GLSA-200408-15 : Tomcat: Insecure installation

The remote host is affected by the vulnerability described in GLSA-200408-15 Tomcat: Insecure installation The Gentoo ebuild for Tomcat sets the ownership of the Tomcat init scripts as tomcat:tomcat, but those scripts are executed with root privileges when the system is started. This may allow a...

Mandrake Linux Security Advisory : kernel (MDKSA-2003:038-1)

A bug in the kernel module loader code could allow a local user to gain root privileges. This is done by a local user using ptrace and attaching to a modprobe process that is spawned if the user triggers the loading of a kernel module. A temporary workaround can be used to defend against this fla...

J2EE 1.4 reference implementation: database component allows remote code execution

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Illegalaccess.org security advisory i/12-2003 www.illegalaccess.org J2EE 1.4 reference implementation: database component allows remote code execution Brief ===== Product : J2EE reference implementation java.sun.com/j2ee/download.html Component :...

Arbitrary code execution problem in Achievo

Arbitrary code execution problem in Achievo 0. Table of Contents 1. Summary / Impact analysis 2. Affected versions 3. Workaround / Solution 4. Proof of Vulnerability 5. References 1. Summary / Impact analysis Achievo is a web-based project management tool for business-environments. It has been...

Using the backbutton in IE is dangerous

---..---..---..---..---..---..---..---..---..---..---..---..---- Title: Using the backbutton in IE is dangerous. Date: 2002-04-15 Software: At least Internet Explorer 6.0. Tested env: Windows 2000 pro, XP. Rating: Medium because user interaction is needed. Impact: Read cookies/local files and...

Security Bulletin MS01-016

---------------------------------------------------------------------- Title: Malformed WebDAV Request Can Cause IIS to Exhaust CPU Resources Date: 08 March 2001 Software: IIS 5.0 Impact: Denial of Service Bulletin: MS01-016 Microsoft encourages customers to review the Security Bulletin at:...