Multiple SLMail/SLWebMail bugs updated since 07.05.2003
Published:		09.03.2004
Source:		BUGTRAQ
SecurityVulns ID:		2799
Type:		remote
Level:		5/10
Description:		Multiple buffer overflows, file access, etc.

Affected:		SLMAIL : SLWebMail 3
		SLMAIL : SLMail 5.1

Original document		NGSSoftware Insight Security Research, Multiple Buffer Overflow Vulnerabilities in SLMail (#NISR07052003A) (07.05.2003)
		NGSSoftware Insight Security Research, Multiple Vulnerabilities in SLWebmail (07.05.2003)

Discuss:

Read or add your comments to this news (0 comments)

Norton Antivirus protection bypass
Published:		09.03.2004
Source:		GAUTAM
SecurityVulns ID:		3507
Type:		local
Level:		5/10
Description:		Files with special characters in path are not checked.

Affected:		SYMANTEC : Norton AntiVirus 2002
		SYMANTEC : Norton AntiVirus 2003

Original document

bipin gautam, NAV bugs! (09.03.2004)

Discuss:

Read or add your comments to this news (0 comments)

Sun Solaris passwd priviledge escalation
Published:		09.03.2004
Source:		BUGTRAQ
SecurityVulns ID:		3509
Type:		local
Level:		6/10

Affected:		SUN : Solaris 8
		SUN : Solaris 9

Original document

SUN, Sun Alert ID: 57454 (09.03.2004)

Discuss:

Read or add your comments to this news (0 comments)

DB2 RPC privilege escalation
Published:		09.03.2004
Source:		VULNWATCH
SecurityVulns ID:		3510
Type:		local
Level:		6/10
Description:		It's possible to attach to a process with administrator privileges.

Affected:

IBM : DB2 8.1

Original document

NGSSoftware Insight Security Research, [VulnWatch] IBM DB2 Remote Command Execution Privilege Upgrade (#NISR09032004) (09.03.2004)

Discuss:

Read or add your comments to this news (0 comments)

Multiple SLMail bugs
Published:		09.03.2004
Source:		BUGTRAQ
SecurityVulns ID:		3511
Type:		remote
Level:		5/10
Description:		Buffer overflows in webmail and Supervisor Report Center interface.

Affected:

SLMAIL : SLMail Pro 2.0

Original document

NGSSoftware Insight Security Research, SLMail Pro Supervisor Report Center Buffer Overflow (#NISR05022004a) (09.03.2004)

Discuss:

Read or add your comments to this news (0 comments)

GWEB/PWebServer directory traversal updated since 04.03.2004
Published:		09.03.2004
Source:		BUGTRAQ
SecurityVulns ID:		3500
Type:		remote
Level:		5/10

Affected:		GWEB : GWeb 0.6
		PWEBSERVER : PWebServer 0,3

Original document		Donato Ferrante, directory traversal in PWebServer 0.3.3 (09.03.2004)
		Donato Ferrante, directory traversal in GWeb 0.6 (04.03.2004)

Discuss:

Read or add your comments to this news (0 comments)

multiple wu-ftpd bugs
Published:		09.03.2004
Source:		FULL-DICLOSURE
SecurityVulns ID:		3505
Type:		remote
Level:		5/10
Description:		Local user can bypass root directory protection, buffer overflow on S/Key authentication.

Affected:

WU : WU-FTPD 2.6

Original document

DEBIAN, [Full-Disclosure] [SECURITY] [DSA 457-1] New wu-ftpd packages fix multiple vulnerabilities (09.03.2004)

Discuss:

Read or add your comments to this news (0 comments)

Symbolic links problem during automake compilation
Published:		09.03.2004
Source:		BUGTRAQ
SecurityVulns ID:		3506
Type:		local
Level:		4/10

Affected:

GNU : automake 1.8

Original document

Stefan Nordhausen, Symlink Vulnerability in GNU automake <1.8.3 (09.03.2004)

Discuss:

Read or add your comments to this news (0 comments)

CGI bugs updated since 09.03.2004
Published:		13.03.2004
Source:
SecurityVulns ID:		3508
Type:		remote
Level:		5/10

Affected:		CPANEL : Cpanel 5
		INVISION : Invision Power Board 1.3
		VIRTUANEWS : VirtuaNews 1.0
		CONFIXX : Confixx 2.0
		CFWEBSTORE : CFWebstore 5.0

Original document		Fable, Cpanel Request Lets Authenticated Users Conduct Cross-Site Scripting Attacks (13.03.2004)
		Arab VieruZ, Cpanel 9.1.0 have a problem ? (13.03.2004)
		S-Quadra Security Research, [Full-Disclosure] Dogpatch Software CFWebstore 5.0 shopping cart software multiple security vulnerabilities (12.03.2004)
		checker_(at)_mail.krefeld.schulen.net, [Full-Disclosure] Confixx 2.0.xx SQL_Injections and reading MySQL Root-PW (09.03.2004)
		Rafel Ivgi, Invision Power Board v1.3 Final Cross Site Scripting Vulnerabillity (09.03.2004)
		Rafel Ivgi, VirtuaNews Admin Panel 1.0.3 Pro Cross Site Scripting Vulnerabillity (09.03.2004)

Discuss:

Read or add your comments to this news (0 comments)