 |
|
|
|
| Rootkit Hunter symbolic links problem | | Published: |  | 28.04.2005 | | Source: |  | BUGTRAQ | | SecurityVulns ID: |  | 4736 | | Type: |  | local | | Level: |  | 5/10 | | Description: |  | Insecure temporary files handling. |
| Affected: |  | RKHUNTER : rkhunter 1.2 |
| Original document |  | GENTOO, [ GLSA 200504-25 ] Rootkit Hunter: Insecure temporary file creation (28.04.2005) |
| Bakbone Netvault privilege escalation | | Published: | | 28.04.2005 | | Source: | | BUGTRAQ | | SecurityVulns ID: | | 4738 | | Type: | | remote | | Level: | | 5/10 | | Description: | | Hidden windows of local system process handles user's messages. |
| Affected: | | BAKBONE : NetVault 7.1 |
| Original document | | Reed Arvin, Privilege escalation in BakBone NetVault 7.1 (28.04.2005) |
| BulletProof FTP Server privilege escalation | | Published: | | 28.04.2005 | | Source: | | BUGTRAQ | | SecurityVulns ID: | | 4739 | | Type: | | remote | | Level: | | 5/10 | | Description: | | Privilege escalation with help subsystem. |
| Affected: | | BPFTPSERVER : BulletProof FTP Server 2.4 |
| Original document | | Reed Arvin, Privilege escalation in BulletProof FTP Server v2.4.0.31 (28.04.2005) |
| KMiNT21 Software Golden FTP Server buffer overflow | | Published: | | 28.04.2005 | | Source: | | BUGTRAQ | | SecurityVulns ID: | | 4740 | | Type: | | remote | | Level: | | 5/10 | | Description: | | Buffer overflow on oversized username. |
| Affected: | | KMiNT21 : Golden FTP Server Pro 2.52 |
| Original document | | Reed Arvin, Buffer overflow in KMiNT21 Software Golden FTP Server Pro v2.52 (10.04.2005) (28.04.2005) |
| IBM WebSphere Application Server crossite scripting | | Published: | | 28.04.2005 | | Source: | | SECUNIA | | SecurityVulns ID: | | 4741 | | Type: | | remote | | Level: | | 5/10 | | Description: | | Crossite scripting with error pages. |
| Affected: | | IBM : WebSphere 6.0 |
| Original document | | SECUNIA, [SA15067] IBM WebSphere Application Server Cross-Site Scripting Vulnerability (28.04.2005) |
| BEA application server Admin console crossite scripting | | Published: | | 28.04.2005 | | Source: | | REDDATABASESEC | | SecurityVulns ID: | | 4733 | | Type: | | remote | | Level: | | 5/10 | | Description: | | Crossite scripting with http://server:8001/console/actions/jndi/JndiFramesetAction/ |
| Affected: | | BEA : BEA Admin Console 8.1 |
| Original document | | Kornbrust, Alexander, Cross Site Scripting in BEA Admin console (28.04.2005) |
| VooDoo cIRCle BOTNET buffer overflow | | Published: | | 28.04.2005 | | Source: | | SECUNIA | | SecurityVulns ID: | | 4734 | | Type: | | remote | | Level: | | 5/10 | | Description: | | Buffer overflow in botnet center while processing data from bot. |
| Affected: | | VOODOOCIRCLE : VooDoo cIRCle 1.0 |
| Original document | | SECUNIA, [SA15110] VooDoo cIRCle BOTNET Buffer Overflow Vulnerability (28.04.2005) |
| Multiple firewalls directory traversal protection bypass | | Published: | | 28.04.2005 | | Source: | | BUGTRAQ | | SecurityVulns ID: | | 4743 | | Type: | | remote | | Level: | | 5/10 |
| Affected: | | RAZLEE : Firewall+++ | | | | SAFESTONE : DetectIT | | | | POWERLOCK : NetworkSecurity | | | | CASTLEHILL : SECURE/NET | | | | NETIQ : NetIQ Security Manager 4.0 |
| Original document | | SECUNIA, [SA15102] NetIQ Security Manager Directory Traversal Security Bypass (28.04.2005) |
| | | SECUNIA, [SA15088] Castlehill Computer Services SECURE/NET Directory Traversal Security Bypass (28.04.2005) |
| | | SECUNIA, [SA15094] PowerLock NetworkSecurity Directory Traversal Security Bypass (28.04.2005) |
| | | SECUNIA, [SA15099] SafeStone DetectIT Directory Traversal Security Bypass (28.04.2005) |
| | | SECUNIA, [SA15091] Bsafe/Global Security for iSeries Directory Traversal Security Bypass (28.04.2005) |
| | | SECUNIA, [SA15063] RazLee Firewall+++ Directory Traversal Security Bypass (28.04.2005) |
Altris deployment solution AClient privilege escalation
updated since 30.11.2004 | | Published: | | 28.04.2005 | | Source: | | BUGTRAQ | | SecurityVulns ID: | | 4226 | | Type: | | local | | Level: | | 5/10 | | Description: | | It's possible to launch executable with LocalSystem privileges. |
| Affected: | | ALTRIS : Altiris Deployment Solution 5.6 | | | | ALTRIS : Altiris Deployment Solution 6.0 |
| Original document | | Reed Arvin, [Full-disclosure] Privilege escalation and password protection bypass in Altiris Client Service for Windows (Version 6.0.88) (28.04.2005) |
| | | Reed Arvin, [Full-Disclosure] Privilege escalation flaw in the AClient Service for Windows (Version 5.6.181). (30.11.2004) |
netterm netftpd multiple bugs
updated since 21.07.2003 | | Published: | | 28.04.2005 | | Source: | | FULL-DISCLOSURE | | SecurityVulns ID: | | 2999 | | Type: | | remote | | Level: | | 5/10 | | Description: | | Buffer overflows, DoS. |
| Affected: | | INTERSOFT : netterm 4.2 | | | | INTERSOFT : NetTerm 5.1 |
| Original document | | shadown, ADV: NetTerm's NetFtpd 4.2.2 Buffer Overflow + PoC Exploit (28.04.2005) |
| | | morning_wood, [Full-Disclosure] Netterm netftpd - Remote DoS (21.07.2003) |
Multiple tcpdump / ethereal sniffers vulnerabilities
updated since 28.04.2005 | | Published: | | 21.06.2005 | | Source: | | BUGTRAQ | | SecurityVulns ID: | | 4735 | | Type: | | remote | | Level: | | 6/10 | | Description: | | Endless loops during handling RSVP, ISIS, BGP, LDP protocols, buffer overflows in ANSI A, GSM MAP, AIM, DISTCC, FCELS, SIP, KINK, LMP, Telnet, TZSP, WSP, BER, SMB, H.245, Bittorrent, Fibre Channel and many others. |
| |
|
| |
