Good morning,

There appears to be a fair number of kernel-level range checking flaws in
ISO9660 filesystem handler (and Rock Ridge / Juliet extensions) in Linux
up to and including 2.6.11. These bugs range from DoS conditions to
potentially exploitable memory corruption - all this whenever a specia

[ more ]  [ reply ]

using limewire version 4.4.1 on windows
192.168.1.2:6346/gnutella/res/c\:boot.ini
works perfectly fine
the magnet request
192.168.1.2/magnet10/../../../../../Windows/Win.ini?Simple-test
forwards you to a "fix" that they are using to patch all the new
version.. the simply put an index.html that meta

[ more ]  [ reply ]

===========================================================
Ubuntu Security Notice USN-98-1 March 17, 2005
openslp vulnerabilities
http://lists.grok.org.uk/pipermail/full-disclosure/2005-March/032534.htm
l
===========================================================

A security issue affects the

[ more ]  [ reply ]

Hello to everyone

I'm sorry if this was already posted but if it wasn't have a look at it.
It seems that includer.cgi will do a very nice directory traversal for you
but I don't know what version or other specific details but the vuln.
is very high.I tried only a couple of them and it was enoug

[ more ]  [ reply ]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

_______________________________________________________________________

Mandrakelinux Security Update Advisory
_______________________________________________________________________

Package name: kdelibs
Advisory ID:

[ more ]  [ reply ]

-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-
BadRoot Security Advisory 2005-#0x01
-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-

Thu Mar 17 2005 - 00:46 am GMT +1

Product: mcNews <=1.3 (successfully exploited on 1.3)
Vendor: http://www.phpforums.net/index.php?dir=dld (Home Page)
Type:

[ more ]  [ reply ]

XSS vulnerability exist in the ACS blog ( ASP WEBLOG SYSTEM ).

Vulnerable :

ACS Blog v 0.8
ACS Blog v 0.9
ACS Blog v 1.0
ACS Blog v 1.1b

Code :

/search.asp?search=%22%3Cbr%3E%3Ciframe+src%3D%22http%3A%2F%2Fgoogle.com
%22%3E%3C%2Fiframe%3E

or goto /search.asp and copy this code :
"<br><iframe s

[ more ]  [ reply ]

Windows 2000 GDI32.DLL GetEnhMetaFilePaletteEntries() API specially crafted EMF file DOS vulnerability

1. Description

Windows 2000 GDI32.DLL GetEnhMetaFilePaletteEntries() API
doesn't process the EMF file properly, a application which calls
the API will crash when it reads some specially

[ more ]  [ reply ]

With regards to the LLSSRV advisory Immunity published yesterday, we
would like to issue a clarification. There are two ways to get SP4 onto
a Windows 2000 Advanced Server machine, as follows:
1. Download SP4 from microsoft.com via networked or express install
2. Obtain and install a Windows 2000

[ more ]  [ reply ]

##################################################################
# #
# See-security Technologies ltd.

[ more ]  [ reply ]

- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
Gentoo Linux Security Advisory GLSA 200503-21
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
http://security.gentoo.org/
- - - - - -

[ more ]  [ reply ]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

- ------------------------------------------------------------------------
--
CONECTIVA LINUX SECURITY ANNOUNCEMENT
- ------------------------------------------------------------------------
--

PACKAGE : cyrus-imapd
SUMMARY : Fix for multiple cyrus-

[ more ]  [ reply ]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

_______________________________________________________________________

Mandrakelinux Security Update Advisory
_______________________________________________________________________

Package name: evolution
Advisory ID:

[ more ]  [ reply ]

Immunity is happy to announce the release from VSC of a new paper to our
public website regarding the technical details of the llssrv
vulnerability Microsoft released on February 8th, 2005. Along with this
paper, we've released a reliable, language-independant exploit to the
CANVAS distribution.

[ more ]  [ reply ]

In-Reply-To: <42372CEE.1010003 (at) altervista (dot) org [email concealed]>

/*
*
* cybertronic[at]gmx[dot]net
*
*
* [ cybertronic @ GoodTech ] $ gcc -o goodtech
goodtech.c
* [ cybertronic @ GoodTech ] $ ./goodtech
*
* Usage
* -----
* [ Bindshell ] ./goodtech <host>
* [ Reverseshell ] ./goodtech <host>

[ more ]  [ reply ]

===========================================================
Ubuntu Security Notice USN-96-1 March 16, 2005
mysql-dfsg vulnerabilities
CAN-2005-0709, CAN-2005-0710, CAN-2005-0711
===========================================================

A security issue affects the following Ubuntu releases:

[ more ]  [ reply ]

Cisco threat response 2.0.5.138 for Cisco's IDS Appliances is vulnerable
to this.

Thanks,
Michael Brown

-----Original Message-----
From: Luca Ercoli [mailto:io (at) lucaercoli (dot) it [email concealed]]
Posted At: Tuesday, March 15, 2005 1:47 PM
Posted To: BugTrap
Conversation: Denial of Service Vulnerability in MySQL Serv

[ more ]  [ reply ]

- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
Gentoo Linux Security Advisory GLSA 200503-19
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
http://security.gentoo.org/
- - - - - -

[ more ]  [ reply ]

A XSS vulnerability exist in the ASPjar Tell-a-Friend.

Code:
"><p><br><p><br><font size=44>XSS<!--

You can put the code in "Your Name Text".

But this company is no longer exist and the software is no longer being updated .

[ more ]  [ reply ]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Symantec is aware and currently investigating this posting.

Symantec Product Security Team
Symantec takes the security of our products seriously and is a
responsible disclosure company. You can view our response policies
at http://www.symantec.com/s

[ more ]  [ reply ]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

#######################################################################
Advisory information:

Title: Servers Alive - Privilege Escalation
CVE Candidate Number: CAN-2005-0352
Application: Servers Alive
Versions known affected: 4.1, 5.0; other versions n

[ more ]  [ reply ]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

On Tue, Mar 15, 2005 at 09:06:05PM +0000, Nigel Horne wrote:
> > > # unzip -l mixed-eicar.zip
> > > Archive: mixed-eicar.zip
> > > Length Date Time Name
> > > -------- ---- ---- ----
> > > 308 03-10-05 12:00 Test^G^[[2J^[[2;5m

[ more ]  [ reply ]

===========================================================
Ubuntu Security Notice USN-97-1 March 16, 2005
xfree86 vulnerability
CAN-2005-0605
===========================================================

A security issue affects the following Ubuntu releases:

Ubuntu 4.10 (Warty Warthog)

The

[ more ]  [ reply ]

- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
Gentoo Linux Security Advisory GLSA 200503-20
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
http://security.gentoo.org/
- - - - - -

[ more ]  [ reply ]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

- ------------------------------------------------------------------------
--
CONECTIVA LINUX SECURITY ANNOUNCEMENT
- ------------------------------------------------------------------------
--

PACKAGE : kdenetwork
SUMMARY : Fix for kppp vulnerabili

[ more ]  [ reply ]

There have been lot of noise and confusion regarding
all the issues reported lately... So, let me sum them
up.
________________________________________________________________________
___________
Multiple Vendor Antivirus Products Malformed ZIP
Attachment Scan Evasion Vulnerability

Affected Product:

[ more ]  [ reply ]