CGI bugs updated since 05.07.2004
Published:		09.07.2004
Source:
SecurityVulns ID:		3816
Type:		remote
Level:		5/10

Affected:		CART32 : Cart32 5.0
		12PLANET : 12Planet Chat Server 2.9
		JAWS : JAWS 0.3
		COMERSUS : Comersus ASP Shopping Cart 5.09
		NPDS : Npds BB
		SADRAVEN : Sad Raven's Guestbook 1.2

Original document		Neo, Sad Raven's Guestbook версии 1.2 vuln (09.07.2004)
		Tom, Comersus Cart Improper Request Handling (08.07.2004)
		Benjamin Tolman, Npds BB HTML Injection (08.07.2004)
		Tom, Comersus Cart Cross-Site Scripting Vulnerability (08.07.2004)
		nando_(at)_gigax.org, [Full-Disclosure] Multiples vulnerabilities in JAWS (06.07.2004)
		Dr`Ponidi Haryanto, Cart32 Input Validation Flaw in 'GetLatestBuilds?cart32=' Permits Remote Cross-Site Scripting Attacks (05.07.2004)
		Donato Ferrante, [Full-Disclosure] XSS in 12Planet Chat Server 2.9 (05.07.2004)

Discuss:

Read or add your comments to this news (0 comments)

Mozilla Network Neighbourhood code execution
Published:		09.07.2004
Source:		FULL-DISCLOSURE
SecurityVulns ID:		3828
Type:		client
Level:		6/10
Description:		By using shell:NETHOOD\ URL it's possible to execute file from any Network Neighbourhood host.

Affected:		MOZILLA : Mozilla 1.7
		MOZILLA : Mozilla Firefox 0.9
		MOZILLA : Mozilla Thunderbird 0.7

Original document		MOZILLA, [Full-Disclosure] Mozilla Security Advisory 2004-07-08 (09.07.2004)
		liudieyu_(at)_umbrella.name, [Full-Disclosure] MOZILLA: SHELL can execute remote EXE program (09.07.2004)

Discuss:

Read or add your comments to this news (0 comments)

SSLTelnet format string bug
Published:		09.07.2004
Source:		FULL-DISCLOSURE
SecurityVulns ID:		3829
Type:		remote
Level:		5/10
Description:		Format string on syslog() in ssltenetd SSL_set_verify().

Affected:

SSLTELNET : SSLTelnet 0.13

Original document

IDEFENSE, [Full-Disclosure] iDEFENSE Security Advisory 07.08.04: SSLTelnet Remote Format String Vulnerability (09.07.2004)

Discuss:

Read or add your comments to this news (0 comments)

Norton AntiVirus DoS
Published:		09.07.2004
Source:		BUGTRAQ
SecurityVulns ID:		3830
Type:		remote
Level:		5/10
Description:		Programs hangs with 100% on malcrafted executable file.

Affected:		SYMANTEC : Norton AntiVirus 2002
		SYMANTEC : Norton AntiVirus 2003

Original document

bipin gautam, [Full-Disclosure] Norton AntiVirus Scanner Remote Denial Of Service Vulnerability [Part: !!!] (09.07.2004)

Discuss:

Read or add your comments to this news (0 comments)

Shorewall symbolic links problem
Published:		09.07.2004
Source:		BUGTRAQ
SecurityVulns ID:		3831
Type:		local
Level:		5/10
Description:		Temporary files and directories are created in unsafe manner.

Affected:

SHOREWALL : Shorewall 1.4

Original document

GENTOO, [ GLSA 200407-07 ] Shorewall : Insecure temp file handling (09.07.2004)

Discuss:

Read or add your comments to this news (0 comments)