exploit the possibilities
Showing 1 - 8 of 8 RSS Feed

Files Date: 2002-04-17

ms02-019
Posted Apr 17, 2002

Microsoft Security Advisory MS02-019 - A serious buffer overflow has been found in IE 5.1 and Office v. X for Macintosh. The vulnerability can be exploited via HTML email or web pages. In addition, a a vulnerability that can allow local AppleScripts to be invoked by a web page without first calling the Helper application has been patched. Microsoft FAQ on this issue available here.

tags | web, overflow, local
MD5 | 24367d3e8ebedcb4b1108d80bfe386b0
microsoft.ftp.glob.txt
Posted Apr 17, 2002
Authored by H D Moore | Site digitaloffense.net

The Microsoft FTP service is vulnerable to a Denial of Service attack in the STAT command. This condition can be triggered by a remote attacker using either a valid user account or anonymous, which is enabled by default. Once exploited, all services running under the inetinfo.exe process will terminate. MS02-018 addresses this problem. Example crash string included.

tags | remote, denial of service
MD5 | 38c1a2fcd2cfe75265b9ea17b99d958d
FreeBSD Security Advisory 2002.20
Posted Apr 17, 2002
Authored by The FreeBSD Project | Site freebsd.org

FreeBSD Security Advisory FreeBSD-SA-02:20 - Two denial of service vulnerabilities were found in the syn cookie implementation in FreeBSD. When a SYN was accepted via a syncookie, it used an uninitialized pointer to find the TCP options for the new socket. This pointer may be a null pointer, which will cause the machine to crash. In addition, restarting applications using syn cookie protected sockets can cause a reference to an old inpcb pointer, crashing the system.

tags | denial of service, tcp, vulnerability
systems | freebsd
MD5 | 8dddb28aff356332abf8704f7f92d0e2
oracle.html.txt
Posted Apr 17, 2002
Authored by David Reign

Oracle databases contain a security hole which allows HTML and SQL injection.

tags | sql injection
MD5 | aa6fb3dcb6a1ee96d753a7089c6671ea
centurion.tar.gz
Posted Apr 17, 2002
Authored by LByte | Site lbyte.void.ru

Centurion checks any cgi script on remote server for vulnerabilities like directory traversal bugs, null byte, and incorrect filtering of meta characters. Tested on CGI, PL, PHP, and SHTML.

tags | tool, remote, cgi, scanner, php, vulnerability
systems | unix
MD5 | db9b9c51c5dbe5a50845950f12b1ae10
w00w00.office.txt
Posted Apr 17, 2002
Authored by w00w00, Matt Conover | Site w00w00.org

Multiple Microsoft Products for Mac OS contain serious remote vulnerabilities. Affected software includes IE 5.1, Outlook Express 5.0.2, Microsoft Entourage, Powerpoint 98, 2001, and X, Excel 2001 and X, and Microsoft Word 2001. The problem lies in the handling of a lengthy subdirectory in the file:// directive.

tags | remote, vulnerability
MD5 | 60cb2fd20b289b60302f272973604849
linspy2beta2.tgz
Posted Apr 17, 2002
Authored by Xian

Linspy is keystroke logger for linux kernels v2.2 and 2.4 which records TTY activity. Based on Halflife's article from Phrack 50.

tags | tool, kernel, rootkit
systems | linux, unix
MD5 | 0099f4b8f9f3268dbea495ee6168b78a
webalizer.dns.txt
Posted Apr 17, 2002
Authored by Spybreak

Webalizer v2.01-09 contains a remote buffer overflow if DNS lookups are turned on. A compromised DNS server can be used to return hostnames that are too long, executing code as root.

tags | remote, overflow, root
MD5 | 2714651d669ae874a0f5888b5e089346
Page 1 of 1
Back1Next

File Archive:

April 2019

  • Su
  • Mo
  • Tu
  • We
  • Th
  • Fr
  • Sa
  • 1
    Apr 1st
    21 Files
  • 2
    Apr 2nd
    35 Files
  • 3
    Apr 3rd
    21 Files
  • 4
    Apr 4th
    16 Files
  • 5
    Apr 5th
    15 Files
  • 6
    Apr 6th
    1 Files
  • 7
    Apr 7th
    2 Files
  • 8
    Apr 8th
    23 Files
  • 9
    Apr 9th
    19 Files
  • 10
    Apr 10th
    15 Files
  • 11
    Apr 11th
    14 Files
  • 12
    Apr 12th
    11 Files
  • 13
    Apr 13th
    2 Files
  • 14
    Apr 14th
    5 Files
  • 15
    Apr 15th
    14 Files
  • 16
    Apr 16th
    19 Files
  • 17
    Apr 17th
    19 Files
  • 18
    Apr 18th
    8 Files
  • 19
    Apr 19th
    4 Files
  • 20
    Apr 20th
    5 Files
  • 21
    Apr 21st
    1 Files
  • 22
    Apr 22nd
    10 Files
  • 23
    Apr 23rd
    22 Files
  • 24
    Apr 24th
    7 Files
  • 25
    Apr 25th
    0 Files
  • 26
    Apr 26th
    0 Files
  • 27
    Apr 27th
    0 Files
  • 28
    Apr 28th
    0 Files
  • 29
    Apr 29th
    0 Files
  • 30
    Apr 30th
    0 Files

Top Authors In Last 30 Days

File Tags

Systems

packet storm

© 2019 Packet Storm. All rights reserved.

Services
Security Services
Hosting By
Rokasec
close