wam1040.txt

Directory Traversal Vulnerability in 121 WAM! Server 1.0.4.0 Url: http://www.121software.com/121wam/server.asp "Imagine if you could centralise the management of your FTP server farm and give customers additional database management capability." "121 WAM! Server is a standard FTP server for...

Sun One 5.1 / IPlanet 5.0/5.1 - Administration Server Directory Traversal

source: https://www.securityfocus.com/bid/8367/info A problem in the checking of input by the Sun ONE Administration Server may lead to remote users escaping into restricted directories. This may allow an attacker to gain access to information that is sensitive in nature...

DEBIAN-CVE-2003-0489

tcptraceroute 1.4 and earlier does not fully drop privileges after obtaining a file descriptor for capturing packets, which may allow local users to gain access to the descriptor via a separate vulnerability in tcptraceroute...

SRT2003-08-01-0126 - cdrtools local root exploit

Secure Network Operations, Inc. http://www.secnetops.com Strategic Reconnaissance Team [email protected] Team Lead Contact [email protected] Our Mission: Secure Network Operations offers expertise in Networking, Intrusion Detection Systems IDS, Software Security Validation, and...

CVE-2003-0597

Unknown vulnerability in display of Merge before 5.3.23a in UnixWare 7.1.x allows local users to gain root privileges...

CVE-2003-0596

FDclone 2.00a, and other versions before 2.02a, creates temporary directories with predictable names and uses them if they already exist, which allows local users to read or modify files of other fdclone users by creating the directory ahead of time...

CVE-2003-0596

FDclone 2.00a, and other versions before 2.02a, creates temporary directories with predictable names and uses them if they already exist, which allows local users to read or modify files of other fdclone users by creating the directory ahead of time...

CVE-2003-0448

Portmon 1.7 and possibly earlier versions allows local users to read and write arbitrary files via the 1 -c host file or 2 -l log file command line options...

CVE-2001-1409

dexconf in XFree86 Xserver 4.1.0-2 creates the /dev/dri directory with insecure permissions 666, which allows local users to replace or create files in the root file system...

CVE-2003-0539

skk Simple Kana to Kanji conversion program 12.1 and earlier, and the ddskk package which is based on skk, creates temporary files insecurely, which allows local users to overwrite arbitrary files...

Important: Red Hat Security Advisory: : : : Updated Xpdf packages fix security vulnerability

Updated Xpdf packages are available that fix a vulnerability where a malicious PDF document could run arbitrary code. Xpdf is an X Window System based viewer for Portable Document Format PDF files. During an audit of CUPS, a printing system, Zen Parsec found an integer overflow vulnerability in t...

CVE-2003-0408

Buffer overflow in Uptime Client UpClient 5.0b7, and possibly other versions, allows local users to gain privileges via a long -p argument...

CVE-2003-0476

The execve system call in Linux 2.4.x records the file descriptor of the executable process in the file table of the calling process, which allows local users to gain read access to restricted file descriptors...

MDKSA-2003:066 - Updated kernel packages fix multiple vulnerabilities

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Mandrake Linux Security Update Advisory Package name: kernel Advisory ID: MDKSA-2003:066 Date: June 11th, 2003 Affected versions: 9.1 Problem Description: Multiple vulnerabilities were discovered and fixed in the Linux kernel. CAN-2003-0001: Multiple...

Portmon file arbitrary read/write access vulnerability

Package: Portmon Auth: http://www.aboleo.net/ Versions: 1.7 prior ? Vulnerability: File arbitrary read/write access vulnerability Portmon is a network service monitoring daemon http://www.aboleo.net/software/portmon/. "In order to use ping support, Portmon must run as root or be installed setuid...

SquirrelMail 1.2.11 - move_messages.php Arbitrary File Moving

SquirrelMail 1.2.11 - movemessages.php Arbitrary File Moving source: https://www.securityfocus.com/bid/7952/info Multiple vulnerabilities have been reported for Squirrelmail which could allow for information disclosure, data corruption, and privilege escalation. The problems appear to occur due t...

CVE-2003-0330

Buffer overflow in unknown versions of Maelstrom allows local users to execute arbitrary code via a long -player command line argument...

Pablo Software Solutions FTP Service 1.2 - Anonymous Users Privileges

Pablo Software Solutions FTP Service 1.2 - Anonymous Users Privileges source: https://www.securityfocus.com/bid/7799/info An issue in Pablo FTP Service may make it possible for remote users to perform unauthorized actions. It has been reported that Pablo FTP Service does not sufficiently restrict...

AIX 4.3.3/5.x - Getlvcb Command Line Argument Buffer Overflow (1)

source: https://www.securityfocus.com/bid/9905/info getlvcb has been reported to be prone to a buffer overflow vulnerability. When an argument is passed to the getlvcb utility, the string is copied into a reserved buffer in memory. Data that exceeds the size of the reserved buffer will overflow i...

pablo software Solutions baby ftp server 1.2 - Directory Traversal

pablo software Solutions baby ftp server 1.2 - Directory Traversal source: https://www.securityfocus.com/bid/7749/info It has been reported that Baby FTP Server does not properly handle some types of requests. This may make it possible for a remote user to gain access to resources outside of the...