Oracle unauthenticated remote system compromise (#NISR16022003a)

NGSSoftware Insight Security Research Advisory Name: Oracle unauthenticated remote system compromise Systems Affected: All platforms; Oracle9i Database Release 2, 9i Release 1, 8i, 8.1.7, 8.0.6 Severity: Critical Risk Category: Remote System Buffer Overrun Vendor URL: http://www.oracle.com Author...

Microsoft Internet Explorer allows arbitrary local file reading via "showHelp()" function

Overview A vulnerability in Microsoft Internet Explorer IE allows remote attackers to read arbitrary files on a vulnerable system. Description A vulnerability in the showHelp Method contained within IE may allow a remote attacker to read arbitrary files. For further details, please see the...

RealNetworks HELIX Server Buffer Overflow Vulnerabilities (#NISR20122002)

NGSSoftware Insight Security Research Advisory Name: Muliple Buffer overruns RealNetworks Helix Universal Server 9.0 Systems Affected: Windows, FreeBSD, HP-UX, AIX, Linux, Sun Solaris 2.7 & 2.8 Severity: High Risk Category: Buffer Overrun Vendor URL: http://www.real.com/ Author: Mark Litchfield...

Microsoft Security Bulletin MS02-072: Unchecked Buffer in Windows Shell Could Enable System Compromise (Q329390)

-----BEGIN PGP SIGNED MESSAGE----- - ---------------------------------------------------------------------- Title: Unchecked Buffer in Windows Shell Could Enable System Compromise 329390 Date: 18 December 2002 Software: Microsoft Windows XP Impact: Run code of an attacker's choice Max Risk:...

Microsoft Security Bulletin MS02-069: Flaw in Microsoft VM Could Enable System Compromise (810030)

-----BEGIN PGP SIGNED MESSAGE----- - ---------------------------------------------------------------------- Title: Flaw in Microsoft VM Could Enable System Compromise 810030 Date: 11 December 2002 Software: Microsoft VM Impact: Eight vulnerabilities, the most serious of which would enable an...

Security Bulletin MS02-058: Unchecked Buffer in Outlook Express S/MIME Parsing Could Enable System Compromise (Q328676)

---------------------------------------------------------------------- Title: Unchecked Buffer in Outlook Express S/MIME Parsing Could Enable System Compromise Q328676 Date: 10 October 2002 Software: Outlook Express Impact: Run code of attacker's choice. Max Risk: Critical Bulletin: MS02-058...

remote SYSTEM compromise in WASD OpenVMS http server

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Multiple vulnerabilities in WASD http server for OpenVMS Version 1.0, 25 Sept 2002. 0. Contents 1. Summary 2. Severity: Critical 3. Vulnerable versions 4. Description 5. Solutions 6. Examples of site weaknesses 7. Conclusion 8. Acknowledgments 9...

EEYE: Remote PGP Outlook Encryption Plug-in Vulnerability

Remote PGP Outlook Encryption Plug-in Vulnerability Release Date: July 10, 2002 Severity: High Remote Code Execution Systems Affected: NAI PGP Desktop Security 7.0.4 NAI PGP Personal Security 7.0.3 NAI PGP Freeware 7.0.3 Description: The beer is still cold, the days are still long, the exploits...

AMANDA security issues

================================================================== Security advisory: AMANDA ================================================================== Package: AMANDA Version: 2.3.0.4 Date: 26/05/2002 Issue: Local and remote overflows Risk: Medium since this is an old package Credits:...

HP-UX kernel specifies incorrect arguments for setrlimit()

Overview A problem exists in some versions of the HP-UX kernel allowing an intruder to cause kernel panics. Description Certain versions of HP-UX setrlimit system call contain a vulnerability that permits an intruder to cause kernel panics or compromise the system. Quoting from HP Security Bullet...

php.windows.txt

Title 17/2/2002 PHP for Windows Arbitrary Files Execution GIF, MP3 Summary Through PHP.EXE, an attacker can cause PHP to interpret any file as a PHP file, even if its extensions are not PHP. This would enable the remote attacker to execute arbitrary commands, leading to a system compromise. Detai...

Apache 1.3 - Artificially Long Slash Path Directory Listing (2)

// source: https://www.securityfocus.com/bid/2503/info Apache HTTPD is the Apache Web Server, freely distributed and actively maintained by the Apache Software Foundation. It is a freely available and widely used software package, included with various implementations of the UNIX operating system...

Astaro Security Linux Improper File Permissions Flaw

iDEFENSE Intelligence Operations discovered security issues in improper file and directory permissions during an audit of Astaro AG's Astaro Linux. Astaro Linux designates a number of files and directories as world writeable that should probably not be. This, combined with other more serious flaw...

MS01-059: Unchecked Buffer in Universal Plug and Play can Lead to System Compromise (315000)

Using a specially crafted NOTIFY directive, a remote attacker can cause code to run in the context of the Universal Plug and Play UPnP subsystem or possibly launch a denial of service attack against the affected host. Note that, under Windows XP, the UPnP subsystem operates with SYSTEM privileges...

Avirt Gateway Suite Remote SYSTEM Level Compromise

Strumpf Noir Society Advisories ! Public release ! -- -= Avirt Gateway Suite Remote SYSTEM Level Compromise =- Release date: Thursday, January 17, 2002 Introduction: Avirt Gateway Suite combines the features of the Avirt Gateway internet sharing technology with the functionality of the Avirt Mail...

Microsoft Security Notification Bulletin MS01-059

---------------------------------------------------------------------- Title: Unchecked Buffer in Universal Plug and Play can Lead to System Compromise Date: 20 December 2001 Software: Windows 98, Windows 98SE, Windows ME, Windows XP Impact: Run code of attacker's choice Max Risk: Critical...

RAZOR advisory: multiple Sendmail vulnerabilities

RAZOR Advisory: Multiple Local Sendmail Vulnerabilities ======================================================= Author: Michal Zalewski [email protected] Release Date: 10/01/2001 Assigned CVE numbers: CAN-2001-0713, CAN-2001-0714, CAN-2001-0715 Topic: ------ The Sendmail mail delivery...

EFTP Version 2.0.7.337 vulnerabilities

EFTP Version 2.0.7.337 vulnerabilities According to their site @ www.eftp.org "EFTP is a 32bit combined Client/Server application, basically 2 programs in one. EFTP incorporates the 448bit Blowfish Encryption Algorithm and the FTP protocol RFC 959 implementation to provide secure file transfers...

Sendmail 8.118.12 Debugger - Arbitrary Code Execution (3)

Sendmail 8.118.12 Debugger - Arbitrary Code Execution 3 source: https://www.securityfocus.com/bid/3163/info An input validation error exists in Sendmail's debugging functionality. The problem is the result of the use of signed integers in the program's tTflag function, which is responsible for...

Sendmail 8.118.12 Debugger - Arbitrary Code Execution (4)

Sendmail 8.118.12 Debugger - Arbitrary Code Execution 4 source: https://www.securityfocus.com/bid/3163/info An input validation error exists in Sendmail's debugging functionality. The problem is the result of the use of signed integers in the program's tTflag function, which is responsible for...