Switch is a large modem bank typically used by large carriers and ISP's. When the CVX 1800 is queried with a specially crafted snmpwalk, it will respon...

Quake 3 Arena Malformed Connection Packet DoS

It was possible to crash the Quake3 Arena daemon by sending a specially crafted login string. An attacker may use this attack to make this service crash continuously, preventing you from playing. C Tenable Network Security, Inc. Script audit and contributions from Carmichael Security Erik Anderso...

Apache Tomcat Nonexistent File Error Message Path Disclosure

Tomcat will reveal the physical path of the webroot when asked for a nonexistent .jsp file. An unauthenticated, remote attacker can exploit this via a specially crafted request. An attacker can use this flaw to gain further knowledge about the remote filesystem layout. %NASLMINLEVEL 70300 C Tenab...

Cayman gateways are vulnerable to a denial of service via a portscan

Overview Cayman gateways are vulnerable to a denial of service. An attacker can send a number of TCP connect requests or SYN packets, in conjunction with a "Bouncing" vulnerability, and can cause a denial of service to the gateway. Description The gateway will crash after receiving a number of TC...

gpm-root fails to correctly release GID 0 membership for user defined menus

Overview gpm-root does not properly drop group privileges. Local users can gain group privileges by starting a utility from gpm-root. The gpm package is usually included in Linux distributions, and can be started from the command line or in the startup script /etc/rc.d/rc.local. Description gpm...

BubbleMon 1.31

VULNERABILITY DESCRIPTION Users can execute programs/shellscript by clicking on the bubblemon app. bubblemon is installed sgid kmem on FreeBSD and does not drop its egid before executing programs. VERSIONS AFFECTED All versions of BubbleMon up to 1.32 installed on FreeBSD . EXAMPLE $ id...

Cisco Security Advisory: Cisco Content Services Switch User Account Vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Cisco Security Advisory: Cisco Content Services Switch User Account Vulnerability ========================================================================== Revision 1.0 For Public Release 2001 April 04 08:00 UTC -0700...