Computer Security Vulnerabilities

24.07.2008 Detailed

Asterisk multiple security vulnerabilities   Traffic amplification, DoS with resouurces exhaustion.   Wireshark sniffer DoS   Application crash on network traffic parsing.   Agnitum Outpost protection bypass   File protection bypass with special characters in filenames.

Daily web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)   PHP inclusions, SQL injections, directory traversals, crossite scripting, information leaks, etc. Nucleus: information leak, SQL injection, crossite scripting, automation protection bypass.

vim multiple security vulnerabilities updated since 14.06.2008   Code execution on file open.

22.07.2008 Detailed

6! EMC Dantz Retrospect backup server and lcient multiple security vulnerabilities   Password recovery from hash for both server and client, memory corruption, DoS.

ZDaemon games server DoS   NULL pointer dereference on malformed network packet.   Daily web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)   PHP inclusions, SQL injections, directory traversals, crossite scripting, information leaks, etc. PostNuke: crossite scripting, automation protection bypass.

MySQL privilege escalation   It's possible to specify file of different database in CREATE TABLE.

SmbClientParser shell characters vulnerability   Shell characters vulnerability with shared folder names.