Maelstrom Server 3.0.x - Argument Buffer Overflow (3)

// source: https://www.securityfocus.com/bid/7630/info Maelstrom for Linux has been reported prone to a buffer overflow vulnerability. The issue is reportedly due to a lack of sufficient bounds checking performed on user-supplied data before it is copied into an internal memory space. It may be...

ScriptLogic sets insecure permissions on "LOGS$" share

Overview Version 4.01 of ScriptLogic contains a vulnerability in the default permissions assigned to the network share used for logging. Description The ScriptLogic product from ScriptLogic, Inc. provides remote system administration capabilities for Microsoft Windows systems in a domain...

DEBIAN-CVE-2002-1384

Integer overflow in pdftops, as used in Xpdf 2.01 and earlier, xpdf-i, and CUPS before 1.1.18, allows local users to execute arbitrary code via a ColorSpace entry with a large number of elements, as demonstrated by cups-pdf...

CVE-2002-2016

User-mode Linux UML 2.4.17-8 does not restrict access to kernel address space, which allows local users to execute arbitrary code...

DEBIAN-CVE-2002-2016

User-mode Linux UML 2.4.17-8 does not restrict access to kernel address space, which allows local users to execute arbitrary code...

Multiple Web Server Encoded Space (%20) Request ASP Source Disclosure

It appears possible to get the source code of the remote ASP scripts by appending a '%20' to the request. ASP source code usually contains sensitive information such as logins and passwords. This has been reported in Simple HTTPD shttpd, Mono XSP for ASP.NET and vWebServer. This type of request m...

Trend Micro Interscan VirusWall for Windows NT 3.52 - Space Gap Scan Bypass

Trend Micro Interscan VirusWall for Windows NT 3.52 - Space Gap Scan Bypass source: https://www.securityfocus.com/bid/5259/info A vulnerability has been reported in certain VirusWall versions. Reportedly, it is possible to bypass the scanning mechanism of VirusWall by adding extraneous spaces in...

CVE-2001-1248

CVE-2001-1248 affects vWebServer 1.2.0, enabling remote attackers to view arbitrary ASP scripts by requesting an ASP file that ends with a URL-encoded space (%20). The issue is classified as a information-disclosure vulnerability (CVSSv2 base score 5.0, AV:N/AC:L/Au:N/C:P/I:N/A:N); no exploit spe...

d_path() truncating excessive long path name vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Name: Linux kernel Version: up to 2.2.20 and 2.4.18 Homepage: http://www.kernel.org/ Author: Wojciech Purczynski [email protected] Date: March 26, 2002 Issue: ====== In case of excessively long path names dpath kernel internal function returns truncated...

CVE-2001-0973

CVE-2001-0973 concerns BSCW groupware (versions 3.3–4.0.2 beta). The vulnerability arises when extracting tar archives into the user’s data-bag space: symbolic links within the tar are followed, allowing a remote attacker to read arbitrary files readable by the web server and potentially overwrit...

IRIX nsd Vulnerability

-----BEGIN PGP SIGNED MESSAGE----- SGI Security Advisory Title: IRIX nsd vulnerability Number: 20020102-02-I Date: January 15, 2002 SGI provides this information freely to the SGI user community for its consideration, interpretation, implementation and use. SGI recommends that this information be...

DoS против Irix через nsd (disk space filling)

Отсутствуют ограничения на размер дискового кэша, что может привести к исчерпанию дискового пространства в системном разделе...

Cisco SN 5420 Storage Router fails to properly authenticate user before granting read access to configuration file

Overview It is possible to read the stored configuration file from the Cisco SN 5420 Storage Router without any authorization. This can lead to an intruder gaining access to the storage space on the router. Description A vulnerability has been discovered in the Cisco SN 5420 Storage Router softwa...

CVE-2001-1564

setrlimit in HP-UX 10.01, 10.10, 10.24, 10.20, 11.00, 11.04 and 11.11 does not properly enforce core file size on processes after setuid or setgid privileges are dropped, which could allow local users to cause a denial of service by exhausting available disk space...

CVE-1999-1251

The CVE-1999-1251 entry describes a vulnerability in direct audio user space code on HP-UX 10.20 and 10.10 that allows local users to cause a denial of service. The affected component is the direct audio user space code; root cause details are not provided in the documents. Impact is limited to a...

MAILsweeper SMTP 4.2.1 + F-Secure Anti-Virus 5.0.2/5.2.1 - File Scanner Malicious Archive Denial of Service

source: https://www.securityfocus.com/bid/3027/info A wide range of products exists for scanning enterprise email and filesystems for files containing viruses and other undesirable content. These products handle compressed files by temporarily unzipping them and scanning their uncompressed...

MAILsweeper SMTP 4.2.1 + F-Secure Anti-Virus 5.0.25.2.1 - File Scanner Malicious Archive Denial of Service

MAILsweeper SMTP 4.2.1 + F-Secure Anti-Virus 5.0.25.2.1 - File Scanner Malicious Archive Denial of Service source: https://www.securityfocus.com/bid/3027/info A wide range of products exists for scanning enterprise email and filesystems for files containing viruses and other undesirable content...

Omnicron OmniHTTPd 2.0.4-8 - File Source Disclosure

Omnicron OmniHTTPd 2.0.4-8 - File Source Disclosure source: https://www.securityfocus.com/bid/2788/info Submitting a specially crafted GET request for a known file .php, .pl, or .shtml, could cause OmniHTTPD to disclose the source code of the requested resource. The GET requested would have to be...

Solaris /usr/lib/exrecover buffer overflow

Hi, The /usr/lib/exrecover contains a buffer overflow this command is suid in Solaris 2.4/5/6 The problem occurs when it gets the second argument, it accepts the argument without checking out its lenght and this causes the problem. The overflow seems to be in the heap space. $ /usr/lib/exrecover...

CVE-2000-0459

IMP does not remove files properly if the MSWordView application quits, which allows local users to cause a denial of service by filling up the disk space by requesting a large number of documents and prematurely stopping the request...