ZoneAlarm e-mail protection bypass
Published:		16.04.2004
Source:		BUGTRAQ
SecurityVulns ID:		3611
Type:		client
Level:		5/10
Description:		File is not checked if filename contains extended characters.

Affected:

ZONELABS : ZoneAlarm 4.0

Original document

Damjan Kreft, ZA Security Hole (16.04.2004)

Discuss:

Read or add your comments to this news (0 comments)

Cisco IPSec group password weak encryption
Published:		16.04.2004
Source:		BUGTRAQ
SecurityVulns ID:		3612
Type:		m-i-t-m
Level:		5/10
Description:		Group password is stored cleartext in memory. Knowledge of group passwords allows to steal individual password from wire.

Affected:		CISCO : Cisco VPN 3002
		CISCO : Cisco VPN 3000
		CISCO : Cisco VPN Client

Original document

CISCO, Cisco Security Notice: Cisco IPsec VPN Implementation Group Password Usage Vulnerability (16.04.2004)

Discuss:

Read or add your comments to this news (0 comments)

SurgeLDAP directory traversal
Published:		16.04.2004
Source:		SECURITEAM
SecurityVulns ID:		3613
Type:		remote
Level:		5/10
Description:		user.cgi allows to download any file.

Affected:

NETWINSITE : SurgeLDAP 1.0

Original document

SECURITEAM, [NT] SurgeLDAP Web Service user.cgi File Retrieval (16.04.2004)

Discuss:

Read or add your comments to this news (0 comments)

ADA Image Server multiple bugs
Published:		16.04.2004
Source:		BUGTRAQ
SecurityVulns ID:		3614
Type:		remote
Level:		5/10
Description:		Directory traversal, buffer overflows, etc.

Affected:

ADAIMGSVR : ADA Image Server 0.4

Original document

SECURITEAM, [NT] ADA Image Server (ImgSvr) Multiple Vulnerabilities (16.04.2004)

Discuss:

Read or add your comments to this news (0 comments)

WinSCP DoS
Published:		16.04.2004
Source:		SECURITEAM
SecurityVulns ID:		3615
Type:		client
Level:		5/10
Description:		Oversized URL causes client to hang.

Affected:

WINSCP : WinSCP 3.5

Original document

SECURITEAM, [NT] WinSCP Denial of Service (16.04.2004)

Discuss:

Read or add your comments to this news (0 comments)

KPhone buffer overflow
Published:		16.04.2004
Source:		SECURITEAM
SecurityVulns ID:		3616
Type:		remote
Level:		5/10
Description:		Stack overflow on parsing STUN packet.

Affected:

WIRLAB : KPhone 4.0

Original document

SECURITEAM, [UNIX] KPhone STUN DoS (Malformed STUN Packets) (16.04.2004)

Discuss:

Read or add your comments to this news (0 comments)