Apple Mail.app DoS
Published:		01.11.2011
Source:		BUGTRAQ
SecurityVulns ID:		12010
Type:		remote
Level:		5/10
Description:		Crash on large number of MIME parts.

Affected:		APPLE : iPhone OS 4.3
		APPLE : MacOS X 10.7

Original document

Paul, Apple's Mail.app mail of death (01.11.2011)

Discuss:

Read or add your comments to this news (0 comments)

Nova weak cryptography
Published:		01.11.2011
Source:		BUGTRAQ
SecurityVulns ID:		12011
Type:		remote
Level:		5/10
Description:		It's possible to computer EC2_SECRET_KEY with known EC2_ACCESS_KEY

Original document

UBUNTU, [USN-1247-1] Nova vulnerability (01.11.2011)

Discuss:

Read or add your comments to this news (0 comments)

D-Link DIR-300 multiple security vulnerabilities
Published:		01.11.2011
Source:		BUGTRAQ
SecurityVulns ID:		12012
Type:		remote
Level:		6/10
Description:		Router management system for D-Link DIR-300 information leakage.

Affected:

DLINK : D-Link DIR-300

Original document		noreply_(at)_ptsecurity.ru, [PT-2011-30] Disclosure of sensitive information in D-Link DIR-300 Router (01.11.2011)
		noreply_(at)_ptsecurity.ru, [PT-2011-29] Arbitrary file reading and arbitrary code execution in Router Manager for D-Link DIR-300 (01.11.2011)

Discuss:

Read or add your comments to this news (0 comments)

radvd multiple security vulnerabilities
Published:		01.11.2011
Source:		BUGTRAQ
SecurityVulns ID:		12013
Type:		remote
Level:		5/10
Description:		Privilege escalation, buffer overflow, DoS.

Affected:		RADVD : radvd 1.8
CVE:		CVE-2011-3605
		CVE-2011-3604
		CVE-2011-3602
		CVE-2011-3601

Original document

DEBIAN, [SECURITY] [DSA 2323-1] radvd security update (01.11.2011)

Discuss:

Read or add your comments to this news (0 comments)

YaTFTPSvr TFTP Server directory traversal
Published:		01.11.2011
Source:		BUGTRAQ
SecurityVulns ID:		12014
Type:		remote
Level:		5/10
Description:

Affected:

YATFTPSVR : YaTFTPSvr 1.0

Original document

demonalex_(at)_163.com, YaTFTPSvr TFTP Server Directory Traversal Vulnerability (01.11.2011)

Discuss:

Read or add your comments to this news (0 comments)

PlotLineControl ActiveX integer overflow
Published:		01.11.2011
Source:		BUGTRAQ
SecurityVulns ID:		12015
Type:		client
Level:		5/10
Description:		Integer overflow in LinePutPoint method

Original document

demonalex_(at)_163.com, PlotLineControl ActiveX Control "LinePutPoint" Integer Overflow (01.11.2011)

Discuss:

Read or add your comments to this news (0 comments)

Oracle Hyperion ActiveX security vulnerabilities updated since 01.11.2011
Published:		04.11.2011
Source:		BUGTRAQ
SecurityVulns ID:		12009
Type:		client
Level:		5/10
Description:		Buffer overflow in ODBC driver used by ActiveX component, unsafe methods.

Original document		rgod, Oracle Hyperion Financial Management TList6 ActiveX Control Remote Code Execution Vulnerability (04.11.2011)
		rgod, Oracle DataDirect Multiple Native Wire Protocol ODBC Drivers HOST Attribute Stack Based Buffer Overflow (01.11.2011)

Files:		Oracle DataDirect ODBC Drivers HOST Attribute arsqls24.dll Stack Based Buffer Overflow PoC (*.oce)
Discuss:		Read or add your comments to this news (0 comments)