CGI bugs updated since 06.10.2003
Published:		08.10.2003
Source:
SecurityVulns ID:		3162
Type:		remote
Level:		5/10

Affected:		JBOSS : JBoss 3.2
		FREEGUPPY : GuppY 2.4
		DIVINE : OpenMarket Content Server
		ETERNALMART : EMML 1.32
		ETERNALMART : EMGB 1.1
		JBOSS : JBoss 3.0
		PEOPLESOFT : PeopleTools 8.42
		AMTRANS : PayPal Store Front 3.0

Original document		info_(at)_i-assure.com, PeopleSoft <Control><J> Information Disclosure (08.10.2003)
		info_(at)_i-assure.com, PeopleSoft <LONGCHAR >and <VARCHAR> Data Upload (08.10.2003)
		Astharot, ZH2003-28SA (security advisory): file inclusion vulnerability in PayPal Store Front (08.10.2003)
		info_(at)_i-assure.com, PeopleSoft Grid Option Vulnerability (08.10.2003)
		frog frog, GuppY : XSS, Files Reading/Writing (07.10.2003)
		Marc Schönefeld, Update JBoss 308 & 321: Remote Command Injection (07.10.2003)
		Marc Schönefeld, JBoss 3.2.1: Remote Command Injection (07.10.2003)
		Larry W. Cashdollar, SNAP Innovation's PrimeBase Database 4.2 poor default file permissions. (07.10.2003)
		frog frog, EMML, EMGB : Include() hole (06.10.2003)
		Valgasu, Divine OpenMarket Content Server XSS (06.10.2003)

Discuss:

Read or add your comments to this news (0 comments)

Medieval Total War NULL pointer reference
Published:		08.10.2003
Source:		BUGTRAQ
SecurityVulns ID:		3170
Type:		remote
Level:		5/10
Description:		Long player name causes server to crash because of NULL pointer reference.

Affected:

CREATIVEASSEMBLY : Medieval Total War 1.1

Original document		Luigi Auriemma, Medieval Total War <= 1.1 broadcast Connection expired (08.10.2003)
		Luigi Auriemma, Medieval Total War <= 1.1 broadcast crash (08.10.2003)

Discuss:

Read or add your comments to this news (0 comments)

Internet Explorer Shell Folders local files access
Published:		08.10.2003
Source:		BUGTRAQ
SecurityVulns ID:		3171
Type:		local
Level:		5/10
Description:		It's possible to address local files by URL shell: with relative paths.

Affected:

MICROSOFT : Internet Explorer 6.0

Original document

Eiji James Yoshida, Microsoft Windows Server 2003 "Shell Folders" Directory Traversal Vulnerability (08.10.2003)

Discuss:

Read or add your comments to this news (0 comments)

HP-UX dtprintinfo buffer overflow
Published:		08.10.2003
Source:		BUGTRAQ
SecurityVulns ID:		3172
Type:		local
Level:		7/10
Description:		Buffer overflow on oversized DISPLAY variable.

Affected:

HP : HP-UX 11.00

Original document

Davide Del Vecchio, HPUX dtprintinfo buffer overflow vulnerability (08.10.2003)

Discuss:

Read or add your comments to this news (0 comments)

PerlEdit buffer overflow updated since 24.06.2003
Published:		08.10.2003
Source:		BUGTRAQ
SecurityVulns ID:		2924
Type:		remote
Level:		5/10
Description:		Buffer overflow on invalid data to TCP/1956

Affected:

INDIGOSTAR : PerlEdit 1.08

Original document		morning_wood, [Full-Disclosure] Indigoperl Perledit 1.08 (08.10.2003)
		morning_wood, PerlEdit (24.06.2003)

Discuss:

Read or add your comments to this news (0 comments)