Multiple uudeview bugs
Published:		13.03.2004
Source:		BUGTRAQ
SecurityVulns ID:		3523
Type:		local
Level:		5/10
Description:		Buffer overflow, symbolic links problem.

Affected:

UUDEVIEW : uudeview 0.5

Original document

OPENPKG, [OpenPKG-SA-2004.006] OpenPKG Security Advisory (uudeview) (13.03.2004)

Discuss:

Read or add your comments to this news (0 comments)

Compaq Web Managment spoofed certificate unauthorized access
Published:		13.03.2004
Source:		VULNWATCH
SecurityVulns ID:		3524
Type:		remote
Level:		5/10
Description:		User can upload his certificate to server for getting unauthorized access.

Affected:

HP : HP HTTP 5.92

Files:		Remote, unauthenticated certificate upload in Compaq Web Manager (HP HTTP)
Discuss:		Read or add your comments to this news (0 comments)

Metamail symlink problem
Published:		13.03.2004
Source:		BUGTRAQ
SecurityVulns ID:		3525
Type:		local
Level:		5/10
Description:		Symlink problem in extcompose script.

Affected:

METAMAIL : metamail 2.7

Original document

Shaun Moore, Metamail 'extcompose' script Symlink Vulnerability (13.03.2004)

Discuss:

Read or add your comments to this news (0 comments)

CGI bugs updated since 09.03.2004
Published:		13.03.2004
Source:
SecurityVulns ID:		3508
Type:		remote
Level:		5/10

Affected:		CPANEL : Cpanel 5
		INVISION : Invision Power Board 1.3
		VIRTUANEWS : VirtuaNews 1.0
		CONFIXX : Confixx 2.0
		CFWEBSTORE : CFWebstore 5.0

Original document		Fable, Cpanel Request Lets Authenticated Users Conduct Cross-Site Scripting Attacks (13.03.2004)
		Arab VieruZ, Cpanel 9.1.0 have a problem ? (13.03.2004)
		S-Quadra Security Research, [Full-Disclosure] Dogpatch Software CFWebstore 5.0 shopping cart software multiple security vulnerabilities (12.03.2004)
		checker_(at)_mail.krefeld.schulen.net, [Full-Disclosure] Confixx 2.0.xx SQL_Injections and reading MySQL Root-PW (09.03.2004)
		Rafel Ivgi, Invision Power Board v1.3 Final Cross Site Scripting Vulnerabillity (09.03.2004)
		Rafel Ivgi, VirtuaNews Admin Panel 1.0.3 Pro Cross Site Scripting Vulnerabillity (09.03.2004)

Discuss:

Read or add your comments to this news (0 comments)