Multiple MySQL bugs updated since 14.12.2002
Published:		14.02.2002
Source:		BUGTRAQ
SecurityVulns ID:		2477
Type:		remote
Level:		7/10
Description:		Multiple bugs including remote heap overflow.

Affected:		MYSQL : MySQL 3.23
		MYSQL : MySQL 4.0

Original document

Stefan Esser, Advisory 04/2002: Multiple MySQL vulnerabilities (14.12.2002)

Files:		local and remote exploit for mysql <= 3.23.53a
Discuss:		Read or add your comments to this news (0 comments)

Microsoft Internet Explorer PNG integer overflow
Published:		14.12.2002
Source:		COBALT
SecurityVulns ID:		2478
Type:		client
Level:		6/10
Description:		Integer overflow dusing PNG deflate unpacking.

Affected:		MICROSOFT : Internet Explorer 5.5
		MICROSOFT : Internet Explorer 6.0

Original document

EEYE, PNG (Portable Network Graphics) Deflate Heap Corruption Vulnerability (14.12.2002)

Discuss:

Read or add your comments to this news (0 comments)

persl safe.pm protection bypass
Published:		14.12.2002
Source:		BUGTRAQ
SecurityVulns ID:		2479
Type:		library
Level:		5/10
Description:		Safe mode doesn't work if it was already used.

Affected:

PERL : perl 5.0

Original document

DEBIAN, [SECURITY] [DSA 208-1] New Perl packages correct Safe handling (14.12.2002)

Discuss:

Read or add your comments to this news (0 comments)

Sun Cobalt RaQ4 command execution updated since 09.12.2002
Published:		14.12.2002
Source:		BUGTRAQ
SecurityVulns ID:		2463
Type:		remote
Level:		7/10
Description:		/cgi-bin/.cobalt/overflow/overflow.cgi allows command execution.

Affected:

COBALT : RaQ4

Original document		CERT, CERT Advisory CA-2002-35 Vulnerability in RaQ 4 Servers (14.12.2002)
		grazer_(at)_digit-labs.org, Cobalt RaQ4 Remote root exploit (09.12.2002)

Files:		Cobalt RaQ4 Remote root exploit
Discuss:		Read or add your comments to this news (0 comments)

VisNetic multiple bugs updated since 12.12.2002
Published:		14.12.2002
Source:		BUGTRAQ
SecurityVulns ID:		2474
Type:		remote
Level:		5/10
Description:		Buffer overflow in GTTP OPTIONS request. Crossite scripting.

Affected:

DEERFIELD : Visnetic WebSite 3.5

Original document		Ory Segal, VisNetic WebSite XSS vulnerability through HTTP referer header (14.12.2002)
		Peter Kruse, Denial of Service vulnerability in VisNetic Website (12.12.2002)

Discuss:

Read or add your comments to this news (0 comments)

Microsoft Java VM multiple bugs
Published:		14.12.2002
Source:		BUGTRAQ
SecurityVulns ID:		2476
Type:		client
Level:		6/10

Affected:

MICROSOFT : JAVA VM 3805

Original document

MICROSOFT, Microsoft Security Bulletin MS02-069: Flaw in Microsoft VM Could Enable System Compromise (810030) (14.12.2002)

Discuss:

Read or add your comments to this news (0 comments)

Multiple bugs in Microsoft Virtual Java Machine updated since 09.09.2002
Published:		14.12.2002
Source:		BUGTRAQ
SecurityVulns ID:		2275
Type:		client
Level:		6/10
Description:		Amongg others there are bugs allowing file access on client computer.

Affected:

MICROSOFT : Internet Explorer 6.0

Original document		Jouko Pynnonen, Technical information about unpatched MS Java vulnerabilities (09.11.2002)
		Jouko Pynnonen, Technical information about the vulnerabilities fixed by MS-02-52 (28.09.2002)
		MICROSOFT, Security Bulletin MS02-052: Flaw in Java VM JDBC Classes Could Allow Code Execution (Q329077) (19.09.2002)
		Jouko Pynnonen, Vulnerabilities in Microsoft's Java implementation (09.09.2002)

Discuss:

Read or add your comments to this news (0 comments)

Buffer overflows in fetchmail updated since 30.09.2002
Published:		14.12.2002
Source:		BUGTRAQ
SecurityVulns ID:		2307
Type:		client
Level:		6/10
Description:		Buffer overflows on addresses parsing.

Affected:		FETCHMAIL : fetchmail 6.0
		FETCHMAIL : fetchmail 6.1

Original document		Stefan Esser, Advisory 05/2002: Another Fetchmail Remote Vulnerability (14.12.2002)
		Stefan Esser, Advisory 03/2002: Fetchmail remote vulnerabilities (30.09.2002)

Discuss:

Read or add your comments to this news (0 comments)

Windows 2000 SMB signing protection bypass updated since 14.12.2002
Published:		23.01.2003
Source:		MICROSOFT
SecurityVulns ID:		2475
Type:		m-i-t-m
Level:		5/10
Description:		During connectio nsetup it's possible to switch off SMB signing regardless of policy setting.

Affected:		MICROSOFT : Windows 2000 Server
		MICROSOFT : Windows 2000 Advanced Server
		MICROSOFT : Windows 2000 Professional
		MICROSOFT : Windows XP

Original document		MICROSOFT, Microsoft Security Bulletin MS02-070: Flaw in SMB Signing Could Enable Group Policy to be Modified (309376) (23.01.2003)
		MICROSOFT, Microsoft Security Bulletin MS02-070: Flaw in SMB Signing Could Enable Group Policy to be Modified (309376) (14.12.2002)

Discuss:

Read or add your comments to this news (0 comments)