Buffer overflow and directory traversal in Microsoft Windows Compressed Folders feature updated since 03.10.2002
Published:		11.10.2002
Source:		MICROSOFT
SecurityVulns ID:		2318
Type:		local
Level:		5/10
Description:		Buffer overflow and directory traversal while extracting file from .zip archive.

Affected:		MICROSOFT : Windows ME
		LOTUS : Notes Client R5
		MICROSOFT : Windows XP
		ALADDIN : Stuffit Expander 6.5
		LOTUS : Notes Client R6

Original document		Rapid 7 Security Advisories, R7-0004: Multiple Vendor Long ZIP Entry Filename Processing (11.10.2002)
		MICROSOFT, Security Bulletin MS02-054: Unchecked Buffer in File Decompression Functions Could Lead to Code Execution (Q329048) (03.10.2002)

Discuss:

Read or add your comments to this news (0 comments)

yellow pages unauthorized access updated since 10.10.2002
Published:		11.10.2002
Source:		BUGTRAQ
SecurityVulns ID:		2339
Type:		remote
Level:		7/10
Description:		Vulnerabilities in ypserv and ypxfrd allows file system access with root privileges.

Affected:		HP : HP-UX 11.00
		SUN : Solaris 8
		HP : HP-UX 10.20
		SUN : Solaris 7
		SCO : OpenServer 5.0
		HP : HP-UX 11.11
		HP : Tru64 5.0
		HP : Tru64 5.1
		HP : Tru64 4.0
		HP : HP-UX 11.22

Original document		Janusz Niewiadomski, Multiple vendor ypxfrd map handling vulnerability (11.10.2002)
		HP, [security bulletin] SSRT2339 (ypxfrd) and SSRT2368 (ypserv) HP Tru64 UNIX Potential Security Vulnerability (10.10.2002)

Discuss:

Read or add your comments to this news (0 comments)

Outlook Express S/MIME buffer voerflow
Published:		11.10.2002
Source:		MICROSOFT
SecurityVulns ID:		2343
Type:		client
Level:		6/10
Description:		Buffer overflow on certificate warning window.

Affected:		MICROSOFT : Internet Explorer 5.5
		MICROSOFT : Internet Explorer 6.0

Original document		MICROSOFT, Outlook Express Remote Code Execution in Preview Pane (S/MIME) (11.10.2002)
		MICROSOFT, Security Bulletin MS02-058: Unchecked Buffer in Outlook Express S/MIME Parsing Could Enable System Compromise (Q328676) (11.10.2002)

Files:		prover of concept code of windows help overflow
		Outlook express 5.5 certificate buffer overflow exploit
Discuss:		Read or add your comments to this news (0 comments)

NetGear DoS updated since 11.10.2002
Published:		05.04.2003
Source:		BUGTRAQ
SecurityVulns ID:		2344
Type:		remote
Level:		5/10
Description:		Large number of connection attampts cause router to hang.

Affected:

NETGEAR : Netgear FM114P

Original document		Björn Stickler, Another security problem in Netgear FM114P ProSafe Wireless Router firmware (05.04.2003)
		Marc Ruef, TCP flood against NetGear FM114P (11.10.2002)

Discuss:

Read or add your comments to this news (0 comments)