Symantec firewalls multiple problems updated since 13.05.2004
Published:		15.05.2004
Source:		FULL-DISCLOSURE
SecurityVulns ID:		3690
Type:		remote
Level:		8/10
Description:		Heap and stack overflows on NetBIOS name service packets parsing, endless loop on DNS packets parsing, stack overflow on oversized canonical DNS name.

Affected:		SYMANTEC : Norton Personal Firewall 2002
		SYMANTEC : Norton Personal Firewall 2003
		SYMANTEC : Norton Internet Security 2003
		SYMANTEC : Norton Internet Security 2004
		SYMANTEC : Norton AntiSpam 2004
		SYMANTEC : Norton Personal Firewall 2004
		SYMANTEC : Symantec Client Firewall 5.01
		SYMANTEC : Symantec Client Firewall 5.1
		SYMANTEC : Symantec Client Security 1.0
		SYMANTEC : Norton Internet Security 2002
		SYMANTEC : Symantec Client Security 1.1
		SYMANTEC : Symantec Client Security 2.0

Original document		SYMANTEC, SYM04-008, Symantec Client Firewall Remote Access and Denial of Service Issues (15.05.2004)
		EEYE, [Full-Disclosure] EEYE: Symantec Multiple Firewall DNS Response Denial-of-Service (13.05.2004)
		EEYE, [Full-Disclosure] EEYE: Symantec Multiple Firewall NBNS Response Remote Heap Corruption (13.05.2004)
		EEYE, [Full-Disclosure] EEYE: Symantec Multiple Firewall NBNS Response Processing Stack Overflow (13.05.2004)
		EEYE, [Full-Disclosure] EEYE: Symantec Multiple Firewall Remote DNS KERNEL Overflow (13.05.2004)

Files:		Symantec Multiple Firewall DNS Response Denial-of-Service Exploit (PoC)
Discuss:		Read or add your comments to this news (0 comments)

HP-UX GTK+ weak permissions
Published:		15.05.2004
Source:		BUGTRAQ
SecurityVulns ID:		3691
Type:		local
Level:		5/10
Description:		World-writable directory.

Affected:		HP : HP-UX 11.11
		HP : HP-UX 11.0

Original document

HP, [security bulletin] SSRT3613 rev.0 HP-UX B6848AB GTK+ Support Libraries - elevated privileges (15.05.2004)

Discuss:

Read or add your comments to this news (0 comments)

Bea weblogic shwutdown limitations bypass
Published:		15.05.2004
Source:		BEA
SecurityVulns ID:		3692
Type:		remote
Level:		4/10
Description:		User with admin or operator pribvileges can shutdown server even if this operation is restricted.

Affected:		BEA : Weblogic 7.0
		BEA : Weblogic 8.1

Original document

BEA, Security Advisory: (BEA04-60.00) (15.05.2004)

Discuss:

Read or add your comments to this news (0 comments)

dtlogin buffer overflow updated since 24.03.2004
Published:		15.05.2004
Source:		BUGTRAQ
SecurityVulns ID:		3543
Type:		remote
Level:		7/10
Description:		Buffer overflow during XDMCP parsing.

Affected:		HP : HP-UX 11.00
		SUN : Solaris 8
		HP : HP-UX 11.11
		HP : HP-UX 11.04
		HP : HP-UX 11.22
		HP : HP-UX 11.23

Original document		HP, [security bulletin] SSRT4721 rev.0 HP-UX dtlogin unauthorized privileged access, DoS (15.05.2004)
		Dave Aitel, Immunity Advisory: dtlogin remote root (24.03.2004)

Discuss:

Read or add your comments to this news (0 comments)