EUVD-2002-1814

Malware in sbrugna...

CVE-2002-2037

The Cisco Media Gateway Controller MGC in 1 SC2200 7.4 and earlier, 2 VSC3000 9.1 and earlier, 3 PGW 2200 9.1 and earlier, 4 Billing and Management Server BAMS and 5 Voice Services Provisioning Tool VSPT runs on default installations of Solaris 2.6 with unnecessary services and without the latest...

CVE-2002-1835

The default configuration of Xerox DocuTech 6110 and DocuTech 6115 running Solaris 8.0 has a large number of unnecessary services enabled such as RPC and sprayd, which could allow remote attackers to obtain access to the device...

Avoid Enabling Unnecessary Services and Ports

In the zones, you need to specify the interfaces, ports, and services that need to be enabled or disabled. Correct configuration prevents illegitimate packets from being received and processed, reduces the number of exposed ports on the server, and reduces the attack surface. If the configuration...

CVE-2002-1835

Affected product: Xerox DocuTech 6110/6115 running Solaris 8.0. The issue arises from default configuration leaving many services enabled (e.g., RPC, sprayd), which could allow remote attackers to gain access to the device. Impact is described as potentially enabling access to the device; the pro...

Microsoft Exchange Outlook Web Access HTTP Response Splitting Vulnerability

Description Microsoft Exchange Outlook Web Access OWA is prone to HTTP response splitting attacks. This issue could permit hostile script to be injected into client sessions, which could gain access to properties of the OWA server and Web pages hosted on the site. It is noted that the attacker mu...

Microsoft Windows Media Services NSIISlog.DLL Remote Buffer Overflow Vulnerability

Description Microsoft has reported a buffer overflow vulnerability in Windows Media Services. This is due to a problem with how the logging ISAPI extension handles incoming client requests. This could cause arbitrary code execution in IIS, which is exploitable through Media Services. Technologies...

CVE-2002-1835

The default configuration of Xerox DocuTech 6110 and DocuTech 6115 running Solaris 8.0 has a large number of unnecessary services enabled such as RPC and sprayd, which could allow remote attackers to obtain access to the device...