Zyxel Prestige DoS updated since 17.12.2001
Published:		18.06.2002
Source:		BUGTRAQ
SecurityVulns ID:		1630
Type:		remote
Level:		5/10
Description:		Problems with fragmented packets processing, Syn+fin and Syn+ack packets.

Affected:		ZYXEL : Prestige 681
		ZYXEL : Prestige 642

Original document		Kistler Ueli, ZyXEL 642R(-11) AJ.6 SYN-ACK, SYN-FIN DoS (18.06.2002)
		Przemyslaw Frasunek, Re: Zyxel Prestige 681 and 1600 (possibly other?) remote DoS (19.12.2001)
		Przemyslaw Frasunek, Zyxel Prestige 681 and 1600 (possibly other?) remote DoS (17.12.2001)

Discuss:

Read or add your comments to this news (0 comments)

Buffer overflow in Apache updated since 17.06.2002
Published:		18.06.2002
Source:		X-FORCE
SecurityVulns ID:		2097
Type:		remote
Level:		10/10
Description:		Signed/unsigned conversion bug on CHUNKed POST.

Affected:		APACHE : Apache 1.3
		APACHE : Apache 2.0

Original document		X-FORCE, ISS X-Force response (18.06.2002)
		CERT, Advisory CA-2002-17 Apache Web Server Chunk Handling Vulnerability (18.06.2002)
		APACHE, Apache httpd: vulnerability with chunked encoding (17.06.2002)
		X-FORCE, ISS Advisory: Remote Compromise Vulnerability in Apache HTTP Server (17.06.2002)

Files:		FreeBSD, NetBSD & OPENBSD/X86 APACHE REMOTE EXPLOIT
		OPENBSD/X86 APACHE REMOTE EXPLOIT
		Apache worm source
Discuss:		Read or add your comments to this news (0 comments)

Buffer overflow in Interbase
Published:		18.06.2002
Source:		BUGTRAQ
SecurityVulns ID:		2099
Type:		local
Level:		5/10
Description:		Heap overflow on environment parsing.

Affected:

BORLAND : InterBase 6.0

Original document

Kevin Finisterre, Interbase 6.0 malloc() issues (18.06.2002)

Files:		gds_lock_mgr exploit for Interbase 6.0 linux beta
		gds_drop exploit for Interbase 6.0 linux beta
Discuss:		Read or add your comments to this news (0 comments)

NetGear unauthorized access updated since 18.06.2002
Published:		18.06.2002
Source:		BUGTRAQ
SecurityVulns ID:		2100
Type:		remote
Level:		4/10
Description:		It's possible to obtain full access by using 192.168.0.1 address from external interface.

Affected:

NETGEAR : Web Safe Router RP114

Original document

auto353237_(at)_hushmail.com, External access to Netgear RP114 "firewall" (18.06.2002)

Discuss:

Read or add your comments to this news (0 comments)

nCipher problems
Published:		18.06.2002
Source:		BUGTRAQ
SecurityVulns ID:		2101
Type:		local
Level:		5/10
Description:		Weak key generation during installation, problems with java library.

Affected:

NCIPHER : nCipher CSP 5.54

Original document		NCIPHER, nCipher Advisory #4: Console Java apps can leak passphrases on Windows (18.06.2002)
		NCIPHER, nCipher Advisory #3: MSCAPI keys erroneously module-protected - update (18.06.2002)

Discuss:

Read or add your comments to this news (0 comments)

Multiple bugs in Resin updated since 18.06.2002
Published:		18.07.2002
Source:		BUGTRAQ
SecurityVulns ID:		2098
Type:		remote
Level:		5/10
Description:		Directory traversal in demo JSP-pages, DoS.

Affected:

CAUCHO : Resin 2.1

Original document		Peter Gründl, KPMG-2002033: Resin DOS device path disclosure (18.07.2002)
		Peter Gründl, KPMG-2002020: Resin view_source.jsp Arbitrary File Reading (18.06.2002)
		Peter Gründl, KPMG-2002021: Resin Large Parameter Denial of Service (18.06.2002)

Discuss:

Read or add your comments to this news (0 comments)