CGI bugs updated since 02.06.2003
Published:		06.06.2003
Source:
SecurityVulns ID:		2867
Type:		remote
Level:		5/10

Affected:		PHPNUKE : PHP-Nuke 6.5
		B2 : b2 cafelog 0.6
		WEBCORTEX : WebStore2000 6.0
		IISCART : iisCart2000
		SAARPORT : Web Chat 2.0
		SAARPORT : SPChat 0.8
		PHPADS : phpAds
		BIZDESIGN : ImageFolio 3.1
		MONKEY : monkey 0.7

Original document		Martin, Monkey Http Daemon (06.06.2003)
		Paul Craig, ImageFolio All Versions : admin.cgi Directory transversal and file delete exploit. (06.06.2003)
		Paul Craig, Xpressions Software: Multiple SQL Injection Attacks To Manage WebStore (05.06.2003)
		w_(at)_sos.lv, Galich , phpAds (04.06.2003)
		Rynho Zeros Web, [ PHP-Nuke :] Multiple vulnerabilities in SPChat 2.0 for PHP-Nuke & SPChat 0.8.0 (03.06.2003)
		FraMe, b2 cafelog: remote command execution, sql injection and another flaw. (03.06.2003)
		Bosen, iisCart2000 Administration Security Leak (02.06.2003)
		bugsman_(at)_libero.it, Php-Nuke:users and admins password hashes vulnerability (02.06.2003)
		Bosen, WebStore2000 SQL Injection Vulnerability & Exploit (02.06.2003)

Discuss:

Read or add your comments to this news (0 comments)

Solaris syslogd buffer overflow
Published:		06.06.2003
Source:		BUGTRAQ
SecurityVulns ID:		2881
Type:		remote
Level:		6/10
Description:		Buffer overflow on files larger than 1024 bytes.

Affected:

SUN : Solaris 8

Original document

David Thiel, Solaris syslogd overflow (06.06.2003)

Discuss:

Read or add your comments to this news (0 comments)

IP address limitation protection bypass in OpenSSH
Published:		06.06.2003
Source:		BUGTRAQ
SecurityVulns ID:		2882
Type:		remote
Level:		5/10
Description:		Only reverse resolution is checked, it allows to spoof record in reverse zone.

Affected:

OPENSSH : OpenSSH 3.6

Original document

Mike Harding, OpenSSH remote clent address restriction circumvention (06.06.2003)

Discuss:

Read or add your comments to this news (0 comments)

HP-UX ftpd REST bug
Published:		06.06.2003
Source:		BUGTRAQ
SecurityVulns ID:		2883
Type:		remote
Level:		5/10
Description:		Because of a bug in REST processing value given is treated as a memory address. It makes it possible to read any memory block.

Affected:

HP : HP-UX 11.11

Original document

Kevin Finisterre, SRT2003-06-05-0935 - HPUX ftpd remote issue via REST (06.06.2003)

Discuss:

Read or add your comments to this news (0 comments)

AdSubtract Proxy protection bypass
Published:		06.06.2003
Source:		BUGTRAQ
SecurityVulns ID:		2884
Type:		remote
Level:		5/10
Description:		Any host with 127.0.0.1 in PTR record can bypass any ACL limitations.

Affected:

INTERMUTE : AdSubtract 2.55

Original document

advisories_(at)_lurhq.com, AdSubtract Proxy ACL Bypass Vulnerability (06.06.2003)

Discuss:

Read or add your comments to this news (0 comments)