[SA14333] PuTTY Two Integer Overflow Vulnerabilities

TITLE: PuTTY Two Integer Overflow Vulnerabilities SECUNIA ADVISORY ID: SA14333 VERIFY ADVISORY: http://secunia.com/advisories/14333/ CRITICAL: Moderately critical IMPACT: System access WHERE: From remote SOFTWARE: PuTTY 0.x http://secunia.com/product/1137/ DESCRIPTION: Two vulnerabilities have be...

[SA14311] HP Web-Enabled Management Software HTTP Server Buffer Overflow

TITLE: HP Web-Enabled Management Software HTTP Server Buffer Overflow SECUNIA ADVISORY ID: SA14311 VERIFY ADVISORY: http://secunia.com/advisories/14311/ CRITICAL: Highly critical IMPACT: System access WHERE: From remote SOFTWARE: HP / Compaq Insight Management Agents...

CVE-2005-0349

The CVE-2005-0349 entry covers BrightStor ARCserve Backup 11.1 UniversalAgent for UNIX, where the production release contains hard-coded credentials that enable remote access to the file system and may allow execution of arbitrary commands. Connected details specify a default/admin-like account w...

CVE-2005-0349

The production release of the UniversalAgent for UNIX in BrightStor ARCserve Backup 11.1 contains hard-coded credentials, which allows remote attackers to access the file system and possibly execute arbitrary commands...

[Full-Disclosure] Secunia Research: Microsoft Internet Explorer "createControlRange()" Memory Corruption

====================================================================== Secunia Research 09/02/2005 Microsoft Internet Explorer "createControlRange" Memory Corruption ====================================================================== Table of Contents Affected...

[SA14216] F-Secure Multiple Products ARJ Archive Handling Vulnerability

TITLE: F-Secure Multiple Products ARJ Archive Handling Vulnerability SECUNIA ADVISORY ID: SA14216 VERIFY ADVISORY: http://secunia.com/advisories/14216/ CRITICAL: Highly critical IMPACT: System access WHERE: From remote SOFTWARE: F-Secure Anti-Virus 2004 http://secunia.com/product/3500/ F-Secure...

Mailman mailing lists manager directory traversal

It's possible to bypass filtering with URL like .../..../// and retrieve any file from from the system...

[SA14094] newsfetch NNTP Response Handling Buffer Overflows

TITLE: newsfetch NNTP Response Handling Buffer Overflows SECUNIA ADVISORY ID: SA14094 VERIFY ADVISORY: http://secunia.com/advisories/14094/ CRITICAL: Less critical IMPACT: System access WHERE: From remote SOFTWARE: newsfetch 1.x http://secunia.com/product/4591/ DESCRIPTION: Niels Heinen has...

[SA13970] FireHOL Insecure Temporary File Creation Vulnerabilities

TITLE: FireHOL Insecure Temporary File Creation Vulnerabilities SECUNIA ADVISORY ID: SA13970 VERIFY ADVISORY: http://secunia.com/advisories/13970/ CRITICAL: Less critical IMPACT: Privilege escalation WHERE: Local system SOFTWARE: FireHOL 1.x http://secunia.com/product/4556/ DESCRIPTION: Sam Coute...

[SA13934] KOffice "Decrypt::makeFileKey2()" Buffer Overflow

TITLE: KOffice "Decrypt::makeFileKey2" Buffer Overflow SECUNIA ADVISORY ID: SA13934 VERIFY ADVISORY: http://secunia.com/advisories/13934/ CRITICAL: Highly critical IMPACT: System access WHERE: From remote SOFTWARE: KOffice 1.x http://secunia.com/product/4155/ DESCRIPTION: A vulnerability has been...

[SA13918] Sun Java Plug-In Two Vulnerabilities

TITLE: Sun Java Plug-In Two Vulnerabilities SECUNIA ADVISORY ID: SA13918 VERIFY ADVISORY: http://secunia.com/advisories/13918/ CRITICAL: Highly critical IMPACT: Security Bypass, System access WHERE: From remote SOFTWARE: Sun Java SDK 1.4.x http://secunia.com/product/1661/ Sun Java SDK 1.3.x...

konversation irc client 0.15 - Multiple Vulnerabilities

source: https://www.securityfocus.com/bid/12312/info Konversation is a freely available IRC client for KDE windows environments on Linux platforms. Multiple remote vulnerabilities affect the Konversation IRC client. These issues are due to input validation failures and design flaws. The first iss...

[SA13849] MPM Guestbook Pro "header" File Inclusion Vulnerability

TITLE: MPM Guestbook Pro "header" File Inclusion Vulnerability SECUNIA ADVISORY ID: SA13849 VERIFY ADVISORY: http://secunia.com/advisories/13849/ CRITICAL: Highly critical IMPACT: System access WHERE: From remote SOFTWARE: MPM Guestbook Pro 1.x http://secunia.com/product/4516/ DESCRIPTION: SmOk3...

[SA13809] Netscape Directory Server LDAP Request Handling Buffer Overflow

TITLE: Netscape Directory Server LDAP Request Handling Buffer Overflow SECUNIA ADVISORY ID: SA13809 VERIFY ADVISORY: http://secunia.com/advisories/13809/ CRITICAL: Moderately critical IMPACT: DoS, System access WHERE: From local network SOFTWARE: Netscape Directory Server 6.x...

[SA13678] PuTTY for Symbian OS "SSH2_MSG_DEBUG" Buffer Overflow

TITLE: PuTTY for Symbian OS "SSH2MSGDEBUG" Buffer Overflow SECUNIA ADVISORY ID: SA13678 VERIFY ADVISORY: http://secunia.com/advisories/13678/ CRITICAL: Moderately critical IMPACT: System access WHERE: From remote SOFTWARE: PuTTY for Symbian OS 1.x http://secunia.com/product/4476/ DESCRIPTION: A...

[SA13693] GRASS Multiple Scripts Insecure Temporary File Creation

TITLE: GRASS Multiple Scripts Insecure Temporary File Creation SECUNIA ADVISORY ID: SA13693 VERIFY ADVISORY: http://secunia.com/advisories/13693/ CRITICAL: Less critical IMPACT: Privilege escalation WHERE: Local system SOFTWARE: GRASS 5.7.x http://secunia.com/product/4471/ DESCRIPTION: Javier...

CVE-2004-1781

Info Touch Surfnet kiosk allows local users to crash Surfnet and access the underlying operating system via the CMDCREDITCARDCHARGE command...

PT-2004-2784 · Ipswitch · Ipswitch Ws Ftp Server

Name of the Vulnerable Software and Affected Versions: Ipswitch WS FTP Server version 4.0.2 Description: The issue allows remote authenticated users to execute arbitrary programs as SYSTEM. This is achieved by using the SITE command to modify certain iFtpSvc options handled by iftpmgr.exe...

[SA13660] PHProjekt "path_pre" Parameter Arbitrary File Inclusion Vulnerability

TITLE: PHProjekt "pathpre" Parameter Arbitrary File Inclusion Vulnerability SECUNIA ADVISORY ID: SA13660 VERIFY ADVISORY: http://secunia.com/advisories/13660/ CRITICAL: Highly critical IMPACT: System access WHERE: From remote SOFTWARE: PHProjekt 4.x http://secunia.com/product/4346/ DESCRIPTION:...

[SA13652] Help Center Live Multiple Vulnerabilities

TITLE: Help Center Live Multiple Vulnerabilities SECUNIA ADVISORY ID: SA13652 VERIFY ADVISORY: http://secunia.com/advisories/13652/ CRITICAL: Highly critical IMPACT: Cross Site Scripting, Exposure of sensitive information, System access WHERE: From remote SOFTWARE: Help Center Live 1.x...