emacs movemail buffer overflow
Published:		10.02.2005
Source:		BUGTRAQ
SecurityVulns ID:		4469
Type:		client
Level:		5/10
Description:		Buffer overflow on POP3 server reply parsing in setgid mail application.

Affected:

GNU : Emacs 21.3

Original document

UBUNTU, [USN-76-1] Emacs vulnerability (10.02.2005)

Discuss:

Read or add your comments to this news (0 comments)

Emdro annotated text database engine memory leak
Published:		10.02.2005
Source:		SECUNIA
SecurityVulns ID:		4470
Type:		remote
Level:		5/10
Description:		MQL parser memory leak.

Affected:

EMDROS : Emdros 1.1

Original document

SECUNIA, [SA14204] Emdros MQL Parser Memory Leak Vulnerabilities (10.02.2005)

Discuss:

Read or add your comments to this news (0 comments)

Frox transparent FTP proxy protection bypass
Published:		10.02.2005
Source:		SECUNIA
SecurityVulns ID:		4471
Type:		remote
Level:		5/10
Description:		Deny ACLs may not work properly.

Affected:

FROX : Frox 0.7

Original document

SECUNIA, [SA14182] Frox Deny ACL Security Bypass Vulnerability (10.02.2005)

Discuss:

Read or add your comments to this news (0 comments)

Mailman mailing lists manager directory traversal
Published:		10.02.2005
Source:		FULL-DISCLOSURE
SecurityVulns ID:		4467
Type:		remote
Level:		5/10
Description:		It's possible to bypass filtering with URL like .../..../// and retrieve any file from from the system.

Affected:

GNU : Mailman 2.1

Original document

John Cartwright, [Full-Disclosure] Administrivia: List Compromised due to Mailman Vulnerability (10.02.2005)

Discuss:

Read or add your comments to this news (0 comments)

Multiple IBM DB2 bugs updated since 02.09.2004
Published:		10.02.2005
Source:		VULNWATCH
SecurityVulns ID:		3970
Type:		remote
Level:		8/10
Description:		Multiple bugs including buffer overflows.

Affected:		IBM : DB2 7.1
		IBM : DB2 7.2
		IBM : DB2 8.1

Original document		NGSSoftware Insight Security Research, [VulnWatch] Patch available for high risk IBM DB2 Universal Database flaw (10.02.2005)
		NGSSoftware Insight Security Research, IBM DB2 XML functions file creation vulnerabilities (#NISR05012005I) (06.01.2005)
		NGSSoftware Insight Security Research, IBM DB2 XML functions overflows (#NISR05012005H) (06.01.2005)
		NGSSoftware Insight Security Research, IBM DB2 to_char and to_date Denial Of Service (#NISR05012005G) (06.01.2005)
		NGSSoftware Insight Security Research, IBM DB2 Windows Permission Problems (#NISR05012005F) (06.01.2005)
		NGSSoftware Insight Security Research, IBM DB2 SATADMIN.SATENCRYPT buffer overflow (#NISR05012005E) (06.01.2005)
		NGSSoftware Insight Security Research, IBM DB2 JDBC Applet Server buffer overflow (#NISR05012005D) (06.01.2005)
		NGSSoftware Insight Security Research, IBM DB2 call buffer overflow (#NISR05012005C) (06.01.2005)
		NGSSoftware Insight Security Research, IBM DB2 libdb2.so buffer overflow (#NISR05012005B) (06.01.2005)
		NGSSoftware Insight Security Research, IBM DB2 db2fmp buffer overflow (#NISR05012005A) (06.01.2005)
		NGSSoftware Insight Security Research, IBM DB2 rec2xml buffer overflow vulnerability (#NISR2122004J) (24.12.2004)
		NGSSoftware Insight Security Research, IBM DB2 generate_distfile buffer overflow vulnerability (#NISR2122004L) (24.12.2004)
		NGSSoftware Insight Security Research, [VulnWatch] Patch available for critical IBM DB2 Universal Database flaws (06.10.2004)
		NGSSoftware Insight Security Research, [VulnWatch] Patch available for IBM DB2 Universal Database flaws (02.09.2004)

Discuss:

Read or add your comments to this news (0 comments)

BrightStor ARCserve Backup buffer overflow updated since 10.02.2005
Published:		14.02.2005
Source:		FULL-DISCLOSURE
SecurityVulns ID:		4468
Type:		remote
Level:		6/10
Description:		Discovery serice (UDP/41524) buffer overflow.

Affected:		CA : BrightStor ARCserve 2000
		CA : Brightstor ARCserve Backup 11.1
		CA : Brightstor ARCserve Backup 11.0
		CA : BrightStor ARCserve Backup 10.5
		CA : BrightStor ARCserve Backup 10.0
		CA : BrightStor ARCserve Backup 9.01

Original document		H D Moore, Re: BrightStor ARCserve Backup buffer overflow PoC (14.02.2005)
		IDEFENSE, [Full-Disclosure] iDEFENSE Security Advisory 02.09.05: CA BrightStor ARCserve Backup v11 Discovery Service Remote Buffer Overflow (10.02.2005)

Files:		BrightStor ARCserve Backup buffer overflow PoC
Discuss:		Read or add your comments to this news (0 comments)