Section: .. / 0610-advisories /
| /// File Name: |
sa22575.txt |
Description:
|
Secunia Security Advisory - A vulnerability has been reported in Sun Java System Messaging Server, which can be exploited by malicious people to conduct script insertion attacks.
| | Homepage: | http://secunia.com/advisories/22575/ | | File Size: | 2811 | | Last Modified: | Oct 25 15:47:27 2006 |
| MD5 Checksum: | e3080999aabee0ebecfe3889c722d54e |
|
| /// File Name: |
sa22577.txt |
Description:
|
Secunia Security Advisory - GregStar has reported a vulnerability in OTSCMS, which can be exploited by malicious people to compromise a vulnerable system.
| | Homepage: | http://secunia.com/advisories/22577/ | | File Size: | 2207 | | Last Modified: | Oct 25 15:47:27 2006 |
| MD5 Checksum: | 002b41c662b93e1c99dfa616394f592a |
|
| /// File Name: |
sa22579.txt |
Description:
|
Secunia Security Advisory - Mandriva has issued an update for Qt. This fixes a vulnerability, which can be exploited by malicious people to cause a DoS (Denial of Service) and potentially compromise a vulnerable system.
| | Homepage: | http://secunia.com/advisories/22579/ | | File Size: | 12278 | | Last Modified: | Oct 25 15:47:27 2006 |
| MD5 Checksum: | 5e86500f3ab9e62605f5f18e20185941 |
|
| /// File Name: |
sa22580.txt |
Description:
|
Secunia Security Advisory - Two vulnerabilities with an unknown impact have been reported in Winamp.
| | Homepage: | http://secunia.com/advisories/22580/ | | File Size: | 2180 | | Last Modified: | Oct 25 15:47:27 2006 |
| MD5 Checksum: | 09884c5c6fe4357bb3238f5ec2b12d4c |
|
| /// File Name: |
sa22583.txt |
Description:
|
Secunia Security Advisory - Some vulnerabilities have been reported in GNU Screen, which can be exploited by malicious people to cause a DoS (Denial of Service) or potentially compromise a vulnerable system.
| | Homepage: | http://secunia.com/advisories/22583/ | | File Size: | 2273 | | Last Modified: | Oct 25 15:47:27 2006 |
| MD5 Checksum: | fcef8216b4db3b6a73f7bd4007d03987 |
|
| /// File Name: |
sa22584.txt |
Description:
|
Secunia Security Advisory - Ubuntu has issued an update for postgresql. This fixes some vulnerabilities, which can be exploited by malicious users to cause a DoS (Denial of Service).
| | Homepage: | http://secunia.com/advisories/22584/ | | File Size: | 10867 | | Last Modified: | Oct 25 15:47:27 2006 |
| MD5 Checksum: | a9a8a12efcda4e1331e638072207ca96 |
|
| /// File Name: |
sa22499.txt |
Description:
|
Secunia Security Advisory - Some vulnerabilities have been discovered in Fully Modded phpBB, which can be exploited by malicious people to compromise a vulnerable system.
| | Homepage: | http://secunia.com/advisories/22499/ | | File Size: | 2308 | | Last Modified: | Oct 24 19:01:42 2006 |
| MD5 Checksum: | e872a6f2c76931919dcd59d3326b2915 |
|
| /// File Name: |
sa22544.txt |
Description:
|
Secunia Security Advisory - Gentoo has issued an update for openssl. This fixes some vulnerabilities, which can be exploited by malicious people to cause a DoS (Denial of Service) and compromise a vulnerable system.
| | Homepage: | http://secunia.com/advisories/22544/ | | File Size: | 2081 | | Last Modified: | Oct 24 19:01:42 2006 |
| MD5 Checksum: | 1499cd58754068437689adfbc0a1eb35 |
|
| /// File Name: |
sa22556.txt |
Description:
|
Secunia Security Advisory - Debian has issued an update for webmin. This fixes some vulnerabilities, which can be exploited by malicious people to disclose potentially sensitive information, conduct cross-site scripting attacks, cause a DoS (Denial of Service), and potentially compromise a vulnerable system.
| | Homepage: | http://secunia.com/advisories/22556/ | | File Size: | 3193 | | Last Modified: | Oct 24 19:01:32 2006 |
| MD5 Checksum: | a4f40f2c3ab181c05c17bd8f60dd2a33 |
|
| /// File Name: |
sa22426.txt |
Description:
|
Secunia Security Advisory - FREAK_PR has discovered a vulnerability in RMSOFT Gallery System, which can be exploited by malicious people to compromise a vulnerable system.
| | Homepage: | http://secunia.com/advisories/22426/ | | File Size: | 2215 | | Last Modified: | Oct 24 17:24:21 2006 |
| MD5 Checksum: | b1722061f6ed6ce5e444ad6674c9a942 |
|
| /// File Name: |
sa22508.txt |
Description:
|
Secunia Security Advisory - Kw3[R]Ln has reported a vulnerability in EPNadmin, which can be exploited by malicious people to compromise a vulnerable system.
| | Homepage: | http://secunia.com/advisories/22508/ | | File Size: | 2136 | | Last Modified: | Oct 24 17:24:21 2006 |
| MD5 Checksum: | ab59ce97a8774f9edab3075678272ffb |
|
| /// File Name: |
sa22535.txt |
Description:
|
Secunia Security Advisory - Moran Zavdi has reported a vulnerability in Simpnews, which can be exploited by malicious people to conduct cross-site scripting attacks.
| | Homepage: | http://secunia.com/advisories/22535/ | | File Size: | 2191 | | Last Modified: | Oct 24 17:24:21 2006 |
| MD5 Checksum: | fa6eb5602e5d49c301226f52fbcec676 |
|
| /// File Name: |
sa22551.txt |
Description:
|
Secunia Security Advisory - Gentoo has issued an update for clamav. This fixes some vulnerabilities, which can be exploited by malicious people to cause a DoS (Denial of Service) and potentially compromise a vulnerable system.
| | Homepage: | http://secunia.com/advisories/22551/ | | File Size: | 2024 | | Last Modified: | Oct 24 17:24:21 2006 |
| MD5 Checksum: | 0f5d178e368c51eb46f013388c381fe7 |
|
| /// File Name: |
NETRAGARD-20060810-2.txt |
Description:
|
Netragard, L.L.C Advisory NETRAGARD-20060810 (UPDATE): dtmail suffers from a buffer overflow vulnerability which could result in the execution of arbitrary code. More specifically this vulnerability is triggered when using -a flag:
| | Homepage: | http://www.netragard.com | | Related File: | NETRAGARD-20060810.txt | | File Size: | 6190 | | Last Modified: | Oct 24 17:07:46 2006 |
| MD5 Checksum: | 8c5842d5b184f143c8ed16676cb744fd |
|
| /// File Name: |
OneOrZero-adv.txt |
Description:
|
OneOrZero Helpdesk v1.6.0 - v1.6.4 has an insecure password reset function that allows anyone to guess what the password is set to provided they know what the time of the server is. POC included.
| | Author: | Mike Klingler | | Homepage: | http://www.whitedust.net/speaks/3043/ | | File Size: | 2106 | | Last Modified: | Oct 24 17:03:26 2006 |
| MD5 Checksum: | 6378621e2f117220b1b9266a679387cd |
|
| /// File Name: |
SSRT061223-1.txt |
Description:
|
HPSBUX02162 SSRT061223 rev.1 - HP-UX Running dtmail, Local Execution of Arbitrary Code - A potential security vulnerability has been identified with HP-UX running dtmail. The vulnerability could be exploited by a local, authorized user to execute arbitrary code as a member of the 'mail' group.
| | Homepage: | http://www.hp.com | | File Size: | 6317 | | Last Modified: | Oct 24 16:33:07 2006 |
| MD5 Checksum: | 2362ed6c11722c82c5ebb9dfce459203 |
|
| /// File Name: |
kapda-60.txt |
Description:
|
KAPDA Advisory #60 - Mambo V4.6.x vulnerabilities including cross site scripting and html/sql injection.
| | Author: | alireza hassani | | Homepage: | http://www.kapda.ir/ | | File Size: | 3130 | | Last Modified: | Oct 24 16:31:00 2006 |
| MD5 Checksum: | 2cf5aeef9363f39c9017cbbf2546aac0 |
|
| /// File Name: |
OpenPKG-SA-2006.025.txt |
Description:
|
OpenPKG Security Advisory: OpenPKG-SA-2006.025 - According to vendor security advisories, multiple vulnerabilities exist in the Drupal content management platform.
| | Homepage: | http://www.openpkg.org/security/ | | File Size: | 3020 | | Last Modified: | Oct 24 16:26:21 2006 |
| MD5 Checksum: | 0b904a968f65529d6d5ba66acb185237 |
|
| /// File Name: |
CAID-34693-34694.txt |
Description:
|
[CAID 34693, 34694]: CA BrightStor ARCserve Backup Multiple Buffer Overflow Vulnerabilities (UPDATED)
| | Author: | Williams | | Homepage: | http://www3.ca.com/ | | File Size: | 5199 | | Last Modified: | Oct 24 16:25:26 2006 |
| MD5 Checksum: | 832aef7ff74fdb00a8fed686f67404d8 |
|
| /// File Name: |
10.19.06.txt |
Description:
|
iDefense Security Advisory 10.19.06: Local exploitation of a design error vulnerability in Kaspersky Labs Anti-Virus allows an attacker to execute arbitrary code with kernel privileges.
| | Homepage: | http://www.idefense.com/intelligence/vulnerabilities/ | | File Size: | 3189 | | Last Modified: | Oct 24 15:59:15 2006 |
| MD5 Checksum: | c889155f72b7c59582df209da98c5d3a |
|
| /// File Name: |
MDKSA-2006-186.txt |
Description:
|
Mandriva Linux Security Advisory MDKSA-2006-186: A vulnerability was discovered in the way that Qt handled pixmap images and the KDE khtml library used Qt in such a way that untrusted parameters could be passed to Qt, resulting in an integer overflow. This flaw could be exploited by a remote attacker in a malicious website that, when viewed by an individual using Konqueror, would cause Konqueror to crash or possibly execute arbitrary code with the privileges of the user.
| | Homepage: | http://www.mandriva.com/security/advisories | | File Size: | 5351 | | Last Modified: | Oct 24 15:57:02 2006 |
| MD5 Checksum: | 3d070a2b1a623bfd5ea8ca5c69b4b18e |
|
| /// File Name: |
SMF1.1RC2.txt |
Description:
|
Simple Machines Forum SMF versions 1.1 RC2 and prior suffer from cross site scripting in index.php.
| | Author: | b0rizQ | | File Size: | 303 | | Last Modified: | Oct 24 15:23:23 2006 |
| MD5 Checksum: | 0c5d05a5666296de4293147eb7357f0d |
|
| /// File Name: |
Serendipity-1.0.1.txt |
Description:
|
Hardened-PHP Project Security Advisory - Serendipity Weblog XSS Vulnerabilities: Serendipity failed to correctly sanitize user input on the media manager administration page. The content of GET variables were written into JavaScript strings. By using standard string evasion techniques it was possible to execute arbitrary JavaScript.
| | Homepage: | http://www.hardened-php.net | | File Size: | 3166 | | Last Modified: | Oct 24 15:18:35 2006 |
| MD5 Checksum: | 34ceb3faea233b81b8b60e998f4d64bb |
|
| /// File Name: |
OpenPKG-SA-2006.024.txt |
Description:
|
OpenPKG Security Advisory - OpenPKG-SA-2006.024: According to a vendor security advisory [1], a vulnerability exists in the Asterisk Private Branch Exchange (PBX) software [2]. This vulnerability would enable an attacker to remotely execute code as the user Asterisk is running under. It is not required that the "skinny.conf" file contains any valid phone entries, only that the "chan_skinny" module is loaded and operational (but which is not the default in OpenPKG's default Asterisk configuration).
| | Homepage: | http://www.openpkg.org/security/ | | File Size: | 2198 | | Last Modified: | Oct 24 15:16:15 2006 |
| MD5 Checksum: | 103361ca1408f0c40af4a6e810061a21 |
|
| /// File Name: |
dsa-1196-1.txt |
Description:
|
Debian Security Advisory 1196-1: Several remote vulnerabilities have been discovered in the ClamAV malware scan engine, which may lead to the execution of arbitrary code
| | Homepage: | http://www.debian.org/security | | File Size: | 14723 | | Last Modified: | Oct 24 14:57:41 2006 |
| MD5 Checksum: | ed9b1613efa072125727f58e534978b0 |
|
|
|
|
|