Sophos Anti-Virus 6.5.4 Vulnerability

Name Cross Site Scripting Vulnerability in Sophos Anti-Virus Systems Affected Sophos Anti-Virus, version 6.5.4 R2 Severity Medium Category Cross Site Scripting Author Context Information Security Ltd Advisory 6th September 2007 Description ----------- A ZIP archive containing a virus signature wi...

Novell Groupwise WebAccess GWINTER.EXE远程缓冲区溢出漏洞

Novell GroupWise是Novell基于WEB的应用服务程序。 Novell Groupwise WebAccess处理HTTP请求存在缓冲区溢出，远程攻击者可以利用漏洞以应用程序权限执行任意指令。 问题存在于监听TCP 7205和7211的GWINTER.exe进程中，在处理HTTP BASIC验证请求时，拷贝用户提供的BASE64数据到固定大小的堆栈缓冲区，发送至少336字节会由于调用有漏洞的base64decode调用而造成基于堆栈的缓冲区溢出，可以应用程序权限执行任意指令。 Novell Groupwise 7.0 Novell Groupwise 7.0.0 SP1...

ibmwebsphere-bypass.txt

SUMMARY Vulnerability found in: IBM WebSphere Host On-Demand HOD Type: Unauthorized, remote access to HOD administration pages Applies to: Version 6.0, 7.0, 8.0, and 9.0 possibly 10.0 Severity Level: High Exploit Difficulty: Very Low Initial Vendor Notification: approximately 11/3/2006 Discovered...

[SA16280] IBM Lotus Notes Multiple Vulnerabilities

TITLE: IBM Lotus Notes Multiple Vulnerabilities SECUNIA ADVISORY ID: SA16280 VERIFY ADVISORY: http://secunia.com/advisories/16280/ CRITICAL: Highly critical IMPACT: Security Bypass, System access WHERE: From remote SOFTWARE: IBM Lotus Notes 6.x http://secunia.com/product/388/ IBM Lotus Notes 7.x...

CVE-2002-1696

Microsoft Outlook plug-in PGP version 7.0, 7.0.3, and 7.0.4 silently saves a decrypted copy of a message to hard disk when "Automatically decrypt/verify when opening messages" option is checked, "Always use Secure Viewer when decrypting" option is not checked, and the user replies to an encrypted...

Finjan SurfinGate 7.0 - .ASCII File Extension File Filter Circumvention

Finjan SurfinGate 7.0 - .ASCII File Extension File Filter Circumvention source: https://www.securityfocus.com/bid/13959/info SurfinGate may allow an attacker to circumvent file filters. It has been reported that an attacker may bypass SurfinGate file filtering rules by using ASCII encoding in the...

PHP-NUKE 7.0 FINAL (and olders) sql injection

RusH security team | http://www.rsteam.ru o----------------------------= Advisory 16 =----------------------------o oxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxo o--------------------------------------------------------------------------o | Product: PHP-Nuke | |...

MDKSA-2000:028 kon2 update

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Linux-Mandrake Security Update Advisory Package name: kon2 Date: August 1st, 2000 Advisory ID: MDKSA-2000:028 Affected versions: 7.0, 7.1 Problem Description: There is a vulnerable suid program called fld. This program accepts option input from a text...