Topic
LoadLibrary / LoadLibraryEx Weakness

Release Date:
February 9, 2004

Date Reported:
Reported to Microsoft on December 9, 2003

Severity:
Medium (Interception of SSL traffic, RSA encryption, and others)

Systems Affected:
Windows 95, 98, ME;
Windows NT, 2000, XP, 2K3 (ACL limitations apply)

S

[ more ]  [ reply ]

> dd if=/dev/zero of=testfile count=10000&&gzip testfile&&ls -la testfile
No need to fill up your own disk -- do this instead:
dd if=/dev/zero bs=1k count=10000 | gzip - > testfile.gz

[ more ]  [ reply ]

{=======================================================================
=========}

{ [waraxe-2004-SA#003] }

{=======================================================================
=========}

{

[ more ]  [ reply ]

TOPIC:

======

Apache + Resin Reveals JSP Source Code to Remote Users And Any Users Can Access Resin Forbidden Directory ("/WEB-INF/")

Description:

============

Security vulnerability has been found in Windows NT/2000 Systems that have Apache 1.3.29 + Resin 2.1.12 installed. The vulnerabilit

[ more ]  [ reply ]

In-Reply-To: <4027B328.4050305 (at) egotistical.reprehensible (dot) net [email concealed]>

it's not mydoom.c - his name is Vesser (W32.HLLW.Deadhat) :

Vesser mainly targets computers that have previously been infected with the Mydoom.A or Mydoom.B worms. Vesser scans for the backdoors in those worms on IP addresses. While d

[ more ]  [ reply ]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Pentest Limited Security Advisory

Multiple vulnerabilities in Nokia phones.

Advisory Details
- ----------------

Title: Multiple vulnerabilities in Nokia phones.
Announcement date: 9th February 2004
Advisory Reference: ptl-2004-01

[ more ]  [ reply ]

{=======================================================================
=========}

{ [waraxe-2004-SA#002] }

{=======================================================================
=========}

{

[ more ]  [ reply ]

Uses the Mydoom backdoor to upload itself (over Mydoom ports).

Seeded over the weekend, it is out now and spreads fast.

Blocking: block Mydoom ports.

Gadi Evron.

[ more ]  [ reply ]

>Description:

It is trivial to crash clamd using a malformed uuencoded message, resulting in a
denial of service for all programs (e.g. SMTP daemons) relying on clamd running.
The message must only contain one uuencoded line with an illegal line lenght, i.e.
starting with a small letter.

libclamav

[ more ]  [ reply ]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

- ------------------------------------------------------------------------
--
Debian Security Advisory DSA 436-1 security (at) debian (dot) org [email concealed]
http://www.debian.org/security/ Matt Zimmerman
February 8th, 2004

[ more ]  [ reply ]

Introduction
#############

'httpd' for PalmOS was originally written by Jim Rees,
and is a simple webserver for Palm powered PDAs.
Since the development of httpd for Palm stopped, I
decided to modify 'httpd' slightly, and re-release it
on freshmeat.net.
However, httpd contains a bug which caus

[ more ]  [ reply ]

TrackMania Demo Denial of Service
The original document can be found at
http://www.securiteinfo.com/attaques/hacking/trackmaniados.shtml

.oO Overview Oo.
TrackMania Demo Denial of Service
Discovered on 2003, November, 30th
Vendor: TrackMania Official website http://www.trackmania.com

TrackMania

[ more ]  [ reply ]

http://mogan.nonsoloirc.com/egg_advisory.txt

==========================
Topic: eggdrop share.mod problem
Issue date: 07/02/2004
Severity: remote exploit
Affected versions: 1.6.x <= 1.6.15, others?
======================

Eggdrop is a bot written in C. It is highly configurable
and can be easily exp

[ more ]  [ reply ]

The Palace 3.x (Client) Stack Overflow Vulnerability

####################################################

Credit:
Author : Peter Winter-Smith

Software:
Packages : The Palace 3.5 (Client)
Version : 3.5 and below
Vendor : 'Copyright © 1996-2000 Communities.com'
Vendor Url : http://www.

[ more ]  [ reply ]

> -----Original Message-----
> From: Dave Aronson [mailto:spamtrap.secfocus (at) dja.mailme (dot) org [email concealed]]

> Law enforcement agencies use some kind of algorithm to convert
> fingerprints to a numeric value, so that they can be easily
> compared.

My understanding is that this is only an approximate represen

[ more ]  [ reply ]

I sent a mail to the vendor, without response , so here it is.

In the exemple here you can see informations about the telnet interface
previously connected to.

Note the problem do not only exist with icmp packet but seems to be in
ACK packet on TCP too. I don't know if the problem exist only on th

[ more ]  [ reply ]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
Gentoo Linux Security Advisory GLSA 200402-01
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
~

[ more ]  [ reply ]