Securiteam
By Date

Starting: 12/01/01
Ending: 12/28/01

• [NEWS] WebSEAL Vulnerable to a DoS Attack (%2E) support@securiteam.com (12/28/01)
• [UNIX] Local DoS in Solaris 8 (smcboot) support@securiteam.com (12/28/01)
• [NEWS] SMC Barricade's Dodgy "DMZ" Feature support@securiteam.com (12/28/01)
• [TOOL] AESOP, Advanced Encrypted Stackable Open Proxy support@securiteam.com (12/28/01)
• [UNIX] IBM WebSphere Reveals System Administrator Password support@securiteam.com (12/28/01)
• [NT] EFTP Directory Content Disclosure support@securiteam.com (12/28/01)
• [UNIX] klprfax_filter Symlink Vulnerability support@securiteam.com (12/28/01)
• [NEWS] Dangerous Information in CentraOne Log Files (Vendor Response) support@securiteam.com (12/27/01)
• [UNIX] QwikAd Allows Malicious SQL Code Injection support@securiteam.com (12/27/01)
• [NEWS] Serious Security Flaw in Citrix Client support@securiteam.com (12/27/01)
• [NEWS] Caramail Cross-Site Scripting Vulnerability support@securiteam.com (12/27/01)
• [UNIX] Linux Package Default UID (573) support@securiteam.com (12/27/01)
• [UNIX] PFinger Format String Vulnerability support@securiteam.com (12/27/01)
• [UNIX] AdStreamer Allows Execution of Arbitrary Commands support@securiteam.com (12/26/01)
• [UNIX] Perdition/Vanessa_logger Format String Vulnerability support@securiteam.com (12/26/01)
• [NT] Atmel SNMP Non Public Community String DoS Vulnerability support@securiteam.com (12/25/01)
• [UNIX] Apache's mod_bf Vulnerable to a Buffer Overflow and DoS support@securiteam.com (12/25/01)
• [NEWS] D-Link DWL-1000AP can be Compromised Due to Insecure SNMP Configuration support@securiteam.com (12/25/01)
• [UNIX] Webmin view_man.cgi Security Vulnerability support@securiteam.com (12/25/01)
• [NEWS] Buffer Overflow Vulnerability in Oracle's "Unbreakable" 9iAS support@securiteam.com (12/24/01)
• [UNIX] Plesk (PSA) Allows Reading of .PHP Files support@securiteam.com (12/24/01)
• [NT] Internet Explore HTTPS Certificate Attack support@securiteam.com (12/24/01)
• [NT] SQL Server Text Formatting Functions Suffer from Buffer Overflows support@securiteam.com (12/24/01)
• [NT] PGP Plugin for Outlook Can Send Unencrypted Messages support@securiteam.com (12/24/01)
• [NT] Multiple Overflow and Format String Vulnerabilities in Microsoft SQL Server support@securiteam.com (12/24/01)
• [NT] UPNP - Multiple Remote Windows XP/ME/98 Vulnerabilities support@securiteam.com (12/24/01)
• [UNIX] PHPNuke module.php Vulnerability and PHP error_reporting Issue support@securiteam.com (12/23/01)
• [TOOL] dSQLSRVD, SQL Server SysComments Decryptor support@securiteam.com (12/23/01)
• [UNIX] Glibc Globing Issues (~AAA{ Trick) support@securiteam.com (12/23/01)
• [UNIX] Agoracgi Cross-Site Scripting Vulnerability support@securiteam.com (12/23/01)
• [NT] MSIE May Download and Run Programs Automatically support@securiteam.com (12/23/01)
• [UNIX] POPAuth Symlink Problem Allows Creation of a Setuid Shell support@securiteam.com (12/23/01)
• [NT] Windows FTP "Network Place" Exposes Saved Passwords support@securiteam.com (12/22/01)
• [NT] Hot Key Permissions Bypass under Windows XP support@securiteam.com (12/22/01)
• [NT] ASPSession ID's Vulnerability support@securiteam.com (12/22/01)
• [EXPL] ATPHTTPd Buffer Overflow Exploit Code support@securiteam.com (12/21/01)
• [NEWS] Dangerous Information Recorded in CentraOne Log Files support@securiteam.com (12/21/01)
• [UNIX] WMCube-GDK Yields KMEM Security Privileges support@securiteam.com (12/21/01)
• [UNIX] HP-UX Setuid RLPDaemon Illicit File Writes support@securiteam.com (12/21/01)
• [NEWS] Novell GroupWise Servlet Gateway Default Username and Password support@securiteam.com (12/21/01)
• [UNIX] Aktivate Shopping System Cross-Site Scripting Vulnerability support@securiteam.com (12/20/01)
• [UNIX] Exim Recipient Decoding Execution support@securiteam.com (12/20/01)
• [TOOL] FWAnalog, Firewall Log File Reporting Tool support@securiteam.com (12/20/01)
• [UNIX] Linux Distributions are Vulnerable to the /bin/login Overflow support@securiteam.com (12/20/01)
• [NT] Internet Explorer Document.Open() Without Close() Cookie Stealing, File Reading, and Site Spoofing Bug support@securiteam.com (12/20/01)
• [NEWS] Netware Web Server Sample Page Source Disclosure support@securiteam.com (12/20/01)
• [UNIX] ProFTPD File Globbing Problems (////.../) support@securiteam.com (12/20/01)
• [NT] Windows XP Security Concerns (Fast Switch, Password Reset, Remote Desktop) support@securiteam.com (12/20/01)
• [UNIX] Trust Issues with RH and Debian Package Managers support@securiteam.com (12/20/01)
• [NEWS] Magic Enterprise Multiple Vulnerabilities support@securiteam.com (12/20/01)
• [NT] Internet Explorer 6 Allows Local File Reading (XMLHTTP) support@securiteam.com (12/20/01)
• [NEWS] Zyxel Prestige 681 and 1600 Remote DoS support@securiteam.com (12/20/01)
• [NT] FtpXQ Default Install Read/Write Capabilities support@securiteam.com (12/19/01)
• [NT] Analysis of Microsoft SQL Server 2000 Stored Procedure Encryption support@securiteam.com (12/19/01)
• [REVS] PHP 4.1.0 Integrates Much Needed Security Features support@securiteam.com (12/19/01)
• [NEWS] SpiDynamics WebInspect Keeps Track of Its Users (Trial License) support@securiteam.com (12/18/01)
• [NEWS] Hosting.com Cross-Site Scripting Vulnerability support@securiteam.com (12/18/01)
• [NT] NoHTML Built-in Outlook 2002 Feature Protects Against Malicious Code support@securiteam.com (12/18/01)
• [EXPL] Windows 2000 IKE DoS Exploit Code support@securiteam.com (12/18/01)
• [UNIX] "UNIX Manual" PHP-Script Allows Arbitrary Code Execution support@securiteam.com (12/18/01)
• [TOOL] Mognet, Wireless Ethernet Java Based Sniffer/Analyzer support@securiteam.com (12/18/01)
• [EXPL] OpenSSH UseLogin Bug Proof of Concept Exploit support@securiteam.com (12/18/01)
• [TOOL] SMBProxy support@securiteam.com (12/17/01)
• [TOOL] Oracle SID Enumeration Tool support@securiteam.com (12/17/01)
• [NT] File Locking and Security (Group Policy DoS on Windows 2000 Domains) support@securiteam.com (12/17/01)
• [NEWS] Red Faction Server/Client DoS (UDP 7755) support@securiteam.com (12/17/01)
• [UNIX] GnuPG Format String Vulnerability in ttyio.c's do_get() support@securiteam.com (12/17/01)
• [NEWS] Axis Network Camera Requires No Authentication to Access Sensitive Information support@securiteam.com (12/15/01)
• [TOOL] LDAP Authentication Brute Forcing support@securiteam.com (12/15/01)
• [NT] Another IE Denial of Service Attack (Box Value) support@securiteam.com (12/15/01)
• [UNIX] APMd Vulnerable to Symlink Attack (RedHat) support@securiteam.com (12/15/01)
• [UNIX] Ettercap Local Root Exploit support@securiteam.com (12/14/01)
• [UNIX] OpenSSH UseLogin Directive Vulnerability Leads to Remote Root Compromise support@securiteam.com (12/14/01)
• [NT] IE Denial of Service (Bad IMG Tag) support@securiteam.com (12/14/01)
• [NEWS] Mail Essentials Reveals Identity of First BCC Recipient support@securiteam.com (12/14/01)
• [UNIX] CSVForm (Perl CGI) Remote Execution Vulnerability support@securiteam.com (12/14/01)
• [NEWS] "Spammers Delights" (Mailto.exe) support@securiteam.com (12/14/01)
• [EXPL] Lucent ORiNOCO Registry Decryption support@securiteam.com (12/13/01)
• [TOOL] ID Password Recovery (IPR) support@securiteam.com (12/13/01)
• [UNIX] Vulnerabilities in PGPMail.pl Lead to Remote Code Execution support@securiteam.com (12/13/01)
• [UNIX] Hardlink Vulnerability in 'script' Command support@securiteam.com (12/13/01)
• [NT] Cross-Frame Security Zone Spoofing in Internet Explorer Using the 'About' Protocol support@securiteam.com (12/13/01)
• [TOOL] MHW, Macintosh Hacker's Workshop support@securiteam.com (12/13/01)
• [EXPL] Microsoft IIS/5.0 Content-Length DoS Exploit Code support@securiteam.com (12/13/01)
• [NT] Microsoft IIS/5 Bogus Content-Length Memory Bug support@securiteam.com (12/12/01)
• [UNIX] Buffer Overflow in /bin/login support@securiteam.com (12/12/01)
• [NEWS] Flawed Outbound Packet Filtering in Various Personal Firewalls support@securiteam.com (12/12/01)
• [TOOL] SQLAT - SQL Auditing Tools support@securiteam.com (12/12/01)
• [NT] Winsock RSHD/NT DoS support@securiteam.com (12/12/01)
• [TOOL] All in One Banner Removal Tool support@securiteam.com (12/12/01)
• [UNIX] Large Form Text Fields in konqueror Causes X to Crash (DoS) support@securiteam.com (12/12/01)
• [NEWS] IPRoute Fragmentation Denial of Service Vulnerability support@securiteam.com (12/12/01)
• [UNIX] LSF Contains Multiple Security Vulnerabilities support@securiteam.com (12/12/01)
• [NT] Microsoft Outlook Express 6 "E-mail Attachment Security" Flawed support@securiteam.com (12/12/01)
• [NT] Weak Encryption in Pathways Homecare support@securiteam.com (12/11/01)
• [NT] UDP DoS Attack on Windows 2000 IKE support@securiteam.com (12/11/01)
• [UNIX] NSI RWhoisd Remote Format String Vulnerability support@securiteam.com (12/11/01)
• [EXPL] Race Condition in FreeBSD AIO Implementation support@securiteam.com (12/11/01)
• [NEWS] Lotus Domino Web Server DoS Vulnerability (DB Lock) support@securiteam.com (12/11/01)
• [NEWS] Workaround Addresses JRun Server SSIFilter Security Issue support@securiteam.com (12/11/01)
• [TOOL] RamSurf for Windows support@securiteam.com (12/11/01)
• [NEWS] CFEXECUTE Tag Security Vulnerability in ColdFusion support@securiteam.com (12/11/01)
• [UNIX] Runas Vulnerable to Format String Attack support@securiteam.com (12/10/01)
• [UNIX] PHPNuke Vulnerable to Cross Site Scripting support@securiteam.com (12/10/01)
• [NEWS] Kebi Webmail Solution Security Vulnerability support@securiteam.com (12/10/01)
• [EXPL] OpenBSD Local DoS (Bad Syscalls Releases) support@securiteam.com (12/10/01)
• [EXPL] UUCP Family Exploit (uucp / uuparams / uuname) support@securiteam.com (12/10/01)
• [NT] Specially Malformed Script in HTML Mail Can Execute in Exchange 5.5 OWA support@securiteam.com (12/10/01)
• [NEWS] Goner/Pentagone Mass-Mailer Worm support@securiteam.com (12/09/01)
• [NT] mIRC DDE Permissions Security Bug support@securiteam.com (12/09/01)
• [NEWS] Duplicate Session IDs Cause JRun Security Vulnerability (Hotfix) support@securiteam.com (12/09/01)
• [NEWS] Buffer Overflow Found in Outlook Express for Macintosh support@securiteam.com (12/09/01)
• [NEWS] November Changelog Madness support@securiteam.com (12/08/01)
• [NEWS] Axis Network Camera Default Password Vulnerability support@securiteam.com (12/08/01)
• [NEWS] AudioGalaxy Username and Password Saved in Cleartext support@securiteam.com (12/08/01)
• [UNIX] libgtop_daemon Remote Format String and Buffer Overflow Vulnerabilities support@securiteam.com (12/08/01)
• [UNIX] Sendpage (Perl CGI) Remote Execution Vulnerability support@securiteam.com (12/08/01)
• [NEWS] Multiple ValiCert Security Problems support@securiteam.com (12/08/01)
• [UNIX] Cray UNICOS NQSD Format String Security Vulnerability support@securiteam.com (12/03/01)
• [UNIX] Mailman Email Archive Cross Site Scripting Vulnerability support@securiteam.com (12/03/01)
• [NT] JRun SSI Request Body Parsing support@securiteam.com (12/03/01)
• [NEWS] Security Vulnerability in Cisco's IOS Firewall Feature Set support@securiteam.com (12/03/01)
• [NT] Allaire JRun Directory Browsing Vulnerability support@securiteam.com (12/03/01)
• [UNIX] TWIG Default Configurations May Lead to Insecure Auth-cookie Password Storage support@securiteam.com (12/03/01)
• [EXPL] IIS Server Side Include Buffer Overflow (Exploit) support@securiteam.com (12/02/01)
• [NT] NAI WebShield SMTP for WinNT MIME Header Vulnerability Allows BadTrans Virus to Pass support@securiteam.com (12/02/01)
• [EXPL] Compaq Insight Manager Remote SYSTEM Shell (Exploit) support@securiteam.com (12/01/01)
• [UNIX] UUCP Command Line Arguments Buffer Overflow support@securiteam.com (12/01/01)
• [NEWS] Anonymizer.com Might Reveal Your IP (Double Proxy) support@securiteam.com (12/01/01)

Last message date: 12/28/01
Archived on: 12/28/01 CET

• Security
• UNIX
• Linux
• Coding
• Usenet

• News
• Mailing-Lists
• Newsgroups
• Service
• About
• Privacy
• Search
• Imprint