NetGear WG602 backdoor account
Published:		04.06.2004
Source:		BUGTRAQ
SecurityVulns ID:		3732
Type:		remote
Level:		5/10
Description:		Backdoor account 'super' with password '5777364' allow web interface access.

Affected:

NETGEAR : WG602

Original document

Tom Knienieder, Netgear WG602 Accesspoint vulnerability (04.06.2004)

Discuss:

Read or add your comments to this news (0 comments)

log2mail unfiltered shell characters
Published:		04.06.2004
Source:		BUGTRAQ
SecurityVulns ID:		3733
Type:		remote
Level:		5/10

Affected:

LOG2MAIL : log2mail 0.2

Original document

DEBIAN, [SECURITY] [DSA 513-1] New log2mail packages fix format string vulnerabilities (04.06.2004)

Discuss:

Read or add your comments to this news (0 comments)

Orenosv buffer overflow updated since 26.05.2004
Published:		04.06.2004
Source:		BUGTRAQ
SecurityVulns ID:		3713
Type:		remote
Level:		5/10
Description:		Buffer overflow on parsing GET request.

Affected:

ORENOSV : Orenosv 0.5

Original document		CoolICE, DOS@Orenosv (04.06.2004)
		badpack3t, [Full-Disclosure] Orenosv HTTP/FTP Server Denial Of Service (26.05.2004)

Files:		PoC xploit for OrenOSV
Discuss:		Read or add your comments to this news (0 comments)

Trend Micro Internet Security crossite scripting updated since 04.06.2004
Published:		07.06.2004
Source:		BUGTRAQ
SecurityVulns ID:		3730
Type:		remote
Level:		5/10
Description:		Web browser component is used for warning message and filename is not filtered.

Affected:		TRENDMICRO : Internet Security 1120
		TRENDMICRO : Internet Security 1311

Original document		http-equiv_(at)_excite.com, TREND MICRO: The Protector Becomes The Vector Take II (07.06.2004)
		http-equiv_(at)_excite.com, TREND MICRO: The Protector Becomes The Vector [technical exercise: cross-application-scripting] (04.06.2004)

Discuss:

Read or add your comments to this news (0 comments)

Surgemail crossite sripting updated since 04.06.2004
Published:		24.03.2005
Source:		BUGTRAQ
SecurityVulns ID:		3731
Type:		remote
Level:		5/10

Affected:		OSCOMMERCE : osCommerce 2.2
		NETWINSITE : Surgemail 2.0
		NETWINSITE : Surgemail 2.2

Original document		Megasky, osCommerce File Manager Directory Traversal Vulnerability (24.03.2005)
		chewkeong_(at)_security.org.sg, [SIG^2 G-TEC] SurgeMail Webmail Attachment Upload and XSS Vulnerabilities (24.03.2005)
		morning_wood, [Full-Disclosure] Surgemail - Multiple Vulnerabilities (04.06.2004)

Discuss:

Read or add your comments to this news (0 comments)