Privelege escalation via Apache .htaccess buffer overflow updated since 23.06.2002
Published:		27.06.2002
Source:		VULN-DEV
SecurityVulns ID:		2112
Type:		local
Level:		5/10
Description:		Oversized line in .htaccess causes buffer overflow

Affected:

APACHE : Apache 1.3

Original document		Jedi/Sector One, Apache mod_ssl off-by-one vulnerability (27.06.2002)
		Jedi/Sector One, Re: Another flaw in Apache? (24.06.2002)
		Jedi/Sector One, Another flaw in Apache? (23.06.2002)

Files:		Local apache DoS exploit
Discuss:		Read or add your comments to this news (0 comments)

Buffer overflow in HP-UX cifslogin updated since 24.06.2002
Published:		27.06.2002
Source:		BUGTRAQ
SecurityVulns ID:		2113
Type:		local
Level:		5/10
Description:		Buffer overflow on oversized -P option.

Affected:

HP : HP-UX 11.11

Original document		Alex Hernandez, Sharity Cifslogin Buffer Overflow (arguments) (27.06.2002)
		SECURITEAM, [UNIX] Sharity Cifslogin Buffer Overflow (Arguments) (24.06.2002)

Discuss:

Read or add your comments to this news (0 comments)

Format string bug in decfingerd
Published:		27.06.2002
Source:		VULN-DEV
SecurityVulns ID:		2117
Type:		remote
Level:		5/10
Description:		Ошибка форматной строки при вызове syslog()

Affected:

DECFINGERD : decfingerd 0.7

Original document

isox, Formatstring Vulnerability in decfingerd 0.7 (27.06.2002)

Discuss:

Read or add your comments to this news (0 comments)

Multiple buffer overflows in Microsoft Commerce Server updated since 27.06.2002
Published:		04.07.2002
Source:		BUGTRAQ
SecurityVulns ID:		2116
Type:		remote
Level:		5/10
Description:		Buffer overflows in Profile Service

Affected:		MICROSOFT : Commerce Server 2000
		MICROSOFT : Commerce Server 2002

Original document		NGSSoftware Insight Security Research, Remotely Exploitable Buffer Overruns in Microsoft's Commerce Server 2000/2 (#NISRNISR03062002) (04.07.2002)
		MICROSOFT, Security Bulletin MS02-033: Unchecked Buffer in Profile Service Could Allow Code Execution in Commerce Server (Q322273) (27.06.2002)

Discuss:

Read or add your comments to this news (0 comments)

Buffer overflow in libc resolver updated since 27.06.2002
Published:		08.10.2002
Source:		BUGTRAQ
SecurityVulns ID:		2118
Type:		library
Level:		7/10
Description:		Buffer overflow in DNS resolving functions.

Affected:		NETBSD : NetBSD 1.5
		BIND : bind 8.2
		ISC : bind 4.9
		BIND : bind 8.3
		FREEBSD : FreeBSD 4.5
		FREEBSD : FreeBSD 4.6
		ISC : bind 4.8
		ISC : bind 9.2

Original document		NETBSD, NetBSD Security Advisory 2002-015: (another) buffer overrun in libc/libresolv DNS resolver (08.10.2002)
		CERT, Advisory CA-2002-19 Buffer Overflow in Multiple DNS Resolver Libraries (29.06.2002)
		FREEBSD, FreeBSD Security Advisory FreeBSD-SA-02:28.resolv (28.06.2002)
		NETBSD, NetBSD Security Advisory 2002-006: buffer overrun in libc DNS resolver (28.06.2002)
		Mark Lastdrager, Remote buffer overflow in resolver code of libc (27.06.2002)

Discuss:

Read or add your comments to this news (0 comments)