Welcome to the Study Hall.
Maintained by kewlmaniac.
Welcome to the Study Hall.
Maintained by
kewlmaniac.
| Hacker News | Recent Exploits & Advisories | ||
|
VSU VPN Dec 6 00 VPNet Technologies VSU VPN appliances have serious remote vulnerabilities. A source routing flaw in VSU allows for unauthenticated connections to a target host on protected LAN of VPN, and a flaw in N... Atstake Dec 5 00 Atstake Security Advisory A120400-1 - IIS 4.0/5.0 Phone Book server buffer overrun vulnerability. The Phone Book Service was created by Microsoft to help provide dial in services to the corporation an... Net Sec Net Suecurity Dec 5 00 Weekly Newsletter from Help Net Security - Covers weekly roundups of security events that were in the news the past week. In this issue: Recent IIS 5.0 patch opens up old hole, Security problems with... Securax-Serv-U FTP Dec 5 00 Securax Security Advisory Securax-SA-09 - The Serv-U FTP server for Windows v 2.4a, 2.5h, and 3.0b (all versions tested) have vulnerabilities stemming from improper handling of hex encoded characters... Linux Napster Vulnerabilities - Dec 2 00 The Linux Napster Client v0.9 through v1.4.4 contains remote denial of service vulnerabilities, including a buffer overflow. Homepage: http://www.fakehalo.org. FreeBSD Security Advisory FreeBSD-SA-00:76 - Nov 25 00 The csh and tcsh code creates temporary files when the double less than operator is used, however these are created insecurely and use a predictable filename based on the process ID of the shell. An attacker can exploit this vulnerability to overwrite an arbitrary file writable by the user running the shell. The contents of the file are overwritten with the text being entered using the double less than operator, so it will usually not be under the control of the attacker, limiting the scope of this vulnerability to denial of service. Homepage: http://www.freebsd.org/security. see all... |