Multiple MacOS X vulnerabilities updated since 01.11.2005
Published:		08.11.2005
Source:		BUGTRAQ
SecurityVulns ID:		5402
Type:		local
Level:		5/10
Description:		Invalid ownership information in 'Finder', invalid 'Update' functioning, memberd removed group membership unauthorized access, 'Keychain' password leak, 'Kernel' uninitialized memory leak.

Affected:

APPLE : Mac OS X 10.4

Original document		advisories, [ Suresec Advisories ] - Mac OS X (xnu) multiple information leaks (08.11.2005)
		APPLE, APPLE-SA-2005-10-31 Mac OS X v10.4.3 (01.11.2005)

Discuss:

Read or add your comments to this news (1 comments)

FileZilla FTP Server buffer overflow
Published:		08.11.2005
Source:		BUGTRAQ
SecurityVulns ID:		5430
Type:		remote
Level:		5/10
Description:		Buffer overflow on oversized FTP USER command.

Affected:

FILEZILLA : Filezilla 0.9

Original document

inge.henriksen_(at)_booleansoft.com, Work in Progress: FileZilla Server Terminal V0.9.4d Buffer Overflow (08.11.2005)

Discuss:

Read or add your comments to this news (0 comments)

Asterisk PBX server voice mail mailbox directory traversal
Published:		08.11.2005
Source:		BUGTRAQ
SecurityVulns ID:		5431
Type:		remote
Level:		5/10
Description:		Web interface directory traversal allows to download any .wav file.

Affected:		ASTERISK : Asterisk 1.0
		ASTERISK : Asterisk 1.2
		ASTERISK : Asterisk 1.5
		ASTERISK : Asterisk 2.0

Original document

advisories+asterisk_(at)_assurance.com.au, Asterisk vmail.cgi vulnerability (08.11.2005)

Discuss:

Read or add your comments to this news (0 comments)

F-Secure Internet Gatekeeper antivirus privilege escalation
Published:		08.11.2005
Source:		SECURITEAM
SecurityVulns ID:		5432
Type:		local
Level:		5/10
Description:		Different scripts execute external application by relative path.

Affected:		F-SECURE : F-Secure Internet Gatekeeper 2.15
		F-SECURE : F-Secure Linux Gateway 2.16

Original document

SECURITEAM, [EXPL] F-Secure Internet Gatekeeper Local Root (Exploit) (08.11.2005)

Files:		F-Secure Internet Gatekeeper for Linux local root exploit
Discuss:		Read or add your comments to this news (0 comments)

Multiple firewalls protection bypass updated since 28.10.2004
Published:		08.11.2005
Source:		3APA3A
SecurityVulns ID:		4136
Type:		client
Level:		5/10
Description:		The number of different way to break protection against client application attacks is almost unlimited.

Affected:		MICROSOFT : Windows XP
		WRQ : ATGuard 3.2
		CHECKPOINT : VPN-1 R55
		CHECKPOINT : Firewall-1 R55
		AGNITUM : Outpost Pro 2.1
		AGNITUM : Outpost Pro 2.5
		TINY : Tiny Firewall Pro 6.0
		ZONELABS : ZoneAlarm Pro 4.5
		ISS : BlackICE PC Protection 3.6
		KERIO : Kerio Personal Firewall 4.0
		ZONELABS : ZoneAlarm 6.0

Original document		Debasis Mohanty, Zone Labs Products Advance Program Control and OS Firewall (Behavioral Based) Technology Bypass Vulnerability (08.11.2005)
		Debasis Mohanty, Bypassing Personal Firewall (Zone Alarm Pro) Using DDE-IPC (29.09.2005)
		offtopic, Bypass personal firewall application protection . Again. (09.12.2004)
		3APA3A, Presentation: Bypassing client application protection techniques with notepad (28.10.2004)

Files:		Zone Labs Products Advance Program Control and OS Firewall (Behavioral Based) Technology Bypass Vulnerability demonstration
		Bypassing client application protection techniques
Discuss:		Read or add your comments to this news (0 comments)