Adminmod format string bug
Published:		13.01.2003
Source:		BUGTRAQ
SecurityVulns ID:		2535
Type:		remote
Level:		6/10
Description:		Formatstring bug in multiple command.

Affected:

ADMINMOD : adminmod 2.50

Original document

VOID.AT Security, [VSA0302] Half-Life Adminmod remote (root) hole (13.01.2003)

Files:		Remote exploit for Halflife-Servers running the Adminmod-Plugin
Discuss:		Read or add your comments to this news (0 comments)

StatsMe format string bug
Published:		13.01.2003
Source:		BUGTRAQ
SecurityVulns ID:		2536
Type:		remote
Level:		6/10
Description:		Format string bug in sm_playerstats.

Affected:

STATSME : statsme 2.6

Original document

VOID.AT Security, [VSA0303] Half-Life StatsMe remote (root) hole (13.01.2003)

Files:		Remote exploit for Halflife-Servers running the StatsMe-Plugin
Discuss:		Read or add your comments to this news (0 comments)

middleman buffer overflow
Published:		13.01.2003
Source:		BUGTRAQ
SecurityVulns ID:		2537
Type:		remote
Level:		5/10
Description:		Multiple off-by-one overflows.

Affected:

MIDDLEMAN : middleman 1.2

Original document

qitest1, middleman-1.2 and prior off-by-one bug (13.01.2003)

Discuss:

Read or add your comments to this news (0 comments)

BitKeeper command execution
Published:		13.01.2003
Source:		BUGTRAQ
SecurityVulns ID:		2539
Type:		remote
Level:		5/10
Description:		Uncommented shell characters.

Affected:

BITKEEPER : bitkeeper 3.0

Original document

Maurycy Prodeus, BitKeeper remote shell command execution/local vulnerability (13.01.2003)

Discuss:

Read or add your comments to this news (0 comments)

CGI bugs updated since 13.01.2003
Published:		15.01.2003
Source:
SecurityVulns ID:		2538
Level:		5/10

Affected:		WAGORA : W-Agora 4.1
		YABB : YaBB 1.41
		CGI : FormMail.cgi 1.92
		FOLLETT : WebCollection Plus 5.0

Original document		f0urtyfive_(at)_ceteranet.com, Vulnerability in WebCollection Plus (TM) (15.01.2003)
		sonyy_(at)_2vias.com.ar, Bug in w-agora (14.01.2003)
		Rynho Zeros Web, XSS (Cross Site Scripting) on FormMail.CGI (13.01.2003)
		VOID.AT Security, [VSA0306] YABBSE 1.4.1 SQL Injection Bugs (13.01.2003)

Discuss:

Read or add your comments to this news (0 comments)