 |
|
|
|
Grub, DiskCryptor, LILO, DriveCrypt, TrueCRYPT and Intel, IBM, HP BIOS disk ebcryption utilities information leak
updated since 26.08.2008 | | Published: |  | 01.09.2008 | | Source: |  | BUGTRAQ | | SecurityVulns ID: |  | 9247 | | Type: |  | local | | Level: |  | 5/10 | | Description: |  | Cleartext password is not erased from BIOS data buffer. |
| Mita Scanner File Utility multiple security vulnerabilities | | Published: | | 01.09.2008 | | Source: | | BUGTRAQ | | SecurityVulns ID: | | 9248 | | Type: | | remote | | Level: | | 5/10 | | Description: | | Directory traversal, unauthorized access. |
| Daily web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl) | | Published: | | 01.09.2008 | | Source: | | | | SecurityVulns ID: | | 9249 | | Type: | | remote | | Level: | | 5/10 | | Description: | | PHP inclusions, SQL injections, directory traversals, crossite scripting, information leaks, etc.
FeedBurner FeedSmith: crossite scripting, information leak.
myPHPNuke: crossite scripting, SQL injection. |
| ipsec-tools / racoon IPSec DoS | | Published: | | 01.09.2008 | | Source: | | BUGTRAQ | | SecurityVulns ID: | | 9251 | | Type: | | remote | | Level: | | 7/10 | | Description: | | DoS attack with memory exhaustion. |
| CVE: |  | CVE-2008-3652 (src/racoon/handler.c in racoon in ipsec-tools does not remove an "orphaned ph1" (phase 1) handle when it has been initiated remotely, which allows remote attackers to cause a denial of service (resource consumption).) | | | | CVE-2008-3651 (Memory leak in racoon/proposal.c in the racoon daemon in ipsec-tools before 0.7.1 allows remote authenticated users to cause a denial of service (memory consumption) via invalid proposals.) |
libpurple / Pidgin buffer overflow
updated since 01.09.2008 | | Published: | | 09.06.2009 | | Source: | | BUGTRAQ | | SecurityVulns ID: | | 9250 | | Type: | | library | | Level: | | 6/10 | | Description: | | Buffer overflow on MSN SLP messages parsing. |
| Affected: |  | PIDGIN : Pidgin 2.4 | | CVE: | | CVE-2009-1376 (Multiple integer overflows in the msn_slplink_process_msg functions in the MSN protocol handler in (1) libpurple/protocols/msn/slplink.c and (2) libpurple/protocols/msnp9/slplink.c in Pidgin (formerly Gaim) before 2.5.6 on 32-bit platforms allow remote attackers to execute arbitrary code via a malformed SLP message with a crafted offset value, leading to buffer overflows. NOTE: this issue exists because of an incomplete fix for CVE-2008-2927.) | | | | CVE-2008-2927 (Multiple integer overflows in the msn_slplink_process_msg functions in the MSN protocol handler in (1) libpurple/protocols/msn/slplink.c and (2) libpurple/protocols/msnp9/slplink.c in Pidgin before 2.4.3 and Adium before 1.3 allow remote attackers to execute arbitrary code via a malformed SLP message with a crafted offset value, a different vulnerability than CVE-2008-2955.) |
|
|
|
|
|
|
|
|
