Multiple webfs bugs
Published:		30.09.2003
Source:		BUGTRAQ
SecurityVulns ID:		3150
Type:		remote
Level:		5/10
Description:		Directory traversal, buffer overflows.

Affected:

WEBFS : webfs 1.17

Original document

DEBIAN, [SECURITY] [DSA-392-1] New webfs packages fix buffer overflows, file and directory exposure (30.09.2003)

Files:		webfs 1.7.x:webserver remote file overflow exploit
Discuss:		Read or add your comments to this news (0 comments)

Half Life client format string bug updated since 11.01.2003
Published:		30.09.2003
Source:		BUGTRAQ
SecurityVulns ID:		2532
Type:		client
Level:		6/10
Description:		If adminmod installed using admin_psay command leads to format string bug.

Affected:

VALVESOFTWARE : Half-Life 1.5

Original document		Luigi Auriemma, Format string bug in Half-Life client, but is it really exploitable??? (30.09.2003)
		3APA3A, Re: [VSA0304] Half-Life Client remote hole via Adminmod plugin (11.01.2003)
		VOID.AT Security, [VSA0304] Half-Life Client remote hole via Adminmod plugin (11.01.2003)

Files:		Remote exploit for Halflife-Clients playing on a server running the Adminmod plugin.
Discuss:		Read or add your comments to this news (0 comments)

Multiple bugs in OpenSSL updated since 30.09.2003
Published:		14.06.2005
Source:		BUGTRAQ
SecurityVulns ID:		3151
Type:		remote
Level:		7/10
Description:		Rpbolem with stack corruption, uninitialized memory references.

Affected:		OPENSSL : OpenSSL 0.9
		APPLE : Mac OS X 10.2
		CRAY : COS 3.4
		STUNNEL : Stunnel 0.9
		PWLIB : PWLib 1.4
		PWLIB : PWLib 1.5
		NOVELL : iManager 2.02

Original document		CIRT Advisory, [Full-disclosure] [CIRT.DK - Advisory] Novell iManager 2.0.2 ASN.1 Parsing vulnerability in Apache module (14.06.2005)
		REDHAT, [RHSA-2004:048-01] Updated PWLib packages fix protocol security issues (16.02.2004)
		OPENSSL, [OpenSSL Advisory] Denial of Service in ASN.1 parsing (05.11.2003)
		Patrik Hornik, New OpenSSL remote vulnerability (issue date 2003/10/02) (03.10.2003)
		CERT, CERT Advisory CA-2003-26 Multiple Vulnerabilities in SSL/TLS Implementations (03.10.2003)
		OPENSSL, [Full-Disclosure] [OpenSSL Advisory] Vulnerabilities in ASN.1 parsing (30.09.2003)
		OPENPKG, Subject: [OpenPKG-SA-2003.044] OpenPKG Security Advisory (openssl) (30.09.2003)

Files:		OpenSSL ASN.1 parsing bugs PoC / brute forcer
Discuss:		Read or add your comments to this news (0 comments)