|
|

Latest Advisories
2003-09-27
Secunia
Security Tracker
Security Focus
Symantec
Secunia
2003-09-26
Cfengine Remotely Exploitable Buffer Overflow
A vulnerability has been identified in Cfengine allowing malicious people to execute arbitrary code on the master server. [Full Advisory]
sbox Path Disclosure Vulnerability
A vulnerability has been reported in sbox, which can be exploited by malicious people to see path information. [Full Advisory]
MPlayer ASX Streaming Buffer Overflow Vulnerability
A vulnerability has been reported in MPlayer, which can be exploited by malicious people to compromise a user's system. [Full Advisory]
Savant Web Server Infinite Loop Denial of Service
A vulnerability has been reported in Savant Web Server, which can be exploited by malicious people to cause a DoS (Denial of Service). [Full Advisory]
OpenPKG update for ProFTPD
OpenPKG has issued updated packages for ProFTPD. These fix a vulnerability, which can be exploited by some malicious users to compromise a vulnerable system. [Full Advisory]
wzdftpd Login Denial of Service Vulnerability
A vulnerability has been reported in wzdftpd allowing malicious people to cause a Denial of Service. [Full Advisory]
Tcl Web Server Directory Traversal and Cross Site Scripting
Multiple vulnerabilities have been reported in Tcl Web Server, which can be exploited by malicious people to see the contents of directories and conduct Cross Site Scripting. [Full Advisory]
Debian Marbles Privilege Escalation Vulnerability
Debian has issued updated packages for marbles. These fix a vulnerability, which can be exploited by malicious, local users to escalate their privileges on a vulnerable system. [Full Advisory]
BRS WebWeaver IP Logging Bypass
A security issue has been identified in BRS WebWeaver allowing malicious people to make HTTP requests where the IP isn't logged. [Full Advisory]
Security Tracker
Marbles Game HOME Environment Variable Buffer Overflow Lets Local Users Gain Elevated Privileges
A buffer overflow vulnerability was reported in the Marbles game software. A local user may be able to obtain elevated privileges on the target system.
Impact: Execution of arbitrary code via local system, User access via local system
Sambar Server Contains Multiple Unspecified Vulnerabilities
Several vulnerabilities were reported in Sambar Server. The specific nature of these flaws was not disclosed, but one is reported to be a significant vulnerability.
Impact: Not specified
sbox May Disclose Installation Path and User Account Paths to Remote Users
A vulnerability was reported in 'sbox'. A remote user can determine the installation path and the path to various user cgi scripts.
Impact: Disclosure of system information, Disclosure of user information
Cfengine Buffer Overflow in 'cfservd' Lets Remote Users Execute Arbitrary Code
A stack overflow vulnerability was reported in Cfengine in the 'cfservd' daemon. A remote user can execute arbitrary code on the target system.
Impact: Execution of arbitrary code via network, User access via network
myServer Input Validation Flaw Discloses Files on the System to Remote Users
Arnaud Jacques (aka scrap) reported a directory traversal vulnerability in myServer. A remote user can view arbitrary files on the system with the privileges of the web service.
Impact: Disclosure of system information, Disclosure of user information
SecurityFocus BugTraq
SecurityFocus Vulnerabilities
09/26/2003 Re: ICMP pokes holes in firewalls... Darren Reed
09/26/2003 MDKSA-2003:096 - Updated apache2 packages fix CGI scripting deadlock Mandrake Linux Security Team
09/26/2003 MDKSA-2003:095 - Updated proftpd packages fix remote root vulnerability Mandrake Linux Security Team
09/26/2003 Re: Packetstorm started a try2crack of A.R.C.S. Algorithm mhw netris org (Mark H Weaver)
09/26/2003 Re: base64 Steven M. Christey
09/26/2003 Re: base64 Earl Hood
09/26/2003 Re: Packetstorm started a try2crack of A.R.C.S. Algorithm der Mouse
09/26/2003 RE: base64 Rainer Gerhards
09/26/2003 RE: Ruh-Roh SOBIG.G? James C. Slora, Jr.
09/26/2003 RE: base64 Michael Wojcik
09/26/2003 Packetstorm started a try2crack of A.R.C.S. Algorithm Angelo Rosiello
09/26/2003 Re: base64 Bennett Todd
09/26/2003 Re: base64 Bennett Todd
09/26/2003 Re[2]: base64 3APA3A
09/26/2003 RE: CyberInsecurity: The cost of Monopoly emacdona edmacdonald net
09/26/2003 RE: base64 Louis Erickson
09/26/2003 Re: base64 Bennett Todd
09/26/2003 DCE 1.2.2c Denial of Service Vulnerability on IRIX SGI Security Coordinator
09/26/2003 Re: Does VeriSign's SiteFinder service violate the ECPA? Bob Johnson
09/26/2003 Re: Sanctum AppScan 4 misses potential vulnerabilities in wrapped links Valdis Kletnieks vt edu
09/26/2003 @Stake pulls pin on Geer: Effect on research and publication Patrick J. Kobly
09/26/2003 Re: ICMP pokes holes in firewalls... H D Moore hdm@digitaloffense.net,(by way of Lucio )
09/26/2003 RE: Ruh-Roh SOBIG.G? Larry Seltzer
09/26/2003 Re: ICMP pokes holes in firewalls... Lucio
09/26/2003 McNews 1.3 : File Disclosure Vulnerability Sebastien Lelarge
09/26/2003 RE: Sanctum AppScan 4 misses potential vulnerabilities in wrapped links Dawes, Rogan (ZA - Johannesburg)
09/26/2003 SMC Router Denial of Service exploit res076cf alltel net
09/26/2003 Re: [OpenPKG-SA-2003.042] OpenPKG Security Advisory (openssh) Ralf S. Engelschall
09/26/2003 Re: LanSuite 2003 - Multiple Vulnerabilities Stan Bubrouski
09/26/2003 Re: LanSuite 2003 - Multiple Vulnerabilities Stan Bubrouski
09/26/2003 [SECURITY] [DSA-390-1] New marbles packages fix buffer overflow Matt Zimmerman
09/26/2003 Re: Ruh-Roh SOBIG.G? Valdis Kletnieks vt edu
09/26/2003 Re: LanSuite 2003 - Multiple Vulnerabilities Phuong Nguyen
09/26/2003 RE: [Full-Disclosure] CyberInsecurity: The cost of Monopoly Richard M. Smith
09/26/2003 RE: [Full-Disclosure] CyberInsecurity: The cost of Monopoly Marc Maiffret
09/26/2003 CyberInsecurity: The cost of Monopoly Jonathan A. Zdziarski
09/26/2003 Mplayer Buffer Overflow Otero, Hernan
09/26/2003 Re: ICMP pokes holes in firewalls... Darren Reed
2003-09-23: wzdftpd Login Remote Denial of Service Vulnerability
2003-09-23: Escapade Scripting Engine PAGE Parameter Path Disclosure Vulnerability
2003-09-23: Ntpd Remote Buffer Overflow Vulnerability
2003-09-23: XFree86 XLOCALEDIR Buffer Overflow Variant Vulnerability
2003-09-23: Ingate Firewall/SIParator Packet Filter Rule Bypass Vulnerability
2003-09-23: MPG123 Remote File Play Heap Corruption Vulnerability
2003-09-23: Linux Netfilter NAT Remote Denial of Service Vulnerability
2003-09-23: ColdFusionMX Error Handler Pages Cross-Site Scripting Vulnerability
Symantec SSR
W32.Smibag.Worm September 26, 2003 September 26, 2003
PWSteal.Lemir.F
Trojan.PSW>Legendmir.aa[AVP] September 26, 2003 September 26, 2003
Backdoor.Zombam.B
Backdoor.Zombam.i[AVP] September 26, 2003 September 26, 2003
Backdoor.Semes September 25, 2003 September 26, 2003
|
|
|
 |
|
No Comments Allowed for Anonymous, please register |
|
| |
|
Login |
|
 |
|
|
|
|
· New User? · Click here to create a registered account.
|
|
|
Article Rating |
|
 |
|
|
|
|
Average Score: 0 Votes: 0
|
|
|