Network Security Archives

October 28, 2004

[NT] RealPlayer Zipped Skin File Buffer Overflow, SecuriTeam, 11:17

October 26, 2004

[TOOL] HTMLer - An Automated Broken HTML Generator (Mangleme Python Port), SecuriTeam, 16:55
[UNIX] Kaffeine Media Player Content-Type Overflow, SecuriTeam, 16:25
[UNIX] Bugzilla Unauthorized Bug Modification And Information Disclosure Vulnerabilities, SecuriTeam, 16:15
[NT] How to Break Windows XP SP2 (Drag and Drop Media Files) - Proof of Concept, SecuriTeam, 16:14
[NT] Vypress Tonecast Broadcast Shutdown (Crash), SecuriTeam, 16:13
[NT] How to Break Windows XP SP2 (Drag and Drop .hta files), SecuriTeam, 16:13
[UNIX] HP-UX stmkfont Local Privilege Escalation Vulnerability, SecuriTeam, 16:13
[NT] How to Break Windows XP SP2 (Drag and Drop media files), SecuriTeam, 16:13
[UNIX] Apache Mod_include Local Buffer Overflow, SecuriTeam, 16:13
[TOOL] Rssh - Restricted Shell for OpenSSH, SecuriTeam, 16:13
[EXPL] Ability Server FTP STOR Buffer Overflow, SecuriTeam, 16:13
[TOOL] Stp-Packet - Testing the Security of Spanning Tree Protocol, SecuriTeam, 16:13

October 21, 2004

[UNIX] Buffer Overflow in Mpg123 (getauthfromURL), SecuriTeam, 16:44
[EXPL] Microsoft Windows XP Metafile (.emf) Heap Overflow (MS04-032), SecuriTeam, 16:24
[NT] Privateer's Bounty: Age of Sail II Server Remote Crash, SecuriTeam, 15:44

October 20, 2004

[EXPL] Avoiding Stackguard and Other Stack Protection - Proof of Concept Code, SecuriTeam, 15:53
[NT] Microsoft's 'Fight Spyware' Information Center, SecuriTeam, 15:23
[REVS] Introduction to Shellcoding - How to Exploit Buffer Overflows, SecuriTeam, 15:03
[EXPL] BitchX Local Root Exploit, SecuriTeam, 14:22

October 19, 2004

[Full-Disclosure] Major Client Crash in 3D FTP, Bakchodiya, 09:00

October 18, 2004

[UNIX] Multiple Vulnerabilities in CoolPHP, SecuriTeam, 12:20
[NT] Multiple Cross Site Scripting Vulnerabilities in FuseTalk, SecuriTeam, 11:50
[REVS] GDI+ JPEG Exploit Mutations Can Bypass Antivirus Tests, SecuriTeam, 11:13
[NEWS] Detecting and Testing HTTP Response Splitting Using Browser Cookies Alert, SecuriTeam, 10:37
[EXPL] Remote Buffer overflow Vulnerability in YPOPs (Windows exploit), SecuriTeam, 09:51
[UNIX] Libtiff Image Decoder Parsing Flaws, SecuriTeam, 07:37
[NT] ShixxNote Remote Buffer Overflow, SecuriTeam, 06:26
[NT] Flash Messaging Server Crash, SecuriTeam, 06:06
[NT] Yak! Directory Traversal Bug, SecuriTeam, 05:56
[NT] Microsoft Excel Length Parameter Parsing Buffer Overflow Vulnerability, SecuriTeam, 05:36

October 17, 2004

[NT] Limited \secure\ buffer-overflow in some old Monolith games, SecuriTeam, 12:55
[NT] SetWindowLong Shatter Attacks, SecuriTeam, 12:34
[NT] Microsoft IIS WebDAV (XML Parser) Attribute Blowup DoS, SecuriTeam, 12:14
[REVS] Common Firewall Configuration Errors, SecuriTeam, 12:04
[NT] Poisoning Cached HTTPS Documents in Internet Explorer, SecuriTeam, 11:43
[UNIX] BMon Relative Path Privilege Escalation, SecuriTeam, 11:23

October 13, 2004

[NT] Adobe Acrobat/Reader 6 Local Files Access, SecuriTeam, 20:25
[EXPL] Writing Trojans that Bypass Windows XP Service Pack 2 Firewall, SecuriTeam, 20:14
[NT] Vulnerability in NNTP Allows Remote Code Execution (MS04-036), SecuriTeam, 19:34
[NT] Cumulative Security Update for Internet Explorer (MS04-038), SecuriTeam, 19:04
[NT] Windows Shell ZIP File Decompression DUNZIP32.DLL Buffer Overflow, SecuriTeam, 18:34
[NT] Windows VDM #UD Local Privilege Escalation, SecuriTeam, 18:12
[NT] Memory Leak and DoS in NT4 RPC server, SecuriTeam, 17:42
[NT] IIS NNTP Service XPAT Command Vulnerabilities (PoC), SecuriTeam, 17:12
[NT] Multiple Vulnerabilities in GoSmart Message Board, SecuriTeam, 16:41
[UNIX] SoX ".WAV" ICRD and ISFT Buffer Overflow, SecuriTeam, 16:21
[NT] Vulnerability in SMTP Allows Remote Code Execution (MS04-035), SecuriTeam, 15:51
[UNIX] ocPortal File Inclusion Vulnerability, SecuriTeam, 15:21
[NT] Vulnerability in Windows Shell Allows Remote Code Execution (MS04-037), SecuriTeam, 15:01
[NT] Vulnerability in NetDDE Could Allow Remote Code Execution (MS04-031), SecuriTeam, 14:30
[NT] Vulnerability in WebDAV XML Message Handler DoS (MS04-030), SecuriTeam, 13:50
[NT] Vulnerability in Microsoft Excel Allows Remote Code Execution (MS04-033), SecuriTeam, 13:30
[NT] Vulnerability in Compressed (zipped) Folders Allows Remote Code Execution (MS04-034), SecuriTeam, 12:59
[NT] Security Update for Microsoft Windows (MS04-032), SecuriTeam, 12:39
[UNIX] Squid Web Proxy Cache Remote DoS, SecuriTeam, 11:59
[NT] Vulnerability in RPC Runtime Library Allows Information Disclosure and DoS (MS04-029), SecuriTeam, 11:38

October 12, 2004

[UNIX] CubeCart SQL Injection Vulnerability, SecuriTeam, 07:12
[NT] Tridcomm FTP Server Directory Traversal, SecuriTeam, 06:22

October 11, 2004

[UNIX] HTTP Response Splitting in WordPress, SecuriTeam, 15:24
[UNIX] BlackBoard Path Disclosure and File Inclusion Vulnerabilities, SecuriTeam, 15:04

October 07, 2004

[REVS] Using the oc192-Dcom.c Exploit to Accomplish Revenge, SecuriTeam, 14:54
[REVS] Worm Analysis - Microsoft LSASS Buffer Overflow from Exploit to Worm, SecuriTeam, 14:54
[EXPL] Ipswitch WhatsUp Gold Remote Buffer Overflow Exploit, SecuriTeam, 14:54
[EXPL] JpegOfDeath - an Advanced JPEG (GDI+) Exploit, SecuriTeam, 14:54
[NT] ColdFusion MX 6.1 on IIS File Contents Disclosure, SecuriTeam, 14:54
[NEWS] Default Username/Password Pairs in ON Command CCM 5.x Database Backend, SecuriTeam, 14:54
[TOOL] Fakebust - Fake Exploit Code Detector, SecuriTeam, 14:53
[NT] RhinoSoft DNS4ME HTTP Server DoS and CSS, SecuriTeam, 14:53
[UNIX] MySQLguest Arbitrary Code Injection, SecuriTeam, 14:53
[UNIX] Sudo -u Parameter File Exposure, SecuriTeam, 14:53
[NEWS] Inkra 1504GX IP Protocol Parsing DoS, SecuriTeam, 14:53

October 04, 2004

[NEWS] Macromedia JRun4 mod_jrun Apache Module Buffer Overflow, SecuriTeam, 14:05
[EXPL] Microsoft SQL Server DoS, SecuriTeam, 13:45
[NEWS] RealPlayer pnen3260.dll Heap Overflow, SecuriTeam, 13:15
[UNIX] Samba Arbitrary File Access Vulnerability, SecuriTeam, 13:05
[NEWS] Xerces-C++ Library Attribute Parsing Denial Of Service, SecuriTeam, 12:34
[NEWS] Znif PLS Buffer Overflow, SecuriTeam, 12:24
[TOOL] Hotspotter - a Wireless Honeypot, SecuriTeam, 12:04
[UNIX] EPM Buffer Overflow (retlibc exploit), SecuriTeam, 10:42
[EXPL] ICECast Remote Code Execution, SecuriTeam, 10:31
[NT] Judge Dredd Vs. Death Format String Vulnerability, SecuriTeam, 10:11
[NT] dbPowerAmp Buffer Overflow and DoS Vulnerabilities, SecuriTeam, 10:01
[NT] Remote Buffer overflow Vulnerability in YPOPs!, SecuriTeam, 09:50
[REVS] Microsoft PCT Exploit Analysis, SecuriTeam, 09:30
[NEWS] Motorola Wireless Router WR850G Authentication Circumvention, SecuriTeam, 09:19

October 03, 2004

[REVS] Analysis of Real Network's RealServer Remote Root Exploit, SecuriTeam, 05:52

October 01, 2004

[UNIX] IBM AIX ctstrtcasd Local File Corruption Vulnerability, SecuriTeam, 06:31
[NT] HTTP Response Splitting and SQL Injection in Megabbs Forum, SecuriTeam, 06:11
[NT] Chatman Remote DoS (New User Broadcast), SecuriTeam, 05:41