phpmynuke css and phpinfo() vuls

myphpnuke version 1.8.8final7 and prior that contain sysinfo are vulnerable to both css attack and phpinfo Disclosure. The problem is that unlike the rest of the scripts under /admin/, sysinfo's footer script called systemfooter.php does not check who the user is. Inside systemfooter.php the...

MS02-072: Unchecked Buffer in XP Shell Could Enable System Compromise (329390)

The remote version of Windows contains a flaw in the handling of audio files MP3, WMA in the Windows Shell component, that could allow an attacker to execute arbitrary code on the remote host with SYSTEM privileges. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid1119...

Microsoft Security Bulletin MS02-072: Unchecked Buffer in Windows Shell Could Enable System Compromise (Q329390)

-----BEGIN PGP SIGNED MESSAGE----- - ---------------------------------------------------------------------- Title: Unchecked Buffer in Windows Shell Could Enable System Compromise 329390 Date: 18 December 2002 Software: Microsoft Windows XP Impact: Run code of an attacker's choice Max Risk:...

Unchecked buffer in PC-cillin

---------------------------------------------------------------------------- - Texonet Security Advisory 20021210 ---------------------------------------------------------------------------- - Advisory ID : TEXONET-20021210 Authors : Joel Soderberg and Christer Oberg [email protected] Issue...

Solaris priocntl() privelege escalation

During external module loaging path is not checked...

MS02-063: Unchecked Buffer in PPTP Implementation Could Enable DOS Attacks (329834)

The remote version of Windows contains a flaw in its PPTP implementation. If the remote host is configured to act as a PPTP server, a remote attacker can send a specially crafted packet to corrupt the kernel memory and crash the remote system. C Tenable Network Security, Inc. include"compat.inc";...

MS02-055: Unchecked Buffer in Windows Help Facility Could Enable Code Execution (323255)

The remote host contains a version of the HTML Helpfacility ActiveX control module that could allow an attacker to execute arbitrary code on the remote host by constructing a malicious web page and enticing a victim to visit it. C Tenable Network Security, Inc. include"compat.inc"; if description...

MS02-054: Unchecked Buffer in File Decompression Functions Could Lead to Code Execution (329048)

The remote host contains a version of Windows that has a security flaw in the compressed files ZIP implementation. An attacker can exploit this flaw by sending a malicious zip file to the remote user. When the user opens the file with Explorer, arbitrary code will be executed. C Tenable Network...

Security Bulletin MS02-058: Unchecked Buffer in Outlook Express S/MIME Parsing Could Enable System Compromise (Q328676)

---------------------------------------------------------------------- Title: Unchecked Buffer in Outlook Express S/MIME Parsing Could Enable System Compromise Q328676 Date: 10 October 2002 Software: Outlook Express Impact: Run code of attacker's choice. Max Risk: Critical Bulletin: MS02-058...

Security Bulletin MS02-054: Unchecked Buffer in File Decompression Functions Could Lead to Code Execution (Q329048)

---------------------------------------------------------------------- Title: Unchecked Buffer in File Decompression Functions Could Lead to Code Execution Q329048 Date: 02 October 2002 Software: Microsoft Windows 98 with Plus! Pack, Windows Me, or Windows XP Impact: Two vulnerabilities, the most...

Security Bulletin MS02-055: Unchecked Buffer in Windows Help Facility Could Enable Code Execution (Q323255)

---------------------------------------------------------------------- Title: Unchecked Buffer in Windows Help Facility Could Enable Code Execution Q323255 Date: 02 October 2002 Software: Microsoft Windows 98 Microsoft Windows 98 Second Edition Microsoft Windows Millennium Edition Microsoft...

Security Bulletin MS02-045: Unchecked Buffer in Network Share Provider Can Lead to Denial of Service (Q326830)

---------------------------------------------------------------------- Title: Unchecked Buffer in Network Share Provider Can Lead to Denial of Service Q326830 Date: 22 August 2002 Software: Microsoft Windows NT 4.0 Workstation Microsoft Windows NT 4.0 Server Microsoft Windows NT 4.0 Server,...

Security Bulletin MS02-040: Unchecked Buffer in MDAC Function Could Enable SQL Server Compromise (Q326573)

---------------------------------------------------------------------- Title: Unchecked Buffer in MDAC Function Could Enable SQL Server Compromise Q326573 Date: 31 July 2002 Software: Microsoft Data Access Components Impact: Run code of attacker's choice Max Risk: Moderate Bulletin: MS02-040...

Privelege escalation in util-linux chfn

Unchecked race conditions under file decriptors leaves ability to modify /etc/passwd...

Security Bulletin MS02-033: Unchecked Buffer in Profile Service Could Allow Code Execution in Commerce Server (Q322273)

---------------------------------------------------------------------- Title: Unchecked Buffer in Profile Service Could Allow Code Execution in Commerce Server Q322273 Date: June 26, 2002 Software: Microsoft Commerce Server 2000, Commerce Server 2002 Impact: Four vulnerabilities, each of which...

CVE-2002-0176

CVE-2002-0176 concerns the printf wrappers in libsafe, affected in versions 2.0-11 and earlier. The vulnerability arises because the wrappers do not properly handle argument indexing specifiers, allowing certain calls to proceed with unverified arguments. Mandrake’s MDKSA-2002:026 notes that form...

Microsoft SQL Server 2000 - Password Encrypt procedure Buffer Overflow

Microsoft SQL Server 2000 - Password Encrypt procedure Buffer Overflow source: https://www.securityfocus.com/bid/5014/info A buffer overflow vulnerability has been reported in SQL Server 2000. The vunerability is a result of an unchecked buffer when using the password encrypt procedure. This...

Security Bulletin MS02-029: Unchecked Buffer in Remote Access Service Phonebook Could Lead to Code Execution (Q318138)

---------------------------------------------------------------------- Title: Unchecked Buffer in Remote Access Service Phonebook Could Lead to Code Execution Q318138 Date: 12 June 2002 Software: Windows NT 4.0, NT 4.0 Terminal Server Edition, 2000, XP, Routing and Remote Access Server RRAS...

Security Bulletin MS02-027: Unchecked Buffer in Gopher Protocol Handler Can Run Code of Attacker''s Choice (Q323889)

Title: Unchecked Buffer in Gopher Protocol Handler Can Run Code of Attacker's Choice Q323889 Date: 11 June 2002 Software: Internet Explorer, Proxy Server, Internet Security and Acceleration Server Impact: Run Code of Attacker's Choice Max Risk: Critical Bulletin: MS02-027 Microsoft encourages...

Security Bulletin MS02-026: Unchecked Buffer in ASP.NET Worker Process (Q322289)

---------------------------------------------------------------------- Title: Unchecked Buffer in ASP.NET Worker Process Q322289 Date: 06 June 2002 Software: .NET Framework Impact: Denial of service, potentially run code of attacker's choice Max Risk: Moderate Bulletin: MS02-026 Microsoft...