Network Security News – Friday, September 30, 2005 Events
IPB Riverdark RSS Syndicator rss.php Multiple Variable XSS
Riverdark RSS Syndicator contains a flaw that allows a remote cross site scripting attack. This flaw exists because the application does not validate the "forum" or "topic" parameters upon submission to the "rss.php" script. This could allow a user to create a specially crafted URL that would execute arbitrary code in a user's browser within the trust relationship between the browser and the server, leading to a loss of integrity.. Read more at osvdb.org/19664
Cisco IOS Authentication Proxy for FTP/Telnet Remote Overflow
A remote overflow exists in Cisco IOS. The Firewall Authentication Proxy for FTP and/or Telnet Sessions fails to perform proper bounds checking resulting in a buffer overflow. With specially crafted user authentication credentials, a remote attacker can cause the device to reload resulting in a loss of availability.. Read more at osvdb.org/19227
FL Studio FLEngine.dll FLP File Handling Overflow
A remote overflow exists in FL Studio. The 'FLEngine.dll' library fails to perform proper bounds checking resulting in a buffer overflow. With a specially crafted '.flp' file which contains an overly long path name to a '.mid' or '.wav' file, a remote attacker can cause arbitrary code execution resulting in a loss of integrity.. Read more at osvdb.org/19697
vxFtpSrv USER Command Remote Overflow
A remote overflow exists in vxFtpSrv. The 'USER' command fails to perform proper bounds checking resulting in a buffer overflow. With a specially crafted request containing an overly long user name, a remote attacker can cause arbitrary code execution resulting in a loss of integrity.. Read more at osvdb.org/19466
vxTftpSrv Long Filename Remote Overflow
A remote overflow exists in vxTftpSrv. The application fails to perform proper bounds checking resulting in a buffer overflow. With a specially crafted request containing an overly long filename, a remote attacker can cause arbitrary code execution resulting in a loss of integrity.. Read more at osvdb.org/19464
vxWeb GET Request Overflow Remote DoS
A remote overflow exists in vxWeb. The 'coredll.dll' library fails to perform proper bounds checking resulting in a buffer overflow. With a specially crafted HTTP GET request, a remote attacker can cause the application to crash resulting in a loss of availability.. Read more at osvdb.org/19465