602Pro Lansuite DoS updated since 27.03.2001
Published:		08.08.2002
Source:		BUGTRAQ
SecurityVulns ID:		1080
Type:		remote
Level:		5/10
Description:		Buffer overflow in GET-request, DOS-devices access.

Affected:

SOFTWARE602 : 602Pro Lan Suite 2000

Original document		Stan Bubrouski, Advisory: Multiple 602Pro LAN SUITE 2002 Denial of Service Attacks (08.08.2002)
		nitr0s_(at)_HOTMAIL.COM, 602Pro Lansuite Denial Of Service 1.0.34 (27.03.2001)

Files:		602Pro LAN SUITE 2002 proxy DoS
		602Pro LAN SUITE 2002 webserver DoS
Discuss:		Read or add your comments to this news (0 comments)

Buffer overflow in Eudora
Published:		08.08.2002
Source:		BUGTRAQ
SecurityVulns ID:		2206
Type:		client
Level:		6/10
Description:		Buffer overflow on MIME headers parsing.

Affected:

QUALCOMM : Eudora 5.1

Original document

snsadv_(at)_lac.co.jp, [SNS Advisory No.55] Eudora 5.x for Windows Buffer Overflow Vulnerability (08.08.2002)

Discuss:

Read or add your comments to this news (0 comments)

Buffer overflow in qmailadmin
Published:		08.08.2002
Source:		BUGTRAQ
SecurityVulns ID:		2207
Type:		local
Level:		5/10
Description:		Buffer overflow on environment variables parsing.

Affected:

QMAILADMIN : qmailadmin 1.0

Original document

Thomas Cannon, qmailadmin SUID buffer overflow (08.08.2002)

Discuss:

Read or add your comments to this news (0 comments)

Argosoft Mailserver Pro DoS
Published:		08.08.2002
Source:		BUGTRAQ
SecurityVulns ID:		2208
Type:		local
Level:		4/10
Description:		User can cause message storm by using autoresponder.

Affected:

ARGOSOFT : ArGoSoft Mail Server Pro 1.8

Original document

Stan Bubrouski, Advisory: ArGoSoft Mail Server Pro 1.8.1.7 DoS (08.08.2002)

Discuss:

Read or add your comments to this news (0 comments)

FreeBSD kqueue DoS
Published:		08.08.2002
Source:		BUGTRAQ
SecurityVulns ID:		2209
Type:		local
Level:		5/10
Description:		Pipe with one end closed causes system panic after applying EVFILT_WRITE filter.

Affected:		FREEBSD : FreeBSD 4.3
		FREEBSD : FreeBSD 4.4
		FREEBSD : FreeBSD 4.5
		FREEBSD : FreeBSD 4.6

Original document

FREEBSD, Security Advisory FreeBSD-SA-02:37.kqueue (08.08.2002)

Discuss:

Read or add your comments to this news (0 comments)

Buffer overflows in Content Managment Server
Published:		08.08.2002
Source:		MICROSOFT
SecurityVulns ID:		2210
Type:		remote
Level:		6/10
Description:		Multipel buffer overflows

Affected:

MICROSOFT : Content Management Server 2001

Original document

MICROSOFT, Security Bulletin MS02-041: Unchecked Buffer in Content Management Server Could Enable Server Compromise (Q326075) (08.08.2002)

Discuss:

Read or add your comments to this news (0 comments)

Unauthorized disk blocks access in FreeBSD ffs
Published:		08.08.2002
Source:		BUGTRAQ
SecurityVulns ID:		2211
Type:		local
Level:		5/10
Description:		Bug in maximum file size calculation allows to access disk blocks behind the file because of integer overflow.

Affected:		FREEBSD : FreeBSD 4.4
		FREEBSD : FreeBSD 4.5
		FREEBSD : FreeBSD 4.6

Original document

FREEBSD, Security Advisory FreeBSD-SA-02:35.ffs (08.08.2002)

Discuss:

Read or add your comments to this news (0 comments)

BSD NFS DoS
Published:		08.08.2002
Source:		BUGTRAQ
SecurityVulns ID:		2212
Type:		remote
Level:		5/10
Description:		Empty RPC packet causes cycling.

Affected:		FREEBSD : FreeBSD 4.4
		FREEBSD : FreeBSD 4.5
		FREEBSD : FreeBSD 4.6

Original document

FREEBSD, Security Advisory FreeBSD-SA-02:36.nfs (08.08.2002)

Discuss:

Read or add your comments to this news (0 comments)

Cisco RADIUS PAP-authentication cleartext password
Published:		08.08.2002
Source:		BUGTRAQ
SecurityVulns ID:		2214
Type:		m-i-t-m
Level:		4/10
Description:		In case of failed authentication password is sent in cleartext.

Affected:

CISCO : VPN 5000

Original document

CISCO, Security Advisory: Cisco VPN 5000 Series Concentrator RADIUS PAP Authentication Vulnerability (08.08.2002)

Discuss:

Read or add your comments to this news (0 comments)

Problems with different C-compilers.
Published:		08.08.2002
Source:		BUGTRAQ
SecurityVulns ID:		2215
Type:		library
Level:		4/10

Original document		Florian Weimer, RUS-CERT Advisory 2002-08:02: Flaw in calloc and similar routines (08.08.2002)
		Florian Weimer, RUS-CERT Advisory 2002-08:01: Incorrect integer overflow detection in C code (08.08.2002)

Discuss:

Read or add your comments to this news (0 comments)

iSCSI weak permissions
Published:		08.08.2002
Source:		BUGTRAQ
SecurityVulns ID:		2216
Type:		local
Level:		5/10
Description:		File /etc/iscsi.conf is open for writing.

Original document

IDEFENSE, iDEFENSE Security Advisory: iSCSI Default Configuration File Settings (08.08.2002)

Discuss:

Read or add your comments to this news (0 comments)

Citrix MetaFrame DoS
Published:		08.08.2002
Source:		BUGTRAQ
SecurityVulns ID:		2217
Type:		remote
Level:		5/10
Description:		Requesting large window size in javainterface causes server to crash.

Affected:

CITRIX : MetaFrame 1.8

Original document

morejunkmail_(at)_GMX.NET, Crashing any Windows NT TSE running MetaFrame 1.8 (08.08.2002)

Discuss:

Read or add your comments to this news (0 comments)

Unauthorized access via Google Toolbar updated since 08.08.2002
Published:		16.08.2002
Source:		BUGTRAQ
SecurityVulns ID:		2218
Type:		client
Level:		5/10

Affected:

GOOGLE : Google toolbar 1.1

Original document		silentsupporter_(at)_poczta.onet.pl, IE [with Google Toolbar installed] crash (16.08.2002)
		GreyMagic Software, Exploiting the Google toolbar (GM#001-MC) (08.08.2002)

Discuss:

Read or add your comments to this news (0 comments)

AVAYA Cajun unauthorized access updated since 08.08.2002
Published:		16.10.2002
Source:		BUGTRAQ
SecurityVulns ID:		2213
Type:		remote
Level:		5/10
Description:		Undocumented read/write SNMP community NoGaH$@!. Undocumented accounts diag/danger and manuf/xxyyzz.

Affected:		AVAYA : Cajun P330T
		AVAYA : Cajun P333R
		AVAYA : Cajun P550R
		AVAYA : Cajun P580
		AVAYA : Cajun P880
		AVAYA : Cajun P882

Original document		Jacek Lipkowski, Undocumented account vulnerability in Avaya P550R/P580/P880/P882 switches (16.10.2002)
		Jacek Lipkowski, SNMP vulnerability in AVAYA Cajun firmware (08.08.2002)

Discuss:

Read or add your comments to this news (0 comments)