Multiple OpenSSL DoS bugs updated since 17.03.2004
Published:		19.03.2004
Source:		OPENSSL
SecurityVulns ID:		3532
Type:		remote
Level:		5/10
Description:		Few bugs patched during product audit.

Affected:		CISCO : IOS 12.1
		OPENSSL : OpenSSL 0.9
		CISCO : PIX 6.0
		CISCO : Content Service Switch 11000
		CISCO : PIX 6.1
		CISCO : PIX 6.2
		CISCO : PIX 6.3
		CISCO : Cisco Firewall Services Module
		CISCO : MDS 9000

Original document		CERT, US-CERT Technical Cyber Security Alert TA04-078A -- Multiple Vulnerabilities in OpenSSL (19.03.2004)
		OPENSSL, OpenSSL Security Advisory [17 March 2004] (17.03.2004)

Discuss:

Read or add your comments to this news (0 comments)

CGI bugs updated since 15.03.2004
Published:		19.03.2004
Source:
SecurityVulns ID:		3526
Type:		remote
Level:		5/10

Affected:		PHPBB : phpBB 2.0
		VBULLETIN : vBulletin 3.0
		MAMBOSERVER : Mambo Server 4.5
		YABB : YaBB 1.5
		STEELID : thePHOTOtool
		PHPX : PHPX 3.2
		PHPNUKE : Php-Nuke 7.1
		ALT-N : MDaemon 7.0
		PHPNUKE : 4nGuestbook 0.92
		PHPNUKE : 4nAlbum 0.92
		PHORUM : Phorum 5.0
		VCARD : vCard 2.9
		PHPNUKE : Error Manager 2.1

Original document		Janek Vind, [waraxe-2004-SA#010 - Multiple vulnerabilities in Error Manager v2.1 for PhpNuke] (19.03.2004)
		saudi linux, Vcard 2.8 uninstall script problem (18.03.2004)
		JeiAr, JelSoft vBulletin Multiple XSS Vulnerabilities (17.03.2004)
		gdayworld_(at)_hotmail.com, PHPX 2.x - 3.2.4 (17.03.2004)
		JeiAr, Mambo Open Source Multiple Vulnerabilities (17.03.2004)
		JeiAr, Phorum 5.0.3 Beta && Earlier XSS Issues (16.03.2004)
		Janek Vind, [waraxe-2004-SA#006 - Multiple vulnerabilities in 4nalbum module for PhpNuke] (16.03.2004)
		Janek Vind, [waraxe-2004-SA#005 - XSS in Php-Nuke 7.1.0 - part 2] (16.03.2004)
		Janek Vind, [waraxe-2004-SA#007 - XSS and SQL injection bugs in 4nguestbook module for PhpNuke] (16.03.2004)
		Angelo Rosiello, Rosiello Security's exploit for MDaemon (15.03.2004)
		SECURITEAM, [NT] thePHOTOtool SQL Injection Vulnerability (15.03.2004)
		Cheng Peng Su, YaBB/YaBBse Cross Site Scripting Vulnerability (15.03.2004)
		pokleyzz, [SCAN Associates Sdn Bhd Security Advisory] phpBB 2.0.6 and below sql injection (15.03.2004)
		JeiAr, phpBB 2.0.6d && Earlier Security Issues (15.03.2004)

Files:		Remote Exploit for Mdaemon version v6.85 and prior to 6.52
Discuss:		Read or add your comments to this news (0 comments)

RealNetworks Helix buffer overflow
Published:		19.03.2004
Source:		BUGTRAQ
SecurityVulns ID:		3535
Type:		remote
Level:		5/10
Description:		Buffer overflow during POST request paring.

Affected:		REAL : Helix Universal Server 9.0
		REAL : Helix Universal Server 10.1

Original document

Pentest Security Advisories, ptl-2004-02: RealNetworks Helix Server 9 Administration Server Buffer Overflow (19.03.2004)

Discuss:

Read or add your comments to this news (0 comments)

Norton Antispam buffer overflow
Published:		19.03.2004
Source:		VULNWATCH
SecurityVulns ID:		3536
Type:		client
Level:		6/10
Description:		Buffer overflow in SymSpamHelper and WrapNISUM ActiveX.

Affected:		SYMANTEC : Norton Internet Security 2004
		SYMANTEC : Norton AntiSpam 2004

Original document		NGSSoftware Insight Security Research, Norton Internet Security Remote Command Execution (#NISR19042004b) (19.03.2004)
		NGSSoftware Insight Security Research, [VulnWatch] Norton AntiSpam Remote Buffer Overrun (#NISR19042004a) (19.03.2004)

Discuss:

Read or add your comments to this news (0 comments)

Multiple ISS products ICQ analisys buffer overflow updated since 19.03.2004
Published:		30.03.2004
Source:		X-FORCE
SecurityVulns ID:		3534
Type:		remote
Level:		7/10
Description:		Few stack overflows.

Affected:		ISS : RealSecure 6.5
		ISS : RealSecure 7.0
		ISS : RealSecure 3.6
		ISS : BlackIce 3.6
		ISS : Proventia A
		ISS : Proventia G
		ISS : Proventia M

Original document		Sam, iss_pam1.dll remote exploits (30.03.2004)
		EEYE, EEYE: Internet Security Systems PAM ICQ Server Response Processing Vulnerability (19.03.2004)
		X-FORCE, ISS Security Brief: Vulnerability in ICQ Parsing in ISS Products (19.03.2004)

Files:		iss_pam1.dll remote exploits
Discuss:		Read or add your comments to this news (0 comments)