Opera Skinned : Arbitrary File Dropping And Execution (Advisory)

Opera Skinned : Arbitrary File Dropping And Execution ====================================================== I ABSTRACT: Like other browsers, Opera Web Browser supports many standard MIME types and also a few Opera-specific MIME types. Of the Opera-specific types, the implementation of the variou...

Six Step IE Remote Compromise Cache Attack

Six Step IE Remote Compromise Cache Attack tested OS:WinXp Microsoft Internet Explorer v6.Sp1; up-to-date on 2003/10/30 Overview A six step cache attack has been found which allows for remote compromise of systems running Internet Explorer merely by viewing a webpage. This attack is possible part...

Ashley Brown iWeb Server - Encoded Backslash Directory Traversal

source: https://www.securityfocus.com/bid/8943/info It has been reported that iWeb Server is prone a directory traversal issue allowing a remote attacker to traverse outside the server root directory by using '..%5C' character sequences. Successful exploitation of this vulnerability may allow a...

Dansie Shopping Cart - Server Error Message Installation Full Path Disclosure

source: https://www.securityfocus.com/bid/8860/info Dansie Shopping Cart is reported to be prone to path disclosre issue in the 'db' parameter of 'cart.pl' that may lead to an attacker gaining sensitive information about the installation path of the system. Information gained by exploiting this...

FreeBSD-SA-03:14.arp

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ============================================================================= FreeBSD-SA-03:14.arp Security Advisory The FreeBSD Project Topic: denial of service due to ARP resource starvation Category: core Module: sys Announced: 2003-09-25 Credits:...

Cisco Security Advisory: Cisco Catalyst Enable Password Bypass Vulnerability

...

Ocean12 ASP Guestbook Manager 1.0 - Information Disclosure

source: https://www.securityfocus.com/bid/7328/info Ocean12 Guestbook Manager has been reported prone to sensitive information disclosure vulnerability. An attacker may make a request for and download the underlying Access database file that is used by the Guestbook Manager. Guestbook...

Typo3 3.5 b5 - HTML Hidden Form Field Information Disclosure (2)

Typo3 3.5 b5 - HTML Hidden Form Field Information Disclosure 2 source: https://www.securityfocus.com/bid/6993/info Clients of TYPO3 systems may access potentially sensitive data that have been obfuscated through hidden form fields. This may aid in exploiting other known issues in the software...

Path Parsing Errata in Apache HTTP Server

Original Message: ----------------- From: [email protected] [email protected] Date: Wed, 22 Jan 2003 09:00:58 -0500 To: [email protected] Subject: Path Parsing Errata in Apache HTTP Server Path Parsing Errata in Apache HTTP Server ABSTRACT The Apache HTTP Server...

Missing admin sql password in Okena StormWatch

Hi! I was working with Okena StormWatch1 - a really interesting commercial intrusion prevention product - and saw that there is the SQL password for the admin account sa missing. With a SQL client and a blank password it's possible for everyone who can connect to the manager to compromise the who...

Sun ONE Starter Kit 2.0 ASTAware SearchDisc 3.1 - Search Engine Directory Traversal

Sun ONE Starter Kit 2.0 ASTAware SearchDisc 3.1 - Search Engine Directory Traversal source: https://www.securityfocus.com/bid/5828/info A vulnerability has been reported for the Sun ONE Starter Kit 2.0 and ASTAware SearchDisc. The Starter Kit includes a search engine facility provided for easy...

PHP-Nuke Network Tools Add-On Arbitrary Command Execution

It is possible to make the remote host execute arbitrary commands through the use of the PHPNuke addon called 'Network Tools'. An attacker may use this flaw to gain a shell on this system. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; ...

IRIX nveventd vulnerability

-----BEGIN PGP SIGNED MESSAGE----- SGI Security Advisory Title: nveventd vulnerability Number: 20020607-02-I Date: June 24, 2002 Reference: CAN-2002-0631 - -------------- - --- Update --- - -------------- Fixed formatting issue which caused PGP signature failure on some mailers. -...

[ARL02-A14] ZenTrack System Information Path Disclosure Vulnerability

+/---------------- ALPER Research Labs ------/--------/+ +/---------------- Security Advisory -----/---------/+ +/---------------- ID: ARL02-A14 ----/----------/+ +/---------------- [email protected] ---/-----------/+ Advisory Information -------------------- Name : ZenTrack System Information...

CVE-2002-0208

The CVE concerns PGP Security PGPfire 7.1 for Windows, which alters the TCP/IP stack and modifies ICMP error messages, enabling remote attackers to determine that the target system is running PGPfire. The PT-2002-1279 entry mirrors this with details of the affected software and behavior, noting t...

CVE-2002-0295

CVE-2002-0295 affects Alcatel OmniPCX 4400; the flaw is that setup installs files with world-writable permissions, enabling local users to reconfigure the system and potentially obtain privileges. Documented impact is local, with partial confidentiality/integrity/availability. No explicit exploit...

CVE-1999-1298

Technical details about CVE-1999-1298 are not publicly available in the provided documents. No specific affected products, versions, or remediation steps are disclosed here. Monitor for updates from official sources for further information.

Security updates: at, sudo, xchat

New packages are now available to address security issues with the at scheduler program found in Slackware 8.0's bin.tgz package, sudo, and xchat. Here's the information from the Slackware 8.0 ChangeLog: Mon Jan 21 13:21:07 PST 2002 patches/packages/at.tgz: Fixed a buffer overflow. Security fix...

CVE-2001-1506

Unknown vulnerability in the file system protection subsystem in HP Secure OS Software for Linux 1.0 allows additional user privileges on some files beyond what is specified in the file system protection rules, which allows local users to conduct unauthorized operations on restricted files...

CVE-1999-1501

CVE-1999-1501 affects SGI OS2 IRIX 6.3 components ipxchk and ipxlink, where the IFS environment variable is not properly cleared before executing system calls. This enables local users to run arbitrary commands. The vulnerability is tied to how environment state is preserved across these calls, a...