IBM Net.Data crossite scripting
Published:		26.01.2004
Source:		FULL-DISCLOSURE
SecurityVulns ID:		3389
Type:		remote
Level:		5/10
Description:		Crossite scripting in error messages.

Affected:

IBM : Net.Data 7.2

Original document

Carsten H. Eiram, [Full-Disclosure] Secunia Research: IBM Net.Data Macro Name Cross-Site Scripting Vulnerability (26.01.2004)

Discuss:

Read or add your comments to this news (0 comments)

Multiple Tinyserver bugs
Published:		26.01.2004
Source:		BUGTRAQ
SecurityVulns ID:		3390
Type:		remote
Level:		5/10
Description:		Directory traversal, buffer overflows, etc.

Affected:

TINYSERVER : Tiny Server 1.1

Original document

Donato Ferrante, Tiny Server 1.1 (1.0.5) Multiple Vulnerabilities (26.01.2004)

Discuss:

Read or add your comments to this news (0 comments)

mod_plsql crossite scripting
Published:		26.01.2004
Source:		BUGTRAQ
SecurityVulns ID:		3391
Type:		remote
Level:		5/10
Description:		Crossite scripting in isqlplus.

Affected:

ORACLE : mod_plsql 0.3

Original document

Rafel Ivgi, Oracle HTTP Server Cross Site Scripting Vulnerabillity (26.01.2004)

Discuss:

Read or add your comments to this news (0 comments)

Novell Netware Enterprise Web Server multiple bugs
Published:		26.01.2004
Source:		BUGTRAQ
SecurityVulns ID:		3392
Type:		remote
Level:		5/10
Description:		Crossite scripting, directory listing, etc.

Affected:		NOVELL : NetWare Enterprise Web Server 5.1
		NOVELL : NetWare Enterprise Web Server 6.0

Original document

Rafel Ivgi, NetWare-Enterprise-Web-Server/5.1/6.0 Multiple Vulnerabilities (26.01.2004)

Discuss:

Read or add your comments to this news (0 comments)

Finjan SurfinGate unauthorized access
Published:		26.01.2004
Source:		BUGTRAQ
SecurityVulns ID:		3393
Type:		remote
Level:		5/10
Description:		By using proxy server it's possible to obtain access to administration.

Affected:

FINJAN : SurfinGate 7.0

Original document

David Byrne, Finjan SurfinGate Vulnerability (26.01.2004)

Discuss:

Read or add your comments to this news (0 comments)

Windows XP .folder files code execution
Published:		26.01.2004
Source:		BUGTRAQ
SecurityVulns ID:		3397
Type:		local
Level:		5/10
Description:		It's possible to create .folder file launching executable fail on open.

Affected:

MICROSOFT : Windows XP

Original document

http-equiv_(at)_excite.com, Self-Executing FOLDERS: Windows XP Explorer Part V (26.01.2004)

Files:		Self-Executing FOLDERS
Discuss:		Read or add your comments to this news (0 comments)

Multiple game bugs
Published:		26.01.2004
Source:		BUGTRAQ
SecurityVulns ID:		3396
Type:		remote
Level:		7/10
Description:		Multiple buffer overflows on parsing different protocols.

Affected:

GAIM : gaim 0.75

Original document

Stefan Esser, Advisory 01/2004: 12 x Gaim remote overflows (26.01.2004)

Discuss:

Read or add your comments to this news (0 comments)

BremsServer multiple bugs
Published:		26.01.2004
Source:		BUGTRAQ
SecurityVulns ID:		3395
Type:		remote
Level:		5/10
Description:		Directory traversal, crossite scripting.

Affected:

HERBERLIN : BremsServer 1.2

Original document

Donato Ferrante, Directory traversal and XSS in BremsServer 1.2.4 (26.01.2004)

Discuss:

Read or add your comments to this news (0 comments)

CGI bugs updated since 26.01.2004
Published:		30.01.2004
Source:
SecurityVulns ID:		3398
Type:		remote
Level:		5/10

Affected:		DIBURIM : Inrtra Forum
		BLOG : Web Blog 1.1
		PJ : NeoBoard

Original document		ZetaLabs, ZH2004-02SA (security advisory): PJ CGI Neo review (NeoBoard review) Remote arbitrary file retrieving (30.01.2004)
		ZetaLabs, ZH2004-01SA (security advisory): Web Blog 1.1 Remote arbitrary files retrieving (30.01.2004)
		Rafel Ivgi, Inrtra Forum Cross Site Scripting Vulnerabillity (26.01.2004)

Discuss:

Read or add your comments to this news (0 comments)

Serv-U buffer overflow updated since 26.01.2004
Published:		19.04.2004
Source:		BUGTRAQ
SecurityVulns ID:		3394
Type:		remote
Level:		6/10
Description:		Stack overflow in non-RFC 'chmod' and 'mdtm' and 'ls -l' commands.

Affected:		RHINOSOFT : Serv-U 4.2
		RHINOSOFT : Serv-U 5.0

Original document		SECURITEAM, [NT] Serv-U LIST -l Parameter Buffer Overflow (19.04.2004)
		bkbll, [Full-Disclosure] [vulnwatch] Serv-U MDTM Command Buffer Overflow Vulnerability (26.02.2004)
		Some Guy, [Full-Disclosure] Serv-U 4.1 Memory Corruption / Whatever (17.02.2004)
		icbm, [SST]ServU MDTM command remote buffero verflow adv (26.01.2004)

Files:		erv-U FTPD 2.x/3.x/4.x/5.x "MDTM" Command Remote Exploit
		serv-u 4.2 site chmod long_file_name stack overflow exp
		Serv-U FTPD 3.x/4.x "SITE CHMOD" Command remote exploit V1.0
		Serv-U "SITE CHMOD" exploit
		Serv-U MDTM exploits
		Serv-U FTPD 3.x/4.x/5.x "MDTM" Command remote overflow exploit
Discuss:		Read or add your comments to this news (0 comments)