Buffer overfllow in /bin/login under System V updated since 13.12.2001
Published:		03.10.2002
Source:		X-FORCE
SecurityVulns ID:		1623
Type:		remote
Level:		10/10
Description:		Buffer overflow on large name= request. Heap overflow in TTYPROMPT is trivially exploitable with remote root compromise.

Affected:		IBM : AIX 4.3
		SUN : Solaris 8
		IBM : AIX 5.1
		CISCO : SC2200
		CISCO : VSC3000
		CISCO : PGW2200
		CISCO : BAMS
		CISCO : VSPT
		CISCO : IDS 3.0

Original document		Jonathan S, Solaris 2.6, 7, 8 (03.10.2002)
		CISCO, Security Advisory: Solaris /bin/log vulnerability (11.04.2002)
		X-FORCE, ISSalert: ISS Advisory: Buffer Overflow in /bin/login (13.12.2001)

Files:		. SOLARIS LOGIN remote via telnetd
Discuss:		Read or add your comments to this news (0 comments)

Unisys Clearpath DoS
Published:		03.10.2002
Source:		BUGTRAQ
SecurityVulns ID:		2319
Type:		remote
Level:		5/10
Description:		Device hangs after SYN-scan.

Affected:

UNISYS : Clearpath NX

Original document

Jonathan G. Lampe, Kill a Unisys Clearpath with nmap port scan (03.10.2002)

Discuss:

Read or add your comments to this news (0 comments)

MySQL Windows buffer overflow
Published:		03.10.2002
Source:		BUGTRAQ
SecurityVulns ID:		2322
Type:		local
Level:		5/10
Description:		Buffer overflow on .ini-file parsing.

Affected:		MYSQL : MySQL 3.23
		MYSQL : MySQL 4.0

Original document

Matt Moore, wp-02-0003: MySQL Locally Exploitable Buffer Overflow (03.10.2002)

Discuss:

Read or add your comments to this news (0 comments)

Локальная дырка в MySQL updated since 19.01.2001
Published:		03.10.2002
Source:		BUGTRAQ
SecurityVulns ID:		923
Type:		local
Level:		5/10
Описание:		Переполнение буфера при запуске с ключем -е.

Affected:

MYSQL : MySQL 3.23

Original document

Nicolas GREGOIRE, Buffer overflow in MySQL < 3.23.31 (19.01.2001)

Files:		Linux MySQL Exploit by Luis Miguel Silva [aka wC]
Discuss:		Read or add your comments to this news (0 comments)

SurfControl SuperScout Multiple Bugs updated since 03.10.2002
Published:		10.10.2002
Source:		BUGTRAQ
SecurityVulns ID:		2320
Type:		remote
Level:		5/10
Description:		Access to user names/passwords, weak passwords encryption, large GET request DoS, directory traversal, SQL injection.

Affected:

SURFCONTROL : SuperScout

Original document		'ken'@FTU , Four Vulnerabilities in SurfControl's SuperScout Email Filter Administrative Server (10.10.2002)
		Matt Moore, wp--02-0005: Multiple Vulnerabilities in SuperScout Web Reports Server (03.10.2002)

Discuss:

Read or add your comments to this news (0 comments)

Buffer overflow and directory traversal in Microsoft Windows Compressed Folders feature updated since 03.10.2002
Published:		11.10.2002
Source:		MICROSOFT
SecurityVulns ID:		2318
Type:		local
Level:		5/10
Description:		Buffer overflow and directory traversal while extracting file from .zip archive.

Affected:		MICROSOFT : Windows ME
		LOTUS : Notes Client R5
		MICROSOFT : Windows XP
		ALADDIN : Stuffit Expander 6.5
		LOTUS : Notes Client R6

Original document		Rapid 7 Security Advisories, R7-0004: Multiple Vendor Long ZIP Entry Filename Processing (11.10.2002)
		MICROSOFT, Security Bulletin MS02-054: Unchecked Buffer in File Decompression Functions Could Lead to Code Execution (Q329048) (03.10.2002)

Discuss:

Read or add your comments to this news (0 comments)

Jetty directory traversal updated since 03.10.2002
Published:		04.10.2006
Source:		BUGTRAQ
SecurityVulns ID:		2321
Type:		remote
Level:		5/10
Description:		Directory traversal on CGI apllications access.

Affected:		MORTBAY : Jetty 4.0
		IBM : IBM Trading Partner Interchange 4.2
		MORTBAY : Jetty 4.1
		JETTY : Jetty 4.2
		CA : Unicenter WSDM 3.1

Original document		CA, [CAID 34661]: CA Unicenter WSDM File System Read Access Vulnerability (04.10.2006)
		SECUNIA, [SA12703] IBM Trading Partner Interchange Arbitrary File Access Vulnerability (06.10.2004)
		Matt Moore, wp-02-0011: Jetty CGIServlet Arbitrary Command Execution (03.10.2002)

Discuss:

Read or add your comments to this news (0 comments)