 |
|
|
|
| Ipswitch WhatsUp buffer overflow | | Published: |  | 30.08.2004 | | Source: |  | FULL-DISCLOSURE | | SecurityVulns ID: |  | 3941 | | Type: |  | remote | | Level: |  | 5/10 | | Description: |  | Buffer overflow in _maincfgret.cgi |
| OpenBSD bridging ICMP DoS | | Published: | | 30.08.2004 | | Source: | | BUGTRAQ | | SecurityVulns ID: | | 3942 | | Type: | | remote | | Level: | | 5/10 | | Description: | | If bridging is used, ICMP echo packet causes system to crash. |
| NtRegMon DoS | | Published: | | 30.08.2004 | | Source: | | BUGTRAQ | | SecurityVulns ID: | | 3943 | | Type: | | local | | Level: | | 4/10 | | Description: | | NULL pointer dereference during ZwSetQueryValue hook processing. |
| Top Layer Attack Mitigator IPS 5500 DoS | | Published: | | 30.08.2004 | | Source: | | BUGTRAQ | | SecurityVulns ID: | | 3944 | | Type: | | remote | | Level: | | 5/10 | | Description: | | 2000 concurrent HTTP sessions causes 100% CPU usage. |
| Cisco Secure ACS multiple bugs | | Published: | | 30.08.2004 | | Source: | | BUGTRAQ | | SecurityVulns ID: | | 3945 | | Type: | | remote | | Level: | | 6/10 | | Description: | | TCP requests flood DoS, LEAP DoS, anonymous access if Novell Directory Service with anonymous account enabled is used, weak protection against connection hijacking. |
zlib DoS
updated since 30.08.2004 | | Published: | | 30.08.2004 | | Source: | | BUGTRAQ | | SecurityVulns ID: | | 3947 | | Type: | | library | | Level: | | 5/10 |
| linux kernel information leak | | Published: | | 30.08.2004 | | Source: | | BUGTRAQ | | SecurityVulns ID: | | 3948 | | Type: | | local | | Level: | | 5/10 | | Description: | | /proc problems hit again |
| Cisco IOS telnet DoS | | Published: | | 30.08.2004 | | Source: | | BUGTRAQ | | SecurityVulns ID: | | 3949 | | Type: | | remote | | Level: | | 6/10 | | Description: | | Specially crafted telnet or reverse telnet connection causes all TCP based services to fail. |
| Gaucho buffer overflow | | Published: | | 30.08.2004 | | Source: | | SECUNIA | | SecurityVulns ID: | | 3950 | | Type: | | remote | | Level: | | 6/10 | | Description: | | Buffer overflow on oversized Content-Length: field. |
| a2ps shell characters code execution | | Published: | | 30.08.2004 | | Source: | | SECUNIA | | SecurityVulns ID: | | 3955 | | Type: | | local | | Level: | | 5/10 |
| Samba Printer Change Notification DoS | | Published: | | 30.08.2004 | | Source: | | SECUNIA | | SecurityVulns ID: | | 3956 | | Type: | | remote | | Level: | | 5/10 | | Description: | | DoS on FindNextPrintChangeNotify request processing. |
| Microsoft Outlook Express information leak | | Published: | | 30.08.2004 | | Source: | | SECUNIA | | SecurityVulns ID: | | 3952 | | Type: | | client | | Level: | | 4/10 | | Description: | | Bcc: header may not be stripped for partial multipart MIME message. |
| ignitionServer DoS | | Published: | | 30.08.2004 | | Source: | | SECUNIA | | SecurityVulns ID: | | 3953 | | Type: | | remote | | Level: | | 5/10 | | Description: | | Insufficient restrictions on the "SERVER" command can be exploited by clients to introduce non-existing servers to the network.
|
Netscape NSS libraries buffer overflow
updated since 25.08.2004 | | Published: | | 30.08.2004 | | Source: | | X-FORCE | | SecurityVulns ID: | | 3932 | | Type: | | library | | Level: | | 9/10 | | Description: | | Buffer overflow during SSL negotiation. |
Heimdal ftpd/tnftpd/lukemftpd signal handling race conditions
updated since 19.08.2004 | | Published: | | 30.08.2004 | | Source: | | BUGTRAQ | | SecurityVulns ID: | | 3918 | | Type: | | remote | | Level: | | 6/10 | | Description: | | Problem with OOB data processing. |
CDE libDtHelp buffer overflow
updated since 05.11.2003 | | Published: | | 30.08.2004 | | Source: | | FULL-DISCLOSURE | | SecurityVulns ID: | | 3232 | | Type: | | library | | Level: | | 6/10 | | Description: | | Buffer overflow on DTHELPUSERSEARCHPATH/LOGNAME variable parsing. |
CGI bugs
updated since 30.08.2004 | | Published: | | 04.09.2004 | | Source: | | | | SecurityVulns ID: | | 3951 | | Type: | | remote | | Level: | | 5/10 |
| Original document |  | Pierquinto Manco, [XSS] PHP-Nuke 7.4 Remote Privilege Escalation (04.09.2004) |
| | | Paul Craig - Pimp Industries, MailWorks Professional - Authentication bypass (03.09.2004) |
| | | Exoduks, [hackgen-2004-#001] - Non-critacal Cross-Site Scripting bug in CuteNews (03.09.2004) |
| | | Criolabs, Password Protect XSS and SQL-Injection vulnerabilities. (03.09.2004) |
| | | SECUNIA, [SA12439] TorrentTrader "id" SQL Injection Vulnerability (03.09.2004) |
| | | Maestro De-Seguridad, ADVISORY: http response splitting hole in Comersus shopping cart (02.09.2004) |
| | | SECURITEAM, [UNIX] WebAPP Directory Traversal and Encrypted DES Disclosure (01.09.2004) |
| | | Dominick Baier, [Full-Disclosure] Cross-Site Scripting Vulnerability in Newtelligence DasBlog (01.09.2004) |
| | | SECUNIA, [SA12407] Password Protect Multiple Vulnerabilities (01.09.2004) |
| | | Iadnah, [Full-Disclosure] Code Injection Vulnerability in pLog (01.09.2004) |
| | | Jose Antonio, Multiple Vulnerabilities in phpScheduleIt (01.09.2004) |
| | | e0r, CuteNews News.txt writable to world (01.09.2004) |
| | | CyruxNET, Cross Site Scripting in XOOPS Version 2.x Dictionary module (31.08.2004) |
| | | vlb4g, Site News v 1.1 admin head error (31.08.2004) |
| | | SECUNIA, [SA12401] Smart Guest Book Database Content Disclosure Security Issue (30.08.2004) |
| | | SECUNIA, [SA12364] SugarCRM Unspecified Login Authentication Vulnerability (30.08.2004) |
| | | SECUNIA, [SA12368] Plesk "login_name" Cross-Site Scripting Vulnerability (30.08.2004) |
| | | Wil Allsopp, Dynix Webpac Input Validation (30.08.2004) |
RealVNC DoS
updated since 30.08.2004 | | Published: | | 11.11.2004 | | Source: | | BUGTRAQ | | SecurityVulns ID: | | 3946 | | Type: | | remote | | Level: | | 5/10 | | Description: | | More than 60 concurrent TCP connections causes server to crash. |
Novell iChain access control solution multiple bugs
updated since 30.08.2004 | | Published: | | 16.03.2005 | | Source: | | SECUNIA | | SecurityVulns ID: | | 3954 | | Type: | | remote | | Level: | | 6/10 | | Description: | | DoS, information leak (including authentication data), crossite scripting, session hijacking. |
|
|
|
|
|
|
|
|
