.:[ packet storm ]:.
                               
trust nothing
trust nothing

 Section:  .. / advisories / allaire  /

Page 1 of 2
<< 1 2 >> Files 1 - 25 of 31
Currently sorted by: Last ModifiedSort By: File Name, File Size

 ///  File Name: asb00-22.httpd32.exe
Description:
 Allaire Security Bulletin (ASB00-22) - The Cerberus Security Team has released an advisory about a security issue in the O'Reilly Website Pro web server. The issue could allow a malicious user to execute arbitrary code. This is not a problem with ColdFusion Server itself, but it is an issue that can affect ColdFusion users. Allaire recommends that customers see O'Reilly's support options for further information about this issue.
Homepage:http://www.allaire.com/developer/securityzone/
File Size:5587
Last Modified:Aug 9 01:17:55 2000
MD5 Checksum:87341990c65795889707e7e42e307ce5

 ///  File Name: asb00-21.webfind.exe
Description:
 The Cerberus Security Team has released an advisory about a security issue in the O'Reilly Website Pro web server. The issue could allow a malicious user to execute arbitrary code. This is not a problem with ColdFusion Server itself, but it is an issue that can affect ColdFusion users. Allaire recommends that customers see O'Reilly's support options for further information about this issue.
Homepage:http://www.allaire.com/developer/securityzone/
File Size:5585
Last Modified:Aug 9 01:14:23 2000
MD5 Checksum:b6ce0bc3861873ddbd9ba4912ab79280

 ///  File Name: asb00-20.absentdirectory
Description:
 Allaire Security Bulletin (ASB00-20) - Microsoft has released a patch for two security vulnerabilities in Microsoft Internet Information Server. In sum, the vulnerabilities could allow a malicious user to stop the web server from providing useful service, or to extract certain types of information from it. This is not a problem with ColdFusion Server itself, but it is an issue that can affect ColdFusion users. Allaire recommends that customers follow the instructions posted on the Microsoft Web site to address this issue.
Homepage:http://www.allaire.com/developer/securityzone/
File Size:6598
Last Modified:Aug 9 01:11:51 2000
MD5 Checksum:ec6ac93f06e23862db17da106688fd4c

 ///  File Name: asb00-16.storedperm
Description:
 Allaire Security Bulletin (ASB00-16) - Microsoft has released a patch for a security vulnerability in Microsoft SQL Server 7.0. The vulnerability could allow a malicious user to run a database stored procedure without proper permissions. This is not a problem with ColdFusion Server itself, but it is an issue that can affect ColdFusion users.
Homepage:http://www.allaire.com/developer/securityzone/
File Size:4899
Last Modified:Jul 25 18:41:37 2000
MD5 Checksum:370004784395c107509b43fe1a8e7afa

 ///  File Name: asb00-17.dts.password
Description:
 Allaire Security Bulletin (ASB00-17) - Microsoft has released an updated patch that eliminates a security vulnerability in Microsoft(r) SQL Server 7.0. The vulnerability could allow a malicious user to compromise passwords. The updated patch also addresses a related problem with the Enterprise Manager Server registration dialog. This is not a problem with ColdFusion Server itself, but it is an issue that can affect ColdFusion users.
Homepage:http://www.allaire.com/developer/securityzone
File Size:5621
Last Modified:Jul 25 18:38:00 2000
MD5 Checksum:da0752a106863377b1af0f4910a1f3d5

 ///  File Name: asb00-15.jrun.samplecode
Description:
 Allaire Security Bulletin (ASB00-15) - JRun 2.3.x includes a number of example applications and sample code that expose security issues. JRun 3.0 addresses the viewsource.jsp issue. Allaire strongly recommends that customers follow the best practice of not installing sample code and documentation on production servers, and removing the sample code and documentation files from production servers and restricting access to those directories where they are installed on workstations.
Homepage:http://www.allaire.com/security
File Size:6305
Last Modified:Jul 2 01:59:12 2000
MD5 Checksum:e94d56741d8066033490a1a8293fb3f2

 ///  File Name: asb00-14.coldfusion.admin
Description:
 Allaire Security Bulletin (ASB00-14) - Allaire has recently been notified by Foundstone, Inc. (see Revisions section below for contact information) of a denial of service attack against an unprotected installation of the ColdFusion Administrator. This issue only affects ColdFusion Servers that have not followed Allaire's recommendations in the Allaire Security Best Practices article 10954.
Homepage:http://www.allaire.com/security
File Size:4536
Last Modified:Jul 2 01:57:48 2000
MD5 Checksum:ceccb518e5bf04b3975045321d9b1a9f

 ///  File Name: asb00-13.iis.htr.request
Description:
 Allaire Security Bulletin (ASB00-13) - Microsoft has released a patch for two security vulnerabilities in Microsoft(r) Internet Information Server. The vulnerabilities could, respectively, be used to slow an affected web server's response or to obtain the source code of certain types of files under very restricted conditions. This is not a problem with ColdFusion Server itself, but it is an issue that can affect ColdFusion users. Allaire recommends that customers follow the instructions posted on the Microsoft Web site to address this issue.
Homepage:http://www.allaire.com/security
File Size:5783
Last Modified:Jul 2 01:55:45 2000
MD5 Checksum:193258e275f4bf44ef3af0b0281e1d78

 ///  File Name: asb00-11.iis.imagemap
Description:
 Allaire Security Bulletin (ASB00-11) - A procedure is available to eliminate a security vulnerability affecting several web server products. The vulnerability could potentially allow a malicious web site visitor to perform actions that the system permissions authorize him to perform, but which he previously may have had no means of actually carrying out. This is not a problem with ColdFusion Server itself, but it is an issue that can affect ColdFusion users. Allaire recommends that customers follow the instructions posted on the Microsoft Web site to address this issue.
Homepage:http://www.allaire.com/security
File Size:5715
Last Modified:Jul 2 01:52:13 2000
MD5 Checksum:64ff08b95cf484851db9a133fc6d98ca

 ///  File Name: asb00-08.iis.escaped
Description:
 Allaire Security Bulletin (ASB00-08) - Microsoft has announced a Microsoft has released a patch for a security vulnerability in Microsoft(r) Internet Information Server. The vulnerability could allow a malicious user to slow a web server's response or prevent it from providing service altogether for a period of time. This is not a problem with ColdFusion Server itself, but it is an issue that can affect ColdFusion users. Allaire recommends that customers follow the instructions posted on the Microsoft Web site to address this issue.
Homepage:http://www.allaire.com/security
File Size:4985
Last Modified:Jul 2 01:50:46 2000
MD5 Checksum:e01a1fb4c6360ab15acd88334ccf22d3

 ///  File Name: asb00-09.iis.linkview
Description:
 Allaire Security Bulletin (ASB00-09) - Microsoft has released a procedure to eliminate a security vulnerability that could allow a malicious user to cause a web server to crash, or potentially run arbitrary code on the server, if certain permissions have been changed from their default settings to inappropriate ones. This is not a problem with ColdFusion Server itself, but it is an issue that can affect ColdFusion users. Allaire recommends that customers follow the instructions posted on the Microsoft Web site to address this issue.
Homepage:http://www.allaire.com/security
File Size:5229
Last Modified:Jul 2 01:49:24 2000
MD5 Checksum:7c7ebab5aa6415205df2158a47166718

 ///  File Name: asb00-10.spectra.preview
Description:
 Allaire Security Bulletin (ASB00-10) - The Spectra Container Editor Preview does not properly enforce object security. Allaire has released a patch that addresses this issue.
Homepage:http://www.allaire.com/security
File Size:4901
Last Modified:Jul 2 01:47:53 2000
MD5 Checksum:d68c2c3a601ef9b11f343fd1985abf10

 ///  File Name: asb00-07.hithighlight
Description:
 Allaire Security Bulletin (ASB00-07) - Microsoft has announced a vulnerability for Microsoft IIS which exposes the ability to use a malformed URL to read the source code of ASP, CFML, Perl and other files that are on a server. This is not a problem with ColdFusion Server itself, but it is an issue that can affect ColdFusion users.
Homepage:http://www.allaire.com/security
File Size:4760
Last Modified:Jul 2 01:46:13 2000
MD5 Checksum:ff8f49f8316ff6560f047c56fabef015

 ///  File Name: asb00-06.forums
Description:
 Allaire Security Bulletin (ASB00-06) - Allaire has recently been notified of a security issue in the Allaire Forums 2.0.5 software. This behavior allows users to view and post to secure discussion threads via unsecured conferences and/or through email. This issue affects multiple templates in the Forums software. Updated versions of the affected templates are available from the following link: Download - Allaire Forums 2.0.5 Security Patch.
Homepage:http://www.allaire.com/security
File Size:6400
Last Modified:Jul 2 01:44:38 2000
MD5 Checksum:ade5ff08b372e1c1e6fb121a559ddeb9

 ///  File Name: asb99-11.mdac_rds
Description:
 asb99-11.mdac_rds
File Size:11049
Last Modified:Jul 2 01:43:06 2000
MD5 Checksum:e2179c59cb2a70cdd3142b67c23b99dc

 ///  File Name: asb00-05.cross.site.scripting
Description:
 Allaire Security Bulletin (ASB00-05) - A new type of security attack called "cross-site scripting" has surfaced which is based on common website design flaws and data manipulation that web browsers use when communicating with web servers. While the problem is not a vendor-specific issue, it does affect many web servers and virtually all web browsers currently in use. The problem lies with the design and coding techniques of web sites that serve dynamically generated HTML pages rather than the software the websites themselves run on.
Homepage:http://www.allaire.com/security
File Size:19385
Last Modified:Jul 2 01:42:16 2000
MD5 Checksum:bcc7a83a8dc1242efc0a3a693d749170

 ///  File Name: asb00-04.spectraauth
Description:
 Allaire Security Bulletin (ASB00-04) - There is a security issue with the Spectra 1.0 Remote Access Service invoke.cfm template. Normally users must be authenticated in the webtop security context in order to even attempt to use the Remote Access Service. However, if the user passes a parameter called "bAuthenticated" via the URL, a form field, or a WDDX packet, and the user does not specify a username, a bug allows them to use the Remote Access Service even if they are not in the webtop user directory.
Homepage:http://www.allaire.com/security
File Size:7234
Last Modified:Jul 2 01:40:05 2000
MD5 Checksum:51ea1428a3787f7ea58db829256c3d14

 ///  File Name: asb00-01.spectrawebtop
Description:
 Allaire Security Bulletin (ASB00-01) - The Allaire Spectra 1.0 Webtop allows authenticated users to access sections of the Webtop they may not have been granted access to by typing explicit URLs. This exploit does not give anyone access to the Webtop who does not already have permissions to at least one section of the Webtop.
Homepage:http://www.allaire.com/security
File Size:5343
Last Modified:Jul 2 01:38:35 2000
MD5 Checksum:fb2f039affb384c48bc2d1a8e9b964e2

 ///  File Name: asb00-02.spectrados
Description:
 Allaire Security Bulletin (ASB00-02) - When installing Allaire Spectra 1.0, a web-based Configuration Wizard is used to finalize a number of configuration settings, including a step which indexes data collections on the server. This step of the Configuration Wizard can be accessed via URL and the collections can be resubmitted for indexing. This could be used in a denial of service attack on an Allaire Spectra server.
Homepage:http://www.allaire.com/security
File Size:4518
Last Modified:Jul 2 01:36:57 2000
MD5 Checksum:b301a471c650bc6cb84cd31459e26055

 ///  File Name: asb00-03.cfcache
Description:
 Allaire Security Bulletin (ASB00-03) - Patch Available For Potential Information Exposure by the CFCACHE Tag. The CFCACHE tag is a feature available in ColdFusion 4.x to perform template caching to increase page delivery performance by intelligently compiling and storing the output of CFML pages for faster access. When this tag is utilized in a .CFM page it creates several temporary files, including one that contains absolute filenames with directory path information, URL parameters and timestamps. In ColdFusion 4.0x, these files are stored in the same directory as the .CFM page, usually in a publicly accessible web document directory.
Homepage:http://www.allaire.com/security
File Size:8015
Last Modified:Jul 2 01:35:38 2000
MD5 Checksum:db11e35811a8db95e915bfbd5d9a53ff

 ///  File Name: asb00-12.querystring
Description:
 Allaire Security Bulletin (ASB00-12) - ClusterCATS Appends Stale Query String to URL Line during HTML Redirection. The vulnerability potentially releases confidential query string information on redirect. Affected software versions include ClusterCATS ColdFusion.
Homepage:http://www.allaire.com/security
File Size:4204
Last Modified:Jul 2 01:31:45 2000
MD5 Checksum:a1ab2891a0e9049c67bc337d3d3a1d2d

 ///  File Name: asb99-10.cfml_coldfusion
Description:
 asb99-10.cfml_coldfusion
File Size:8705
Last Modified:Sep 23 06:21:48 1999
MD5 Checksum:439ab46d9304e01b8becc6d6471a0e0e

 ///  File Name: asb99-09.exec_via_ms_access
Description:
 asb99-09.exec_via_ms_access
File Size:8662
Last Modified:Sep 23 06:21:48 1999
MD5 Checksum:a6f52a91dce0b8ac58273c03111a4375

 ///  File Name: asb99-08.cfcrypt_exe
Description:
 asb99-08.cfcrypt_exe
File Size:5303
Last Modified:Sep 23 06:21:48 1999
MD5 Checksum:40b1a130cb183f404d2f055b9b1873cb

 ///  File Name: asb99-07.dos_cf_admin
Description:
 asb99-07.dos_cf_admin
File Size:5210
Last Modified:Sep 23 06:21:48 1999
MD5 Checksum:cf48028a9e75820295a56b53a60fade6
 

 ///  Last 10 Files
  1. :· dsa-1668-1.txt
  2. :· wireshark104-dos.txt
  3. :· ksplice-0.9.4-src.tar.gz
  4. :· MDVSA-2008-235.txt
  5. :· cambridge-sql.txt
  6. :· verlihub-exec.txt
  7. :· DDIVRT-2008-15.txt
  8. :· openssh-cbc-adv.txt
  9. :· joomlathyme-sql.txt
  10. :· BitDefenderDOS.zip
[ Last 20 | Last 50 | Last 100 ]

 ///  Last 10 Advisories
  1. :· dsa-1668-1.txt
  2. :· wireshark104-dos.txt
  3. :· MDVSA-2008-235.txt
  4. :· DDIVRT-2008-15.txt
  5. :· openssh-cbc-adv.txt
  6. :· ZDI-08-076.txt
  7. :· ZDI-08-075.txt
  8. :· MDVSA-2008-233.txt
  9. :· SSRT080059.txt
  10. :· MDVSA-2008-220-1.txt
[ Last 20 | Last 50 | Last 100 ]

 ///  Last 10 Exploits
  1. :· cambridge-sql.txt
  2. :· verlihub-exec.txt
  3. :· joomlathyme-sql.txt
  4. :· BitDefenderDOS.zip
  5. :· kvirc-exec.txt
  6. :· vcalendar-disclose.txt
  7. :· toursmanager-blindsql.txt
  8. :· phprsgal-sql.txt
  9. :· natterchat-sql.txt
  10. :· php526-bypass.txt
[ Last 20 | Last 50 | Last 100 ]

 ///  Last 10 Tools
  1. :· ksplice-0.9.4-src.tar.gz
  2. :· fwknop-1.9.9.tar.gz
  3. :· pysumpas-0.2.0.tar.gz
  4. :· framework-3.2.tar.gz
  5. :· tor.uclibc.i686.20081115.iso
  6. :· RFIDIOt-Windows-0.1u.zip
  7. :· RFIDIOt-0.1u.tgz
  8. :· dps-v1.5.tar.gz
  9. :· smbrelay3.zip
  10. :· mptrey.tar.gz
[ Last 20 | Last 50 | Last 100 ]

 ///  Last 10 Misc
  1. :· java2-malware.pdf
  2. :· return-to-libc-linux.txt
  3. :· stack-overflow-linux.txt
  4. :· smallest_setuid_execve_sc.c
  5. :· sudoers-shellcode.txt
  6. :· strongswan-4.2.9.tar.gz
  7. :· hodetector-shellcode.txt
  8. :· rtm-essential5.pdf
  9. :· unixasm-1.3.0.tar.gz
  10. :· bnd-networks.pdf
[ Last 20 | Last 50 | Last 100 ]


 .:. TopPrivacy Statement | Copyright Notice