SecurityFocus

directory traversal in ParaChat Server 5.5 2004-09-29
Donato Ferrante (fdonato autistici org)

Donato Ferrante

Application: ParaChat Server
http://www.parachat.com/

Version: 5.5

Bug: directory traversal

Date: 28-Sep-2004

Author: Donato Ferrante
e-mail: fdonato (at) autistici (dot) org [email concealed]
web: www.aut

[ more ] [ reply ]

Re: iDEFENSE Security Advisory 09.22.04 - Sophos Small Business Suite Reserved D 2004-09-29
Lise Moorveld (lise_moorveld hotmail com)

Hi,

>The following command will successfully copy a file to the reserved device
>name 'aux' on the C:>drive:
>
>copy source \\.\C:\aux
>

I did that using the DOS prompt (using a plain text file as source). Then,
opening Windows Explorer, I tried opening the properties window by
right-clicking t

[ more ] [ reply ]

Yahoo! Store Security Advisory 2004-09-27
Stuart Moore (smoore bugtraq securityglobal net)

Yahoo! Store Security Advisory

Advisory: http://securitytracker.com/id?1011403
Date: September 23, 2004
Vendor: Yahoo!
Product: Yahoo! Store
Status: Fixed by the vendor; Coordinated release
Credit: Ben Efros
benjamin (at) pcguy (dot) org [email concealed]
http://www.citiprice.com/

Desc

[ more ] [ reply ]

MDKSA-2004:011-1 - Updated NetPBM packages fix a number of temporary file bugs. 2004-09-28
Mandrake Linux Security Team (security linux-mandrake com)

Multiple XSS Vulnerabilities in Wordpress 1.2 2004-09-27
Thomas Waldegger (bugtraq morph3us org)

Vendor : Wordpress

URL : http://wordpress.org/

Version : Wordpress 1.2

Risk : XSS

Description:

WordPress is a state-of-the-art semantic personal publishing platform with a focus on aesthetics, web standards, and usability. [...]

Go to http://wordpress.org/ for detailed information.

[ more ] [ reply ]

Vignette Application Portal Unauthenticated Diagnostics 2004-09-28
Advisories (advisories atstake com)

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

@stake, Inc.
www.atstake.com

Security Advisory

Advisory Name: Vignette Application Portal Unauthenticated
Diagnostics
Release Date: 09-28-2004

[ more ] [ reply ]

MDKSA-2004:103 - Updated OpenOffice.org packages fix temporary file vulnerabilities 2004-09-28
Mandrake Linux Security Team (security linux-mandrake com)

Code execution in Icecast 2.0.1 2004-09-28
Luigi Auriemma (aluigi autistici org)

#######################################################################

Luigi Auriemma

Application: Icecast
http://www.icecast.org
Versions: <= 2.0.1
Platforms: only Win32 seems vulnerable but other platforms could be
affected in so

[ more ] [ reply ]

RE: Diebold Global Election Management System (GEMS) Backdoor Account Allows Authenticated Users to Modify Votes 2004-09-28
gandalf digital net

Greetings and Salutations:

From: David Brodbeck
> You're missing the social dynamics around it. There are
> several parties
> involved:
<snip>
> - The public. They don't understand these issues either, and
> they have a short attention span.

Let me add one more social dynamic. The public will

[ more ] [ reply ]