security advisory linux 2.4.x ip_conntrack_irc

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Important security announcement of the netfilter project, 25 Feb 2002 http://www.netfilter.org/security/2002-02-25-irc-dcc-mask.html. SUBJECT: IRC connection tracking helper module SUMMARY: IRC connection tracking opens unwanted ports SYSTEM: All Linu...

Oracle 9iAS mod_plsql Help Page Request Remote Overflow

Oracle 9i Application Server uses Apache as it's web server. There is a buffer overflow in the modplsql module which allows an attacker to run arbitrary code. %NASLMINLEVEL 70300 This script was written by Matt Moore Changes by Tenable: - Revised plugin title 6/10/09 - Replaced broken URLs, added...

(SSRT0738) OpenVMS Security Mandatory Update, OVMSMUP03

NO RESTRICTION FOR DISTRIBUTION PROVIDED THE ADVISORY REMAINS INTACT TITLE: SSRT0738 OpenVMS Security Mandatory Update, OVMSMUP03 SOURCE: Compaq Computer Corporation Software Security Response Team COMPONENT IMPACT: DECwindows Motif Server X-REF: None October 30, 2001 "Compaq is broadly...

Oracle9iAS Web Cache 2.0 - Remote Buffer Overflow

source: https://www.securityfocus.com/bid/3443/info A buffer overflow condition can be triggered in Oracle 9iAS Web Cache 2.0.0.1.0 by submitting a malicious URL. This overflow can lead to either the process exiting, the process hanging, or the injection of malicious code. This occurs on all four...

Microsoft Windows 2000 Telnet Service fails to enforce timeouts on idle telnet sessions

Overview The Microsoft Windows 2000 Telnet Service contains a denial-of-service vulnerability that allows remote attackers to disrupt the telnet service on affected servers. Description The Microsoft Windows 2000 Telnet Service contains a vulnerability that allows a remote attacker to place idle...

[SNS Advisory No.40] TrendMicro OfficeScan Corp Edition ver.3.54 Remote read file of IUSER authority Vulnerability

---------------------------------------------------------------------- SNS Advisory No.40 TrendMicro OfficeScan Corp Edition ver.3.54 Remote read file of IUSER authority Vulnerability Problem first discovered: 21 Aug 2001 Published: Fri, 24 Aug 2001...

SEDUM HTTP Server Long HTTP Request Overflow DoS

It was possible to make the remote web server crash by sending it too much data. An attacker may use this flaw to prevent this host from fulfilling its role. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid10637; scriptversion"1.25"; scriptcvsdate"Date: 2018/07/27...

Security Bulletin MS01-010

---------------------------------------------------------------------- Title: Patch Available for "Windows Media Player Skins File Download" Vulnerability Date: February 14, 2001 Software: Windows Media Player 7 Impact: Run arbitrary code Bulletin: MS01-010 Microsoft encourages customers to...

GoAhead Web Server Directory Traversal Vulnerability

Hello! We have found a bug in the GoAhead WebServer, v.2.0 and v.2.1. Attacker can get any file from the drive, where web-server was installed. try follow request http://www.somehost.com/............autoexec.bat This vulnerability may allow an attacker to execute code with the privileges of the...

Microsoft Indexing Service (Windows 2000NT 4.0) - .htw Cross-Site Scripting

Microsoft Indexing Service Windows 2000NT 4.0 - .htw Cross-Site Scripting source: https://www.securityfocus.com/bid/1861/info A cross-site scripting vulnerability has been reported in Microsoft Indexing Services for Windows 2000/NT4 and its handling of the .htw extension. If a user inadvertantly...

Microsoft NetMeeting 3.0.1 4.4.3385 - Remote Desktop Sharing Denial of Service

source: https://www.securityfocus.com/bid/1798/info The Remote Desktop Sharing component of Microsoft NetMeeting for Windows NT 4.0 / 2000 does not properly handle a particular type of malformed input string sent over port 1720. CPU utilization can be caused to spike to 100% and any existing...

DST2K0039: Webteachers Webdata: Importing files lower than web ro ot possible in to database

All, We have released the following advisory due to the fact that we have provided a patch Section II. If people require any help with implementing this patch please come back to us on the following e-mail address [email protected]. This patch may require a little tinkering with for you...

Microsoft Windows NT 4.02000 - Spoofed LPC Request (MS00-003)

Microsoft Windows NT 4.02000 - Spoofed LPC Request MS00-003 source: https://www.securityfocus.com/bid/1753/info This vulnerability is a new variation of the NT LPC Privilege Escalation Vulnerabilty please see https://www.securityfocus.com/bid/934 for details reported on January 12, 2000 by...

MS00-047: NetBIOS Name Server Protocol Spoofing patch (269239)

The hotfix for the 'NetBIOS Name Server Protocol Spoofing' problem has not been applied. This vulnerability allows a malicious user to make this host think that its name has already been taken on the network, thus preventing it from functioning properly as an SMB server or client. C Tenable Netwo...

bigbrother-1.4g.txt

/ Big Brother Exploit For ALL Versions prior to v.1.4h Desc: View the contents of any file on the remote system. Including /etc/passwd. Contributions: Identified and Proof of Concept by [email protected] and Loki LoA Greets and shouts to: smile, Vastervik, Self, alucard, RootHat, Lammie The...

Security Bulletin (MS00-032)

Microsoft Security Bulletin MS00-032 - -------------------------------------- Patch and Tool Available for "Protected Store Key Length" Vulnerability Originally Posted: June 01, 2000 Summary ======= Microsoft has released a patch and a tool that eliminate a security vulnerability in Microsoftr...

Заткнута очередная дырка в IIS

Используя строку с большим количеством ESC-символов xx можно существенно замедлить работу сервера IIS или даже вывести его из строя на некоторое время...

Security Bulletin (MS00-023)

Microsoft Security Bulletin MS00-023 - -------------------------------------- Patch Available for "Myriad Escaped Characters" Vulnerability Originally Posted: April 12, 2000 Summary ======= Microsoft has released a patch that eliminates a security vulnerability in Microsoftr Internet Information...

MS99-059: Microsoft SQL Server Crafted TCP Packet Remote DoS (uncredentialed check)

The remote Microsoft SQL server can be shut down when it is sent a TCP packet containing more than 2 NULLs. An attacker may use this problem to prevent it from being used by legitimate clients, thus threatening your business. %NASLMINLEVEL 70300 C Tenable Network Security, Inc...

hotmail.browser.trust.txt

Date: Wed, 5 May 1999 17:31:34 -0500 From: David L. Nicol To: [email protected] Subject: hotmail claims vulnerability patched, so here it is Dear Paul: I am reading your previous article on hotmail security, http://www.news.com/News/Item/0,4,33996,00.html and I'm CCing this message to the...