CGI bugs updated since 03.02.2003
Published:		08.02.2003
Source:		BUGTRAQ
SecurityVulns ID:		2570
Type:		remote
Level:		5/10

Affected:		PHPMYNEWSLETTER : phpMyNewsletter 0.6
		PCENCHERES : phpMyShop 1.00
		MYPHPPAGETOOL : myphpPagetool 0.4
		EJ3 : TOPo 1.43

Original document		Kistler Ueli, PHPMyNewsLetter 0.6.11 - customize.php include problem (08.02.2003)
		Rynho Zeros Web, TOPo 1.43 and prior - Path Disclosure (in.php, out.php) (05.02.2003)
		frog frog, myphpPagetool (php) (03.02.2003)
		frog frog, phpMyShop (php) (03.02.2003)

Discuss:

Read or add your comments to this news (0 comments)

Windows Maker buffer overflow
Published:		08.02.2003
Source:		BUGTRAQ
SecurityVulns ID:		2575
Type:		remote
Level:		6/10
Description:		Buffer overflow on graphics processing.

Affected:

WINDOWMAKER : Window Maker 0.80

Original document

REDHAT, [RHSA-2003:043-12] Updated WindowMaker packages fix vulnerability in theme-loading (08.02.2003)

Discuss:

Read or add your comments to this news (0 comments)

HP-UX wall buffer overflow
Published:		08.02.2003
Source:		BUGTRAQ
SecurityVulns ID:		2577
Type:		local
Level:		6/10
Description:		Oversized message text causes buffer to overflow.

Affected:

HP : HP-UX 11.00

Original document

Scotty, HPUX Wall Buffer Overflow (08.02.2003)

Discuss:

Read or add your comments to this news (0 comments)

Multiple bugs in Unreal engine
Published:		08.02.2003
Source:		BUGTRAQ
SecurityVulns ID:		2576
Type:		remote
Level:		6/10
Description:		It's possble to use game servers for DDoS, game session spoofing, integer type overflows, unreal:// URL handling problems.

Original document

Auriemma Luigi, Unreal engine: results of my research (08.02.2003)

Discuss:

Read or add your comments to this news (0 comments)

Weak pkzip encryption
Published:		08.02.2003
Source:		BUGTRAQ
SecurityVulns ID:		2578
Type:		local
Level:		5/10
Description:		Weak PRNG open possibility for recovering encrypted text with known plain text attack with minimal amount of known text.

Affected:

WINZIP : WinZIP 8.0

Original document

alias_(at)_securityfocus.com, Yet another plaintext attack to ZIP encryption scheme. (08.02.2003)

Discuss:

Read or add your comments to this news (0 comments)