SnapStream PVS crossite scripting
Published:		09.01.2004
Source:		BUGTRAQ
SecurityVulns ID:		3350
Type:		remote
Level:		5/10

Affected:

SNAPSTREAM : SnapStream PVS Lite

Original document

Rafel Ivgi, SnapStream PVS LITE Cross Site Scripting Vulnerabillity (09.01.2004)

Discuss:

Read or add your comments to this news (0 comments)

Jabber SSL DoS
Published:		09.01.2004
Source:		BUGTRAQ
SecurityVulns ID:		3355
Type:		remote
Level:		5/10
Description:		SSL connection handling DoS.

Affected:

JABBER : jabber 1.4

Original document

DEBIAN, [SECURITY] [DSA 414-1] New jabber packages fix denial of service (09.01.2004)

Discuss:

Read or add your comments to this news (0 comments)

EDIMAX AR-6004 crossite scripting
Published:		09.01.2004
Source:		BUGTRAQ
SecurityVulns ID:		3356
Type:		remote
Level:		5/10

Affected:

EDIMAX : AR-6004

Original document

Rafel Ivgi, EDIMAX AR-6004 Full Rate ADSL Router Cross Site Scripting Vulnerabillity (09.01.2004)

Discuss:

Read or add your comments to this news (0 comments)

Lotus Domino weak permissions updated since 09.01.2004
Published:		09.01.2004
Source:		BUGTRAQ
SecurityVulns ID:		3357
Type:		local
Level:		6/10
Description:		Few configuration files are world writable.

Affected:

LOTUS : Domino 6.0

Original document

Rene, Lotus Notes Domino 6.0.2 (linux) faulty default permissions (09.01.2004)

Discuss:

Read or add your comments to this news (0 comments)

Cisco personal assistant protection bypass
Published:		09.01.2004
Source:		BUGTRAQ
SecurityVulns ID:		3358
Type:		remote
Level:		5/10
Description:		It's possible to bypass password protection.

Affected:		CISCO : Cisco Personal Assistant 1.3
		CISCO : Cisco Personal Assistant 1.4

Original document

CISCO, Cisco Security Advisory: Cisco Personal Assistant User Password Bypass Vulnerability (09.01.2004)

Discuss:

Read or add your comments to this news (0 comments)

vbox3 privilege escalation
Published:		09.01.2004
Source:		BUGTRAQ
SecurityVulns ID:		3359
Type:		local
Level:		5/10
Description:		Elevated privileges are not dropped on external executable call.

Affected:

VBOX3 : vbox3 0.1

Original document

DEBIAN, [SECURITY] [DSA 418-1] New vbox3 packages fix privilege leak (09.01.2004)

Discuss:

Read or add your comments to this news (0 comments)

Yahoo Instant Messenger buffer overflow
Published:		09.01.2004
Source:		BUGTRAQ
SecurityVulns ID:		3360
Type:		remote
Level:		6/10
Description:		Buffer overflow on oversized filename.

Affected:

YAHOO : Instant Messenger 5.6

Original document

trihuynh_(at)_zeeup.com, Yahoo Instant Messenger Long Filename Downloading Buffer Overflow (09.01.2004)

Discuss:

Read or add your comments to this news (0 comments)

Multiple fsp bugs
Published:		09.01.2004
Source:		BUGTRAQ
SecurityVulns ID:		3351
Type:		remote
Level:		5/10
Description:		Buffer overflow, directory traversal.

Affected:

FSP : fsp 2.81

Original document

DEBIAN, [SECURITY] [DSA 416-1] New fsp packages fix buffer overflow, directory traversal (09.01.2004)

Discuss:

Read or add your comments to this news (0 comments)

ZyXEL10 Crossite scripting
Published:		09.01.2004
Source:		BUGTRAQ
SecurityVulns ID:		3352
Type:		remote
Level:		5/10

Affected:

ZYXEL : ZyXEL 10

Original document

Rafel Ivgi, ZyXEL10 OF ZyWALL Series Router Cross Site Scripting Vulnerabillity (09.01.2004)

Discuss:

Read or add your comments to this news (0 comments)

HD Soft Windows FTP Server format string bug
Published:		09.01.2004
Source:		WINTER-SMITH
SecurityVulns ID:		3353
Type:		remote
Level:		5/10
Description:		Format string bug during authentication.

Affected:

HDSOFT : HD Soft Windows Ftp Server 1.6

Original document

Peter Winter-Smith, Windows FTP Server Format String Vulnerability (09.01.2004)

Files:		PoC exploit for Windows Ftp Server v1.6
Discuss:		Read or add your comments to this news (0 comments)

inn buffer overflow
Published:		09.01.2004
Source:		BUGTRAQ
SecurityVulns ID:		3354
Type:		remote
Level:		7/10
Description:		Buffer overflow on control messages handling.

Affected:

ISC : inn 2.4

Original document

ISC, [SECURITY] INN: Buffer overflow in control message handling (09.01.2004)

Discuss:

Read or add your comments to this news (0 comments)