Password protection bypass in Intel D845 motherboards updated since 26.04.2002
Published:		31.05.2002
Source:		BUGTRAQ
SecurityVulns ID:		1972
Type:		local
Level:		4/10
Description:		Password is not required to select boot device.

Affected:		INTEL : D845HV
		INTEL : D845WN
		INTEL : D845PT
		INTEL : K7S5A

Original document		Guy Van Sanden, SECURITY vulnerability in ECS-K7S5A(L) boards (31.05.2002)
		Dave Oliver, Intel D845HV/WN/PT series motherboard vulnerability (26.04.2002)

Discuss:

Read or add your comments to this news (0 comments)

FreeBSD rc script file deletion
Published:		31.05.2002
Source:		BUGTRAQ
SecurityVulns ID:		2052
Type:		local
Level:		5/10
Description:		No symbolic links check on /tmp cleanup.

Affected:

FREEBSD : FreeBSD 4.5

Original document

FREEBSD, Security Advisory FreeBSD-SA-02:27.rc (31.05.2002)

Discuss:

Read or add your comments to this news (0 comments)

Microsoft Exchange DoS
Published:		31.05.2002
Source:		BUGTRAQ
SecurityVulns ID:		2053
Type:		remote
Level:		5/10
Description:		Malcrafted message causes 100% CPU in Store service.

Affected:

EXCHANGE : Exchange 2000

Original document

MICROSOFT, Security Bulletin MS02-025: Malformed Mail Attribute can Cause Exchange 2000 to Exhaust CPU Resources (Q320436) (31.05.2002)

Discuss:

Read or add your comments to this news (0 comments)

Courier DoS
Published:		31.05.2002
Source:		3APA3A
SecurityVulns ID:		2055
Type:		remote
Level:		5/10
Description:		By settinf oversized year value program may be treated into long processor intensive calculations.

Affected:

DOUBLEPRECISION : courier 0.38

Original document

3APA3A, SECURITY.NNOV: Courier CPU exhaustion (31.05.2002)

Files:		Courier CPU exhaustion
Discuss:		Read or add your comments to this news (0 comments)

FreeBSD ACCEPT_FILTER DoS
Published:		31.05.2002
Source:		BUGTRAQ
SecurityVulns ID:		2056
Type:		remote
Level:		5/10
Description:		If ACCEPT_FILTER is used it's possible to cause DoS by creating a number of hanging connections.

Affected:

FREEBSD : FreeBSD 4.5

Original document

FREEBSD, FreeBSD Security Advisory FreeBSD-SA-02:26.accept (31.05.2002)

Discuss:

Read or add your comments to this news (0 comments)

Few bugs in Kismet
Published:		31.05.2002
Source:		BUGTRAQ
SecurityVulns ID:		2057
Type:		remote
Level:		5/10
Description:		Local and remote buffer overflows.

Affected:

KISMETWIRELESS : kismet 2.2

Original document

Kevin Finisterre, New Kismet Packages available - SayText() and suid kismet_server issues (31.05.2002)

Discuss:

Read or add your comments to this news (0 comments)

Multiple bugs in Caldera OpenServer utilities
Published:		31.05.2002
Source:		BUGTRAQ
SecurityVulns ID:		2058
Type:		local
Level:		5/10
Description:		Symlink problem on temporary files handling in sort and scoadmin.

Affected:

SCO : OpenServer 5.0

Original document		CALDERA, Security Update: [CSSA-2002-SCO.21] OpenServer 5.0.5 OpenServer 5.0.6 : sort command creates temporary files insecurely (31.05.2002)
		CALDERA, Security Update: [CSSA-2002-SCO.22] OpenServer 5.0.5 OpenServer 5.0.6 : scoadmin command creates temporary files insecurely (31.05.2002)

Discuss:

Read or add your comments to this news (0 comments)

Few bugs in Quantum SNAP
Published:		31.05.2002
Source:		BUGTRAQ
SecurityVulns ID:		2059
Type:		remote
Level:		6/10
Description:		Weak initial TCP sequence number generation, DoS.

Affected:

QUANTUM : SNAPserver4100/160G

Original document

awacs, 2 security problem Quantum SNAP server (31.05.2002)

Discuss:

Read or add your comments to this news (0 comments)

Buffer overflow in Informix
Published:		31.05.2002
Source:		BUGTRAQ
SecurityVulns ID:		2060
Type:		local
Level:		5/10
Description:		Buffer overflow in few suid/sgid utilities on command line parsing.

Affected:

INFORMIX : Informix SE-7.25

Original document

Juan Manuel Pascual Escriba, Informix SE-7.25 /lib/sqlexec Vulnerability (31.05.2002)

Discuss:

Read or add your comments to this news (0 comments)

Multiple bugs in Apache Tomcat updated since 31.05.2002
Published:		01.02.2003
Source:		BUGTRAQ
SecurityVulns ID:		2051
Type:		remote
Level:		5/10
Description:		It's possible to obtain physical path and directory listing.

Affected:		JAKARTA : Tomcat 3.23
		JAKARTA : Tomcat 3.24

Original document		webmaster_(at)_procheckup.com, Vulnerability in Apache Tomcat v3.23 & v3.24 (part 3) (31.05.2002)
		webmaster_(at)_procheckup.com, Vulnerability in Apache Tomcat v3.23 & v3.24 (part 2) (31.05.2002)
		webmaster_(at)_procheckup.com, Vulnerability in Apache Tomcat v3.23 & v3.24 (31.05.2002)

Discuss:

Read or add your comments to this news (0 comments)

Multiple bugs in Ethereal updated since 31.05.2002
Published:		12.07.2004
Source:		BUGTRAQ
SecurityVulns ID:		2054
Type:		remote
Level:		6/10
Description:		DoS and buffer overflows on different protocols parsing.

Affected:		ETHEREAL : Ethereal 0.9
		ETHEREAL : Ethereal 0.10

Original document		GENTOO, [ GLSA 200407-08 ] Ethereal: Multiple security problems (12.07.2004)
		OPENPKG, [OpenPKG-SA-2004.015] OpenPKG Security Advisory (ethereal) (05.06.2004)
		Eye on Security India, Ethereal(v0.10.0-0.10.2) IGAP Dissector Message Overflow Exploit (30.03.2004)
		Stefan Esser, Advisory 03/2004: Multiple (13) Ethereal remote overflows (24.03.2004)
		Jonas Eriksson, Potential security issues in Ethereal (31.05.2002)

Files:		Ethereal IGAP Dissector Message Overflow Remote Root exploit
		etherealex.c
Discuss:		Read or add your comments to this news (0 comments)