There have been reports of WebWorm exploting PHPBB's urldecode
vulnerability.
The worm uses this to create a perl script on the server and start it.
After the perl script starts it wipes itself out, then begans to search
via google.com/advanced_search for exploitable viewtopic.php files part from

[ more ]  [ reply ]

cees-bart <ceesb (at) cs.ru (dot) nl [email concealed]> wrote on 12/20/2004 05:10:41 AM:

> 2) the second is a classical stack overflow in a tool called paginit.
>

Note from the advisory below that AIX 5.1 is not affected by this issue.

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

IBM SECURITY ADVISORY

First Issued: Mon D

[ more ]  [ reply ]

Jonathan T Rockway writes:

> Regarding local versus remote, look at it this way: You have
> a 100% secure system. Then you install NASM. Now a user
> FROM THE NETWORK can send you some tainted assembly code for
> you to assemble and he can compromise your account. That is
> why it is consid

[ more ]  [ reply ]

Hewlett Packard HP-UX ftpd Remote Buffer Overflow Vulnerability

iDEFENSE Security Advisory 12.21.04
www.idefense.com/application/poi/display?id=175&type=vulnerabilities
December 21, 2004

I. BACKGROUND

HP-UX FTP Daemon is a service included in HP-UX that implements the File

Transfer Protocol.

II

[ more ]  [ reply ]

libtiff STRIPOFFSETS Integer Overflow Vulnerability

iDEFENSE Security Advisory 12.21.04
www.idefense.com/application/poi/display?id=173&type=vulnerabilities
December 21, 2004

I. BACKGROUND

libtiff provides support for the Tag Image File Format (TIFF), a widely
used format for storing image data.

[ more ]  [ reply ]

libtiff Directory Entry Count Integer Overflow Vulnerability

iDEFENSE Security Advisory 12.21.04
www.idefense.com/application/poi/display?id=174&type=vulnerabilities
December 21, 2004

I. BACKGROUND

This software provides support for the Tag Image File Format (TIFF), a
widely used format for st

[ more ]  [ reply ]

Multiple Vendor Xine version 0.99.2 PNM Handler PNA_TAG Heap Overflow
Vulnerability

iDEFENSE Security Advisory 12.21.04
www.idefense.com/application/poi/display?id=176&type=vulnerabilities
December 21, 2004

I. BACKGROUND

Xine is a multimedia player which runs on multiple platforms.
More informati

[ more ]  [ reply ]

Multiple Vendor Xine version 0.99.2 PNM Handler Negative Read Length
Heap Overflow Vulnerability

iDEFENSE Security Advisory 12.21.04
www.idefense.com/application/poi/display?id=177&type=vulnerabilities
December 21, 2004

I. BACKGROUND

Xine is a multimedia player which runs on multiple platforms.

[ more ]  [ reply ]

Multiple Vendor xpdf PDF Viewer Buffer Overflow Vulnerability

iDEFENSE Security Advisory 12.21.04
www.idefense.com/application/poi/display?id=172&type=vulnerabilities
December 21, 2004

I. BACKGROUND

Xpdf is an open-source viewer for Portable Document Format (PDF) files.

II. DESCRIPTION

Remote

[ more ]  [ reply ]

-----BEGIN PGP SIGNED MESSAGE-----

________________________________________________________________________
______

SUSE Security Announcement

Package: kernel
Announcement-ID: SUSE-SA:2004:044
Date: Tuesday, De

[ more ]  [ reply ]

Two points.

Regarding local versus remote, look at it this way: You have a 100%
secure system. Then you install NASM. Now a user FROM THE NETWORK can
send you some tainted assembly code for you to assemble and he can
compromise your account. That is why it is considered remote. Local
would mea

[ more ]  [ reply ]

The xprobe2 development team is pleased to announce the immediate
availability of Xprobe2 v0.2.1. Xprobe2 is a remote active operating
system fingerprinting tool which uses advanced techniques, some which
where first to be introduced with Xprobe2, such as the usage of
statistical analysis ('fuzz

[ more ]  [ reply ]

This morning one of our client's sites was found to have been defaced
with the words "NeverEverNoSanity WebWorm Generation 9." The defacement
appeared to take place on all .html files in the web root trees of
multiple virtual hosts on the web server in a very short period of time.

After some inves

[ more ]  [ reply ]

cees-bart <ceesb (at) cs.ru (dot) nl [email concealed]> wrote on 12/20/2004 05:10:41 AM:

> 1) the first is a bug in all setuid diag related tools that use an
> environment variable as a prefix to an external binary executed as root.

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

IBM SECURITY ADVISORY

First Issued: Mon Dec

[ more ]  [ reply ]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

- ------------------------------------------------------------------------
--
Debian Security Advisory DSA 614-1 security (at) debian (dot) org [email concealed]
http://www.debian.org/security/ Martin Schulze
December 21st, 2004

[ more ]  [ reply ]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

- ------------------------------------------------------------------------
--
Trustix Secure Linux Advisory #2004-0069

Package name: kerberos5
Summary: execution of arbitary code by authenticated user
Date: 2004-12-21
Affecte

[ more ]  [ reply ]

In-Reply-To: <20041216062119.9218.qmail (at) www.securityfocus (dot) com [email concealed]>

Sry, but it's getting ridiculous.

The new releases of wordpress - 1.2.2 stable and

1.3-alpha-5 unstable - are still vulnerable for

some bugs I mentioned in my last message.

XSS:

/wp-login.php?action=login&redirect_to=[XSS]

/wp-

[ more ]  [ reply ]

-----BEGIN PGP SIGNED MESSAGE-----

MIT krb5 Security Advisory 2004-004

Original release: 2004-12-20

Topic: heap buffer overflow in libkadm5srv

Severity: serious

SUMMARY
=======

The MIT Kerberos 5 administration library (libkadm5srv) contains a
heap buffer overflow in password

[ more ]  [ reply ]

===========================================================
Ubuntu Security Notice USN-43-1 December 20, 2004
groff vulnerabilities
http://bugs.debian.org/286371,
http://bugs.debian.org/286372
===========================================================

A security issue affects the following Ubu

[ more ]  [ reply ]