SecurityFocus

TA04-033A: Multiple Vulnerabilities in Microsoft Internet Explorer 2004-02-03
CERT Advisory (cert-advisory cert org)

Re: sqwebmail web login 2004-02-03
scott jefferd cantire com

This is actually very similar to another problem that some on BugTraq may
be interested in. There is at least one major "Unix-based" OS (AIX) that
in it's default configuration will provide a unique reply for a correctly
guessed password when direct remote login is disabled for the userid in
quest

[ more ] [ reply ]

Re: MS to stop allowing passwords in URLs 2004-02-03
Vinny Abello (vinny tellurian com)

Interestingly, I've already found that this patch doesn't fix this problem
when using IE as an object in VB6. You can still programmatically call an
instance of IE as a browser object and use that format to login to a web site.

At 05:54 PM 1/28/2004, McAllister, Andrew wrote:
>I just read that Mi

[ more ] [ reply ]

RE: virus handling 2004-02-03
Shaun Bertrand (sbertrand cbihome com)

Mmmmm,

Well to be quite honest I've had a lot of luck mitigating with an ISP to
solve any DoS issues. Now that's not to say the results have always been
successful, but if you know the means of communication and WHO to
contact within the ISP you may have some luck. I've blocked ICMP floods,
DDoS, D

[ more ] [ reply ]

Cisco Security Advisory: Cisco 6000/6500/7600 Crafted Layer 2 Frame Vulnerability 2004-02-03
Cisco Systems Product Security Incident Response Team (psirt cisco com)

Re: BUG IN APACHE HTTPD SERVER (current version 2.0.47) 2004-02-03
Vietnamese Security Group (security security com vn)

In-Reply-To: <20040131211851.30391.qmail (at) www.securityfocus (dot) com [email concealed]>

Note : of course it affected also in the current version 2.0.48 ( tested)

Vietnamese Security Group

www.security.com.vn

>Received: (qmail 2149 invoked from network); 3 Feb 2004 02:12:35 -0000

>Received: from outgoing3.securi

[ more ] [ reply ]

[SECURITY] [DSA 432-1] New crawl packages fix potential local games exploit 2004-02-03
joey infodrom org (Martin Schulze)

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

- ------------------------------------------------------------------------
--
Debian Security Advisory DSA 432-1 security (at) debian (dot) org [email concealed]
http://www.debian.org/security/ Martin Schulze
February 3rd, 2004

[ more ] [ reply ]

X-Cart vulnerability 2004-02-03
Philip (securityfocus magicwebsolutions co uk)

X-Cart (ttp://www.x-cart.com)is a well distributed PHP e-commerce solution.

We have discovered some security related bugs in X-Cart Version 3.4.3.

It is possible that other versions are vulnerable too.

Any visitor can view any file on the web server.

This URL my be used as proof of concept:

[ more ] [ reply ]

Arbitrary File Disclosure Vulnerability in phpMyAdmin 2.5.5-pl1 and prior 2004-02-03
Cedric Cochin (cco netvigilance com)

[waraxe-2004-SA#001] - Script injection in GBook for Php-Nuke ver. 1.0 2004-02-02
Janek Vind (come2waraxe yahoo com)

{=======================================================================
=========}

{ [waraxe-2004-SA#001] }

{=======================================================================
=========}

{

[ more ] [ reply ]

ZH2004-03SA (security advisory): Photopost PHP Pro 4.6 Sql Injection Vulnerability 2004-02-02
ZetaLabs (zetalabs zone-h org)

ZH2004-03SA (security advisory): Photopost PHP Pro 4.6 Sql Injection Vulnerability

Published: 02 february 2004

Released: 02 february 2004

Name: Photopost PHP Pro

Affected Systems: 4.6 and prior versions

Issue: Sql Injection Vulnerability

Author: G00db0y from Zone-h Security Labs

[ more ] [ reply ]

PHP Code Injection Vulnerabilities in phpGedView 2.65.1 and prior 2004-01-29
Cedric Cochin (cco netvigilance com)

Re: Fw: phpBB privmsg.php XSS vulnerability patch. 2004-01-29
Micheal Cottingham (micheal michealcottingham com)

I'm going to regret replying to this as many people seem to abuse
autoresponders and I end up with 50+ emails saying so-and-so is out of
the office ...

If you think you have found a security hole with phpBB, contact the
security email address ... I assure you they won't bite your head off
for n

[ more ] [ reply ]

Re: GOOROO CROSSING: File Spoofing Internet Explorer 6 2004-01-30
Dustin Furrer (dfurrer gorea com)

Seens how this really has'nt much to do with IE itself and is more of an
Explorer.exe bug\feature I'd say this was posted already and about a year
ago. We are already aware of this and of the fact that it affects just about
every aspect of the Operating System. Why the repost in a modified form?

[ more ] [ reply ]