FreeImage buffer overflow
Published:		30.11.2004
Source:		BUGTRAQ
SecurityVulns ID:		4227
Type:		library
Level:		5/10
Description:		Buffer overflow on interleaved bitmaps processing.

Original document

SECUNIA, [SA13331] FreeImage Library Interleaved Bitmap Image Buffer Overflow Vulnerability (30.11.2004)

Discuss:

Read or add your comments to this news (0 comments)

Jana Server DoS
Published:		30.11.2004
Source:		BUGTRAQ
SecurityVulns ID:		4228
Type:		remote
Level:		5/10
Description:		% character in request is handled incorrectly.

Affected:

JANA : Jana 2.4

Original document

Luigi Auriemma, Endless loops in the http-server and pna-proxy modules of Jana server 2.4.4 (30.11.2004)

Discuss:

Read or add your comments to this news (0 comments)

WS_FTP Server buffer overflow adn backdor updated since 05.11.2001
Published:		30.11.2004
Source:		BUGTRAQ
SecurityVulns ID:		1550
Type:		remote
Level:		6/10
Description:		Buffer overflow in STAT and another commands. Built-in user accaount XXSESS_MGRYY with password X#1833 allows command execution on server.

Affected:		IPSWITCH : WS_FTP server 2.0
		IPSWITCH : WS_FTP server 4.0
		IPSWITCH : WS_FTP server 5.0
		IPSWITCH : WS_FTP server 5.03

Original document		Reed Arvin, Multiple buffer overlows in WS_FTP Server Version 5.03, 2004.10.14. (30.11.2004)
		Hugh Mann, How to crash a harddisk - the Ipswitch WS_FTP Server way (24.03.2004)
		Hugh Mann, Think of the buffers! Won't somebody think of the buffers?! (24.03.2004)
		Hugh Mann, Open the WS_FTP Server backdoor to SYSTEM (24.03.2004)
		Hugh Mann, ALLO ALLO WS_FTP Server (24.03.2004)
		pejman d, Remote and Local Vulnerabilities In WS_FTP Server (23.10.2003)
		andreas junestam, def-2001-31 (05.11.2001)

Files:		WS_FTP server 2.0.3 exploit
		WS_FTP Server STAT command overflow
		x86/win32 WS_FTP FTPD "STAT" command remote stack buffer overflow exploit
		WS_FTP server ALLO exploit
Discuss:		Read or add your comments to this news (0 comments)

Buffer overflow in CuteFTP updated since 05.01.2003
Published:		30.11.2004
Source:		BUGTRAQ
SecurityVulns ID:		2514
Type:		client
Level:		5/10
Description:		Buffer overflow on oversized server banner or reply.

Affected:		GLOBALSCAPE : CuteFTP 4.0
		GLOBALSCAPE : CuteFTP 5.0
		GLOBALSCAPE : CuteFTP 6.0

Original document		felix zhou, CuteFTP 6.0 Professional Remote Buffer Overflow Vulnerability (30.11.2004)
		Lance Fitz-Herbert, CuteFTP 5.0 XP, Buffer Overflow (19.01.2003)
		D4rkGr3y, CuteFTP: buffer overflow (05.01.2003)

Discuss:

Read or add your comments to this news (0 comments)

MDaemon privilege escalation
Published:		30.11.2004
Source:		BUGTRAQ
SecurityVulns ID:		4225
Type:		local
Level:		5/10
Description:		It's possible to run application with LocalSytem privileges.

Affected:

ALT-N : MDaemon 7.2

Original document

Reed Arvin, Privilege escalation flaw in MDaemon 7.2. (30.11.2004)

Discuss:

Read or add your comments to this news (0 comments)

Altris deployment solution AClient privilege escalation updated since 30.11.2004
Published:		28.04.2005
Source:		BUGTRAQ
SecurityVulns ID:		4226
Type:		local
Level:		5/10
Description:		It's possible to launch executable with LocalSystem privileges.

Affected:		ALTRIS : Altiris Deployment Solution 5.6
		ALTRIS : Altiris Deployment Solution 6.0

Original document		Reed Arvin, [Full-disclosure] Privilege escalation and password protection bypass in Altiris Client Service for Windows (Version 6.0.88) (28.04.2005)
		Reed Arvin, [Full-Disclosure] Privilege escalation flaw in the AClient Service for Windows (Version 5.6.181). (30.11.2004)

Discuss:

Read or add your comments to this news (0 comments)