Multiple ez bugs
Published:		09.12.2003
Source:		WINTER-SMITH
SecurityVulns ID:		3297
Type:		remote
Level:		5/10
Description:		Multiple buffer overflows in exnet.exe

Affected:		EZ : eZphotoshare 3.5
		EZ : eZmeeting 3.5
		EZ : eZnetwork 3.5
		EZ : eZshare 3.5

Original document

Peter Winter-Smith, eZ Multiple Packages Stack Overflow Vulnerability (09.12.2003)

Files:		eZ remote exploit
		eZnet 3.5 buffer overflow by fiNis
Discuss:		Read or add your comments to this news (0 comments)

AppleShare IP FTP DoS
Published:		09.12.2003
Source:		BUGTRAQ
SecurityVulns ID:		3298
Type:		remote
Level:		5/10
Description:		RMD / causes service to hang.

Affected:

APPLE : Appleshare IP FTP 6.3

Original document

Spencer Clark, Problem with Appleshare IP FTP server (09.12.2003)

Discuss:

Read or add your comments to this news (0 comments)

Webeye unauthorized access
Published:		09.12.2003
Source:		BUGTRAQ
SecurityVulns ID:		3299
Type:		remote
Level:		5/10
Description:		It's possible to retrieve full usernames/passwords list

Affected:

WEBEYE : wg_httpd 1.0

Files:		webeye exploit
Discuss:		Read or add your comments to this news (0 comments)

Yahoo messanger crossite scripting
Published:		09.12.2003
Source:		BUGTRAQ
SecurityVulns ID:		3300
Type:		remote
Level:		5/10
Description:		By using ymsgr: it's possible to inject javascript.

Affected:		YAHOO : Yahoo Messenger 5.5
		YAHOO : Yahoo Messenger 5.6

Original document

Chet Simpson, Yahoo Messenger Flaw allows injection of JavaScript into IM Windows (09.12.2003)

Discuss:

Read or add your comments to this news (0 comments)

Symbolic links problem in cdwrite
Published:		09.12.2003
Source:		BUGTRAQ
SecurityVulns ID:		3301
Type:		local
Level:		5/10
Description:		Temporary files are created in insecure manner.

Affected:

cdwrite : cdwrite 1.3

Original document

Shaun Moore, cdwrite 1.3 insecure tmp file handling vulnerability. (09.12.2003)

Discuss:

Read or add your comments to this news (0 comments)

Abyss webserver FAT partition protection bypass
Published:		09.12.2003
Source:		BUGTRAQ
SecurityVulns ID:		3302
Type:		remote
Level:		4/10
Description:		Under linux, it's possible to access protected located on FAT partition by appending dot to filename.

Affected:

APRELIUM : Abyss 1.2

Original document

Luigi Auriemma, FAT32 directory auth bypass on Linux Abyssws < 1.2 (09.12.2003)

Discuss:

Read or add your comments to this news (0 comments)

Multiple @Mail bugs
Published:		09.12.2003
Source:		FULL-DISCLOSURE
SecurityVulns ID:		3303
Type:		remote
Level:		5/10
Description:		SQL injection, user folders access.

Affected:

ATMAIL : @Mail 3.52

Original document

S-Quadra Security Research, [Full-Disclosure] @Mail web interface multiple security vulnerabilities (09.12.2003)

Discuss:

Read or add your comments to this news (0 comments)

SNAP Innovation's PrimeBase Database 4.2 multiple bugs updated since 07.10.2003
Published:		09.12.2003
Source:		BUGTRAQ
SecurityVulns ID:		3168
Type:		local
Level:		5/10
Description:		Symbolic links problem, weak executables permissions.

Affected:

SNAP : PrimeBase 4.2

Original document		Larry W. Cashdollar, [Full-Disclosure] PrimeBase SQL Database server cleartext password storage. (09.12.2003)
		Larry W. Cashdollar, SNAP Innovation's PrimeBase Database 4.2 poor default file permissions. (07.10.2003)

Discuss:

Read or add your comments to this news (0 comments)