My home network uses a small 4 port broadband Dlink router (704p) The

firmware was updated a week ago.

The following malformed URL's cause odd behavior in the router. Pointing

your browser (like most routers) to the gateways internal IP address you

get a web interface for administering yo

[ more ]  [ reply ]

In-Reply-To: <OLMKEND4EMILNTB1EFEDJQGOGFJSGGMCD0KPPWEK (at) ziplip (dot) com [email concealed]>

This issue has been addressed by an SGI Security Advisory:

ftp://patches.sgi.com/support/free/security/advisories/20020602-02-I

[ more ]  [ reply ]

###############################################################
ID: S21SEC-024-en
Title: Vignette TCL Injection
Date: 03/04/2003
Status: Vendor contacted and solution available
Scope: TCL code Execution, Remote command execution
Platforms: All
Author: rpinuaga
Location: http://www.s21sec.com/es/avis

[ more ]  [ reply ]

###############################################################
ID: S21SEC-020-en
Title: Vignette user enumeration
Date: 15/03/2003
Status: Vendor contacted and solution available
Scope: Enumeration of user status
Platforms: All
Author: rpinuaga
Location: http://www.s21sec.com/es/avisos/s21sec-020-e

[ more ]  [ reply ]

###############################################################
ID: S21SEC-017-en
Title: Vignette /vgn/legacy/save SQL access
Date: 15/03/2003
Status: Vendor contacted and solution available
Scope: Execution of SQL SELECT calls
Platforms: All
Author: rpinuaga
Location: http://www.s21sec.com/es/aviso

[ more ]  [ reply ]

=:=:=::=:=:=::=:=:=::=:=:=::=:=:=::=:=:=::=:=:=::=
topic: BRS WebWeaver: POST and HEAD Overflaws
product: BRS WebWeaver v1.04 and prior [ i guess ]
vendor: www.brswebweaver.com
risk: high
date: 05/25/2k3
tested platform: Windows 98 Second Edition
discovered by: euronymous /F0KP
advisory urls: http:

[ more ]  [ reply ]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

- ------------------------------------------------------------------------
--
CONECTIVA LINUX SECURITY ANNOUNCEMENT
- ------------------------------------------------------------------------
--

PACKAGE : BitchX
SUMMARY : Remote vulnerabilities
DATE

[ more ]  [ reply ]

###############################################################
ID: S21SEC-019-en
Title: Vignette /vgn/style internal information leak
Date: 15/03/2003
Status: Vendor contacted and solution available
Scope: Revelation of internal variables
Platforms: All
Author: rpinuaga
Location: http://www.s21sec.

[ more ]  [ reply ]

###############################################################
ID: S21SEC-021-en
Title: Vignette License access and modification
Date: 15/03/2003
Status: Vendor contacted and solution available
Scope: Unauthenticated access to the License management template
Platforms: All
Author: rpinuaga
Location

[ more ]  [ reply ]

-----BEGIN PGP SIGNED MESSAGE-----

________________________________________________________________________
______

SuSE Security Announcement

Package: glibc
Announcement-ID: SuSE-SA:2003:027
Date: Monday, May 2

[ more ]  [ reply ]

###############################################################
ID: S21SEC-016-en
Title: Vignette SSI Injection
Date: 15/03/2003
Status: Vendor contacted and solution available
Scope: SSI Execution, In some cases Remote command execution
Platforms: All
Author: rpinuaga
Location: http://www.s21sec.co

[ more ]  [ reply ]

The PACKET 0' DEATH FastTrack network vulnerability
===================================================

Vulnerability Overview
----------------------
There exists a vulnerability in the FastTrack network
core that can be used by an attacker to take control
of all FastTrack network supernodes. The

[ more ]  [ reply ]

Flurnet Security
----------------

Application: PalmVNC 1.40
Developer(s): Harkan Software (http://www.harakan.btinternet.co.uk/PalmVNC/)
Vladimir Minenko (http://www.wind-networks.de/PalmVNC/)
Scope: VNC passwords saved in plaintext with backup bit.
Tested on: Pa

[ more ]  [ reply ]

Priv8security advisory: 1

-----------------------------------------------------------------------

Product: Gnome Batalla Naval

Version: 1.0.4 (and probably earlier versions)

Vendor: http://batnav.sourceforge.net/

Problem: Remote Buffer overflow

Author: Wsxz (wsxz (at) priv8security (dot) com [email concealed])

----------

[ more ]  [ reply ]

Building on my Eudora attachment spoof

http://www.securityfocus.com/archive/1/322286

I have now found better games to play:

From: me
To: you

Ensure victim has both attachments 'calc' and 'calc.exe' (sent in
this, or previous, email). Then the following shows 'windows' icon
and runs

[ more ]  [ reply ]

+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=
+=
NUX-ACID ADVISORY #002

Advisory name : Local Buffer Overflow in upclient
Risk : Medium (exploit grants kmem rights)
Date : 27.05.2003
Application : upclient
Versio

[ more ]  [ reply ]

---------------------------------------------------------------------
Red Hat Security Advisory

Synopsis: Updated CUPS packages fix denial of service attack
Advisory ID: RHSA-2003:171-01
Issue date: 2003-05-27
Updated on: 2003-05-27
Product:

[ more ]  [ reply ]

Dear Ktha,

The problem is different: uml_net shouldn't be suid.

http://rhn.redhat.com/errata/RHSA-2003-056.html

Details:

An updated kernel-utils package is available that removes the setuid bits
incorrectly assigned to the uml_net binary.

--Saturday, May 24, 2003, 5:10:07 AM, you wrote to bug

[ more ]  [ reply ]

/* ATM on linux Exploit

*** vulnerability discovered by Angelo Rosiello

*** sorry for my poor english.

*** i wrote this exploit just for fun.

*** i can't get a rootshell on my linux :(

*** tested on redhat7.3 ,other linux maybe OK,too.

*** atm package:linux-atm-2.4.0-1.i386.rpm

*** http://

[ more ]  [ reply ]

While playing around with the webmail server (Iplanet Messaging) of my old

ISP (Terra Networks) I noticed something really strange that I could not

believe in: it was possible to do a XSS through an html attachment. In

fact, with Iplanet Messaging you can open an html attachments "online", s

[ more ]  [ reply ]

Hi,

On 14 May 2003 at 12:06 +0200, K-Otik.com wrote:
> ------------------------------------------------------------
> BEA WebLogic Server and Express 7.x Passwords Disclosure
> ------------------------------------------------------------

http://dev2dev.bea.com/resourcelibrary/advisoriesnotifica

[ more ]  [ reply ]

Product: BLNews
Version: 2.1.3
OffSite: http://www.blnews.de/
Problem: PHP source code injection
--------------------------------------------

Vulnerability:

------------admin/objects.inc.php4------------

if ($itheme!="blubb")
{ include("$Server[path]/admin/tools.inc.php4"); }
include("$Server[pat

[ more ]  [ reply ]

TextPortal Default Password Vulnerability

Advisory ID: B$H-2003:001
Advisory URL: http://www.tar.hu/bsh/reports/bsh-2003-001.txt
Date: 2003.05.22.
Original Advisory Date: 2003.05.10.
Discovery date: 2003.05.10.
Type:

[ more ]  [ reply ]

UkR security team presents:
Some problems in Privatefirewall 3.0
////////////////////////////////////////////////////////////////////////
///////////////////
Product: Privatefirewall
version: 3.0
Vendor : Privacyware (http://www.privacyware.com)
Author : UkR-XblP (cuctema (at) ok (dot) ru [email concealed]) - the chief specialis

[ more ]  [ reply ]

=:=:=::=:=:=::=:=:=::=:=:=::=:=:=::=:=:=::=:=:=::=
topic: UPB: Discussion Board/Web-Site Takeover
product: Ultimate PHP Board v1.9 [ latest ]
vendor: www.myupb.com
risk: high
date: 05/24/2k3
discovered by: euronymous /F0KP
advisory urls: http://f0kp.iplus.ru/bz/024.en.txt
http://f0kp

[ more ]  [ reply ]

>"Ryan Purita" <ryan (at) totally-connected (dot) com [email concealed]> wrote:

>The file psd.conf should be owned by root and its mode 600. Only if a
person gets root access in that box, she could read the password. Lots of
applications relay on that, for instance, snort, which is used by Demarc
PureSecure, stores the SQL pas

[ more ]  [ reply ]

Product: BLNews
Version: 2.1.3
OffSite: http://www.blnews.de/
Problem: PHP source code injection
--------------------------------------------

Vulnerability:

------------admin/objects.inc.php4------------

if ($itheme!="blubb")
{ include("$Server[path]/admin/tools.inc.php4"); }
include("$Server[pat

[ more ]  [ reply ]

There is a vulnerability in uml_net. The latest version is vulnerable too.

The problem is the lack of bounds checking in uml_net.c from uml_utilities,

A possible attack could lead to root compromise on some systems since for

example uml_net comes suided root in RH 8.0 by default.

Let's look

[ more ]  [ reply ]

-----BEGIN PGP SIGNED MESSAGE-----

################################################################*
# Damage Hacking Group security advisory
# www.dhgroup.org
################################################################*
#Product: ST FTP Service v3.0
#Authors: [sts

[ more ]  [ reply ]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Greetings.

I'm having trouble reproducing this vulnerability as well. See below:

[jdog@wonderland jdog]$ cat /etc/redhat-release
jdog's Super Tricked-out Red Hat Linux release 8.0 (Psyche)
[jdog@wonderland jdog]$ echo -ne "OPTIONS * RTSP/1.0\nCs

[ more ]  [ reply ]