Multiple Internet Explorer bugs updated since 03.02.2004
Published:		10.02.2004
Source:		MICROSOFT
SecurityVulns ID:		3405
Type:		remote
Level:		6/10
Description:		Crossite scripting in Travel Log, URL spoofing.

Affected:		MICROSOFT : Internet Explorer 5.5
		MICROSOFT : Internet Explorer 6.0

Original document		ACROS Security, ASPR #2004-01-20-1: Internet Explorer/Outlook double null character DoS (10.02.2004)
		Andreas Sandblad, Sandblad #12: Inject javascript url in history list (revisited) (04.02.2004)
		CERT, TA04-033A: Multiple Vulnerabilities in Microsoft Internet Explorer (03.02.2004)
		MICROSOFT, Microsoft Security Bulletin MS04-004 (03.02.2004)

Files:		Microsoft Security Bulletin MS04-004
Discuss:		Read or add your comments to this news (0 comments)

eggdrop unauthorized access
Published:		10.02.2004
Source:		BUGTRAQ
SecurityVulns ID:		3432
Type:		remote
Level:		5/10
Description:		It;s possble to obtain share.mod access.

Affected:

EGGDROP : eggdrop 1.6

Original document

cyborgirl_(at)_libero.it, Eggrop bug (10.02.2004)

Discuss:

Read or add your comments to this news (0 comments)

EvolutionX buffer overflow
Published:		10.02.2004
Source:		FULL-DISCLOSURE
SecurityVulns ID:		3433
Type:		remote
Level:		5/10
Description:		Buffer overflow on ftp and telnet protocols.

Affected:

EVOLUTIONX : EvolutionX 3935

Original document

icbm, [Full-Disclosure] XBOX EvolutionX ftp 'cd' command and telnet 'dir' buffer overflow (10.02.2004)

Discuss:

Read or add your comments to this news (0 comments)

Multiple RED-M RedAlert bugs
Published:		10.02.2004
Source:		BUGTRAQ
SecurityVulns ID:		3434
Type:		remote
Level:		5/10
Description:		Multiple bugs with user authentication.

Affected:

RED-M : RedAlert 2.7

Original document

Bruno Morisson, Red-M Red-Alert Multiple Vulnerabilities (10.02.2004)

Discuss:

Read or add your comments to this news (0 comments)

InnoculateIT weak file permissions
Published:		10.02.2004
Source:		BUGTRAQ
SecurityVulns ID:		3435
Type:		local
Level:		5/10
Description:		Weak directory permissions, symbolic links problems.

Affected:

ETRUST : InnoculateIT 6.0

Original document

Rene, [local problems] eTrust Virus Protection 6.0 InoculateIT for linux (10.02.2004)

Discuss:

Read or add your comments to this news (0 comments)

Real player directory traversal
Published:		10.02.2004
Source:		BUGTRAQ
SecurityVulns ID:		3436
Type:		client
Level:		5/10
Description:		Directory traversal in .rjs files allows to place file in any directory.

Affected:		REAL : Real Server G2 1.0
		REAL : RealPlayer 10

Original document

Jouko Pynnonen, Directory traversal in RealPlayer allows code execution (10.02.2004)

Discuss:

Read or add your comments to this news (0 comments)

smbmnt privilege escalation
Published:		10.02.2004
Source:		BUGTRAQ
SecurityVulns ID:		3437
Type:		local
Level:		5/10
Description:		Few distributions have smbmnt installed suid root. It allows user to mount external drive and run any application as suid.

Affected:

LINUX : kernel 2.6

Original document

Michal Medvecky, Samba 3.x + kernel 2.6.x local root vulnerability (10.02.2004)

Discuss:

Read or add your comments to this news (0 comments)