Section: .. / 0602-advisories /
| /// File Name: |
sa18736.txt |
Description:
|
Secunia Security Advisory - Mandriva has issued an update for openssh. This fixes a weakness, which potentially can be exploited by malicious, local users to perform certain actions with escalated privileges.
| | Homepage: | http://secunia.com/advisories/18736/ | | File Size: | 2671 | | Last Modified: | Feb 7 19:32:22 2006 |
| MD5 Checksum: | 84728a1aebafa849edde3b1ec0934141 |
|
| /// File Name: |
sa18735.txt |
Description:
|
Secunia Security Advisory - A vulnerability has been reported in Gallery, which potentially can be exploited by malicious users to compromise a vulnerable system.
| | Homepage: | http://secunia.com/advisories/18735/ | | File Size: | 2037 | | Last Modified: | Feb 7 19:32:22 2006 |
| MD5 Checksum: | e096a2fe76cf6fc30eff8330db69da8e |
|
| /// File Name: |
sa18733.txt |
Description:
|
Secunia Security Advisory - A vulnerability has been reported in Heimdal, which can be exploited by malicious, local users to gain escalated privileges.
| | Homepage: | http://secunia.com/advisories/18733/ | | File Size: | 1737 | | Last Modified: | Feb 7 19:32:22 2006 |
| MD5 Checksum: | 78c03567cadb1b0ff1ea747ff11f8975 |
|
| /// File Name: |
sa18732.txt |
Description:
|
Secunia Security Advisory - Mario Oyorzabal Salgado has reported some security issues and vulnerabilities in PHP Link Directory (phpLD2), which can be exploited by malicious people to disclose system information, execute arbitrary SQL code, conduct SQL injection attacks, cause a DoS (Denial of Service), and potentially compromise a vulnerable system.
| | Homepage: | http://secunia.com/advisories/18732/ | | File Size: | 2270 | | Last Modified: | Feb 7 19:32:22 2006 |
| MD5 Checksum: | 11090dcce2aeda11e76033ae83c6006b |
|
| /// File Name: |
sa18731.txt |
Description:
|
Secunia Security Advisory - Soroush Dalili has discovered two vulnerabilities in Hosting Controller, which can be exploited by malicious users to conduct SQL injection attacks.
| | Homepage: | http://secunia.com/advisories/18731/ | | File Size: | 1950 | | Last Modified: | Feb 7 19:32:22 2006 |
| MD5 Checksum: | 48d72217bdc6b18110c3a2448429174b |
|
| /// File Name: |
sa18730.txt |
Description:
|
Secunia Security Advisory - B3g0k has reported two vulnerabilities in CyberShop Ultimate Mc, which can be exploited by malicious people to conduct cross-site scripting attacks.
| | Homepage: | http://secunia.com/advisories/18730/ | | File Size: | 1716 | | Last Modified: | Feb 7 19:32:22 2006 |
| MD5 Checksum: | c47aa7baef759a70aab65b26f5a01bc6 |
|
| /// File Name: |
sa18726.txt |
Description:
|
Secunia Security Advisory - Hamid Ebadi has discovered a vulnerability in PluggedOut Blog, which can be exploited by malicious people to conduct cross-site scripting and SQL injection attacks.
| | Homepage: | http://secunia.com/advisories/18726/ | | File Size: | 2259 | | Last Modified: | Feb 7 19:32:22 2006 |
| MD5 Checksum: | 97fe29993f5368f6eac6127c4609225a |
|
| /// File Name: |
sa18725.txt |
Description:
|
Secunia Security Advisory - Timothy D. Morgan has reported a vulnerability in IBM Tivoli Access Manager for e-business, which can be exploited by malicious users to disclose potentially sensitive information.
| | Homepage: | http://secunia.com/advisories/18725/ | | File Size: | 2403 | | Last Modified: | Feb 7 19:32:22 2006 |
| MD5 Checksum: | efc52b0fc81ea52a64dd5b91a7fa778d |
|
| /// File Name: |
sa18722.txt |
Description:
|
Secunia Security Advisory - rgod has discovered a vulnerability in Loudblog, which can be exploited by malicious people to compromise a vulnerable system.
| | Homepage: | http://secunia.com/advisories/18722/ | | File Size: | 1903 | | Last Modified: | Feb 7 19:32:22 2006 |
| MD5 Checksum: | b8bffb64f481abc66b8ca779e0a800a4 |
|
| /// File Name: |
sa18720.txt |
Description:
|
Secunia Security Advisory - Secunia Research has discovered a vulnerability in AgileBill, which can be exploited by malicious people to execute arbitrary SQL code and potentially compromise a vulnerable system.
| | Homepage: | http://secunia.com/advisories/18720/ | | File Size: | 1671 | | Last Modified: | Feb 7 19:32:22 2006 |
| MD5 Checksum: | 1f20a0a0fad32bb9affd99eb7c304b0c |
|
| /// File Name: |
sa18718.txt |
Description:
|
Secunia Security Advisory - AFI Security Research has discovered two vulnerabilities in mplayer, which can be exploited by malicious people to cause a DoS (Denial of Service) and potentially compromise a user's system.
| | Homepage: | http://secunia.com/advisories/18718/ | | File Size: | 1959 | | Last Modified: | Feb 7 19:32:22 2006 |
| MD5 Checksum: | c63f71f3cfc1eea20e6c879ac3a59340 |
|
| /// File Name: |
sa18716.txt |
Description:
|
Secunia Security Advisory - A vulnerability has been reported in MailEnable Enterprise Edition, which potentially can be exploited by malicious people to cause a DoS (Denial of Service).
| | Homepage: | http://secunia.com/advisories/18716/ | | File Size: | 1712 | | Last Modified: | Feb 7 19:32:22 2006 |
| MD5 Checksum: | 5d1ec3db31ed17c919c961b40d315869 |
|
| /// File Name: |
sa18701.txt |
Description:
|
Secunia Security Advisory - Evgeny Legerov has reported a vulnerability in CommuniGate Pro Server, which can be exploited by malicious people to cause a DoS (Denial of Service).
| | Homepage: | http://secunia.com/advisories/18701/ | | File Size: | 1921 | | Last Modified: | Feb 7 19:32:22 2006 |
| MD5 Checksum: | 76fecafce38c69499a2ec527626add32 |
|
| /// File Name: |
sa18695.txt |
Description:
|
Secunia Security Advisory - Some vulnerabilities have been reported in cPanel, which can be exploited by malicious people to conduct cross-site scripting attacks.
| | Homepage: | http://secunia.com/advisories/18695/ | | File Size: | 2532 | | Last Modified: | Feb 7 19:32:22 2006 |
| MD5 Checksum: | 6c15e5ecd3147a92a40d27c1233f8bb3 |
|
| /// File Name: |
sa18693.txt |
Description:
|
Secunia Security Advisory - Maksymilian Arciemowicz has discovered a vulnerability in phpBB, which can be exploited by malicious people to disclose sensitive information.
| | Homepage: | http://secunia.com/advisories/18693/ | | File Size: | 2381 | | Last Modified: | Feb 7 19:32:22 2006 |
| MD5 Checksum: | 1418640f99a34e133cae897e342f266d |
|
| /// File Name: |
glsa-200602-01.txt |
Description:
|
Gentoo Linux Security Advisory GLSA 200602-01 - The GStreamer FFmpeg plugin contains derived code from the FFmpeg library, which is vulnerable to a heap overflow in the avcodec_default_get_buffer() function discovered by Simon Kilvington (see GLSA 200601-06). Versions less than 0.8.7-r1 are affected.
| | Homepage: | http://security.gentoo.org | | File Size: | 3411 | | Last Modified: | Feb 6 04:50:57 2006 |
| MD5 Checksum: | a7ac21905c6f1ce1ce83449543902752 |
|
| /// File Name: |
tam-file-retrieval.txt |
Description:
|
On December 1st, while conducting a penetration test of a TAM enabled web application, VSR identified a vulnerability in Tivoli Web Server Plug-in which is a component of Tivoli Access Manager (TAM). This flaw allows an authenticated attacker to retrieve files (which reside outside of the web root) from the web server on which the plug-in resides. It is possible to retrieve any file or list any directory which is readable by the web server software.
| | Author: | Virtual Security Research | | Homepage: | http://www.vsecurity.com/ | | File Size: | 5060 | | Last Modified: | Feb 6 04:40:54 2006 |
| MD5 Checksum: | 64cb1200a76e27f71e0e3896bcbaebac |
|
| /// File Name: |
IronMail-5.0.1.txt |
Description:
|
If IronMail-5.0.1 is configured with "Denial of Service Protection" enabled, then a remote user can generate a TCP SYN flood, sending malformed packets via multiple connections to cause the server to become busy resulting in DOS.
| | Author: | Mark Ludwik | | File Size: | 1423 | | Last Modified: | Feb 6 04:21:26 2006 |
| MD5 Checksum: | 93a9a253744f64f74bef1004bd97e517 |
|
| /// File Name: |
dsa-964-1.txt |
Description:
|
Debian Security Advisory DSA 964-1 - A problem has been discovered in gnocatan, the computer version of the settlers of Catan boardgame, that can lead the server an other clients to exit via an assert, and hence does not permit the execution of arbitrary code. The game has been renamed into Pioneers after the release of Debian sarge.
| | Author: | Martin Schulze | | Homepage: | http://www.debian.org/security/ | | File Size: | 18902 | | Last Modified: | Feb 6 03:53:06 2006 |
| MD5 Checksum: | 27c936acdb8c15a4ded38fc80c442a13 |
|
|
|
|
|