Srcpd 2.0 - Remote Integer Overflow

Srcpd 2.0 - Remote Integer Overflow source: https://www.securityfocus.com/bid/8466/info A vulnerability has been reported in srcpd that allows a remote attacker to cause a denial of service by exploiting an integer overflow error. The exploitation of this problem would consist of an attacker...

Netscape 7.02 Client Detection Tool plug-in buffer overrun

Advisory name ============= Netscape 7.02 Client Detection Tool plug-in buffer overrun Affected software ================= Netscape 7.02 for Windows Problem description =================== Netscape 7.02 and probably earlier versions contains Client Detection Tool plug-in that handles...

Dantz Retrospect Client 5.0.540 for Mac OS X - permission issues

We recently noticed a serious problem with default permissions of the Retrospect client software, installed on Jaguar client and server older versions of OS X may be vulnerable too. In addition, previous versions of the Retrospect client installer may be vulnerable as well. We notified Dantz of...

silc question - insecure memory

Good Evening, while screwing around tonight checking memory for the SSH2 advisory. I noticed passphrase and complete sessions from silc in memory. I dont know if this is normal for silc I wouldnt think it would be but all you need to do it is: cdowns@Vader:$ sudo dd if=/dev/mem...

Apple Mac OSX 10.2.2 - Directory Kernel Panic (Denial of Service)

source: https://www.securityfocus.com/bid/6331/info Mac OS X is the BSD-derived operating system distributed and maintained by Apple Sofware. It has been reported that a denial of service exists in OS X. When a user creates a directory, descends it, creates another directory of the same name, the...

TZ Advisores - Buffer Overflow in IBM U2 UniVerse ODBC

Systems Affecteds: All UniVerse versions with UV/ODBC Explanation: Trying to make an invalid query the client crashes and make the server slow with 5sec to 2min lag what could crash the server. Expoit: Make a query accessing UV/ODBC I've used CrystalReports all versions and make a valid/invalid...

Intel D845HV/WN/PT series motherboard vulnerability

Affected systems: Intel D845HV / WN tested on BIOS revisions P05-0022, P09-0035, P10-0038 and D845PT tested on BIOS P01-0012 Pentium 4 motherboards Problem: If the user hits the F8 key during the POST they are presented with a "Please select boot device" dialog, enabling them to boot off of any...

Security Advisory: Web interface vulnerabilities in ACS for Windows

Cisco Security Advisory: Web interface vulnerabilities in ACS for Windows Revision 1.0 For Public Release 2002 April 03 16:00 UTC +0000 - ---------------------------------------------------------------------------- Contents Summary Products Affected Details Impact Software Versions and Fixes...

Checkpoint FW1 SecuRemote/SecureClient "re-authentication" (client side hacks of users.C)

Affected products : All versions of Checkpoint FW1 when used with SecuRemote/SecureClient Namely 4.0, 4.1 at any SP level, and NG FP1 http://www.checkpoint.com/products/security/vpn-1clients.html Description : Checkpoint Firewall-1 SecuRemote/SecureClient "authentication timeout" defined in FW1's...

Oracle 9iAS creates temporary files when processing JSP requests that are world-readable

Overview Oracle Database Server version 9iAS makes JSP source code publicly available. The source code may be used by attackers to analyze proprietary business logic or uncover Oracle's network configuration, usernames, and/or passwords. Description When Oracle receives a request for JSP file, it...

IRIX IGMP vulnerability

-----BEGIN PGP SIGNED MESSAGE----- SGI Security Advisory Title: IRIX IGMP vulnerability Number: 20011001-01-P Date: October 22, 2001 Reference: CVE Pending Advisory will be updated upon receipt of CVE SGI provides this information freely to the SGI user community for its consideration,...

Authentication By-Pass Vulnerability in OpenSSH-2.3.1 (devel snapshot)

Please, check http://www.openssh.com/security.html for a full summary of security related issues in OpenSSH. ---------------------------------------------------------------------------- OpenBSD Security Advisory February 8, 2001 Authentication By-Pass Vulnerability in OpenSSH-2.3.1...

ISBASE Security Advisory(SA2000-02)

ISBASE Security AdvisorySA2000-02 Topic: IIS ISM.DLL truncation exposes file content Release Date: July 17, 2000 Affected software version: =========================== Microsoft Internet Information Server 4.0 Microsoft Internet Information Server 5.0 Platform: ========== Windows NT 4.0 and Windo...

Security Bulletin (MS00-025) (updated)

The following is a Security Bulletin from the Microsoft Product Security Notification Service. Please do not reply to this message, as it was sent from an unattended mailbox. -----BEGIN PGP SIGNED MESSAGE----- Microsoft Security Bulletin MS00-025 - -------------------------------------- Procedure...

A funny way to DOS pcANYWHERE8.0 and 9.0

i found a funny thing about pcANYWHERE. when we use pcANYWHERE remote control client to connect the host running pcANYWHERE, at first the statu bar appears "pcANYWHERE connecting..." ,then the login window will appear; but if we press "Cancel" before the login window appears, the pcANYWHERE servi...

zetamail-2.1.txt

Remote D.o.S Attack in ZetaMail 2.1 Mail POP3/SMTP Server Vulnerability PROBLEM UssrLabs found a Local/Remote DoS Attack in ZetaMail 2.1 Mail POP3/SMTP Server, the buffer overflow is caused by a long user name/password, 3500 characters. There is not much to expand on.... just a simple hole Exampl...

ircbug.txt

Version 2.8/Hybrid-6b96 Vulnerable ================================================== Bug found by drfdisk^ ------------------------------ This bug its really stupid to exploit and you can obtain IRCop level in vulnerable servers... How exploit this bug??? ----------------------- 1 First lo on to...

Telnet Service Detection

The Telnet service is running. This service is dangerous in the sense that it is not ciphered - that is, everyone can sniff the data that passes between the telnet client and the telnet server. This includes logins and passwords. C Tenable Network Security, Inc. include"compat.inc"; ifdescription...

exlibris.alpeh.webserver.txt

Date: Fri, 21 May 1999 12:08:00 +0200 From: Jakub Urbanec To: [email protected] Subject: ExLibris Aleph Web server Security Alert We have found a security hole in web server bundled with Aleph librarian system ver. 3.25 and higher ExLibris. The web server in its default configuration allows...

Solaris 2.5.1 - 'chkey' Local Privilege Escalation

/ source: https://www.securityfocus.com/bid/207/info The chkey program is used to change a users secure RPC Diffie-Hellman public key and secret key pair. A buffer overflow condition has been found in the chkey program. Since chkey has setuid root permissions, an unauthorized user may be able to...