Hi,

McAfee claims to have "Zero-day" protection against the recent
vulnerability disclosed against Cisco particularly on Shellcodes.
Their press release says, McAfee IntruShield's existing infrastructure
protection proactively covers new exploit techniques against Cisco
IOS, such as those demonstra

[ more ]  [ reply ]

Dear Bugtraq,

This vulnerability was reported by Natalia Melnikova
(Hataha at yandex.ru)

Vulnerability: Microsoft ActiveSync information leak and spoofing
URL: http://www.security.nnov.ru/Fnews64.html
Vendor: Microsoft
Software: Active Sync 3.8
Author: Natalia Me

[ more ]  [ reply ]

Forwarded description of this over to Cerulean - got this reply within hours:

From Scott Werndorfer Wed Aug 3 06:31:04 2005
Return-Path: <smw (at) ceruleanstudios (dot) com [email concealed]>
Date: Wed, 3 Aug 2005 08:31:04 -0500 (CDT)
From: "Scott Werndorfer" <smw (at) ceruleanstudios (dot) com [email concealed]> Add to Address Book
Subject: Re: TRI

[ more ]  [ reply ]

On Fri, 29 Jul 2005, Forte Systems - Iosif Peterfi wrote:

> Ok, so let's split them like this:
>
> 1. Simple
> 1.1 Remote
> 1.2 Local
> 2. Compound
> 2.1 Social engineered
> 2.2 Technical
> 2.3 Local

I prefer something just as simple, but maybe more flexible:
1. Interaction level
i) Autom

[ more ]  [ reply ]

Hi Bond,
Thanks for confirming this on your end. The login does work, but if
you are already logged in to your yahoo account when you try to use the
html file to login it doesn't work. I guess it has something to do with
the recent change in yahoo's authentication check as it used to work
earl

[ more ]  [ reply ]

I have discovered something I think is a vulnerability in Zone Alarm but
their web site has no information on how to speak to a security contact or
anyone other than a tech support person.

Does anyone have a technical or security contact at zone alarm?

Thanks,

David Cross

CISSP

[ more ]  [ reply ]

>The release notes for 0.86.2 say:
>
>"Changes in this release include fixes for three possible integer
>overflows in libclamav"

Simply assuming that a single-line changelog entry is sufficient
acknowledgement of a published vulnerability is dangerous. Such
assumptions are frequently wrong. (How

[ more ]  [ reply ]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

HP SECURITY BULLETIN

HPSBMA01211 REVISION: 0

SSRT4682 rev.0 - Oracle for Openview (OfO) Critical Patch Update
July 2005

NOTICE:
There are no restrictions for distribution of this Security
Bulletin provided that it remains complet

[ more ]  [ reply ]

Silvernews 2.0.3 (possibly previous versions ) SQL Injection / Login Bypass / Remote commands execution / cross site scripting

software:
author site: http://www.silver-scripts.de/scripts.php?l=en&script=SilverNews

SQL Injection / Login bypass:

A user can bypass admin password check, if magic_quot

[ more ]  [ reply ]

Here you can find an exploit for the bug CA BrightStor ARCserve Backup Agent for SQL - dbasqlr.exe

http://www.livejournal.com/users/cybertronic/

[ more ]  [ reply ]

This was discovered by myself over the weekend. I cant find out what
versions of fusebox this vulnerability is in but seeing as it affects
the main fusebox page I can only assume it is the latest v4.1.0 and
possibly some older versions.

According to the Fusebox site,

What is Fusebox?
Fusebox is a

[ more ]  [ reply ]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

_______________________________________________________________________

Mandriva Linux Security Update Advisory
_______________________________________________________________________

Package name: mozilla
Advisory ID:

[ more ]  [ reply ]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

- ------------------------------------------------------------------------
--
Debian Security Advisory DSA 772-1 security (at) debian (dot) org [email concealed]
http://www.debian.org/security/ Martin Schulze
August 3rd, 2005

[ more ]  [ reply ]

CA BrightStor ARCserve Backup Agent for MS SQL Server Buffer Overflow

iDEFENSE Security Advisory 08.02.05
www.idefense.com/application/poi/display?id=287&type=vulnerabilities
August 2, 2005

I. BACKGROUND

BrightStor ARCserve Backup for Windows delivers backup and restore
protection for all Windows

[ more ]  [ reply ]

================================
Zip bad default file-permissions vulnerability
================================

Software: Zip
Version: 2.31
Software URL: <http://www.info-zip.org/Zip.html>
Platform: Unix, Linux.
Vulnerability type: File permission, privacy.
Severity: Medium. Allows local user to

[ more ]  [ reply ]

Hi I tested this server also today and the only thing that happens is that the ftpserver consumes 100% of the cpu the process don't die whatever u send 1024,2048 or more bytes. So I don't think that this is a real bof.

Here is a snippet from my fuzzer, see that the server corresponds correct to any

[ more ]  [ reply ]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

HP SECURITY BULLETIN

HPSBMA01212 REVISION: 0

SSRT5998 Rev.0 HP System Management Homepage (v2.0.x) Denial of
Service (DoS) & XSS

NOTICE:
There are no restrictions for distribution of this Security
Bulletin provided that it remains

[ more ]  [ reply ]

Hello All,

I have discovered a couple of remote vulnerabilities in: Naxtor Shopping
Cart 1.0

Authors Site: http://www.naxtor.com.au/

Naxtor is described by its authors as:

Naxtor Shopping Cart is one stop solution for companies' interested in
selling merchandise online.

+-[Examples:]-----------

[ more ]  [ reply ]

Title: Computer Associates BrightStor ARCserve/Enterprise Backup
Agents buffer overflow vulnerability

CA Vulnerability ID: 33239

Discovery Date: 2005-04-25

Disclosure Date: 2005-08-02

Discovered By: iDEFENSE

Impact: A remote attacker can execute arbitrary code with SYSTEM
privileges.

Summar

[ more ]  [ reply ]

- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
Gentoo Linux Security Advisory GLSA 200508-03
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
http://security.gentoo.org/
- - - - - -

[ more ]  [ reply ]

Hi All.

VBzoom

PROPLEM >>>THERE IS Cross site scripting IN FILE NAMED profile.php & login.php

EXPLIOT >>> http://www.victim.com/vbzoom/profile.php?UserID=1&UserName=<br><script>a
lert(document.cookie);</script>

EXPLIOT >>> http://Victim.com/vbzoom/login.php?UserID='<br><script>alert(document.co
ok

[ more ]  [ reply ]

Details:
========

Input to the user commands is not properly checked

and/or filtered. Issuing a long argument to the user (about 1024 caracteres)

commands will cause the corresponding process to die without any error message.

this vulnerabilities exist in both the professionnal version 3.0 and l

[ more ]  [ reply ]

* Dinis Cruz:

> Is the Java Sandbox able to create outgoing connections on ports like 445?
>
> Also, even if it is possible, if a service like MS-SQL is already binded
> to 1433, then wouldn't an error be thrown saying something like 'Port
> already in use'.

This doesn't matter because in the PO

[ more ]  [ reply ]

Class: Input Validation Error
Remote: Yes
Local: Yes
Credit: ABDUCTER [ABDUCTER_MINDS (at) YAHOO (dot) COM [email concealed]] oR [ABDUCTER_MINDS76 (at) HOTMAIL (dot) COM [email concealed]]
Vulnerable: Arab Portal v2.0 beta 2
***************************************

discussion :- ARAB PORTAL is powerful nuke designed by arabian programmers you
can

[ more ]  [ reply ]

[Another compression utility with the same race condition issue as bzip2
(CAN-2005-0953), gzip (CAN-2005-0988) and cpio (CAN-2005-1111) - the
file is extracted and file descriptor closed before the file is
chmod'ed]

================================
unzip TOCTOU file-permissions vulnerability
=====

[ more ]  [ reply ]