 |
|
|
|
| Multiple local bugs in Lotus Domino | | Published: |  | 03.05.2002 | | Source: |  | SECURITEAM | | SecurityVulns ID: |  | 1985 | | Type: |  | local | | Level: |  | 6/10 |
| Affected: |  | LOTUS : Domino 5.0 |
| Original document |  | SECURITEAM, [NEWS] Lotus Domino Bindsock Notes_ExecDirectory Buffer Overflow Vulnerability (03.05.2002) |
| | | SECURITEAM, [NEWS] Lotus Domino Bindsock Arbitrary File Creation Vulnerability (03.05.2002) |
| | | SECURITEAM, [NEWS] Lotus Domino Bindsock PATH Buffer Overflow Vulnerability (03.05.2002) |
| Symbolic links in Nautilus | | Published: | | 03.05.2002 | | Source: | | BUGTRAQ | | SecurityVulns ID: | | 1986 | | Type: | | local | | Level: | | 5/10 |
| Affected: | | EAZEL : Nautilus 1.0 |
| Original document | | Joe Testa, R7-0003: Nautilus Symlink Vulnerability (03.05.2002) |
| Unauthorized access to locked workstation via wireless Logitech keyboards | | Published: | | 03.05.2002 | | Source: | | BUGTRAQ | | SecurityVulns ID: | | 1987 | | Type: | | local | | Level: | | 4/10 | | Description: |  | Hot key still work for locked workstation. |
| Original document | | keyboardhacker_(at)_hotmail.com, Logitech Keyboard Insecurity (03.05.2002) |
| Snapgear Lite+ DoS | | Published: | | 03.05.2002 | | Source: | | BUGTRAQ | | SecurityVulns ID: | | 1988 | | Type: | | remote | | Level: | | 5/10 | | Description: | | Multiple scenarios for DoS attacks. |
| Affected: | | SNAPGEAR : Snapgear Lite+ 1.5 |
| Original document | | Peter Gründl, KPMG-2002017: Snapgear Lite+ Firewall Denial of Service (03.05.2002) |
| Multiple buffer overflow in 3COM 3CDaemon | | Published: | | 03.05.2002 | | Source: | | BUGTRAQ | | SecurityVulns ID: | | 1989 | | Type: | | remote | | Level: | | 5/10 |
| Affected: | | 3COM : 3CDaemon 2.0 |
| Original document | | skyrim msh, 3CDaemon DoS exploit (03.05.2002) |
| Directory traversal in DocBook | | Published: | | 03.05.2002 | | Source: | | BUGTRAQ | | SecurityVulns ID: | | 1991 | | Type: | | local | | Level: | | 4/10 | | Description: | | During conversion to HTML identifuers are used to form a filename without check for ../ |
| Affected: | | DOCBOOK : docbook 0.6 |
| Original document | | REDHAT, [RHSA-2002:062-08] Insecure DocBook stylesheet option (03.05.2002) |
Buffer overflow and directory traversal in 4D webserver
updated since 15.01.2002 | | Published: | | 03.05.2002 | | Source: | | NTBUGTRAQ | | SecurityVulns ID: | | 1688 | | Type: | | remote | | Level: | | 5/10 |
| Affected: | | MDG : Web Server 4D 3.5 | | | | MDG : ZBServer Pro 1.50 | | | | MDG : Web Server 4D 6.7 |
| Original document | | Jonas Ländin, iXsecurity.20020404.4d_webserver.a (03.05.2002) |
| | | Tamer Sahin, Web Server 4D/eCommerce 3.5.3 DoS Vulnerability (15.01.2002) |
| | | Tamer Sahin, Web Server 4D/eCommerce 3.5.3 Directory Traversal Vulnerability (15.01.2002) |
Multiple buffer overflows in Progress
updated since 06.10.2001 | | Published: | | 03.05.2002 | | Source: | | BUGTRAQ | | SecurityVulns ID: | | 1497 | | Type: | | local | | Level: | | 5/10 | | Description: | | Multiple buffer overflows, format string bugs, etc. |
| Affected: | | PROGRESS : Progress 9.2 |
| Original document | | Kevin Finisterre, latest Progress patch has suid issues AGAIN. (03.05.2002) |
| | | Kevin Finisterre, Progress Software suid overflows again. (25.03.2002) |
| | | Kevin Finisterre, Progres Databse PROMSGS Format strings issue. (03.11.2001) |
| | | Kevin Finisterre, Progress TERM (protermcap) overflows and PROMSGS overflows (09.10.2001) |
| | | Kevin Finisterre, Progress Database vulnerabilities (06.10.2001) |
| CGI bugs | | Published: | | 03.05.2002 | | Source: | | BUGTRAQ | | SecurityVulns ID: | | 1990 | | Type: | | remote | | Level: | | 5/10 |
| Affected: | | CGI : MyGuestbook 1.0 | | | | CGI : Spooky Login 2.5 |
| Original document | | SECURITEAM, [NT] Spooky Login SQL Injection Vulnerability (03.05.2002) |
| | | SECURITEAM, [UNIX] SunShop Shopping Cart Security Vulnerability (03.05.2002) |
| | | BrainRawt ., Levcgi.coms MyGuestbook JavaScript Injection Vulnerability (03.05.2002) |
JSP pages source code access
updated since 08.06.2000 | | Published: | | 03.05.2002 | | Source: | | NTBUGTRAQ | | SecurityVulns ID: | | 257 | | Type: | | remote | | Level: | | 6/10 | | Description: | | There are multiple ways to get a source code of JSP pages |
| Affected: | | UNIFY : eWave ServletExec 3.0 | | | | IBM : WebSphere 3.0.2 | | | | BEA : Weblogic Server 5.1 | | | | BEA : Weblogic Server 4.5 | | | | CAUCHO : Resin 1.2 | | | | IBM : IBM-HTTP-Server 1.0 | | | | IBM : VSE-HTTPD 01.04 | | | | ORACLE : WebLogic Server 6.1 | | | | ORACLE : Oracle 9iAS | | | | GNU : GNUJSP 1.0 |
| Original document | | Peter Gründl, KPMG-2002016: Bea Weblogic incorrect URL parsing issues (03.05.2002) |
| | | DEBIAN, [SECURITY] [DSA 114-1] New GNUJSP packages fix directory and script source disclosure (24.02.2002) |
| | | NGSSoftware Insight Security Research, JSP translation file access under Oracle 9iAS (06.02.2002) |
| | | 'ken'@FTU, IBM AS/400 HTTP Server '/' attack (09.11.2001) |
| | | benjurry, RESIN ServletExec JSP Source Disclosure Vulnerability(IIS 5) (24.11.2000) |
| | | benjurry, RESIN ServletExec JSP Source Disclosure Vulnerability(Resin Web Server) (24.11.2000) |
| | | benjurry, RESIN ServletExec JSP Source Disclosure Vulnerability(Apache 1.3.6 Win2k)) (24.11.2000) |
| | | Woch, Wojciech, Disclosure of JSP source code with ServletExec AS v3.0c + web instance (22.11.2000) |
| | | Foundstone Labs, Unify eWave ServletExec upload (01.11.2000) |
| | | Foundstone Labs, Unify eWave ServletExec DoS (31.10.2000) |
| | | Foundstone Labs, BEA's WebLogic *.jsp/*.jhtml remote command execution (02.08.2000) |
| | | stuart.mcclure_(at)_FOUNDSTONE.COM, BEA's WebLogic force handlers show code vulnerability (01.08.2000) |
| | | Foundstone Labs, IBM WebSphere default servlet handler showcode vulnerability (25.07.2000) |
| | | stuart.mcclure_(at)_FOUNDSTONE.COM, BEA WebLogic JSP showcode vulnerability (13.06.2000) |
| | | stuart.mcclure_(at)_FOUNDSTONE.COM, IBM WebSphere JSP showcode vulnerability (13.06.2000) |
| | | Russ, Potential vulnerability in Unify eWave ServletExec (08.06.2000) |
| Format string bug in rwalld | | Published: | | 03.05.2002 | | Source: | | CERT | | SecurityVulns ID: | | 1979 | | Type: | | remote | | Level: | | 8/10 | | Description: | | Formaqt string bug on syslog() call |
| |
|
| |
