Title: QuiXplorer directory traversal
Affects:
<= QuiXplorer 2.3
Effect: file disclosure, web server's user read access
Id: cbsa-0003
Release Date: 2004 08 14
Author: Cyrille Barthelemy <cb-publicbox (at) ifrance (dot) com [email concealed]>

-- 1. Introduction
------------------
From QuiXplorer documentation :

"QuiXplorer

[ more ]  [ reply ]

-----BEGIN PGP SIGNED MESSAGE-----

________________________________________________________________________
______
SGI Security Advisory

Title : SGI Advanced Linux Environment 2.4 security update #24
Number : 20040803-01-U
Date : August 13, 2004
Fixed

[ more ]  [ reply ]

-----BEGIN PGP SIGNED MESSAGE-----

________________________________________________________________________
______
SGI Security Advisory

Title : SGI Advanced Linux Environment 3 Security Update #9
Number : 20040802-01-U
Date : August 13, 2004
Fixed in

[ more ]  [ reply ]

In-Reply-To: <1092386306.752.36.camel (at) bobby.exaprobe (dot) com [email concealed]>

>Nicolas Gregoire wrote :

>I've seen theses emails since last Friday, and my gateway has since

>received around 200 of them. KAV and ClamAV detect them as

>"TrojanDropper.VBS.Zerolin"

>

>It appears that a small Jscript.Encoded code is

[ more ]  [ reply ]

-- Corsaire Security Advisory --

Title: Clearswift MAILsweeper multiple encoding/compression issues
Date: 07.08.03
Application: Clearswift MAILsweeper prior to 4.3.15
Environment: Windows 2000
Author: Martin O'Neal [martin.oneal (at) corsaire (dot) com [email concealed]]
Audience: General distribution
Reference: c030807-001

[ more ]  [ reply ]

In-Reply-To: <005e01c48141$4e82f880$0701a8c0@COOKIE>

Sorry for not mentioning that.Thats why the subject is called "SPECIAL FEATURE" and not a bug.

By the way, the second issue about zebra its true and as i informed about it ,it can be exploited localy or remotely.

Thanks for your reply,

Thana

[ more ]  [ reply ]

> -----Original Message-----
> From: thanasonic (at) hack (dot) gr [email concealed] [mailto:thanasonic (at) hack (dot) gr [email concealed]]
>
> By opening http://192.168.0.1/setup.cgi?todo=debug you enable
> the router's debug mode.Then you just telnet at 192.168.0.1
> at port 23 and then you have a root shell.
>
> Also i found that if you just teln

[ more ]  [ reply ]

#########################################

## Advanced usage of system() function ##

#########################################

1. Introduction

In a last few years a lot of new patches for kernel which improve

security became available. Basic task o

[ more ]  [ reply ]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

_______________________________________________________________________

Mandrakelinux Security Update Advisory
_______________________________________________________________________

Package name: mozilla
Advisory ID:

[ more ]  [ reply ]

if anyone else was looking for some of the overflows mentioned in the
rather cryptic advisory, i found one of them in:

/gaim-0.81/src/protocols/msn/slp.c :648 in the function msn_slp_sip_recv(). an
improper use of strncpy().

[---------------------------------------------]

not very interesting

[ more ]  [ reply ]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

_______________________________________________________________________

Mandrakelinux Security Update Advisory
_______________________________________________________________________

Package name: gaim
Advisory ID:

[ more ]  [ reply ]

Immunity is proud to present for public release our newest research paper: Microsoft Windows, a lower Total Cost of Ownership.

This can be found at http://www.immunitysec.com/resources-papers.shtml .

Thanks,
Dave Aitel
Immunity, Inc.

[ more ]  [ reply ]

Mr Johnson,

We have made available a paper conatining several (unpublished by

iDefense's paper) tests agains PAX-like solutions in WIN32. Only

tests not deep information on how this products works.

Grab it at: [264 KB]

http://www.ngsec.com/docs/whitepapers/NGSEC-Windows_overflow_protec

[ more ]  [ reply ]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
Gentoo Linux Security Advisory GLSA 200408-12
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -

[ more ]  [ reply ]

For the sake of completeness: Mac OS X 10.3.5 doesn't crash or
consume excess CPU cycles at your test page.

The only notable quirk was a failure to scale the test image:
Safari 1.2.3 (KHTML) displayed a blank space 999999 pixels tall
and Mozilla 1.8a displayed a 999999x999999 black box.

> O

[ more ]  [ reply ]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
Gentoo Linux Security Advisory GLSA 200408-13
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -

[ more ]  [ reply ]

There are incoming reports of a JS/Zerolin (java script virus). Anyone
else seeing this ? (I have no further information yet).

=================================================
Travis
www.cyberabuse.org/crimewatch
Email: Bonk (at) chatsystems (dot) com [email concealed] | Bonk (at) cyberabuse (dot) org [email concealed]
==========================

[ more ]  [ reply ]

By opening http://192.168.0.1/setup.cgi?todo=debug you enable the router's debug mode.Then you just telnet at 192.168.0.1 at port 23 and then you have a root shell.

Also i found that if you just telnet to 192.168.0.1 2602 you will get a prompt from the service ZEBRA that is running on the route

[ more ]  [ reply ]

Mr. Serna,

We respect your wish to defend the integrity of your product, however, your comments to the list do not reflect our previous conversations nor do they speak to the proper version of the test platform which was released to the public during the conferences. I'll try to address your concer

[ more ]  [ reply ]

-----BEGIN PGP SIGNED MESSAGE-----

________________________________________________________________________
______

SUSE Security Announcement

Package: gaim
Announcement-ID: SUSE-SA:2004:025
Date: Thursday, Aug

[ more ]  [ reply ]