|
|
2003-09-26
Secunia
Security Tracker
Security Focus
Symantec
Secunia
2003-09-26
Cfengine Remotely Exploitable Buffer Overflow
A vulnerability has been identified in Cfengine allowing malicious people to execute arbitrary code on the master server. [Full Advisory]
sbox Path Disclosure Vulnerability
A vulnerability has been reported in sbox, which can be exploited by malicious people to see path information. [Full Advisory]
MPlayer ASX Streaming Buffer Overflow Vulnerability
A vulnerability has been reported in MPlayer, which can be exploited by malicious people to compromise a user's system. [Full Advisory]
Savant Web Server Infinite Loop Denial of Service
A vulnerability has been reported in Savant Web Server, which can be exploited by malicious people to cause a DoS (Denial of Service). [Full Advisory]
OpenPKG update for ProFTPD
OpenPKG has issued updated packages for ProFTPD. These fix a vulnerability, which can be exploited by some malicious users to compromise a vulnerable system. [Full Advisory]
wzdftpd Login Denial of Service Vulnerability
A vulnerability has been reported in wzdftpd allowing malicious people to cause a Denial of Service. [Full Advisory]
Tcl Web Server Directory Traversal and Cross Site Scripting
Multiple vulnerabilities have been reported in Tcl Web Server, which can be exploited by malicious people to see the contents of directories and conduct Cross Site Scripting. [Full Advisory]
Debian Marbles Privilege Escalation Vulnerability
Debian has issued updated packages for marbles. These fix a vulnerability, which can be exploited by malicious, local users to escalate their privileges on a vulnerable system. [Full Advisory]
BRS WebWeaver IP Logging Bypass
A security issue has been identified in BRS WebWeaver allowing malicious people to make HTTP requests where the IP isn't logged. [Full Advisory]
2003-09-25
Gauntlet Firewall Oracle-Proxy Denial of Service
A vulnerability has been identified in Gauntlet Firewall allowing malicious people to crash the SQL-Gateway / Oracle-Proxy service. [Full Advisory]
Security Tracker
Special Alerts - OpenSSH bugs from last week and this week.
Sendmail potential remote code execution.
602Pro LAN Suite Discloses Files on the System to Remote Authenticated Users
Phuong Nguyen reported several vulnerabilities in 602Pro LAN Suite. A remote authenticated user can view arbitrary files on the target system. A remote authenticated user can also obtain information about WebMail users.
Impact: Disclosure of system information, Disclosure of user information
Comment Board Message Field Input Validation Flaws Permit Remote Cross-Site Scripting Attacks
A vulnerability was reported in Comment Board. A remote user can conduct cross-site scripting attacks.
Impact: Disclosure of authentication information, Disclosure of user information, Execution of arbitrary code via network, Modification of user information
GNOME Desktop on Solaris May Not Let Root Users Lock the Screen
A vulnerability was reported in the Gnome desktop in XScreenSaver, as distributed on Sun Solaris. Certain users may not be able to lock the screen.
Impact: User access via local system
WebTool-userpass May Disclose SSH User Passphrases to Certain Local Users
A vulnerability was reported in the WebTool-userpass package. The application may disclose a target user's SSH passphrase via a log file entry.
Impact: Disclosure of authentication information
Re-Boot Design ASP Forum SQL Injection Flaw Yields Remote Access to Any User Account
A vulnerability was reported in Re-Boot Design's ASP Forum. A remote user can inject SQL commands to gain access to accounts on the application.
Impact: User access via network
SecurityFocus BugTraq
SecurityFocus Vulnerabilities
09/26/2003 RE: Sanctum AppScan 4 misses potential vulnerabilities in wrapped links Dawes, Rogan (ZA - Johannesburg)
09/26/2003 SMC Router Denial of Service exploit res076cf alltel net
09/26/2003 Re: [OpenPKG-SA-2003.042] OpenPKG Security Advisory (openssh) Ralf S. Engelschall
09/25/2003 [eft] Remote atphttpd 0.4b Symantec SSR
Backdoor.Semes September 25, 2003 September 26, 2003
|
|
|
 |
|
No Comments Allowed for Anonymous, please register |
|
| |
|
Login |
|
 |
|
|
|
|
· New User? · Click here to create a registered account.
|
|
|
Article Rating |
|
|
|
|
|
|
Average Score: 0
Votes: 0
|
|
|
