Securityvulns news channel http://securityvulns.com/ en securityvulns.com vulnerabilities newsline security, computers, news 3APA3A RSS generator v1.4.2 3APA3A@security.nnov.ru 3APA3A@security.nnov.ru Mon, 8 Feb 2010 23:09:48 GMT 2003-2007 Securityvulns, All rights reserved http://securityvulns.com/images/banners/b88x31e.jpg Securityvulns news channel http://securityvulns.com/ Web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl) remote http://securityvulns.com/news/CGI/2010.02.08.html PHP inclusions, SQL injections, directory traversals, crossite scripting, information leaks, etc. Applications: evalsmsi 2.1, LANDesk Management Gateway 4.2, LANDesk Management Gateway 4.0 (08.02.2010) 10595.CGI/2010.02.08.08.02.2010. Gnome Nautilus code execution local http://securityvulns.com/news/Gnome/Nautils/HTML.html HTML script is executed in local machine context on HTML prveiew. (08.02.2010) 10593.Gnome/Nautils/HTML.08.02.2010. Ipswitch IMail multiple security vulnerabilities local http://securityvulns.com/news/Ipswitch/IMail/1002.html Weak permissions for registry and installation folder. Passwords are stored in readable location with reversible encryption. Applications: IMail 11.01 (08.02.2010) 10596.Ipswitch/IMail/1002.08.02.2010. libmikmod multiple buffer overflows library http://securityvulns.com/news/libmikmod/tracker.html Multiple overflows on Impulse Tracker and Ultratracker format parsing. Applications: libmikmod 3.1 (08.02.2010) 10594.libmikmod/tracker.08.02.2010. Samba directory traversal remote http://securityvulns.com/news/Samba/DT/1002.html It's possible to access any directories in the sysmte by symbolic links. Applications: Samba 3.4 (06.02.2010) 10592.Samba/DT/1002.06.02.2010. Apple Safari DoS client http://securityvulns.com/news/Apple/Safari/1002.html Memory corruption on Javascript processing. Applications: Safari 4.0 (05.02.2010) 10590.Apple/Safari/1002.05.02.2010. chrony multiple security vulnerabilities remote http://securityvulns.com/news/chrony/1002.html Traffic amplification, resources exhaustion. Applications: chrony 1.23 (05.02.2010) 10591.chrony/1002.05.02.2010.