File-Sharing for NET 1.5 and Forums Web Server 1.5 crossite scripting
Published:		07.10.2003
Source:		BUGTRAQ
SecurityVulns ID:		3166
Type:		remote
Level:		5/10
Description:		HTML tags are not filtered on message subject.

Affected:		MINIHTTPSERVER : File-Sharing for NET 1.5
		MINIHTTPSERVER : Forums Web Server 1.5

Original document

nimber, JS/HTML code injection in File-Sharing for NET v1.5 and Forums Web Server v1.5 (07.10.2003)

Discuss:

Read or add your comments to this news (0 comments)

SuSE symbolic link problems
Published:		07.10.2003
Source:		BUGTRAQ
SecurityVulns ID:		3167
Type:		local
Level:		5/10
Description:		Symbolic link problems in /sbin/conf.d/SuSEconfig.susewm, /sbin/conf.d/SuSEconfig.javarunt.

Affected:		SUSE : SuSE Linux 7.3
		SUSE : SuSE Linux 8.2

Original document		Stefan Nordhausen, Local root exploit in SuSE Linux 8.2Pro (07.10.2003)
		Stefan Nordhausen, Local root exploit in SuSE Linux 7.3Pro (07.10.2003)

Files:		Proof of Concept for SuSEconfig.vmware Symbolic Link.
Discuss:		Read or add your comments to this news (0 comments)

SNAP Innovation's PrimeBase Database 4.2 multiple bugs updated since 07.10.2003
Published:		09.12.2003
Source:		BUGTRAQ
SecurityVulns ID:		3168
Type:		local
Level:		5/10
Description:		Symbolic links problem, weak executables permissions.

Affected:

SNAP : PrimeBase 4.2

Original document		Larry W. Cashdollar, [Full-Disclosure] PrimeBase SQL Database server cleartext password storage. (09.12.2003)
		Larry W. Cashdollar, SNAP Innovation's PrimeBase Database 4.2 poor default file permissions. (07.10.2003)

Discuss:

Read or add your comments to this news (0 comments)

Multiple bugs in Sambar updated since 07.10.2003
Published:		30.04.2004
Source:		3APA3A
SecurityVulns ID:		3165
Type:		remote
Level:		6/10
Description:		Combination of multiple small vulnerabilities leads to remote code execution.

Affected:		SAMBAR : Sambar Server 5.3
		SAMBAR : Sambar Server 6.0

Original document

3APA3A, Sambar security quest (30.04.2004)

Files:		Sambar Server Security Alert
Discuss:		Read or add your comments to this news (0 comments)

Adobe SVG Viewer multiple bugs updated since 07.10.2003
Published:		06.05.2005
Source:		FULL-DISCLOSURE
SecurityVulns ID:		3169
Type:		client
Level:		6/10
Description:		ActiveX control contains few metods used to access local and remote files, scripting in local zone, crossite scripting.

Affected:

ADOBE : Adobe SVG Viewer 3.0

Original document		Hyperdose Security, Local file detection bug found through Adobe SVG Viewer (06.05.2005)
		GreyMagic Software, Adobe SVG Viewer Cross Domain and Zone Access (GM#004-MC) (08.10.2003)
		GreyMagic Software, Adobe SVG Viewer Active Scripting Bypass (GM#002-MC) (08.10.2003)
		GreyMagic Software, [Full-Disclosure] Adobe SVG Viewer Local and Remote File Reading (GM#003-MC) (07.10.2003)

Discuss:

Read or add your comments to this news (0 comments)