Novell Netware Client privilege escalation
Published:		10.01.2008
Source:		BUGTRAQ
SecurityVulns ID:		8552
Type:		local
Level:		6/10
Description:		\\.\nicm device allows memory manipulation in kernel context.

Affected:

NOVELL : NetWare Client 4.91

Original document

IDEFENSE, iDefense Security Advisory 01.09.08: Novell NetWare Client nicm.sys Local Privilege Escalation Vulnerability (10.01.2008)

Discuss:

Read or add your comments to this news (0 comments)

XFCS multiple security vulnerabilities
Published:		10.01.2008
Source:		BUGTRAQ
SecurityVulns ID:		8553
Type:		local
Level:		5/10
Description:		Buffer overflow, access to free()'d memory.

Affected:		XFCE : XFCE 4.4
CVE:		CVE-2007-6532
		CVE-2007-6531

Original document

GENTOO, [ GLSA 200801-06 ] Xfce: Multiple vulnerabilities (10.01.2008)

Discuss:

Read or add your comments to this news (0 comments)

Daily web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)
Published:		10.01.2008
Source:
SecurityVulns ID:		8554
Type:		remote
Level:		5/10
Description:		PHP inclusions, SQL injections, directory traversals, crossite scripting, information leaks, etc.

Affected:

SMF : Simple Machines Forum 1.1

Original document		consultant gmail, [Full-disclosure] ID-Commerce Security Advisory - SLR-2007-001 (10.01.2008)
		consultant gmail, [Full-disclosure] ID-Commerce Security Advisory - SLR-2007-001 (10.01.2008)
		Hackers Center Security Group, Simple Machines Forum Cross-Site Scripting Vulnerabilities Vulnerabilities (10.01.2008)

Discuss:

Read or add your comments to this news (0 comments)

Sun Identity Manager multiple security vulnerabilities
Published:		10.01.2008
Source:		BUGTRAQ
SecurityVulns ID:		8555
Type:		remote
Level:		5/10
Description:		Crossite scripting, frame injection, crossite request forgery.

Affected:		SUN : Identity Manager 6.0
		SUN : Identity Manager 7.0
		SUN : Identity Manager 7.1

Original document

ProCheckUp Research, PR07-06, PR07-07, PR07-08, PR07-09, PR07-10, PR07-12: Several XSS, Cross-domain Redirection and Frame Injection on Sun Java System Identity Manager (10.01.2008)

Discuss:

Read or add your comments to this news (0 comments)