Buffer overflow in Caldera OpenServer sar updated since 03.05.2002
Published:		10.05.2002
Source:		BUGTRAQ
SecurityVulns ID:		1984
Type:		local
Level:		5/10
Description:		Buffer overflow in -o command line option.

Affected:

SCO : OpenServer 5.0

Original document		Kevin Finisterre, Sar -o exploitation process info. (10.05.2002)
		CALDERA, Security Update: [CSSA-2002-SCO.17] OpenServer 5.0.5 : sar -o buffer overflow (03.05.2002)

Discuss:

Read or add your comments to this news (0 comments)

Format string bug in ISC dhcpd
Published:		10.05.2002
Source:		BUGTRAQ
SecurityVulns ID:		1998
Type:		remote
Level:		9/10
Description:		Format string on syslog call in NSUPDATE functionality.

Affected:

ISC : dhcpd 3.0

Original document		NGSEC Research Team, [NGSEC-2002-2] ISC DHCPDv3, remote root compromise (10.05.2002)
		CERT, Advisory CA-2002-12 Format String Vulnerability in ISC DHCPD (10.05.2002)

Files:		local and remote exploit for isc dhcpd 3.0 (perhaps others)
Discuss:		Read or add your comments to this news (0 comments)

Buffer overflow in MSN Messanger updated since 06.05.2002
Published:		10.05.2002
Source:		BUGTRAQ
SecurityVulns ID:		1994
Type:		client
Level:		7/10
Description:		Buffer overflow on long font name in header and in OCX MSN Chat Control.

Affected:		MICROSOFT : MSN Messenger 4.5
		MICROSOFT : MSN Messenger 4.6

Original document		MICROSOFT, Security Bulletin MS02-022: Unchecked Buffer in MSN Chat Control Can Lead to Code Execution (Q321661) (10.05.2002)
		EEYE, ADVISORY: MSN Messenger OCX Buffer Overflow (10.05.2002)
		underdoc_(at)_pandora.be, Misformated message header causes msn messenger to crash (06.05.2002)

Discuss:

Read or add your comments to this news (0 comments)

Buffer overflow in CIsco NTP
Published:		10.05.2002
Source:		BUGTRAQ
SecurityVulns ID:		1999
Type:		remote
Level:		5/10

Affected:		CISCO : IOS 12.0
		CISCO : IOS 11.2
		CISCO : IOS 11.1
		CISCO : IOS 12.1
		CISCO : IOS 11.3
		CISCO : IOS 12.2
		CISCO : SC2200
		CISCO : VSC3000
		CISCO : Media Gateway Controller
		CISCO : BTS 10200

Original document

CISCO, Cisco Security Advisory: NTP vulnerability (10.05.2002)

Discuss:

Read or add your comments to this news (0 comments)

NTFS encryption information leakage problem in PGP
Published:		10.05.2002
Source:		BUGTRAQ
SecurityVulns ID:		2002
Type:		local
Level:		5/10
Description:		If "wiping file on deletion" option is used EFS temporary files are not deleted during file encryption.

Affected:

NAI : PGP 7.0

Original document

Ry Jones, NTFS and PGP interact to expose EFS encrypted data (10.05.2002)

Discuss:

Read or add your comments to this news (0 comments)

Remote code execution via SuSE sysconfig
Published:		10.05.2002
Source:		BUGTRAQ
SecurityVulns ID:		2003
Type:		remote
Level:		5/10
Description:		Invalid usage of DHCP client allows command execution by spoofing DHCP server reply.

Affected:

SUSE : SuSE linux 8.0

Original document

SUSE, SuSE Security Announcement: sysconfig (SuSE-SA:2002:016) (10.05.2002)

Discuss:

Read or add your comments to this news (0 comments)

Multiple bugs in Novell Netware and utilities updated since 10.05.2002
Published:		11.05.2002
Source:		BUGTRAQ
SecurityVulns ID:		2001
Type:		remote
Level:		8/10

Affected:		NOVELL : Netware 6.0
		NOVELL : Border Manager 3.6
		NOVELL : Netware Client 4.83

Original document		Corey J. Steele, Re: cqure.net.20020412.bordermanager_36_mv1.a (11.05.2002)
		Patrik Karlsson, cqure.net.20020412.netware_client.a (10.05.2002)
		Patrik Karlsson, cqure.net.20020408.netware_nwftpd.a (10.05.2002)
		Patrik Karlsson, cqure.net.20020412.bordermanager_36_mv1.a (10.05.2002)
		Patrik Karlsson, cqure.net.20020412.netware_sdmr.a (10.05.2002)

Discuss:

Read or add your comments to this news (0 comments)

Multiple bugs in Webmin/Usermin updated since 10.05.2002
Published:		25.02.2003
Source:		BUGTRAQ
SecurityVulns ID:		2000
Type:		remote
Level:		6/10
Description:		Crossite scripting, session ID spoofing.

Affected:		WEBMIN : Webmin 0.96
		USERMIN : Usermin 0.90

Original document		SNS, [SNS Advisory No.52] Webmin/Usermin Cross-site Scripting Vulnerability (10.05.2002)
		SNS, [SNS Advisory No.53] Webmin/Usermin Session ID Spoofing Vulnerability (10.05.2002)

Discuss:

Read or add your comments to this news (0 comments)