Symantec Enterprise Firewall Secure Webserver info leak

Advanced IT-Security Advisory 02-10-2002 http://www.ai-sec.dk/ Issue: ====== Symantec Enterprise Firewall Secure Webserver info leak Problemdescription: =================== There exists a problem in Simple, secure webserver 1.1 which is shipped with Raptor Firewall 6.5 among others, in which an...

Apache mod_dav module vulnerable to DoS

Overview A denial-of-service vulnerability exists in Apache moddav. Description moddav is an Apache module. This module enables Apache web servers to provide users the ability to edit and manage files on a remote web server using the HTTP protocol. A vulnerability in moddav may allow an attacker ...

Another flaw in Apache?

Hello. While playing with the SetEnv directive with Apache, I noticed that httpd processes are dying with a signal 11 if the data stored in an environment variable was too long. I simply triggered the bug by creating a .htaccess file so a regular user can do it with : SetEnv DATELOCALE "..." The...

Дырка в CGI Ikonboard

Классические ошибки perl CGI...

Дырка в ksh

Проблема при создании временных файлов при перенаправлении ввода аналогична sh, tcsh bash и др...

All PHP-Nuke versions affected!!!

Hi! Recentely the "fixed" version of the user.php script was released. The vulnerability was reported in the article which can be read in http://www.phpnuke.org/article.php?sid=251. This new version though still allows any registered user to alter the password and other personal details of other...

[SECURITY] New version of xchat released

------------------------------------------------------------------------ Debian Security Advisory [email protected] http://www.debian.org/security/ Wichert Akkerman August 30, 2000 - ------------------------------------------------------------------------ Package : xchat Problem type : remote...

Дырка в FTP Browser (ftp.pl)

Обратный путь в директории позволяет получить содержимое любого файла...

brokerftp.txt

Remote DoS Attack in TransSoft's Broker Ftp Server v3.5 Vulnerability PROBLEM UssrLabs found a Remote DoS Attack in TransSoft's Broker Ftp Server v3.5, the buffer overflow is caused by a long user name 2730 characters. If TransSoft's Broker Server is running as a service the service will start...

ms-netmon-sms-DoS.txt

Microsoft's Network Monitor susceptible to Denial of Service attack. Microsoft's Network Monitor is a tool provided by Microsoft with its Windows NT Server and System Management Server SMS. The tool gives administrators the ability to analyze and maintain the integrity of the network, by providin...

Novell Netware 4.14.11 - SP5B Remote.NLM Weak Encryption

Novell Netware 4.14.11 - SP5B Remote.NLM Weak Encryption source: https://www.securityfocus.com/bid/482/info The encrypted passwords for Remote.NLM are remotely accessible to anyone with the ability to view SYS:System\LDRemote.NCF. The password encryption algorithm for Remote.NLM has been broken a...

CVE-2025-22184

...

CVE-2020-24522

...

Security Update for Project Multilingual User Interface 2003 (KB921585)

A security vulnerability exists in the Microsoft Office Project 2003 Multilingual User Interface Portuguese Grammar Checker that could allow remote code execution. This update resolves that vulnerability...

Security Update for Microsoft Office 2010 (KB4022137) 32-Bit Edition

A security vulnerability exists in Microsoft Office 2010 32-Bit Edition that could allow arbitrary code to run when a maliciously modified file is opened. This update resolves that vulnerability...

Security Update for Windows Server 2003 for Itanium-based Systems (KB942288)

A security issue has been identified in a Microsoft software product that could affect your system. You can help protect your system by installing this update from Microsoft. For a complete listing of the issues that are included in this update, see the associated Microsoft Knowledge Base article...