OpenVMS WASD multiple bugs
Published:		30.09.2002
Source:		BUGTRAQ
SecurityVulns ID:		2304
Type:		remote
Level:		5/10
Description:		Weak default configuration, protection bypass, CGI execution in server's content.

Affected:

WASD : WASD 8.1

Original document

Jean-loup Gailly, remote SYSTEM compromise in WASD OpenVMS http server (30.09.2002)

Discuss:

Read or add your comments to this news (0 comments)

Unauthorized access in WatchGuard
Published:		30.09.2002
Source:		BUGTRAQ
SecurityVulns ID:		2305
Type:		remote
Level:		6/10
Description:		Format string bugs and insufficient username checks allows administrative access.

Affected:

WATCHGUARD : Vclass 3.2

Original document

Joao Gouveia, Watchguard firewall appliances security issues (30.09.2002)

Discuss:

Read or add your comments to this news (0 comments)

Buffer overflow in WN
Published:		30.09.2002
Source:		BUGTRAQ
SecurityVulns ID:		2306
Type:		remote
Level:		5/10
Description:		Buffer overflow on oversized GET request.

Affected:		WN : wn 1.18
		WN : wn 2.0

Original document

IDEFENSE, iDEFENSE Security Advisory 09.30.2002: Buffer Overflow in WN Server (30.09.2002)

Discuss:

Read or add your comments to this news (0 comments)

Buffer overflow in Microsoft FrontPage SmartHTML
Published:		30.09.2002
Source:		MICROSOFT
SecurityVulns ID:		2301
Type:		remote
Level:		6/10
Description:		Buffer overflow in shtml.dll

Affected:		MICROSOFT : Internet Information Server 4.0
		MICROSOFT : Internet Information Server 5.0
		MICROSOFT : Internet Information Server 5.1

Original document

MICROSOFT, Microsoft Security Bulletin MS02-053: Buffer Overrun in SmartHTML Interpreter Could Allow Code Execution (Q324096) (30.09.2002)

Discuss:

Read or add your comments to this news (0 comments)

Crossite scripting в acWeb
Published:		30.09.2002
Source:		BUGTRAQ
SecurityVulns ID:		2302
Type:		remote
Level:		5/10
Description:		http://www.victim.com/%db<script>alert('Illegal%20Instruction%20Labs%

Affected:

ACWEB : ACWEB

Original document

DownBload, IIL Advisory: Vulnerabilities in acWEB HTTP server (30.09.2002)

Discuss:

Read or add your comments to this news (0 comments)

Unauthorized access in OpenVMS POP3 server updated since 30.09.2002
Published:		02.10.2002
Source:		BUGTRAQ
SecurityVulns ID:		2303
Type:		local
Level:		5/10
Description:		It's possible to overwrite local file by specifing it as a log file.

Affected:

HP : OpenVMS 5.3

Original document		HP, [security bulletin] SSRT2371 HP OpenVMS Potential POP server local vulnerability (02.10.2002)
		Mike Riley, OpenVMS POP server local vulnerability (30.09.2002)

Discuss:

Read or add your comments to this news (0 comments)

Buffer overflows in fetchmail updated since 30.09.2002
Published:		14.12.2002
Source:		BUGTRAQ
SecurityVulns ID:		2307
Type:		client
Level:		6/10
Description:		Buffer overflows on addresses parsing.

Affected:		FETCHMAIL : fetchmail 6.0
		FETCHMAIL : fetchmail 6.1

Original document		Stefan Esser, Advisory 05/2002: Another Fetchmail Remote Vulnerability (14.12.2002)
		Stefan Esser, Advisory 03/2002: Fetchmail remote vulnerabilities (30.09.2002)

Discuss:

Read or add your comments to this news (0 comments)