Unauthorized access to special devices and NetBIOS connections in Microsoft Internet Explorer updated since 14.05.2002
Published:		17.05.2002
Source:		3APA3A
SecurityVulns ID:		2010
Type:		client
Level:		7/10
Description:		With <IFRAME> and <BGSOUND> tags it's possible to cause DoS against Outlook Express or to send data to special device. It's also posible to cause IE to establish NetBIOS connection with any untrusted host.

Affected:

MICROSOFT : Internet Explorer 6.0

Original document		3APA3A, Re[2]: dH team & SECURITY.NNOV: special device access, information leakage and DoS in Outlook Express (17.05.2002)
		Chad Loder, Re: dH team & SECURITY.NNOV: special device access, information leakage and DoS in Outlook Express (17.05.2002)
		ERRor, dH team & SECURITY.NNOV: special device access, information leakage and DoS in Outlook Express (15.05.2002)

Files:		Outlook Express Special Device access POC
		Outlook Express Special Device DoS POC
		special device access and DoS in Microsoft Internet Exporer/Outlook Express/Outlook
		Security risks assoticated with using e-mail.
Discuss:		Read or add your comments to this news (0 comments)

Buffer overflow in lukemftp
Published:		17.05.2002
Source:		BUGTRAQ
SecurityVulns ID:		2017
Type:		client
Level:		5/10
Description:		Buffer overflow on preparing PASV command.

Affected:

NETBSD : lukemftp 1.5

Original document

SUSE, SuSE Security Announcement: lukemftp, nkitb, nkitserv (SuSE-SA:2002:018) (17.05.2002)

Discuss:

Read or add your comments to this news (0 comments)

Buffer overflow in mpg321
Published:		17.05.2002
Source:		BUGTRAQ
SecurityVulns ID:		2018
Type:		client
Level:		5/10
Description:		Buffer overflow on audio stream processing.

Affected:

MPG321 : mpg321 0.2

Original document

REDHAT, [RHSA-2002:078-04] Updated mpg321 packages available (17.05.2002)

Discuss:

Read or add your comments to this news (0 comments)

Privelege escalation via SuSE shadow/pam-modules
Published:		17.05.2002
Source:		BUGTRAQ
SecurityVulns ID:		2019
Type:		library
Level:		5/10

Affected:

SUSE : SuSE linux 8.0

Original document

SUSE, SuSE Security Announcement: shadow (SuSE-SA:2002:017) (17.05.2002)

Discuss:

Read or add your comments to this news (0 comments)

Protection bypass and crossite scripting in Sonicwall SOHO updated since 17.05.2002
Published:		03.11.2008
Source:		BUGTRAQ
SecurityVulns ID:		2020
Type:		remote
Level:		5/10
Description:		It's possible to access banned site and to insert javascript into log file by using URL javascript injection.

Affected:		SONICWALL : Sonicwall SOHO 5.0
		SONICWALL : SonicWALL Pro 2040

Original document		ZDI, ZDI-08-070: SonicWALL Content-Filtering Universal Script Injection Vulnerability (03.11.2008)
		E M, Sonicwall SOHO Content Blocking Script Injection, LogFile Denial of Service (17.05.2002)

Discuss:

Read or add your comments to this news (0 comments)