Buffer overflow in MyWebServer updated since 09.07.2002
Published:		16.08.2002
Source:		BUGTRAQ
SecurityVulns ID:		2140
Type:		remote
Level:		5/10
Description:		Buffer overflow on oversized GET request.

Affected:

MYWEBSERVER : MyWebServer 1.02

Original document		D4rkGr3y, new bugs in MyWebServer (16.08.2002)
		Foundstone Labs, Foundstone Advisory - Buffer Overflow in MyWebServer (09.07.2002)

Files:		DoS/root exploit for MyWebServer v.1.0.2.
Discuss:		Read or add your comments to this news (0 comments)

Unauthorized access via Google Toolbar updated since 08.08.2002
Published:		16.08.2002
Source:		BUGTRAQ
SecurityVulns ID:		2218
Type:		client
Level:		5/10

Affected:

GOOGLE : Google toolbar 1.1

Original document		silentsupporter_(at)_poczta.onet.pl, IE [with Google Toolbar installed] crash (16.08.2002)
		GreyMagic Software, Exploiting the Google toolbar (GM#001-MC) (08.08.2002)

Discuss:

Read or add your comments to this news (0 comments)

Unauthorized file upload via Internet Explorer
Published:		16.08.2002
Source:		BUGTRAQ
SecurityVulns ID:		2230
Type:		client
Level:		5/10
Description:		It's possible to download file in known location or to determine location of cache by using htm files download or Web folders.

Affected:		MICROSOFT : Internet Explorer 5.5
		MICROSOFT : Internet Explorer 6.0

Original document		http-equiv@excite.com, SILLY BEHAVIOR : Internet Explorer 5.5 - 6.0 (16.08.2002)
		http-equiv@excite.com, SAME LADY, DIFFERENT DRESS: Internet Explorer 6 (16.08.2002)

Discuss:

Read or add your comments to this news (0 comments)

Windows 2000 Network Connection Manager privelege escalation
Published:		16.08.2002
Source:		MICROSOFT
SecurityVulns ID:		2232
Type:		local
Level:		8/10
Description:		Callback function is called with system priveleges.

Affected:		MICROSOFT : Windows 2000 Server
		MICROSOFT : Windows 2000 Advanced Server
		MICROSOFT : Windows 2000 Professional

Original document

MICROSOFT, Security Bulletin MS02-042: Flaw in Network Connection Manager Could Enable Privilege Elevation (Q326886) (16.08.2002)

Discuss:

Read or add your comments to this news (0 comments)

Cisco Content Service Switch unauthorized access
Published:		16.08.2002
Source:		BUGTRAQ
SecurityVulns ID:		2233
Type:		remote
Level:		5/10
Description:		It's possible to access administrative interface without authentication.

Affected:

CISCO : Content Service Switch 11000

Original document

CISCO, Security Advisory: Cisco Content Service Switch 11000 Series Web Management Vulnerability (16.08.2002)

Discuss:

Read or add your comments to this news (0 comments)

File deletion via Windows XP Help Center updated since 16.08.2002
Published:		17.10.2002
Source:		BUGTRAQ
SecurityVulns ID:		2231
Type:		client
Level:		6/10
Description:		By usgin hcp:// URL it's possible to remove file sustem objects.

Affected:

MICROSOFT : Windows XP

Original document		MICROSOFT, Security Bulletin MS02-060: Flaw in Windows XP Help and Support Center Could Enable File Deletion (Q328940) (17.10.2002)
		Shane Hird, Delete arbitrary files using Help and Support Center [MSRC 1198dg] (16.08.2002)

Discuss:

Read or add your comments to this news (0 comments)