Previous Security Advisories

CERT Issues MS SQL Server Advisory

July 30, 2002

CERT has issued advisory CA-2002-22 to cover the multiple vulnerabilities that have been recently discovered in Microsoft SQL Server 2000, including those we reported on last week. MS has issued eight (!) bulletins for over twelve security holes in the server since December 2001. This advisory goes over the most serious vulnerabilities, which can yield […]

MS Issues Four Security Patches, Critical SQL Flaw

July 25, 2002

Microsoft has released four security bulletins today: one “critical” SQL Server 2000 update and three others of “moderate” severity. MS02-036 – An authentication hole in Metadirectory Services 2.2 which could allow an unprivileged user to change MMS data or configuration. MS02-037 – Buffer overflow affecting Exchange Server 5.5, in the Internet Mail Connector’s handling of […]

Remote Overflow Found In PHP Parser

July 22, 2002

A serious vulnerability has been discovered in versions 4.2.0 and 4.2.1 of PHP, a popular scripting language that is used to power millions of web sites. The parser which handles the headers of HTTP POST requests has a buffer overflow which can be exploited remotely or locally for priviliged system access, even through a firewall. […]

« Older Entries   Newer Entries »