Securityvulns news channel http://securityvulns.com/ en securityvulns.com vulnerabilities newsline security, computers, news 3APA3A RSS generator v1.4.2 3APA3A@security.nnov.ru 3APA3A@security.nnov.ru Sat, 4 Jul 2009 00:34:16 GMT 2003-2007 Securityvulns, All rights reserved http://securityvulns.com/images/banners/b88x31e.jpg Securityvulns news channel http://securityvulns.com/ Sourcefire 3D Sensor / Sourcefire Defense Center privilege escalation local http://securityvulns.com/news/Sourcefire/3DCensor.html Web interface privilege escalation. Applications: Sourcefire 3D Sensor 2500, Sourcefire Defense Center 1000 (03.07.2009) 10037.Sourcefire/3DCensor.03.07.2009. perl DoS library http://securityvulns.com/news/perl/zlib.html Crash on processing zlib stream via Compress::Raw::Zlib. Applications: perl 5.10 (03.07.2009) 10035.perl/zlib.03.07.2009. Multiple Axesstel MV 410R wireless router security vulnerabilities remote http://securityvulns.com/news/Axesstel/MV410R.html Crossite scripting, devica access from WAN, default account. Applications: Axesstel MV 410R (03.07.2009) 10032.Axesstel/MV410R.03.07.2009. FreeBSD multiple security vulnerabilities, updated since 07.09.2008 remote http://securityvulns.com/news/FreeBSD/nmount/BO.html mount / nmount syscall implementcation buffer overflow. amd64 CPU registers privilege escalation. DoS через ICMPv6. Applications: FreeBSD 7.0, FreeBSD 6.3, FreeBSD 7.1, FreeBSD 6.4 (03.07.2009) 9267.FreeBSD/nmount/BO.03.07.2009.07.09.2008 Soulseek buffer overflow remote http://securityvulns.com/news/Soulseek/BO.html Buffer overflow on file search functionality. Applications: Soulseek 157 (03.07.2009) 10039.Soulseek/BO.03.07.2009. CamlImages library integer overflows library http://securityvulns.com/news/CamlImages/IO.html Multiple overflows on PNG processing. Applications: CamlImages 2.2 (03.07.2009) 10036.CamlImages/IO.03.07.2009. HP-UX nfs utilities DoS local http://securityvulns.com/news/HP/UX/NFS/DoS.html (03.07.2009) 10038.HP/UX/NFS/DoS.03.07.2009. Daily web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl) remote http://securityvulns.com/news/CGI/2009.07.03.html PHP inclusions, SQL injections, directory traversals, crossite scripting, information leaks, etc. Applications: FCKeditor 2.6, Joomla! 1.5, Nagios 3.1 (03.07.2009) 10034.CGI/2009.07.03.03.07.2009. ModSecurity multiple security vulnerabilities remote http://securityvulns.com/news/Apache/ModSecurity/0907.html Few denial of service conditions. (03.07.2009) 10033.Apache/ModSecurity/0907.03.07.2009. phion airlock Web Application Firewall multiple security vulnerabilities remote http://securityvulns.com/news/Phion/airlock.html DoS, code execution. Applications: airlock 10.41 (03.07.2009) 10031.Phion/airlock.03.07.2009. Artofdefence Hyperguard Web Application Firewall DoS remote http://securityvulns.com/news/Artofdefence/Hyperguard/DoS.html Denial of service via memory exhaustion. Applications: Hyperguard 3.1, Hyperguard 3.0, Hyperguard 2.5 (03.07.2009) 10030.Artofdefence/Hyperguard/DoS.03.07.2009. Daily web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl) remote http://securityvulns.com/news/CGI/2009.07.01.html PHP inclusions, SQL injections, directory traversals, crossite scripting, information leaks, etc. Applications: Empire Cms 5.1, dedecms 5.3 (01.07.2009) 10029.CGI/2009.07.01.01.07.2009. Huawei D100 wireless router multiple security vulnerabilities remote http://securityvulns.com/news/Huawei/D100.html Undocumented unchangable telnet account admin:admin, information leakage. Applications: Huawei D100 (30.06.2009) 10028.Huawei/D100.30.06.2009. Daily web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl) remote http://securityvulns.com/news/CGI/2009.06.30.html PHP inclusions, SQL injections, directory traversals, crossite scripting, information leaks, etc. LinksExchanger - Crossite scripting. phpMyAdmin - Crossite scripting. Applications: sips 0.2, phpMyAdmin 2.11, LinksExchanger 2.0, phpMyAdmin 3.2, phpMyAdmin 3.3 (30.06.2009) 10027.CGI/2009.06.30.30.06.2009.