SurfControl SuperScout Multiple Bugs updated since 03.10.2002
Published:		10.10.2002
Source:		BUGTRAQ
SecurityVulns ID:		2320
Type:		remote
Level:		5/10
Description:		Access to user names/passwords, weak passwords encryption, large GET request DoS, directory traversal, SQL injection.

Affected:

SURFCONTROL : SuperScout

Original document		'ken'@FTU , Four Vulnerabilities in SurfControl's SuperScout Email Filter Administrative Server (10.10.2002)
		Matt Moore, wp--02-0005: Multiple Vulnerabilities in SuperScout Web Reports Server (03.10.2002)

Discuss:

Read or add your comments to this news (0 comments)

Nylon DoS
Published:		10.10.2002
Source:		3APA3A
SecurityVulns ID:		2341
Type:		remote
Level:		5/10
Description:		Closing client socket during SOCKS5 handshake causes server to hang with 100% CPU usage.

Affected:		NYLON : nylon 0.2
		NYLON : nylon 0.3

Original document

3APA3A, nylon 0.2 (0.3?) DoS (10.10.2002)

Discuss:

Read or add your comments to this news (0 comments)

AIX TCP flood DoS
Published:		10.10.2002
Source:		BUGTRAQ
SecurityVulns ID:		2340
Type:		remote
Level:		5/10
Description:		Flood with unflagged packets leads to 100% CPU usage and mbuf exhaustion.

Affected:		IBM : AIX 4.3
		IBM : AIX 5.1

Original document

Mauro Flores, Flood ACK packets cause AIX DoS (10.10.2002)

Discuss:

Read or add your comments to this news (0 comments)

yellow pages unauthorized access updated since 10.10.2002
Published:		11.10.2002
Source:		BUGTRAQ
SecurityVulns ID:		2339
Type:		remote
Level:		7/10
Description:		Vulnerabilities in ypserv and ypxfrd allows file system access with root privileges.

Affected:		HP : HP-UX 11.00
		SUN : Solaris 8
		HP : HP-UX 10.20
		SUN : Solaris 7
		SCO : OpenServer 5.0
		HP : HP-UX 11.11
		HP : Tru64 5.0
		HP : Tru64 5.1
		HP : Tru64 4.0
		HP : HP-UX 11.22

Original document		Janusz Niewiadomski, Multiple vendor ypxfrd map handling vulnerability (11.10.2002)
		HP, [security bulletin] SSRT2339 (ypxfrd) and SSRT2368 (ypserv) HP Tru64 UNIX Potential Security Vulnerability (10.10.2002)

Discuss:

Read or add your comments to this news (0 comments)

syslog-ng buffer overflow updated since 10.10.2002
Published:		30.10.2002
Source:		BUGTRAQ
SecurityVulns ID:		2342
Type:		remote
Level:		5/10
Description:		Buffer overflow in parsing $HOST variable in configuration file.

Affected:		SYSLOGNG : syslog-ng 1.4
		SYSLOGNG : syslog-ng 1.5

Original document		ENGUARDE, [ESA-20021029-028] syslog-ng: buffer overflow in macro handling code (UPDATED) (30.10.2002)
		Holtzl Peter, syslog-ng buffer overflow (10.10.2002)

Discuss:

Read or add your comments to this news (0 comments)