Lotus iNotes vulnerable to buffer overflow via PresetFields s_ViewName field

Overview Lotus iNotes contains a buffer overflow that could permit a remote attacker to execute arbitrary code or cause a denial of service on a vulnerable server. Description Lotus iNotes Web Access is a web-based database application that provides "access to corporate messaging services and...

Sendmail Custom DNS Map TXT Query Overflow

The remote Sendmail server, according to its version number, may be vulnerable to a buffer overflow in its DNS handling code. The owner of a malicious name server could use this flaw to cause a denial of service and possibly to execute arbitrary code on this host. C Tenable Network Security, Inc...

Low: Red Hat Security Advisory: python security update

An insecure use of a temporary file has been found in Python. Python is an interpreted, interactive, object-oriented programming language. Zack Weinberg discovered that os.execvpe from os.py in Python 2.2.1 and earlier creates temporary files with predictable names. This could allow local users t...

Multiple libmcrypt vulnerabilities

limbcrypt versions prior to 2.5.5 contain a number of buffer overflow vulnerabilities that stem from imporper or lacking input validation. By passing a longer then expected input to a number of functions multiple functions are affected the user can successful make libmcrypt crash. Another...

MondoSearch MsmMask.exe Arbitrary Script Source Disclosure

The msmmask.exe CGI is installed. Some versions allow an attacker to read the source of any file in your web server's directories by using the 'mask' parameter. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. Affected: MondoSearch 4.4.5147 and below. MondoSearch 4.4.5156 and above are NOT...

Cached malformed SIG record buffer overflow

Overview A vulnerability in BIND allows remote attackers to execute code with the privileges of the process running named. This vulnerability is resolved in BIND versions 4.9.11, 8.2.7, 8.3.4, and BIND 9. Description A remotely exploitable buffer overflow exists in named. An attacker using...

Moderate: Red Hat Security Advisory: : Updated glibc packages fix vulnerabilities in resolver

Updated glibc packages are available to fix a buffer overflow in the resolver. The GNU C library package, glibc, contains standard libraries used by multiple programs on the system. A read buffer overflow vulnerability exists in the glibc resolver code in versions of glibc up to and including...

SSL certificate validation problems in Ximian Evolution

Discovered: 2002-09-08, Ximian has been informed on 2002-09-09. Impact: medium, if SSL IMAPS, SMTPS, POP3S used none, if not Affected: Ximian Evolution 1.0.x and earlier Description: Due to missing SSL validation code, Evolution's camel component is vulnerable to common SSL man-in-the-middle...

Buffer over/underflows in ssldump prior to 0.9b3

http://www.rtfm.com/ssldump The ssldump team has discovered a number of memory errors in old versions of ssldump. BACKGROUND ssldump is an SSLv3/TLS network protocol analyzer. If provided with the appropriate keying material, it will also decrypt the connections and display the application data...

phpMyAdmin sql.php Traversal Arbitrary File Access

It is possible to make the remote phpMyAdmin installation read arbitrary data on the remote host. An attacker may use this flaw to read arbitrary files that your web server has the right to access or execute arbitrary PHP code. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. Ref:...

phpPgAdmin sql.php goto Parameter Traversal Arbitrary File Access

It is possible to make the remote phpPgAdmin installation read arbitrary data on the remote host. An attacker could use this flaw to read /etc/passwd or any file that your web server has the right to access. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. Ref:...

Pi3Web < 2.0.1 CGI Handler Long Parameter Handling Overflow

The remote server may crash when it is sent a very long CGI parameter multiple times, as in : GET /cgi-bin/hello.exe?AAAAA...AAAA An attacker may use this flaw to prevent the remote host from working properly. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. We do banner checking, as I could...

TYPSoft FTP Server Malformed STOR / RETR Command DoS

The remote FTP server crashes when it is sent the command RETR ../../ or STOR ../../ An attacker may use this flaw to cause the server to crash. C Tenable Network Security, Inc. Script audit and contributions from Carmichael Security Erik Anderson nb: domain no longer exists Added BugtraqID and C...

IBM Tivoli SecureWay WebSEAL Proxy Policy Director Encoded URL DoS

The remote web server crashes when an URL ending with %2E is requested. An attacker may use this flaw to cause the server crash continually. C Tenable Network Security, Inc. Script audit and contributions from Carmichael Security Erik Anderson nb: domain no longer exists Added BugtraqID and CAN...

Sendmail < 8.8.5 MIME Conversion Malformed Header Overflow

The remote Sendmail server, according to its version number, may be vulnerable to a MIME conversion overflow attack which allows anyone to execute arbitrary commands as root. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid10055; scriptversion"1.22";...

Apache Tomcat DOS Device Name XSS

Apache Tomcat is the servlet container that is used in the official Reference Implementation for the Java Servlet and JavaServer Pages technologies. By making requests for DOS Device names it is possible to cause Tomcat to throw an exception, allowing cross-site scripting attacks. The exception...

Potential security issues in Ethereal

Looks like Ethereal has some potential security issues: http://www.ethereal.com/appnotes/enpa-sa-00004.html -- Name: Potential issues with Ethereal 0.9.3 Docid: enpa-sa-00004 Date: May 19, 2002 Severity: High Description: Four potential security issues have been discovered in Ethereal 0.9.3: The...

SquirrelMail compose.php script does not adequately validate input thereby allowing arbitrary user to send messages

Overview Some versions of SquirrelMail do not properly validate input. Attackers can spoof email addresses through this vulnerability. Description SquirrelMail is a collection of PHP4 scripts that provides webmail services. Prior to version 1.24, SquirrelMail does not properly validate Universal...

Mp3 file can execute code in Winamp [Sandblad advisory #5]

Sandblad advisory 5 - ---..---..---..---..---..---..---..---..---..---..---..---..---- Title: Mp3 file can execute code in Winamp. Date: 2002-04-26 Software: Nullsoft Winamp 2.79 Rating: High because mp3 files are widely trusted as safe. Impact: Specially crafted mp3 file can execute arbitrary...

AOL Instant Messenger contains buffer overflows in parsing of AIM URI handler requests

Overview AOL Instant Messenger AIM is an application that allows one peer to communicate with another. A buffer overflow vulnerability exists that can manipulate the configuration of the victim's client. Description AIM installs a URI handler that permits the use of the "aim:" protocol on the...