[SA16062] Mozilla Thunderbird XBL Controls Script Execution Vulnerability

---------------------------------------------------------------------- Bist Du interessiert an einem neuen Job in IT-Sicherheit? Secunia hat zwei freie Stellen als Junior und Senior Spezialist in IT- Sicherheit: http://secunia.com/secuniavacancies/...

Obscure email addresses in Confluence Mail

Just noticed that http://confluence.atlassian.com/spaces/viewmailarchive.action?key=DOC is showing my full email address.and other ppl's too. Eeek! We really want to obscure them. And anywhere else they appear in confl... Maybe some funky javascript email encryption ?...

imd_advisory.txt

Vendor: Captaris, Inc. Date: January 29, 2005 Issue: XSS in Infinite Mobile Delivery v2.6 Webmail URL: http://www.capataris.com Advisory: http://www.lovebug.org/imdadvisory.txt Issue: The webmail portion of the latest and final release of Infinite Mobile Delivery contains a Cross Site Scripting...

[SA12783] MySQL Two Vulnerabilities

TITLE: MySQL Two Vulnerabilities SECUNIA ADVISORY ID: SA12783 VERIFY ADVISORY: http://secunia.com/advisories/12783/ CRITICAL: Less critical IMPACT: Security Bypass, DoS WHERE: From local network SOFTWARE: MySQL 4.x http://secunia.com/product/404/ MySQL 3.x http://secunia.com/product/99/...

[SA12677] AIX libXm.a Multiple Vulnerabilities

TITLE: AIX libXm.a Multiple Vulnerabilities SECUNIA ADVISORY ID: SA12677 VERIFY ADVISORY: http://secunia.com/advisories/12677/ CRITICAL: Highly critical IMPACT: System access WHERE: From remote OPERATING SYSTEM: AIX 5.x http://secunia.com/product/213/ DESCRIPTION: IBM has acknowledged some...

UtilMind Solutions Site News 1.1 - Authentication Bypass

UtilMind Solutions Site News 1.1 - Authentication Bypass source: https://www.securityfocus.com/bid/11126/info Reportedly UtilMind Solutions Site News is affected by an authentication bypass vulnerability. This issue is due to an access validation error. An unauthenticated attacker can leverage th...

Gallery: Arbitrary command execution

Background Gallery is a PHP script for maintaining online photo albums. Description The upload handling code in Gallery places uploaded files in a temporary directory. After 30 seconds, these files are deleted if they are not valid images. However, since the file exists for 30 seconds, a carefull...

CVE-2002-1248

Northern Solutions Xeneo Web Server 2.1.0.0, 2.0.759.6, and other versions before 2.1.5 allows remote attackers to cause a denial of service crash via a GET request for a "%" URI...

CVE-2002-1248

The CVE-2002-1248 issue affects Northern Solutions’ Xeneo Web Server (notably versions 2.1.0.0 and 2.0.759.6, prior to 2.1.5). The vulnerability arises from improper handling of a specially crafted web request for a “%” URI, allowing remote attackers to trigger a denial of service (crash). OpenVA...

[Full-Disclosure] SUSE Security Announcement: kernel (SUSE-SA:2004:028)

-----BEGIN PGP SIGNED MESSAGE----- SUSE Security Announcement Package: kernel Announcement-ID: SUSE-SA:2004:028 Date: Wednesday, Sept 1st 2004 14:26 MEST Affected products: 8.1, 8.2, 9.0, 9.1 SUSE Linux Database Server, SUSE eMail Server III, 3.1 SUSE Linux Enterprise Server 8, 9 SUSE Linux...

[security bulletin] SSRT4741 rev.0 DCE for HP Tru64 UNIX Potential RPC Buffer Overrun Attack

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 HP SECURITY BULLETIN HPSBTU01051 REVISION: 0 SSRT4741 rev.0 DCE for HP Tru64 UNIX Potential RPC Buffer Overrun Attack -------------------------------------------------------------- NOTICE: There are no restrictions for distribution of this Bulletin...

An analysis of the 180 Solutions Trojan

An analysis of the 180 Solutions Trojan Introduction Just when I though it was save to once more to use internet explorer I received an email bringing my attention to this webpage http://216.130.188.219/ei2/installer.htm that according to him used an exploit that affected fully patched internet...

Business Objects Crystal Reports 910 Web Form Viewer - Directory Traversal

Business Objects Crystal Reports 910 Web Form Viewer - Directory Traversal source: https://www.securityfocus.com/bid/10260/info Crystal Reports and Crystal Enterprise Web Form Viewer is prone to a directory traversal vulnerability. This issue can allow an attacker to retrieve and delete files,...

invisionPB.txt

Invision Power Board SQL injection! Program Name : Invision Board Forum Vulnerable Versions : All versions Home Page : http://www.invisionboard.com Author : Knight Commander at http://security.com.vn Email : [email protected] Vulnerability discovered : 12/2003 Public disclosure : 04/2004 --SQL...

Web Blog 1.1 Remote Execute Commands Bug

Product: Web Blog 1.1 Remote Execute Commands Bug Affected Versions: 1.1.5 Bug: Command Remote Execution Credits: n3rd - Lit Security Solutions LiSS Affix in irc.brasnet.org Vendor: http://leifwright.com Exploiting:...

[Full-Disclosure] Pablo Sofware Solutions FTP server can detect if a file exists outside the FTP root directory

Pablo Sofware Solutions FTP server can detect if a file exists outside the FTP root directory .oO Overview Oo. Pablo Software Solutions FTP server version 1.77 can detect if a file exists outside the FTP root directory. Discovered on 2004, January, 11th Vendor: Pablo Software Solutions...

Cisco Security Advisory: OpenSSH Server Vulnerabilities

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Cisco Security Advisory: OpenSSH Server Vulnerabilities Revision Numeral: 1.0 INTERIM For Public Release 2003 September 17 0700 GMT ---------------------------------------------------------------------- Contents Summary Affected Products Details Impac...

Source Routed Packet Weakness

The remote host accepts loose source routed IP packets. The feature was designed for testing purpose. An attacker may use it to circumvent poorly designed IP filtering and exploit another flaw. However, it is not dangerous by itself. C Tenable Network Security, Inc. References: RFC 792 Internet...

FreeBSD-SA-03:11.sendmail

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ============================================================================= FreeBSD-SA-03:11.sendmail Security Advisory The FreeBSD Project Topic: sendmail DNS map problem Category: contrib Module: contribsendmail Announced: 2003-08-26 Credits: Oleg...

[EXPL] GNATS Buffer Overflow Exploit Code Released (queue-pr)

The following security advisory is sent to the securiteam mailing list, and can be found at the SecuriTeam web site: http://www.securiteam.com - - promotion Beyond Security in Canada Toronto-based Sunrays Technologies is now Beyond Security's representative in Canada. We welcome ISPs, system...