Secunia Advisories

March 17, 2004

Below are the Secunia Security Advisories rated with a criticality of Moderate of higher from March 17, 2004.

• Secunia Advisory 11136
  WS_FTP Pro Directory Listing Buffer Overflow Vulnerability
  • Criticality: Moderate
  • Description: A vulnerability has been reported in WS_FTP Pro, which can be exploited by malicious people to cause a DoS (Denial-of-Service) on the application and potentially compromise a user's system.
  • Secunia Advisory: http://secunia.com/advisories/11136/

• Secunia Advisory 11138
  mod_security POST Request Processing Off-By-One Vulnerability
  • Criticality: Moderate
  • Description: Evgeny Legerov has discovered a vulnerability in mod_security, which can be exploited by malicious people to cause a DoS (Denial-of-Service) and potentially compromise a vulnerable system.
  • Secunia Advisory: http://secunia.com/advisories/11138/

• Secunia Advisory 11139
  OpenSSL SSL/TLS Handshake Denial of Service Vulnerabilities
  • Criticality: Moderate
  • Description: Three vulnerabilities have been discovered in OpenSSL, which can be exploited by malicious people to cause a DoS (Denial-of-Service).
  • Secunia Advisory: http://secunia.com/advisories/11139/

• Secunia Advisory 11140
  Mambo Cross Site Scripting and SQL Injection Vulnerabilities
  • Criticality: Moderate
  • Description: JeiAr has discovered some vulnerabilities in Mambo, allowing malicious people to conduct SQL injection and Cross Site Scripting attacks.
  • Secunia Advisory: http://secunia.com/advisories/11140/

• Secunia Advisory 11141
  Fizmez Web Server Connection Denial of Service Vulnerability
  • Criticality: Moderate
  • Description: Donato Ferrante has reported a vulnerability in Fizmez Web Server, which can be exploited by malicious people to cause a DoS (Denial-of-Service).
  • Secunia Advisory: http://secunia.com/advisories/11141/

• Secunia Advisory 11144
  Red Hat update for OpenSSL
  • Criticality: Moderate
  • Description: Red Hat has issued updated packages for OpenSSL. These fix two vulnerabilities, which can be exploited by malicious people to cause a DoS (Denial-of-Service).
  • Secunia Advisory: http://secunia.com/advisories/11144/

• Secunia Advisory 11145
  Cisco Multiple Products OpenSSL Denial of Service Vulnerability
  • Criticality: Moderate
  • Description: Cisco has confirmed a vulnerability in various products, which can be exploited by malicious people to cause a DoS (Denial of Service).
  • Secunia Advisory: http://secunia.com/advisories/11145/