Compaq Web SSI DoS

It was possible to kill the remote web server by requesting something like: / This is probably a Compaq Web Enterprise Management server. SPDX-FileCopyrightText: 2004 Michel Arboi Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right...

CERN httpd CGI name heap overflow

It was possible to kill the remote web server by requesting GET /cgi-bin/A.AAAA...A HTTP/1.0 This is known to trigger a heap overflow in some servers like CERN HTTPD. SPDX-FileCopyrightText: 2005 Michel Arboi Some text descriptions might be excerpted from a referenced sources, and are Copyright C...

[Full-disclosure] iDEFENSE Security Advisory 10.24.05: SCO Unixware Setuid ppp prompt Buffer Overflow Vulnerability

SCO Unixware Setuid ppp prompt Buffer Overflow Vulnerability iDEFENSE Security Advisory 10.24.05 http://www.idefense.com/application/poi/display?type=vulnerabilities October 24, 2005 I. BACKGROUND SCO UnixWare is a UNIX operating system. More information is available at:...

Rational ClearQuest Cross-Site Scripting Vulnerability

Secunia Advisory: SA16717 Release Date: 2005-09-20 Critical: Less critical Impact: Cross Site Scripting Where: From local network Solution Status: Vendor Patch Software: Rational ClearQuest 2002 Rational ClearQuest 2003 Select a product and view a complete list of all Patched/Unpatched Secunia...

Sun Solaris "tl" Driver Denial of Service Vulnerability

Secunia Advisory: SA16874 Release Date: 2005-09-20 Critical: Less critical Impact: DoS Where: Local system Solution Status: Vendor Patch OS: Sun Solaris 10 Select a product and view a complete list of all Patched/Unpatched Secunia advisories affecting it. Description: A vulnerability has been...

Symantec Brightmail AntiSpam Denial of Service Vulnerabilities

Secunia Advisory: SA16733 Release Date: 2005-09-07 Critical: Moderately critical Impact: DoS Where: From remote Solution Status: Vendor Patch Software: Symantec Brightmail AntiSpam 6.x Select a product and view a complete list of all Patched/Unpatched Secunia advisories affecting it. Description:...

GuppY Multiple Vulnerabilities

Secunia Advisory: SA16707 Release Date: 2005-09-06 Critical: Highly critical Impact: Cross Site Scripting System access Where: From remote Solution Status: Vendor Patch Software: GuppY 4.x Select a product and view a complete list of all Patched/Unpatched Secunia advisories affecting it...

Apache PCRE Integer Overflow Vulnerability

Secunia Advisory: SA16688 Release Date: 2005-09-05 Critical: Less critical Impact: Privilege escalation Where: Local system Solution Status: Vendor Patch Software: Apache 2.0.x Select a product and view a complete list of all Patched/Unpatched Secunia advisories affecting it. CVE reference:...

myBloggie "username" SQL Injection Vulnerability

Secunia Advisory: SA16699 Release Date: 2005-09-05 Critical: Moderately critical Impact: Security Bypass Manipulation of data Where: From remote Solution Status: Vendor Patch Software: myBloggie 2.x Select a product and view a complete list of all Patched/Unpatched Secunia advisories affecting it...

mod_ssl "SSLVerifyClient" Security Bypass Security Issue

modssl "SSLVerifyClient" Security Bypass Security Issue Secunia Advisory: SA16700 Release Date: 2005-09-05 Critical: Moderately critical Impact: Security Bypass Where: From remote Solution Status: Vendor Patch Software: modssl 2.x Select a product and view a complete list of all Patched/Unpatched...

UnixWare ICMP Message Handling Denial of Service

Release Date: 2005-09-05 Critical: Less critical Impact: DoS Where: From remote Solution Status: Vendor Patch OS: UnixWare 7.x.x Select a product and view a complete list of all Patched/Unpatched Secunia advisories affecting it. CVE reference: CAN-2004-0790 CAN-2004-0791 CAN-2004-1060 CAN-2005-00...

WebGUI Perl Code Execution Vulnerabilities

Secunia Advisory: SA16682 Release Date: 2005-09-02 Critical: Highly critical Impact: System access Where: From remote Solution Status: Vendor Patch Software: WebGUI 6.x Select a product and view a complete list of all Patched/Unpatched Secunia advisories affecting it. Description: Some...

OpenSSH Two Security Issues

Secunia Advisory: SA16686 Release Date: 2005-09-02 Critical: Less critical Impact: Security Bypass Privilege escalation Where: From remote Solution Status: Vendor Patch Software: OpenSSH 3.x OpenSSH 4.x Select a product and view a complete list of all Patched/Unpatched Secunia advisories affectin...

FreeStyle Wiki Arbitrary Command Injection Vulnerability

Secunia Advisory: SA16612 Release Date: 2005-08-30 Critical: Moderately critical Impact: System access Where: From remote Solution Status: Vendor Patch Software: FreeStyle Wiki 3.x Select a product and view a complete list of all Patched/Unpatched Secunia advisories affecting it. Description: A...

iDEFENSE Security Advisory 2005-05-24.4

Ipswitch IMail Web Calendaring Arbitrary File Read Vulnerability iDEFENSE Security Advisory 05.24.05 www.idefense.com/application/poi/display?id=242&type=vulnerabilities May 24, 2005 I. BACKGROUND Ipswitch Collaboration Suite ICS is a comprehensive communication and collaboration solution for...

NukeETXSS.txt

NukeET 'codigo' variable cross site scripting vendor url:http://www.truzone.org advisore:http://lostmon.blogspot.com/2005/05/ nukeet-codigo-variable-cross-site.html Vendor confirmed : yes exploit available: yes NukeET Contains a flaw too that allows a remote cross site scripting attack.This flaw...

[Full-disclosure] Buffer overflow in BusinessMail email server system 4.60.00

Summary: Buffer overflow in BusinessMail email server system 4.60.00 http://www.netcplus.com/ Details: Input to the SMTP HELO and MAIL FROM: commands is not properly checked and/or filtered. Issuing a long argument to the HELO and MAIL FROM: commands will cause the corresponding process to die...

hostingCreate.txt

-= KeHieuHoc – HCE GROUP =- Information ------------------------- Software Package : Hosting Controller Vendor Homepage : http://www.hostingcontroller.com Platforms : Windows based servers Vulnerability : Multiple Unauthenticated information disclose Risk : high Vulnerable Versions: All version...

[Hat-Squad] i-Gallery directory traversal

Hat-Squad Advisory: i-Gallery directory traversal Product: i-Gallery Vendor Url: http://www.b-cp.com Version: 3.3 older versions not tested , but assumed vulnerable Vulnerability: Directory traversal and CSS bug Release Date: Vendor Status: Informed: 15 June 2005 Second Contact: 19 June 2005...

phpCMS12x.txt

SEC-CONSULT Security Advisory 20050602-1 ======================================================================= title: Arbitrary File Inclusion in phpCMS 1.2.x program: phpCMS vulnerable version: 1.2.0, 1.2.1, 1.2.1pl1 homepage: www.phpcms.de found: 2005-05-31 by: sk0L / SEC-CONSULT /...