If VDO Live Player is installed on the system and the browser is configured default, .vdo file is downloaded and executed without confirmation. Many ftp daemons are vulnerable to a DoS when muiltiple data connections are opened. Perl exploit included. Mobileunit Security Advisory 001 - Privacy hole in Go Express Search. Disney's Go Express Search operates an http server at port 1234 without authentication.
Remote users can submit search queries, and view queries and personal links left by other users.
It's possible to access the configuration interface, which can reveal the e-mail address of the user who registered it. Configuration settings can be changed remotely to, for instance, add, remove or alter personal links. Two remote issues were found with the Novell Groupwise web server. Includes test exploit for IE5 5.00.2614.3500 on Win98. Affected are Whois Internic Lookup version 1.0, CC Whois Version 1.0, and Matt's Whois Version 1.