AN HTTPd multiple bugs updated since 05.01.2003
Published:		23.04.2003
Source:		BUGTRAQ
SecurityVulns ID:		2515
Type:		remote
Level:		5/10
Description:		Crossite scripting, physical path leakage, special devices access, file corruption.

Affected:

ANHTTPD : AN HTTPd 1.41

Original document		Matthew Murphy, AN HTTPd Sample Script File Truncation (23.04.2003)
		D4rkGr3y, AN HTTPd v.1.41e: DoS, CSS, real patch attack (05.01.2003)

Discuss:

Read or add your comments to this news (0 comments)

Microsoft IIS local ASP DoS
Published:		23.04.2003
Source:		COBALT
SecurityVulns ID:		2762
Type:		local
Level:		5/10
Description:		Insertion of oversized header line via Response.AddHeader causes server to crash.

Affected:		MICROSOFT : Internet Information Server 4.0
		MICROSOFT : Internet Information Server 5.0
		MICROSOFT : Internet Information Server 5.1

Original document

Parcifal Aertssen, Microsoft Active Server Pages DoS (23.04.2003)

Discuss:

Read or add your comments to this news (0 comments)

SAP DB development tools privelege escalation
Published:		23.04.2003
Source:		BUGTRAQ
SecurityVulns ID:		2763
Type:		local
Level:		5/10
Description:		instdbmsrv and instlserver allow chmod/chown for any files.

Affected:

SAP : SAP DB 7.4

Original document

Kevin Finisterre, SRT2003-04-22-1336 - SAP DB Development Tools install flaw (23.04.2003)

Discuss:

Read or add your comments to this news (0 comments)

Symbolic links problem in mime-support
Published:		23.04.2003
Source:		BUGTRAQ
SecurityVulns ID:		2764
Type:		local
Level:		5/10
Description:		Symbolic links problem on temporary files.

Affected:		MIMESUPPORT : mime-support 3.9
		MIMESUPPORT : mime-support 3.18
		MIMESUPPORT : mime-support 3.22

Original document

DEBIAN, [SECURITY] [DSA 292-1] New mime-support packages fix temporary file race conditions (23.04.2003)

Discuss:

Read or add your comments to this news (0 comments)

gkrellm-newsticker unescaped shell characters problem
Published:		23.04.2003
Source:		BUGTRAQ
SecurityVulns ID:		2766
Type:		client
Level:		5/10
Description:		Shell characters problem on browser execution.

Affected:

GKRELLM : gkrellm-newsticker 0.3

Original document

Martin Schulze, Security problems in gkrellm-newsticker (23.04.2003)

Discuss:

Read or add your comments to this news (0 comments)

Cisco Secure ACS buffer overflow updated since 23.04.2003
Published:		24.04.2003
Source:		BUGTRAQ
SecurityVulns ID:		2765
Type:		remote
Level:		6/10
Description:		Buffer overflow in TCP/2002 web interface port.

Affected:		CISCO : Secure ACS for Windows 2.6
		CISCO : Secure ACS for Windows 3.0
		CISCO : Secure ACS for Windows 3.1

Original document		NSFOCUS, NSFOCUS SA2003-04 : Remote Buffer Overflow Vulnerability in Web Management Interface of Cisco Secure ACS (24.04.2003)
		CISCO, Cisco Security Advisory: Cisco Secure Access Control Server for Windows Admin Buffer Overflow Vulnerability (23.04.2003)

Discuss:

Read or add your comments to this news (0 comments)