Section: .. / 0611-advisories /
| /// File Name: |
11.26.06-1.txt |
Description:
|
iDefense Security Advisory 11.26.06 - Remote exploitation of a format string vulnerability in GNU Radius could allow an attacker to execute code in the context of the running daemon. iDefense has confirmed that this vulnerability is present in version 1.3 and 1.2 of GNU Radius. It is likely that all prior versions are vulnerable.
| | Homepage: | http://www.idefense.com/ | | File Size: | 3234 | | Related CVE(s): | CVE-2006-4181 | | Last Modified: | Nov 29 10:42:21 2006 |
| MD5 Checksum: | 0a4e7af2061bfdfff257e42a9f10ca48 |
|
| /// File Name: |
sa21763.txt |
Description:
|
Secunia Security Advisory - Secunia Research has discovered two vulnerabilities and a weakness in Panda ActiveScan, which can be exploited by malicious people to disclose system information, cause a DoS (Denial of Service), and compromise a user's system.
| | Homepage: | http://secunia.com/advisories/21763/ | | File Size: | 3229 | | Last Modified: | Nov 16 10:09:27 2006 |
| MD5 Checksum: | c04a0b94d5c0ac2eeef000b328248afe |
|
| /// File Name: |
sa22883.txt |
Description:
|
Secunia Security Advisory - A vulnerability has been reported in Microsoft Windows, which can be exploited by malicious people to compromise a vulnerable system.
| | Homepage: | http://secunia.com/advisories/22883/ | | File Size: | 3220 | | Last Modified: | Nov 15 22:19:38 2006 |
| MD5 Checksum: | 194151aea0e4125c86b2fb793ea57361 |
|
| /// File Name: |
sa22779.txt |
Description:
|
Secunia Security Advisory - Avaya has acknowledged some vulnerabilities in various Avaya products, which can be exploited by malicious people to cause a DoS (Denial of Service) or potentially compromise a vulnerable system.
| | Homepage: | http://secunia.com/advisories/22779/ | | File Size: | 3207 | | Last Modified: | Nov 10 11:02:24 2006 |
| MD5 Checksum: | 19a1e7294e0dd475331f9b947ae034bd |
|
| /// File Name: |
sa23033.txt |
Description:
|
Secunia Security Advisory - Mandriva has issued an update for xorg-x11. This fixes some vulnerabilities, which can be exploited by malicious, local users to gain escalated privileges.
| | Homepage: | http://secunia.com/advisories/23033/ | | File Size: | 3207 | | Last Modified: | Nov 20 11:05:00 2006 |
| MD5 Checksum: | 27888481ac4734349030ec2cddb3b093 |
|
| /// File Name: |
sa22973.txt |
Description:
|
Secunia Security Advisory - Some vulnerabilities have been discovered in PHP Upload Tool, which can be exploited by malicious users to gain system access or by malicious people to expose sensitive information.
| | Homepage: | http://secunia.com/advisories/22973/ | | File Size: | 3195 | | Last Modified: | Nov 17 18:30:18 2006 |
| MD5 Checksum: | d4e88e8b972618be43dcb053ae054bed |
|
| /// File Name: |
sa22880.txt |
Description:
|
Secunia Security Advisory - r0ut3r has discovered some vulnerabilities in TorrentFlux, which can be exploited by malicious people to gain system access or to manipulate data.
| | Homepage: | http://secunia.com/advisories/22880/ | | File Size: | 3187 | | Last Modified: | Nov 16 10:09:27 2006 |
| MD5 Checksum: | de5bf5a4df510c4823d1fbdfe1ad5851 |
|
| /// File Name: |
sa22668.txt |
Description:
|
Secunia Security Advisory - Cesar Cerrudo has reported a vulnerability in Microsoft Windows, which can be exploited by malicious, local users to cause a DoS (Denial of Service) and potentially gain escalated privileges.
| | Homepage: | http://secunia.com/advisories/22668/ | | File Size: | 3185 | | Last Modified: | Nov 6 13:07:49 2006 |
| MD5 Checksum: | f90fc050b6dee4340f3a2568ed0b5358 |
|
| /// File Name: |
11.08.06-3.txt |
Description:
|
iDefense Security Advisory 11.08.06 - Remote exploitation of an input validation error in Citrix Systems Inc.'s Metaframe Presentation Server 4.0 IMA service may allow an attacker to cause a denial of service (DoS) condition. The IMA (Independent Management Architecture) server component Citrix's Presentation Server (previously known as Metaframe) contains an input validation error in the handling of certain packet types. By constructing a specific packet, it is possible to cause the service to reference an unmapped memory address. This causes an unhandled exception, which in turn causes the service to exit, resulting in a DoS condition. This vulnerability has been confirmed to affect Citrix Presentation Server 4.0. Previous versions may also be affected.
| | Author: | Eric Detoisien | | Homepage: | http://www.idefense.com/ | | File Size: | 3178 | | Last Modified: | Nov 13 10:33:17 2006 |
| MD5 Checksum: | d2061b8b90155f67a264ed1015c4a193 |
|
| /// File Name: |
sa22811.txt |
Description:
|
Secunia Security Advisory - Sergio Alvarez has reported some vulnerabilities in AVG Anti-Virus, which can be exploited by malicious people to cause a DoS (Denial of Service) or potentially compromise a vulnerable system.
| | Homepage: | http://secunia.com/advisories/22811/ | | File Size: | 3171 | | Last Modified: | Nov 15 22:19:38 2006 |
| MD5 Checksum: | 5b8e36e475237cbf56484b30b0c3aded |
|
| /// File Name: |
sa22696.txt |
Description:
|
Secunia Security Advisory - Mandriva has issued an update for pam_ldap. This fixes a security issue, which can be exploited by malicious people to bypass certain security restrictions.
| | Homepage: | http://secunia.com/advisories/22696/ | | File Size: | 3133 | | Last Modified: | Nov 8 18:29:38 2006 |
| MD5 Checksum: | 990853302756a2cb8eac206f3e4f3285 |
|
| /// File Name: |
FreeBSD-SA-06-24.libarchive.txt |
Description:
|
FreeBSD Security Advisory - If the end of an archive is reached while attempting to "skip" past a region of an archive, libarchive will enter an infinite loop wherein it repeatedly attempts (and fails) to read further data.
| | Homepage: | http://security.FreeBSD.org/ | | File Size: | 3123 | | Related CVE(s): | CVE-2006-5680 | | Last Modified: | Nov 8 22:09:38 2006 |
| MD5 Checksum: | cb7573a688f37154d2528878c2daed8f |
|
| /// File Name: |
sa23069.txt |
Description:
|
Secunia Security Advisory - Debian has issued an update for proftpd. This fixes a vulnerability, which can be exploited by malicious people to cause a DoS (Denial of Service).
| | Homepage: | http://secunia.com/advisories/23069/ | | File Size: | 3111 | | Last Modified: | Nov 25 23:47:38 2006 |
| MD5 Checksum: | 9126761ad28e341a54a1d75bb368f595 |
|
| /// File Name: |
sa22806.txt |
Description:
|
Secunia Security Advisory - A vulnerability has been reported in MailMarshal SMTP and MailMarshal Exchange, which can be exploited by malicious people to compromise a vulnerable system.
| | Homepage: | http://secunia.com/advisories/22806/ | | File Size: | 3107 | | Last Modified: | Nov 13 10:24:28 2006 |
| MD5 Checksum: | 59bf7a62a6115cdde7b6b4c042441b9e |
|
| /// File Name: |
11.08.06-2.txt |
Description:
|
iDefense Security Advisory 11.08.06 - Local exploitation of an insecure permissions vulnerability in Cisco Systems Secure Desktop product could allow privilege escalation attacks to be conducted by local users. When Cisco Secure Desktop Web VPN product is installed on a NTFS formatted drive, permissions are set on all files to grant full control to all users. Certain files run as a system service and can be easily replaced. iDefense has confirmed this vulnerability exists on Cisco Secure Desktop version 3.1.1.27. Previous versions are suspected to be vulnerable.
| | Author: | Titon of Bastard Labs | | Homepage: | http://www.idefense.com/ | | File Size: | 3103 | | Last Modified: | Nov 8 22:29:25 2006 |
| MD5 Checksum: | d5de12952c5e16bcf7c19a0ad1132ae2 |
|
| /// File Name: |
sa22633.txt |
Description:
|
Secunia Security Advisory - Nortel has acknowledged a vulnerability in OpenSSL included in various Nortel products, which can be exploited by malicious people to cause a DoS (Denial of Service) and potentially compromise a vulnerable system.
| | Homepage: | http://secunia.com/advisories/22633/ | | File Size: | 3102 | | Last Modified: | Nov 2 19:05:01 2006 |
| MD5 Checksum: | c71c2ddd79ac625f9548b31de2e3e310 |
|
| /// File Name: |
sa23018.txt |
Description:
|
Secunia Security Advisory - Mandriva has issued an update for gv. This fixes a vulnerability, which can be exploited by malicious people to compromise a user's system.
| | Homepage: | http://secunia.com/advisories/23018/ | | File Size: | 3099 | | Last Modified: | Nov 20 11:05:00 2006 |
| MD5 Checksum: | 1486ba26ddef0821ff7c951cc668b5d1 |
|
| /// File Name: |
ZDI-06-038.txt |
Description:
|
A vulnerability allows attackers to execute arbitrary code on vulnerable installations of Citrix MetaFrame Presentation Server. Authentication is not required to exploit this vulnerability. The specific flaw exists within the routine IMA_SECURE_DecryptData1() defined in ImaSystem.dll and is reachable through the Independent Management Architecture (IMA) service (ImaSrv.exe) that listens on TCP port 2512 or 2513. The encryption scheme used is reversible and relies on several 32-bit fields indicating the size of the packet and the offsets to the authentication strings. During the decryption of authentication data an attacker can specify invalid sizes that result in an exploitable heap corruption.
| | Homepage: | http://www.zerodayinitiative.com/ | | File Size: | 3098 | | Related CVE(s): | CVE-2006-5821 | | Last Modified: | Nov 13 10:35:03 2006 |
| MD5 Checksum: | f0bd5ceb8b34ccd9f92b4d36d57575d7 |
|
| /// File Name: |
glsa-200611-10.txt |
Description:
|
Gentoo Linux Security Advisory GLSA 200611-10 - random discovered that users can enter serialized objects as strings in their profiles that will be harmful when unserialized. adapter found out that user-edit.php fails to effectively deny non-permitted users access to other user's metadata. Additionally, a directory traversal vulnerability in the wp-db-backup module was discovered. Versions less than 2.0.5 are affected.
| | Homepage: | http://security.gentoo.org | | File Size: | 3096 | | Last Modified: | Nov 17 20:00:33 2006 |
| MD5 Checksum: | dc6f9bde1424a776cc54219414f97106 |
|
| /// File Name: |
sa22763.txt |
Description:
|
Secunia Security Advisory - Red Hat has issued an update for seamonkey. This fixes some vulnerabilities, which can be exploited by malicious people to bypass certain security restrictions, conduct cross-site scripting attacks, and potentially compromise a vulnerable system.
| | Homepage: | http://secunia.com/advisories/22763/ | | File Size: | 3091 | | Last Modified: | Nov 10 11:02:24 2006 |
| MD5 Checksum: | 7a89cf9f3b611692b86c8c8d02728d9a |
|
| /// File Name: |
sa23131.txt |
Description:
|
Secunia Security Advisory - F-Secure has acknowledged a vulnerability in multiple products, which can be exploited by malicious people to cause a DoS (Denial of Service).
| | Homepage: | http://secunia.com/advisories/23131/ | | File Size: | 3090 | | Last Modified: | Nov 29 10:21:40 2006 |
| MD5 Checksum: | b415662d07a6c296aeb8078306bf95c5 |
|
| /// File Name: |
sa22905.txt |
Description:
|
Secunia Security Advisory - Teemu Salmela has discovered a vulnerability in Links, which can be exploited by malicious people to expose sensitive information and manipulate data.
| | Homepage: | http://secunia.com/advisories/22905/ | | File Size: | 3088 | | Last Modified: | Nov 15 22:19:38 2006 |
| MD5 Checksum: | a340321a596f7f454a875ccf8dc4b363 |
|
| /// File Name: |
sa22656.txt |
Description:
|
Secunia Security Advisory - Debian has issued an update for ingo1. This fixes a vulnerability, which can be exploited by malicious users to compromise a vulnerable system.
| | Homepage: | http://secunia.com/advisories/22656/ | | File Size: | 3082 | | Last Modified: | Nov 3 17:27:13 2006 |
| MD5 Checksum: | f0cf16b550d7d3311c0bd36c274cff0f |
|
| /// File Name: |
sa22868.txt |
Description:
|
Secunia Security Advisory - Debian has issued an update for trac. This fixes a vulnerability which can be exploited by malicious people to conduct cross-site request forgery attacks.
| | Homepage: | http://secunia.com/advisories/22868/ | | File Size: | 3074 | | Last Modified: | Nov 15 22:19:38 2006 |
| MD5 Checksum: | b15ba1398714122d2058b6500373381d |
|
| /// File Name: |
sa22957.txt |
Description:
|
Secunia Security Advisory - Mandriva has issued an update for chromium. This fixes some vulnerabilities, which can be exploited by malicious people to cause a DoS (Denial of Service) or potentially compromise a vulnerable system.
| | Homepage: | http://secunia.com/advisories/22957/ | | File Size: | 3074 | | Last Modified: | Nov 17 18:30:18 2006 |
| MD5 Checksum: | a1ef415681be8b3702500d97de4d8421 |
|
|
|
|
|
![.:[ packet storm ]:.](/images/ps-ani.gif)
