Unreal ircd ip cloacking protection bypass
Published:		05.07.2004
Source:		BUGTRAQ
SecurityVulns ID:		3817
Type:		remote
Level:		4/10
Description:		To hide real IP hash of IP address with simple hashing algorithm is used.

Affected:

UNREALIRCD : UnrealIRCd 3.2

Original document

bartavelle, [Full-Disclosure] Unreal ircd 3.2 clocking subsystem vulnerability (05.07.2004)

Discuss:

Read or add your comments to this news (0 comments)

Linux Virtual Server procfs DoS
Published:		05.07.2004
Source:		SECURITEAM
SecurityVulns ID:		3818
Type:		local
Level:		5/10
Description:		Virtual machine users can change /proc permissions.

Affected:		LINUXVSERVER : Virtual Server 1.27
		LINUXVSERVER : Virtual Server 1.3
		LINUXVSERVER : Virtual Server 1.9

Original document

SECURITEAM, [UNIX] Linux Virtual Server/Secure Context Procfs Shared Permissions Flaw (05.07.2004)

Discuss:

Read or add your comments to this news (0 comments)

Enterasys XSR DoS
Published:		05.07.2004
Source:		BUGTRAQ
SecurityVulns ID:		3819
Type:		remote
Level:		6/10
Description:		Router crashes on packet with RR option.

Affected:

ENTERASYS : Enterasys XSR 1800

Original document

Frederico Queiroz, Enterasys XSR Security Routers DoS (05.07.2004)

Discuss:

Read or add your comments to this news (0 comments)

Multiple Fastream Netfile bugs
Published:		05.07.2004
Source:		AT4R
SecurityVulns ID:		3820
Type:		remote
Level:		6/10
Description:		Directory traversal, DoS.

Affected:

FASTREAM : NETFile 6.7

Original document

at4r, Fastream NETFile FTP/Web Server Input validation Errors (05.07.2004)

Discuss:

Read or add your comments to this news (0 comments)

CGI bugs updated since 05.07.2004
Published:		09.07.2004
Source:
SecurityVulns ID:		3816
Type:		remote
Level:		5/10

Affected:		CART32 : Cart32 5.0
		12PLANET : 12Planet Chat Server 2.9
		JAWS : JAWS 0.3
		COMERSUS : Comersus ASP Shopping Cart 5.09
		NPDS : Npds BB
		SADRAVEN : Sad Raven's Guestbook 1.2

Original document		Neo, Sad Raven's Guestbook версии 1.2 vuln (09.07.2004)
		Tom, Comersus Cart Improper Request Handling (08.07.2004)
		Benjamin Tolman, Npds BB HTML Injection (08.07.2004)
		Tom, Comersus Cart Cross-Site Scripting Vulnerability (08.07.2004)
		nando_(at)_gigax.org, [Full-Disclosure] Multiples vulnerabilities in JAWS (06.07.2004)
		Dr`Ponidi Haryanto, Cart32 Input Validation Flaw in 'GetLatestBuilds?cart32=' Permits Remote Cross-Site Scripting Attacks (05.07.2004)
		Donato Ferrante, [Full-Disclosure] XSS in 12Planet Chat Server 2.9 (05.07.2004)

Discuss:

Read or add your comments to this news (0 comments)