Computer Security Vulnerabilities

08.02.2010 Detailed

Ipswitch IMail multiple security vulnerabilities   Weak permissions for registry and installation folder. Passwords are stored in readable location with reversible encryption.   Web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)   PHP inclusions, SQL injections, directory traversals, crossite scripting, information leaks, etc.   libmikmod multiple buffer overflows   Multiple overflows on Impulse Tracker and Ultratracker format parsing.

Gnome Nautilus code execution   HTML script is executed in local machine context on HTML prveiew.

06.02.2010 Detailed

7! Samba directory traversal   It's possible to access any directories in the sysmte by symbolic links.

05.02.2010 Detailed

chrony multiple security vulnerabilities   Traffic amplification, resources exhaustion.   Apple Safari DoS   Memory corruption on Javascript processing.

04.02.2010 Detailed

8! Microsoft Internet Explorer information leak   It's possible to retrieve any file from client computer via URLMON and Dynamic OBJECT tag. 6! squid proxy server DoS   Crash on authentication, crash on DNS reply parsing. 6! maildrop privilege escalation

6! jBCrypt library cryptographic vulnerability   non-ASCII characters are converted to '?' befor hash calculation.