Leafnode NNTP proxy DoS updated since 06.05.2005
Published:		10.06.2005
Source:		BUGTRAQ
SecurityVulns ID:		4771
Type:		remote
Level:		5/10
Description:		DoS ifserver closes connection before all data received.

Affected:

LEAFNODE : leafnode 1.11

Original document		Matthias Andree, leafnode security announcement leafnode-SA-2005-02 (CAN-2005-1911) (10.06.2005)
		Matthias Andree, leafnode security announcement leafnode-SA-2005-01 (06.05.2005)

Discuss:

Read or add your comments to this news (0 comments)

tattle SSH attacks protection script shell characters problem
Published:		10.06.2005
Source:		BUGTRAQ
SecurityVulns ID:		4872
Type:		remote
Level:		5/10
Description:		Insufficient filtering of command parameters during external program incovation allows remote code execution.

Affected:

TATTLE : tattle 0.2

Original document

b0iler, remote command execution in 'tattle' (10.06.2005)

Discuss:

Read or add your comments to this news (0 comments)

C-JDBC clastered database access interface information leak
Published:		10.06.2005
Source:		SECUNIA
SecurityVulns ID:		4875
Type:		library
Level:		5/10
Description:		Vulnerability in caching mechanism allows to access cached data without access rights validation.

Affected:

CJDBC : C-JDBC 1.3

Original document

SECUNIA, [SA15627] C-JDBC Exposure of Cached Results (10.06.2005)

Discuss:

Read or add your comments to this news (0 comments)

Pragma TelnetServer crossite scripting
Published:		10.06.2005
Source:		SECUNIA
SecurityVulns ID:		4878
Type:		remote
Level:		5/10
Description:		Crossite scripting if log files are stored in HTML format.

Affected:

PRAGMA : Pragma TelnetServer 6.0

Original document

SECUNIA, [SA15642] Pragma TelnetServer HTML Logs Script Insertion Vulnerability (10.06.2005)

Discuss:

Read or add your comments to this news (0 comments)

Multiple AIX privilege escalations
Published:		10.06.2005
Source:		SECUNIA
SecurityVulns ID:		4879
Type:		local
Level:		6/10
Description:		invscout, diagTasksWebSM, getlvname utilities buffer overflows.

Affected:		IBM : AIX 5.1
		IBM : AIX 5.2
		IBM : AIX 5.3

Original document

SECUNIA, [SA15636] AIX Multiple Privilege Escalation Vulnerabilities (10.06.2005)

Discuss:

Read or add your comments to this news (0 comments)

MacOS X launchd synbolic links race conditions
Published:		10.06.2005
Source:		BUGTRAQ
SecurityVulns ID:		4873
Type:		local
Level:		5/10
Description:		Unsafe temporary files creation.

Affected:

APPLE : Mac OS X 10.4

Original document

advisories, [ Suresec Advisories ] - Mac OS X 10.4 - launchd local root vulnerability (10.06.2005)

Files:		Mac OS X 10.4 launchd race condition exploit
Discuss:		Read or add your comments to this news (0 comments)

TFTPD 2000 TFTP Server DoS
Published:		10.06.2005
Source:		BUGTRAQ
SecurityVulns ID:		4871
Type:		remote
Level:		5/10

Affected:

TFTPD2000 : TFTPD 2000 1.0

Original document

Josh Zlatin-Amishav, tftp 2000 1.0.0.1 (10.06.2005)

Discuss:

Read or add your comments to this news (0 comments)

xmysqladmin MySQL administration utility symbolic links problem
Published:		10.06.2005
Source:		BUGTRAQ
SecurityVulns ID:		4874
Type:		local
Level:		5/10
Description:		Unsafe temporary files creation.

Affected:

XMYSQLADMIN : xmysqladmin 1.0

Original document

ZATAZ.net, xmysqladmin insecure temporary file creation (10.06.2005)

Discuss:

Read or add your comments to this news (0 comments)

SGI Irix rpc.mountd privilege escalation
Published:		10.06.2005
Source:		SECUNIA
SecurityVulns ID:		4877
Type:		remote
Level:		5/10
Description:		Under some conditions write access is possible to read only exports.

Affected:

SGI : IRIX 6.5

Original document

SECUNIA, [SA15619] SGI IRIX rpc.mountd "read-mostly" Exports Read/Write Access (10.06.2005)

Discuss:

Read or add your comments to this news (0 comments)

Sukria backup manager weak repository permissions updated since 10.06.2005
Published:		12.07.2005
Source:		SECUNIA
SecurityVulns ID:		4876
Type:		local
Level:		5/10
Description:		Repository is world readable. Insecure temporary files creation.

Affected:

SUKRIA : Backup Manager 0.5

Original document		SECUNIA, [SA15989] Backup Manager Unspecified Insecure Temporary File Creation (12.07.2005)
		SECUNIA, [SA15615] Backup Manager Exposure of Archive Repository (10.06.2005)

Discuss:

Read or add your comments to this news (0 comments)