CVE-2010-0359

CVE-2010-0359 affects Zeus Web Server before 4.3r5. The SSLv2 support, specifically SSL2_CLIENT_HELLO handling, can overflow a buffer due to insufficient boundary checks on user-supplied data, enabling a remote attacker to cause a daemon crash or possibly execute arbitrary code. Impact: full comp...

CVE-2010-0363

CVE-2010-0363 is an XSS vulnerability in Zeus Web Server prior to 4.3r5, specifically involving the Zeus Administration Server when SSL is enabled for the admin interface. Connected records confirm affected product/version ranges (e.g., Zeus Web Server 4.0–4.1r2) and that remote attackers can inj...

CVE-2010-0362

Affected product/versions: Zeus Web Server before 4.3r5. Root cause: failure to use random DNS transaction IDs for DNS requests, which can enable remote attackers to spoof DNS responses. Impact (as stated): DNS spoofing potential. Exploitation details: not provided in the connected documents. Rem...