Daily web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)
Published:		04.08.2008
Source:
SecurityVulns ID:		9196
Type:		remote
Level:		5/10
Description:		PHP inclusions, SQL injections, directory traversals, crossite scripting, information leaks, etc. Smeego: automation protection bypass, crossite scripting.

Affected:		SMEEGO : Smeego 1.1
		EVISION : eVision 2.0
		KELD : keld 0.7

Original document		win32.exe_(at)_w.cn, file upload exploit (04.08.2008)
		crimson.loyd_(at)_gmail.com, Keld: PHP-MySQL News Script 0.7.1 Remote SQL injection Vulnerability (04.08.2008)
		0in.email_(at)_gmail.com, TGS CMS Remote Code Execution Exploit (04.08.2008)
		r3d.w0rm_(at)_yahoo.com, UNAK-CMS Lfi (04.08.2008)
		r3d.w0rm_(at)_yahoo.com, eVision 2.0 Sql Injection/Remote File Disclosure/Remote File Upload/IG (04.08.2008)
		Ghost hacker, Homes 4 Sale Remote XSS Vulnerabilitiy (04.08.2008)
		michaelbrooks_(at)_rooksecurity.com, Pligg Auto-Voter Using XSS to Bypass CSRF Protection (04.08.2008)
		Alemin_Krali Krali, NeBoard Sql Injection Vulnerability (04.08.2008)
		MustLive, Vulnerabilities in Smeego (04.08.2008)

Discuss:

Read or add your comments to this news (0 comments)

Apple Mac OS X multiple security vulnerabilities
Published:		04.08.2008
Source:		BUGTRAQ
SecurityVulns ID:		9197
Type:		library
Level:		7/10
Description:		Integer overflows and buffer overflows in graphics API and fonts API.

Affected:		APPLE : MacOS X 10.4
CVE:		CVE-2008-2322 (Integer overflow in CoreGraphics in Apple Mac OS X 10.4.11, 10.5.2, and 10.5.4 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a PDF file with a long Type 1 font, which triggers a heap-based buffer overflow.)

Original document		IDEFENSE, iDefense Security Advisory 07.31.08: Apple Mac OS X CoreGraphics PDF Type1 Font Integer Overflow Vulnerability (04.08.2008)
		security_(at)_nruns.com, n.runs-SA-2008.005 - Apple Inc. - CoreServices Framework’s CarbonCore Framework - Arbitrary Code Execution (remote) (04.08.2008)

Discuss:

Read or add your comments to this news (0 comments)

America's army game server DoS
Published:		04.08.2008
Source:		BUGTRAQ
SecurityVulns ID:		9199
Type:		remote
Level:		5/10
Description:		Invalid assert() on network traffic parsing.

Affected:

AMERICASARMY : America's Army 2.8

Original document

Luigi Auriemma, Server termination in America's Army 2.8.3.1 (04.08.2008)

Files:		America's Army <= 2.8.3.1 server termination
Discuss:		Read or add your comments to this news (0 comments)

OpenSC smart cards unauthrorized access
Published:		04.08.2008
Source:		BUGTRAQ
SecurityVulns ID:		9200
Type:		local
Level:		5/10
Description:		It's possible to change smrtcard PIN code.

Affected:		OPENSC : OpenSC 0.11
CVE:		CVE-2008-2235

Original document

DEBIAN, [SECURITY] [DSA 1627-1] New opensc packages fix smart card vulnerability (04.08.2008)

Discuss:

Read or add your comments to this news (0 comments)

Ingres database server multiple security vulnerabilities updated since 04.08.2008
Published:		07.08.2008
Source:		BUGTRAQ
SecurityVulns ID:		9198
Type:		local
Level:		5/10
Description:		Weak file permissions, insecure shared library loading, buffer overflow in different utilities.

Affected:		INGRES : Ingres Database 2006
CVE:		CVE-2008-3389 (Stack-based buffer overflow in the libbecompat library in Ingres 2.6, Ingres 2006 release 1 (aka 9.0.4), and Ingres 2006 release 2 (aka 9.1.0) on Linux and HP-UX allows local users to gain privileges by setting a long value of an environment variable before running (1) verifydb, (2) iimerge, or (3) csreport.)
		CVE-2008-3357 (Untrusted search path vulnerability in ingvalidpw in Ingres 2.6, Ingres 2006 release 1 (aka 9.0.4), and Ingres 2006 release 2 (aka 9.1.0) on Linux and HP-UX allows local users to gain privileges via a crafted shared library, related to a "pointer overwrite vulnerability.")
		CVE-2008-3356 (verifydb in Ingres 2.6, Ingres 2006 release 1 (aka 9.0.4), and Ingres 2006 release 2 (aka 9.1.0) on Linux and other Unix platforms sets the ownership or permissions of an iivdb.log file without verifying that it is the application's own log file, which allows local users to overwrite arbitrary files by creating a symlink with an iivdb.log filename.)

Original document		CA, CA Products That Embed Ingres Multiple Vulnerabilities (07.08.2008)
		IDEFENSE, iDefense Security Advisory 08.01.08: Ingres Database for Linux ingvalidpw Untrusted Library Path Vulnerability (04.08.2008)
		IDEFENSE, iDefense Security Advisory 08.01.08: Ingres Database for Linux libbecompat Stack Based Buffer Overflow Vulnerability (04.08.2008)
		IDEFENSE, iDefense Security Advisory 08.01.08: Ingres Database for Linux verifydb Insecure File Permissions Modification Vulnerability (04.08.2008)

Discuss:

Read or add your comments to this news (0 comments)