YaBB 9.1.2000 - Arbitrary File Read

source: https://www.securityfocus.com/bid/1668/info YaBB.pl, a web-based bulletin board script, stores board postings in numbered text files. The numbered file name is specified in the call to YaBB.pl in the variable num=. Before retrieving the file, YaBB will append a .txt extension to . Due to...

George Burgyan CGI Counter 4.0.2/4.0.7 - Input Validation

source: https://www.securityfocus.com/bid/1202/info Due to unchecked code that handles user input in George Burgyan's CGI Counter, remote execution of arbitrary commands at the same privilege level as the web server it is running on is possible. Examples:...

Q329115: Security Update (Windows XP)

This update resolves the "Certificate Validation Flaw Could Enable Identity Spoofing" vulnerability in Windows XP. Download now to help prevent an attacker from attempting identity spoofing using certificates. After you install this item, you may have to restart your computer...

Q329115: Security Update (Windows 2000)

This update resolves the "Certificate Validation Flaw Could Enable Identity Spoofing" vulnerability in Windows 2000. Download now to help prevent an attacker from attempting identity spoofing using certificates...