MySQL DoS
Published:		01.09.2006
Source:		BUGTRAQ
SecurityVulns ID:		6563
Type:		local
Level:		5/10
Description:		Query with multiupdate and subselects can cause database server to crash.

Affected:

MYSQL : MySQL 4.1

Original document

MANDRIVA, [ MDKSA-2006:158 ] - Updated MySQL packages fix DoS vuln, initscript bug (01.09.2006)

Discuss:

Read or add your comments to this news (0 comments)

capi4hylafax code execution
Published:		01.09.2006
Source:		FULL-DISCLOSURE
SecurityVulns ID:		6565
Type:		remote
Level:		5/10

Affected:

CAPI4HYLAFAX : capi4hylafax 0.1

Original document

DEBIAN, [Full-disclosure] [SECURITY] [DSA 1165-1] New capi4hylafax packages fix arbitrary command execution (01.09.2006)

Discuss:

Read or add your comments to this news (0 comments)

Compression Plus library buffer overflow
Published:		01.09.2006
Source:		BUGTRAQ
SecurityVulns ID:		6564
Type:		library
Level:		5/10
Description:		Buffer overflow on Zoo archives parsing.

Affected:		BECUBED : Compression Plus 5.0
		VCOM : PowerDesk Pro 6
		CANYON : Power File 1.12
		CANYON : Drag And Zip 3.5

Original document

Michael Hale Ligh, Compression Plus and Tumbleweed EMF Stack Overflow Security Advisory (01.09.2006)

Discuss:

Read or add your comments to this news (0 comments)

Daily web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)
Published:		01.09.2006
Source:		BUGTRAQ
SecurityVulns ID:		6566
Type:		remote
Level:		5/10
Description:		PHP inclusions, SQL injections, directory traversals, crossite scripting, information leaks, etc.

Affected:		MEMBERPASS : Membrepass 1.5
		WEBMIN : Webmin 1.295
		USERMIN : Usermin 1.225
		CERBERUS : Cerberus Helpdesk 3.2

Original document		SECUNIA, [SA21706] Cerberus Helpdesk "ticket" Parameter Arbitrary Ticket Access (01.09.2006)
		SECUNIA, [SA21690] Webmin / Usermin Cross-Site Scripting and Source Code Disclosure (01.09.2006)
		amir.scorpino_(at)_yahoo.com, ModuleBased CMS alfa 1 Multiple Remote File Inclusion (01.09.2006)
		SHiKaA-_(at)_hotmail.com, Pheap CMS<= (lpref) Remote File Inclusion Exploit (01.09.2006)
		gmdarkfig_(at)_gmail.com, Membrepass v1.5 Php code execution, Xss, Sql Injection (01.09.2006)
		exe_crack_(at)_hotmail.com, XXS in learncenter.asp (01.09.2006)

Discuss:

Read or add your comments to this news (0 comments)

ISS BlackICE PC Protection DoS updated since 01.09.2006
Published:		02.09.2006
Source:		BUGTRAQ
SecurityVulns ID:		6567
Type:		local
Level:		4/10
Description:		Invalid NtOpenSection() hook causes sytem to crash if 3rd paramter is NULL.

Affected:

ISS : BlackICE PC Protection 3.6

Original document		David Matousek, ISS BlackICE PC Protection Insufficient validation of arguments of NtOpenSection Vulnerability (02.09.2006)
		SECUNIA, [SA21710] BlackICE PC Protection "NtOpenSection()" Denial of Service (01.09.2006)

Discuss:

Read or add your comments to this news (0 comments)