pserv buffer overflow updated since 26.11.2002
Published:		03.12.2002
Source:		BUGTRAQ
SecurityVulns ID:		2436
Type:		remote
Level:		5/10
Description:		buffer overflow on POST parsing.

Affected:

PSERV : Pserv 2.0

Original document		Matthew Murphy, Multiple pServ Remote Buffer Overflow Vulnerabilities (03.12.2002)
		dong-h0un U, Remote POST Buffer Overflow vulnerability in Pserv. (26.11.2002)

Files:		pServ 2.0.x:beta webserver remote buffer overflow exploit by jsk
Discuss:		Read or add your comments to this news (0 comments)

Integer overflow in cyrus-imap
Published:		03.12.2002
Source:		BUGTRAQ
SecurityVulns ID:		2451
Type:		remote
Level:		6/10
Description:		Integer overflow on line longer than 2Gb.

Affected:

CYRUS : cyrus-imapd 2.1

Original document

Timo Sirainen, pre-login buffer overflow in Cyrus IMAP server (03.12.2002)

Discuss:

Read or add your comments to this news (0 comments)

Buffer overflow in Cyrus Sieve
Published:		03.12.2002
Source:		BUGTRAQ
SecurityVulns ID:		2452
Type:		library
Level:		6/10
Description:		Buffer overflow on error messsage generation.

Affected:		CYRUS : cyrus-imapd 2.1
		CYRUS : libSieve 2.1

Original document

Timo Sirainen, Cyrus Sieve / libSieve buffer overflow (03.12.2002)

Discuss:

Read or add your comments to this news (0 comments)

Lawson weak permissions
Published:		03.12.2002
Source:		BUGTRAQ
SecurityVulns ID:		2453
Type:		local
Level:		5/10
Description:		Access restriction is not used during access to external DBMS.

Affected:

LAWSON : Lawson 8.0

Original document

John Eisenschmidt, Advisory: Lawson Financials RDBMS Insecurity (03.12.2002)

Discuss:

Read or add your comments to this news (0 comments)

FreeSWAN DoS
Published:		03.12.2002
Source:		BUGTRAQ
SecurityVulns ID:		2454
Type:		remote
Level:		6/10
Description:		Short packet handlink problem.

Affected:

FREESWAN : FreeSWAN 1.96

Original document

DEBIAN, [SECURITY] [DSA 201-1] New Free/SWan packages fix denial of service (03.12.2002)

Discuss:

Read or add your comments to this news (0 comments)

Multipel bugs in Webster Web Server
Published:		03.12.2002
Source:		BUGTRAQ
SecurityVulns ID:		2455
Type:		remote
Level:		5/10
Description:		Buffer overflows, crossite scripting, directory traversal.

Affected:

WEBSTER : Webster HTTP Server

Original document

Matthew Murphy, Advisory: Webster HTTP Server (03.12.2002)

Discuss:

Read or add your comments to this news (0 comments)

CGI bugs
Published:		03.12.2002
Source:		BUGTRAQ
SecurityVulns ID:		2456
Type:		remote
Level:		5/10

Affected:		YABB : YaBB 1
		3D3 : ShopFactory 5.8
		THATWARE : Thatware 0.4
		THATWARE : thatware 0.5

Original document		Fabricio Angeletti, Cross-site Scripting Vulnerability in YaBB 1 Gold - SP1! (03.12.2002)
		frog frog, Thatware (PHP) (03.12.2002)
		Richard van den Berg, ShopFactory shopping cart price manipulation (03.12.2002)

Discuss:

Read or add your comments to this news (0 comments)