-----BEGIN PGP SIGNED MESSAGE-----

________________________________________________________________________
______
SGI Security Advisory

Title : SGI Advanced Linux Environment security update #2
Number : 20031001-01-U
Date : October 27, 2003
Reference

[ more ]  [ reply ]

Hi People,

I'm Dan the main developer for CensorNet. I don't consider this issue to be
a vulnerability of any kind, however, we will endeavour (for completeness)
to stop people from being able to insert script into the "Access Denied"
page on CensorNet. If anyone could enlighten me as to a situatio

[ more ]  [ reply ]

DigitalPranksters Security Advisory
http://www.DigitalPranksters.com

Norton Internet Security Blocked Sites XSS

Risk: Low

Product: Norton Internet Security 2003 v6.0.4.34 (Maybe others we only
tested this version)

Product URL: http://www.symantec.com/sabu/nis/nis_pe/index.html

Found By: Krazy

[ more ]  [ reply ]

-----BEGIN PGP SIGNED MESSAGE-----

________________________________________________________________________
______
SGI Security Advisory

Title : SGI Advanced Linux Environment security update #3
Number : 20031002-01-U
Date : October 26, 2003
Reference

[ more ]  [ reply ]

-----BEGIN PGP SIGNED MESSAGE-----

________________________________________________________________________
______
SGI Security Advisory

Title : SGI Advanced Linux Environment security update #4
Number : 20031003-01-U
Date : October 27, 2003
Reference

[ more ]  [ reply ]

Hello,
Libnids is a library which implements the functionality of NIDS
E-component. Libnids provides IP defragmentation, TCP stream reassembly and
port scan detection.
Robert Watson <rwatson (at) FreeBSD (dot) org [email concealed]> has found a bug in the part of
libnids code responsible for TCP reassembly. The flaw probably

[ more ]  [ reply ]

In-Reply-To: <000f01c39ced$e5abce50$0900000a@whitestar>

it uses a well known IE unpatched vulnerability discovered by jelmer on Sep 11 2003 "Windows Media Player & Internet Explorer File Download and Execution" :

http://www.k-otik.com/WMPLAYER-TEST/

http://www.securityfocus.com/archive/1/337285

[ more ]  [ reply ]

Informations :
°°°°°°°°°°°°°
Language : PHP
Product : Advanced Poll
Version : 2.0.2 Textfile
Website : http://www.proxy2.de
Problems :
- PHP Code Injection
- File Include
- Phpinfo

PHP Code/Location :
°°°°°°°°°°°°°°°°°°°

comments.php :

------------------------------------------------------------

[ more ]  [ reply ]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

_______________________________________________________________________

Mandrake Linux Security Update Advisory
_______________________________________________________________________

Package name: apache2
Advisory ID:

[ more ]  [ reply ]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Hello,

Java 2 Security Managers are objects that should enforce
system integrity and safety. Everyone would expect that
the provided base classes from the JDK are therefore a
role model for code quality and stability. But that's
all theory. Let's

[ more ]  [ reply ]

'The Bat!' [http://www.ritlabs.com/] is a powerful, highly configurable, MULTI-USER, yet easy to use email client.

I have discoverd some serious security holes in 'The Bat!'

mmm..., when a new account is created in 'The Bat!' It creates the account in %programfiledir%\The Bat!\MAIL\ without

[ more ]  [ reply ]

Indonesia Security Development Team Advisory

Dansie Shopping Cart Discloses Installation Path to Remote Users
================================================================

Advisory Name: Dansie Shopping Cart Discloses Installation Path to Remote Users
Release Date: 5:21 AM 10/20/03

[ more ]  [ reply ]

In-Reply-To: <20031024135303.26267.qmail (at) linuxmail (dot) org [email concealed]>

It worked for me- IE6 on XP-SP1.

but it seems to be a Flash Player MX plugin

bug than IE bug, cause it stores cookies(

flash documents call it SharedObject) on

disk, in a fixed location.

bye

>Subject: Internet Explorer and Opera

[ more ]  [ reply ]

I usually do not email about "new" trojan horses unless they have
something "special" about them, for there are a lot of them coming out
non-stop. However, with this one,
Although quite simple, is very destructive and spreading at incredible
speed.

The trojan horse spreads by people going to differ

[ more ]  [ reply ]

========================================
INetCop Security Advisory #2003-0x82-020
========================================

* Title: Musicqueue multiple local vulnerabilities

0x01. Description

Musicqueue is a CGI music jukebox using external tools to play the files.
Because of that it supp

[ more ]  [ reply ]

I would like to submit a vulnerability that I just recently discovered. I
have already contacted the vendor of the software that I discovered the bug
in, but they have not gotten back to me. There are two Code Injection/CSS
vulnerabilities that exist in Guestbook Version 1.51 by Chi Kien Uong
(www.p

[ more ]  [ reply ]

I decided to use the flash cookie just as an example. I could have used for example the Macromedia Director cookie. Another way would be using IE temporary cookies because they allow html tags and most other ascii symbols except for ";" in the cookie name. So all I have to do is create a document.wr

[ more ]  [ reply ]

========================================
INetCop Security Advisory #2003-0x82-019
========================================

* Title: sh-httpd `wildcard character' vulnerability

0x01. Description

About:
sh-httpd is a shell script-based Web server that supports GET and HEAD methods, and a CG

[ more ]  [ reply ]

Date:

Oct 26, 2003

Title:

Buffer Overflow in Yahoo messenger Client

Vulnerable systems:

Yahoo! Messenger version 5.6.0.X

Summary:

Vulnerability in Yahoo Messenger File Transfer option allows a remote attacker to shut down the victim client.

Details:

The Yahoo messenger service fi

[ more ]  [ reply ]

Thor Larholm <thor (at) PIVX (dot) COM [email concealed]> wrote:

> ... this is not a problem with Microsofts Internet Explorer, but ...
> There are two completely new issues at hand here.
> The second issue is that IE ... inadvertently redirects to a local file ...
> Content-Location: file:///c:/somefile.html
> ... circumvents

[ more ]  [ reply ]

There was not a lot of details in your post, so I will try to verify and clarify your findings. First things first, this is not a problem with Microsofts Internet Explorer, but with Macromedia and their Flash player.

I could reproduce this issue successfully with a fresh install of the latest Flash

[ more ]  [ reply ]

I have found a bug/weakness in the SiteKiosk terminal software, that allows me to use the terminal without paying for the use of it.

The weakness lays in the rule based system that sets the different charge zones in the terminal. The system allows you to use asterixs(*) in the rules for settin

[ more ]  [ reply ]