Internet explorer and Konquerror frames crossite scripting updated since 10.09.2002
Published:		11.09.2002
Source:		BUGTRAQ
SecurityVulns ID:		2277
Type:		client
Level:		5/10
Description:		For sites with frame it's possible to execute script by spoofing location of one of frames.

Affected:		MICROSOFT : Internet Explorer 6.0
		KDE : KDE 3.0.

Original document		KDE, KDE Security Advisory: Konqueror Cross Site Scripting Vulnerability (11.09.2002)
		GreyMagic Software, Who framed Internet Explorer (GM#010-IE) (10.09.2002)

Discuss:

Read or add your comments to this news (0 comments)

Secure cookie access in Knoqueror
Published:		11.09.2002
Source:		BUGTRAQ
SecurityVulns ID:		2279
Type:		client
Level:		5/10
Description:		Cookie with secure flag may be sent via unsecured channel.

Affected:

KDE : KDE 3.0

Original document

KDE, KDE Security Advisory: Secure Cookie Vulnerability (11.09.2002)

Discuss:

Read or add your comments to this news (0 comments)

Buffer overflow in ssldump
Published:		11.09.2002
Source:		BUGTRAQ
SecurityVulns ID:		2280
Type:		client
Level:		5/10
Description:		Buffer overflow on SSL packets analysis.

Affected:

SSLDUMP : ssldump 0.9

Original document

Eric Rescorla, Buffer over/underflows in ssldump prior to 0.9b3 (11.09.2002)

Discuss:

Read or add your comments to this news (0 comments)

Multiple bugs in HP Tru64 UNIX updated since 02.09.2002
Published:		11.09.2002
Source:		BUGTRAQ
SecurityVulns ID:		2259
Type:		local
Level:		9/10
Description:		Buffer overflows in multiple utilities, unsafe signal handling in ping.

Affected:		HP : Tru64 5.0
		HP : Tru64 5.1

Original document		HP, [security bulletin] SSRT-547 HP Tru64 UNIX Potential Security Vulnerabilities TPC/IP, FTPD, ARP (11.09.2002)
		Kevin Finisterre, TRU64 formal disclosure from Snosoft. (05.09.2002)
		Kevin Finisterre, Happy Labor Day from Snosoft (03.09.2002)
		HP, [security bulletin] SSRT2275 HP Tru64 UNIX - Potential Buffer Overflows & SSRT2229 Potential Denial of Service (02.09.2002)

Files:		Compaq multiple bugs details
Discuss:		Read or add your comments to this news (0 comments)

Multiple bugs in Savant Web Server updated since 11.09.2002
Published:		02.02.2005
Source:		BUGTRAQ
SecurityVulns ID:		2278
Type:		remote
Level:		6/10
Description:		Buffer overflow on long URL, directory traversal, buffer overflows in CGI, etc.

Affected:		SAVANT : Savant Web Server 3.0
		SAVANT : Savant Web Server 3.1

Original document		muts, [Full-Disclosure] Remotely exploitable buffer overflow vulnerability in Savant Web Server 3.1 (02.02.2005)
		Auriemma Luigi, Savant 3.1 multiple vulnerabilities (14.09.2002)
		Foundstone Labs, Foundstone Labs Advisory - Buffer Overflow in Savant Web Server (11.09.2002)

Files:		Savant Web Server 3.1 Remote Buffer Overflow Exploit
		Savant web server Buffer Overflow Exploit
Discuss:		Read or add your comments to this news (0 comments)