CGI bugs updated since 01.03.2004
Published:		04.03.2004
Source:
SecurityVulns ID:		3494
Type:		remote
Level:		5/10

Affected:		PHPBB : phpBB 2.2
		INVISION : Invision Power Board 1.3
		YABB : YaBB 1.5
		SPIDERSALES : Spider Sales shopping cart

Original document		S-Quadra Security Research, Spider Sales shopping cart software multiple security vulnerabilities (04.03.2004)
		backspace, YabbSE (3 on 1) (02.03.2004)
		Knight Commander, Invision Power Board SQL injection! (01.03.2004)
		Cheng Peng Su, New phpBB ViewTopic.php Cross Site Scripting Vulnerability (01.03.2004)

Discuss:

Read or add your comments to this news (0 comments)

SonicWall ARP traffic amplification
Published:		04.03.2004
Source:		BUGTRAQ
SecurityVulns ID:		3498
Type:		remote
Level:		5/10
Description:		3x traffic ammplification from external to internal network.

Affected:		SONICWALL : SonicWall 6.2
		SONICWALL : SonicWall 6.3
		SONICWALL : SonicWall 6.4
		SONICWALL : SonicWall 6.5

Original document

xeno_(at)_hush.ai, SonicWall VPN/Firewall Appliance - DoS, ARP Flood, Network mapping vulnerability (04.03.2004)

Discuss:

Read or add your comments to this news (0 comments)

NetScreen-SA crossite scripting
Published:		04.03.2004
Source:		BUGTRAQ
SecurityVulns ID:		3499
Type:		remote
Level:		5/10
Description:		Crossite scripting in delhomepage.cgi

Affected:

NETSCREEN : NetScreen-SA 5000

Original document

Lachniet, Mark, 03-02-04 XSS Bug in NetScreen-SA 5000 Series of SSL VPN appliance (04.03.2004)

Discuss:

Read or add your comments to this news (0 comments)

FreeBSD TCP DoS
Published:		04.03.2004
Source:		FULL-DISCLOSURE
SecurityVulns ID:		3501
Type:		remote
Level:		5/10
Description:		By sending large number of non-sequential packets it's possible to cause memory exhaustion.

Affected:		FREEBSD : FreeBSD 4.8
		FREEBSD : FreeBSD 4.9
		FREEBSD : FreeBSD 5.2

Original document		FREEBSD, [Full-Disclosure] FreeBSD Security Advisory FreeBSD-SA-04:04.tcp (04.03.2004)
		IDEFENSE, [Full-Disclosure] iDEFENSE Security Advisory 03.02.04: FreeBSD Memory Buffer Exhaustion Denial of Service Vulnerability (04.03.2004)

Discuss:

Read or add your comments to this news (0 comments)

Adobe Acrobat Reader .xfdf buffer overflow
Published:		04.03.2004
Source:		BUGTRAQ
SecurityVulns ID:		3502
Type:		client
Level:		6/10
Description:		Buffer overflow on parsing XML Forms Data Format.

Affected:

ADOBE : Acrobat Reader 5.1

Original document

NGSSoftware Insight Security Research, [Full-Disclosure] Adobe Acrobat Reader XML Forms Data Format Buffer Overflow (04.03.2004)

Discuss:

Read or add your comments to this news (0 comments)

GWEB/PWebServer directory traversal updated since 04.03.2004
Published:		09.03.2004
Source:		BUGTRAQ
SecurityVulns ID:		3500
Type:		remote
Level:		5/10

Affected:		GWEB : GWeb 0.6
		PWEBSERVER : PWebServer 0,3

Original document		Donato Ferrante, directory traversal in PWebServer 0.3.3 (09.03.2004)
		Donato Ferrante, directory traversal in GWeb 0.6 (04.03.2004)

Discuss:

Read or add your comments to this news (0 comments)