Avaya Call Management System symbolic links problem
Published:		01.07.2005
Source:		SECUNIA
SecurityVulns ID:		4952
Type:		local
Level:		5/10
Description:		lpadmin symbolic links problem.

Affected:

AVAYA : Avaya IR 1.0

Original document

SECUNIA, [SA15877] Avaya CMS/IR lpadmin Arbitrary File Overwrite Vulnerability (01.07.2005)

Discuss:

Read or add your comments to this news (0 comments)

Windows XP Service Manager race conditions updated since 22.04.2003
Published:		01.07.2005
Source:		BUGTRAQ
SecurityVulns ID:		2758
Type:		local
Level:		5/10
Description:		On some race conditions confidential information may appear in the files open by system services during system shutdown.

Affected:

MICROSOFT : Windows XP

Original document		Matthew Murphy, Microsoft Windows NTFS Information Disclosure (01.07.2005)
		Matthew Murphy, Race in XP SCM Service Shutdown Mechanism (22.04.2003)

Discuss:

Read or add your comments to this news (0 comments)

Hitachi Hibun privilege escalation
Published:		01.07.2005
Source:		SECUNIA
SecurityVulns ID:		4951
Type:		local
Level:		5/10
Description:		PCMCIA hard disks are treated as internal devices without copying limitations. Hibun Viewer allows privileges beyond View permissions.

Affected:

HITACHI : Hibun 7.50

Original document

SECUNIA, [SA15863] Hitachi Multiple Hibun Products Security Restriction Bypass (01.07.2005)

Discuss:

Read or add your comments to this news (0 comments)

PrevX Pro Intrusion Prevension System multiple vulnerabilities
Published:		01.07.2005
Source:		BUGTRAQ
SecurityVulns ID:		4949
Type:		local
Level:		5/10
Description:		Protection bypass be using memory mapping and internal syscalls, DoS.

Affected:

PREVX : Prevx Pro 2005

Original document

trihuynh_(at)_huynhsec.com, [Full-disclosure] Prevx Pro 2005 - Multiple Vulnerabilities (01.07.2005)

Discuss:

Read or add your comments to this news (0 comments)

Weak SSH Tectia Server key permission
Published:		01.07.2005
Source:		SECUNIA
SecurityVulns ID:		4950
Type:		local
Level:		5/10
Description:		Server's private key is open for reading.

Affected:

SSH : SSH Tectia Server 4.3

Original document

SECUNIA, [SA15894] SSH Tectia Server Insecure Private Key Permissions (01.07.2005)

Discuss:

Read or add your comments to this news (0 comments)

Multiple hardware platforms hyper threading technology systems information leak updated since 13.05.2005
Published:		01.07.2005
Source:		FREEBSD
SecurityVulns ID:		4793
Type:		local
Level:		6/10
Description:		Unprivileged thread can read data from privileged thread memory from CPU cache memory.

Affected:		ORACLE : Solaris 8
		SUN : Solaris 7
		SCO : OpenServer 5.0
		SCO : UnixWare 7.1
		ORACLE : Solaris 9
		NETBSD : NetBSD 1.6
		LINUX : kernel 2.6
		ORACLE : Solaris 10
		NETBSD : NetBSD 2.0
		FREEBSD : FreeBSD 4.10
		FREEBSD : FreeBSD 5.3
		FREEBSD : FreeBSD 5.4
		FREEBSD : FreeBSD 4.11

Original document		NETBSD, NetBSD Security Advisory 2005-001: Crypto leaks across HyperThreaded CPUs (i386, P4, HTT+SMP only) (01.07.2005)
		SECUNIA, [SA15559] Sun Solaris Hyper-Threading Support Information Disclosure (02.06.2005)
		Martin Pitt, [Full-disclosure] [USN-131-1] Linux kernel vulnerabilities (23.05.2005)
		SCO, OpenServer 5.0.7 UnixWare 7.1.4 UnixWare 7.1.3 : Hyper-Threading information leakage (14.05.2005)
		FREEBSD, information disclosure when using HTT (13.05.2005)

Discuss:

Read or add your comments to this news (0 comments)