Microsoft DirectPlay DoS
Published:		09.06.2004
Source:		MICROSOFT
SecurityVulns ID:		3743
Type:		library
Level:		5/10
Description:		Invalid network packets parsing.

Affected:		MICROSOFT : Windows 2000 Server
		MICROSOFT : Windows 2000 Professional
		MICROSOFT : Windows 98
		MICROSOFT : Windows XP
		MICROSOFT : DirectX 7.0
		MICROSOFT : DirectX 7.1
		MICROSOFT : DirectX 8.0
		MICROSOFT : DirectX 8.1
		MICROSOFT : DirectX 8.2
		MICROSOFT : DirectX 9.0

Original document

MICROSOFT, Microsoft Security Bulletin MS04-016 Vulnerability in DirectPlay Could Allow Denial of Service (839643) (09.06.2004)

Discuss:

Read or add your comments to this news (0 comments)

Crystal Reports directory traversal
Published:		09.06.2004
Source:		MICROSOFT
SecurityVulns ID:		3744
Type:		remote
Level:		6/10
Description:		Web service directory traversal.

Affected:		BUSYNESSOBJECTS : Crystal Reports 10
		BUSINESSOBJECTS : Crystal Reports 9
		MICROSOFT : Visual Studio .Net 2003
		MICROSOFT : Outlook 2003 Business Contact Manager
		MICROSOFT : Business Solutions CRM 1.2

Original document		MICROSOFT, Microsoft Security Bulletin MS04-017 Vulnerability in Crystal Reports Web Viewer Could Allow Information Disclosure and Denial of Service (842689) (09.06.2004)
		Imperva Application Defense Center, Vulnerability: Arbitrary File Access & DoS in Crystal Reports (09.06.2004)

Discuss:

Read or add your comments to this news (0 comments)

Oracle E-Business Suite SQL injection updated since 05.06.2004
Published:		09.06.2004
Source:		BUGTRAQ
SecurityVulns ID:		3734
Type:		remote
Level:		6/10
Description:		Multiple SQL injection conditions.

Affected:		ORACLE : Oracle E-Business Suite 11.0
		ORACLE : Oracle E-Business Suite 11.5

Original document		CERT, US-CERT Technical Cyber Security Alert TA04-160A -- SQL Injection Vulnerabilities in Oracle E-Business Suite (09.06.2004)
		Integrigy Security Alerts, Integrigy Security Alert - Multiple SQL Injection Vulnerabilities in Oracle E-Business Suite (05.06.2004)

Discuss:

Read or add your comments to this news (0 comments)

Multiple CVS bugs
Published:		09.06.2004
Source:		FULL-DISCLOSURE
SecurityVulns ID:		3746
Type:		remote
Level:		7/10
Description:		Buffer overflows, format strings, double free().

Affected:		CVS : cvs 1.11
		CVS : CVS 1.12

Original document

Stefan Esser, [Full-Disclosure] Advisory 09/2004: More CVS remote vulnerabilities (09.06.2004)

Discuss:

Read or add your comments to this news (0 comments)

US Robotics Broadband Router 8003 unauthorized access
Published:		09.06.2004
Source:		BUGTRAQ
SecurityVulns ID:		3747
Type:		remote
Level:		5/10
Description:		Password is checked on client side.

Affected:

USR : Broadband Router 8003

Original document

Fernando Sanchez, U.S. Robotics Broadband Router 8003 admin password visible (09.06.2004)

Discuss:

Read or add your comments to this news (0 comments)

squid buffer overflow updated since 09.06.2004
Published:		16.09.2004
Source:		FULL-DISCLOSURE
SecurityVulns ID:		3745
Type:		remote
Level:		6/10
Description:		Buffer overflow if NTLM authentication is compiled.

Affected:		SQUID : squid 2.5
		SQUID : squid 3.0

Original document		MANDRAKE, MDKSA-2004:093 - Updated squid packages fix DoS vulnerability (16.09.2004)
		Thierry Carrez, [ GLSA 200409-04 ] Squid: Denial of service when using NTLM authentication (03.09.2004)
		IDEFENSE, [Full-Disclosure] iDEFENSE Security Advisory 06.08.04: Squid Web Proxy Cache NTLM Authentication Helper Buffer Overflow Vulnerability (09.06.2004)

Discuss:

Read or add your comments to this news (0 comments)