Cisco Security Agent firewall / VPN client privilege escalation
Published:		01.12.2005
Source:		BUGTRAQ
SecurityVulns ID:		5492
Type:		local
Level:		6/10

Affected:

CISCO : Cisco Security Agent 4.5

Original document

CISCO, Cisco Security Advisory: Cisco Security Agent Vulnerable to Privilege Escalation (01.12.2005)

Discuss:

Read or add your comments to this news (0 comments)

Web applications security vulnerabilities (PHP, ASP, CGI, Perl, etc)
Published:		01.12.2005
Source:
SecurityVulns ID:		5493
Type:		remote
Level:		5/10
Description:		PHP inclusions, SQL injections, directory traversals, crossite scripting, information leaks, mb_send_mail() message headers modification, etc.

Affected:		VBULLETIN : vBulletin 3.0
		GALLERY : Gallery 2.0
		DRUPAL : Drupal 4.6
		JELSOFT : vBulletin 3.5
		XARAYA : Xaraya 1.0
		PINAPPLETECHNOLO : Lore 1.5
		DOTCLEAR : Dotclear 1.2

Original document		Sieg Fried, [Full-disclosure] ZRCSA-200504 - dotclear SQL Injection (01.12.2005)
		Paul Laudanski, [VulnWatch] XSS & Header Injection in Drupal and vBulletin (01.12.2005)
		r0t, Lore SQL inj. vuln. (01.12.2005)
		Bharat Mediratta, Gallery 2.x Security Advisory (01.12.2005)
		retrogod_(at)_aliceposta.it, Xaraya <= 1.0.0 RC4 D.O.S / file corruption (01.12.2005)

Discuss:

Read or add your comments to this news (0 comments)

QNX phgrafx buffer overflow
Published:		01.12.2005
Source:		BUGTRAQ
SecurityVulns ID:		5495
Type:		local
Level:		5/10
Description:		suid application command line parsing buffer overflow.

Affected:

QNX : QNX 6.3

Original document

pasquale minervini, possible privilege escalation on QNX Neutrino 6.3.0 (01.12.2005)

Files:		QNX Neutrino 6.3.0 privilege escalation
Discuss:		Read or add your comments to this news (0 comments)

Multiple linux kernels vulnerabilities
Published:		01.12.2005
Source:		BUGTRAQ
SecurityVulns ID:		5496
Type:		remote
Level:		7/10
Description:		NAt feature DoS, sys_get_thread_area() kernel memory content leak, ip_vs_conn_flush() race conditions, Posix timers DoS, rose_rt_ioctl() DoS.

Affected:

LINUX : kernel 2.6

Original document		MANDRIVA, MDKSA-2005:220 - Updated kernel packages fix numerous vulnerabilities (01.12.2005)
		MANDRIVA, MDKSA-2005:218 - Updated kernel packages fix numerous vulnerabilities (01.12.2005)
		MANDRIVA, MDKSA-2005:219 - Updated kernel packages fix numerous vulnerabilities (01.12.2005)

Discuss:

Read or add your comments to this news (0 comments)

Panda antivirus buffer overflow
Published:		01.12.2005
Source:		BUGTRAQ
SecurityVulns ID:		5494
Type:		remote
Level:		6/10
Description:		ZOO archives heap overflow.

Affected:		PANDA : Panda Antivirus 2006
		PANDA : Panda Internet Security 2006
		PANDASOFTWARE : Panda Truprevent 2006
		PANDA : Panda BusinesSecure 2006
		PANDA : Panda EnterpriSecure 2006

Original document

list_(at)_rem0te.com, Panda Remote Heap Overflow (01.12.2005)

Discuss:

Read or add your comments to this news (0 comments)