lvm symbolic links
Published:		03.11.2004
Source:		BUGTRAQ
SecurityVulns ID:		4151
Type:		local
Level:		5/10
Description:		Incorrect temporary directory creation in lvmcreate_initrd и davfs2.

Affected:		LVM : lvm 1.0
		DAVFS : davfs2 0.2

Original document

Martin Pitt, [USN-15-1] lvm10 vulnerability (03.11.2004)

Discuss:

Read or add your comments to this news (0 comments)

WinRAR code execution
Published:		03.11.2004
Source:		BUGTRAQ
SecurityVulns ID:		4152
Type:		local
Level:		5/10
Description:		Undisclosured bug on archive repair.

Affected:

RARSOFT : WinRAR 3.40

Original document

NGSSoftware Insight Security Research Advisory (NISR), Medium Risk Vulnerability in WinRAR (03.11.2004)

Discuss:

Read or add your comments to this news (0 comments)

Cisco Secure ACS protection bypass
Published:		03.11.2004
Source:		BUGTRAQ
SecurityVulns ID:		4153
Type:		remote
Level:		6/10
Description:		IF EAP-TLS is used validity of ceritifcation agency is not checked.

Affected:

CISCO : Secure ACS for Windows 3.3

Original document

CISCO, Cisco Security Advisory: Vulnerability in Cisco Secure Access Control Server EAP-TLS Authentication (03.11.2004)

Discuss:

Read or add your comments to this news (0 comments)

Speedtouch USB driver for linux format string bugs
Published:		03.11.2004
Source:		BUGTRAQ
SecurityVulns ID:		4155
Type:		local
Level:		5/10
Description:		Format string bug on syslog() call.

Affected:

SPEEDTOUCH : speedtouch 1.3

Original document

GENTOO, [ GLSA 200411-04 ] Speedtouch USB driver: Privilege escalation vulnerability (03.11.2004)

Discuss:

Read or add your comments to this news (0 comments)

proxytunnel format string bug
Published:		03.11.2004
Source:		FULL-DISCLOSURE
SecurityVulns ID:		4156
Type:		remote
Level:		5/10
Description:		Format string bug on syslog().

Original document

GENTOO, [Full-Disclosure] [ GLSA 200411-07 ] Proxytunnel: Format string vulnerability (03.11.2004)

Discuss:

Read or add your comments to this news (0 comments)

HP OpenView Operations privilege escalation
Published:		03.11.2004
Source:		SECUNIA
SecurityVulns ID:		4157
Type:		local
Level:		5/10

Affected:

HP : OpenView Operations 8.0

Original document

SECUNIA, [SA13059] HP OpenView Operations Unspecified Vulnerability (03.11.2004)

Discuss:

Read or add your comments to this news (0 comments)

Microsoft Internet Explorer buffer overflow updated since 03.11.2004
Published:		02.12.2004
Source:		FULL-DISCLOSURE
SecurityVulns ID:		4154
Type:		client
Level:		7/10
Description:		Buffer overflow in FRAME and IFRAME tags parameters.

Affected:		MICROSOFT : Internet Explorer 5.5
		MICROSOFT : Internet Explorer 6.0

Original document		CERT, US-CERT Technical Cyber Security Alert TA04-336A -- Update for Microsoft Internet Explorer HTML Elements Vulnerability (02.12.2004)
		MICROSOFT, Microsoft Security Bulletin MS04-040 Cumulative Security Update for Internet Explorer (889293) (02.12.2004)
		CERT, US-CERT Technical Cyber Security Alert TA04-315A -- Buffer Overflow in Microsoft Internet Explorer (11.11.2004)
		skylined_(at)_edup.tudelft.nl, [Full-Disclosure] MSIE <IFRAME> and <FRAME> tag NAME property bufferoverflow PoC exploit (was: python does mangleme (with IE bugs!)) (03.11.2004)

Files:		MSIE <IFRAME> and <FRAME> tag NAME property bufferoverflow PoC exploit
		Microsoft Security Bulletin MS04-040 Cumulative Security Update for Internet Explorer (889293)
Discuss:		Read or add your comments to this news (1 comments)