Computer Terrorism (UK) :: Incident Response Centre - Microsoft Publisher Font Parsing Vulnerability

Computer Terrorism UK :: Incident Response Centre www.computerterrorism.com Security Advisory: CT12-09-2006-2.htm ============================================== Microsoft Publisher Font Parsing Vulnerability ============================================== Advisory Date: 12th, September 2006...

TIBCO Rendezvous 7.4.11 - add router Remote Buffer Overflow

TIBCO Rendezvous 7.4.11 - add router Remote Buffer Overflow / Exploit: TIBCO RendezVous remote buffer overflow exploit for Win32 public version Affected products: Tibco RendezOVous version =7.4.11 Multiple Vulnerabilities Author: Andres Tarasco Acuña atarasco @ sia.es Advisory: http://www.514.es...

patchlink6.txt

------------------------------------------------------------- PatchLink Update Server 6 SQL Injection ------------------------------------------------------------- Severity: Critical Date: June 28, 2006 Class: Remote Status: Patch Available Discovered by: Chris Steipp, Novacoast csteipp at...

ERNW Security Advisory 01/2006

ERNW Security Advisory 01-2006 Buffer Overflow in Algorithmic Researchs PrivateWire Online Registration Facility Author: Michael Thumann mthumannaternw.de Homepage: http://www.ernw.de 1. Summary: The Online Registration Facility of Algorithmic Research PrivateWire VPN Software doesn't do proper...

[Full-disclosure] SEC Consult SA-20060613-0 :: Outlook Web Access Cross Site Scripting Vulnerability

SEC-CONSULT Security Advisory 20060613-0 ======================================================================= title: HTML Code Injection in Outlook Web Access program: Outlook Web Access vulnerable version: Exchange 2000 SP3, 2003 SP1, 2003 SP2 impact: severe homepage:...

Ultimate PHP Board multiple XSS flaws

The remote version of Ultimate PHP Board UPB is affected by several cross-site scripting vulnerabilities. These issues are due to a failure of the application to properly sanitize user-supplied input. SPDX-FileCopyrightText: 2005 Josh Zlatin-Amishav Some text descriptions might be excerpted from ...

[Full-disclosure] [xfocus-SD-060314]Microsoft Office Excel Buffer Overflow Vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Relase Date: 2006-03-15 CVE: CVE-2006-0031 Affected Products: ================== Microsoft Office Excel 2000 Microsoft Office Excel XP Microsoft Office Excel 2003 Impact: ======= Microsoft Excel is a popular spreadsheet program of Microsoft Office...

IRM 017: Multiple Vulnerabilities in Infovista Portal SE

---------------------------------------------------------------------- IRM Security Advisory No. 017 Multiple Vulnerabilities in Infovista Portal SE Vulnerability Type / Importance: Directory Traversal / High Information Leakage / Low Problem Discovered: January 20th 2006 Vendor Contacted: Januar...

IRM 013: Ultraapps Issue Manager is vulnerable to Privilege Escalation

---------------------------------------------------------------------- IRM Security Advisory No. 013 Ultraapps Issue Manager is vulnerable to Privilege Escalation Vulnerablity Type / Importance: Privilege Escalation / High Problem discovered: November 25th 2005 Vendor contacted: November 25th 200...

Avirt gateway insecure telnet proxy

It was possible to connect to the remote telnet server without password and to get a command prompt with the 'DOS' command. An attacker may use this flaw to get access on your system. OpenVAS Vulnerability Test $Id: avirtgatewaytelnet.nasl 8023 2017-12-07 08:36:26Z teissa $ Description: Avirt...

Compaq Web SSI DoS

It was possible to kill the remote web server by requesting something like: / This is probably a Compaq Web Enterprise Management server. SPDX-FileCopyrightText: 2004 Michel Arboi Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right...

CERN httpd CGI name heap overflow

It was possible to kill the remote web server by requesting GET /cgi-bin/A.AAAA...A HTTP/1.0 This is known to trigger a heap overflow in some servers like CERN HTTPD. SPDX-FileCopyrightText: 2005 Michel Arboi Some text descriptions might be excerpted from a referenced sources, and are Copyright C...

[Full-disclosure] iDEFENSE Security Advisory 10.24.05: SCO Unixware Setuid ppp prompt Buffer Overflow Vulnerability

SCO Unixware Setuid ppp prompt Buffer Overflow Vulnerability iDEFENSE Security Advisory 10.24.05 http://www.idefense.com/application/poi/display?type=vulnerabilities October 24, 2005 I. BACKGROUND SCO UnixWare is a UNIX operating system. More information is available at:...

Sun Solaris "tl" Driver Denial of Service Vulnerability

Secunia Advisory: SA16874 Release Date: 2005-09-20 Critical: Less critical Impact: DoS Where: Local system Solution Status: Vendor Patch OS: Sun Solaris 10 Select a product and view a complete list of all Patched/Unpatched Secunia advisories affecting it. Description: A vulnerability has been...

Rational ClearQuest Cross-Site Scripting Vulnerability

Secunia Advisory: SA16717 Release Date: 2005-09-20 Critical: Less critical Impact: Cross Site Scripting Where: From local network Solution Status: Vendor Patch Software: Rational ClearQuest 2002 Rational ClearQuest 2003 Select a product and view a complete list of all Patched/Unpatched Secunia...

Symantec Brightmail AntiSpam Denial of Service Vulnerabilities

Secunia Advisory: SA16733 Release Date: 2005-09-07 Critical: Moderately critical Impact: DoS Where: From remote Solution Status: Vendor Patch Software: Symantec Brightmail AntiSpam 6.x Select a product and view a complete list of all Patched/Unpatched Secunia advisories affecting it. Description:...

GuppY Multiple Vulnerabilities

Secunia Advisory: SA16707 Release Date: 2005-09-06 Critical: Highly critical Impact: Cross Site Scripting System access Where: From remote Solution Status: Vendor Patch Software: GuppY 4.x Select a product and view a complete list of all Patched/Unpatched Secunia advisories affecting it...

Apache PCRE Integer Overflow Vulnerability

Secunia Advisory: SA16688 Release Date: 2005-09-05 Critical: Less critical Impact: Privilege escalation Where: Local system Solution Status: Vendor Patch Software: Apache 2.0.x Select a product and view a complete list of all Patched/Unpatched Secunia advisories affecting it. CVE reference:...

mod_ssl "SSLVerifyClient" Security Bypass Security Issue

modssl "SSLVerifyClient" Security Bypass Security Issue Secunia Advisory: SA16700 Release Date: 2005-09-05 Critical: Moderately critical Impact: Security Bypass Where: From remote Solution Status: Vendor Patch Software: modssl 2.x Select a product and view a complete list of all Patched/Unpatched...

myBloggie "username" SQL Injection Vulnerability

Secunia Advisory: SA16699 Release Date: 2005-09-05 Critical: Moderately critical Impact: Security Bypass Manipulation of data Where: From remote Solution Status: Vendor Patch Software: myBloggie 2.x Select a product and view a complete list of all Patched/Unpatched Secunia advisories affecting it...