Advisories Ussr Labs

Advisories Security Focus

2001-04-23: WebCalendar Remote Command Execution Vulnerability

2001-04-23: Viking Server Relative Path Webroot Escaping Vulnerability

2001-04-21: Mercury for NetWare Buffer Overflow Vulnerability

2001-04-20: Novell BorderManager Remote DoS Vulnerability

2001-04-20: Microsoft IE and OE XML Stylesheets Active Scripting Vulnerability

2001-04-20: Sendfile Local Arbitrary Command Execution as Group 0 Vulnerability

2001-04-20: The Net CheckBo Denial of Service Vulnerability

2001-04-18: Oracle 8 Server 'TNSLSNR80.EXE' DoS Vulnerability

2001-04-18: Microsoft Windows WebDAV Scripted Request Vulnerability

2001-04-18: Qualcomm Eudora File Attachment Vulnerability

2001-04-18: innfeed Command-Line Buffer Overflow Vulnerability

2001-04-18: NEdit Temporary File Creation Vulnerability

2001-04-18: KFM Insecure TMP File Creation Vulnerability

2001-04-18: iPlanet Calendar Server Plaintext Admin Password Vulnerability

2001-04-17: Solaris FTP Core Dump Shadow Password Recovery Vulnerability

2001-04-17: GoAhead Webserver /aux Denial of Service Vulnerability

2001-04-17: Simpleserver WWW AUX Directory Denial of Service Vulnerability

2001-04-17: DCForum 'AZ' Field Remote Command Execution Vulnerability

2001-04-17: MS Windows Explorer and Internet Explorer CLSID File Execution Vulnerability

2001-04-17: Samba Insecure TMP file Symbolic Link Vulnerability

2001-04-17: Viking Server Hex Encoded Directory Traversal Attack

2001-04-17: CrossWind CyberScheduler websyncd remote Buffer Overflow Vulnerability

2001-04-17: Xitami Webserver MS-DOS Device Name DoS Vulnerability

2001-04-16: Microsoft ISA Server Web Proxy DoS Vulnerability

2001-04-16: IPTables FTP Stateful Inspection Arbitrary Filter Rule Insertion Vulnerability

2001-04-16: Cisco Catalyst 802.1x Frame Forwarding Vulnerability

2001-04-16: FreeBSD BubbleMon Privilege Elevation Vulnerability

2001-04-15: Exuberant-ctags Symbolic Link Attack Vulnerability

2001-04-14: Siemens Reliant Unix ppd -T Race Condition Vulnerability

2001-04-13: SCO OpenServer lp Buffer Overflow Vulnerability

2001-04-13: Trend Micro Interscan Viruswall Multiple Program Buffer Overflow Vulnerability

2001-04-13: SCO OpenServer accept Buffer Overflow Vulnerability

2001-04-13: SCO OpenServer cancel Command Argument Buffer Overflow Vulnerability

2001-04-13: SCO OpenServer deliver Buffer Overflow Vulnerability

2001-04-13: NCM Content Management System content.pl Input Validation Vulnerability

2001-04-13: SCO OpenServer disable Buffer Overflow Vulnerability

2001-04-13: SCO OpenServer enable Buffer Overflow Vulnerability

2001-04-13: IBM Websphere/Net.Commerce Installation Directory Revealing Vulnerability

2001-04-13: IBM Websphere/Net.Commerce CGI-BIN Macro Denial of Service Vulnerability

2001-04-13: SCO OpenServer lpfilter Buffer Overflow Vulnerability

2001-04-13: SCO OpenServer lpmove Buffer Overflow Vulnerability

2001-04-13: SCO OpenServer reject Buffer Overflow Vulnerability

2001-04-13: SCO OpenServer sendmail Buffer Overflow Vulnerability

2001-04-13: SCO OpenServer rmail Buffer Overflow Vulnerability

2001-04-13: SCO OpenServer tput Buffer Overflow Vulnerability

2001-04-13: SCO OpenServer lpstat Buffer Overflow Vulnerability

2001-04-12: Cisco VPN 3000 Concertrator Malformed IP Packet Vulnerability

2001-04-12: Hylafax hfaxd Local Format String Vulnerability

2001-04-12: Solaris IPCS Timezone Buffer Overflow Vulnerability

2001-04-11: Solaris IN.FTPD CWD Username Enumeration Vulnerability

2001-04-11: Oracle Application Server ndwfn4.so buffer overflow

2001-04-11: Symantec Ghost Configuration Server DoS Attack

2001-04-11: Sybase Adaptive Server Anywhere Database Engine Buffer Overflow Vulnerability

2001-04-11: cfingerd Format String Vulnerability

2001-04-10: Solaris Xsun HOME Buffer Overflow Vulnerability

2001-04-10: nph-maillist Arbitrary Code Execution Vulnerability

2001-04-10: Alcatel Speed Touch Pro ADSL Insecure Embedded TFTP Server Vulnerability

2001-04-10: Strip Password Generator Limited Password-Space Vulnerability

2001-04-10: Alcatel Speed Touch ADSL Insecure Administration Interface Vulnerability

2001-04-10: Lightwave ConsoleServer 3200 Information Disclosure Vulnerability

2001-04-09: Way to the Web TalkBack.cgi Directory Traversal Vulnerability

2001-04-09: Multiple Vendor BSD ftpd glob() Buffer Overflow Vulnerabilities

2001-04-09: Solaris ftpd glob() Expansion LIST Heap Overflow Vulnerability

2001-04-09: HP-UX ftpd glob() Expansion STAT Buffer Overflow Vulnerability

2001-04-09: Solaris 7/8 kcms_configure Command-Line Buffer Overflow Vulnerability

2001-04-06: IPFilter Fragment Rule Bypass Vulnerability

2001-04-06: BinTec X Series Router PPTP Denial of Service Vulnerability

2001-04-06: Cisco PIX TACACS+ Denial of Service Vulnerability

2001-04-05: 602Pro Lan Suite Long HTTP Request Denial of Service Vulnerability

2001-04-05: Ultimate Bulletin Board Forum Password Bypass Vulnerability

2001-04-05: WatchGuard Firebox II High Malformed Packet Rate Denial of Service Vulnerability

2001-04-04: Ntpd Remote Buffer Overflow Vulnerability

2001-04-04: Cisco Content Services Switch User Privilege Elevation Vulnerability