ClamAV antivirus DoS updated since 08.12.2006
Published:		10.12.2006
Source:		BUGTRAQ
SecurityVulns ID:		6899
Type:		remote
Level:		5/10
Description:		High recursion of MIME parts causes antivirus to crash.

Affected:

CLAMAV : ClamAV 0.88

Original document		DEBIAN, [SECURITY] [DSA 1232-1] New clamav packages fix denial of service (10.12.2006)
		Tomasz Kojm, Re: Multiple Vendor Unusual MIME Encoding Content Filter Bypass (08.12.2006)
		3APA3A, Re[2]: Multiple Vendor Unusual MIME Encoding Content Filter Bypass (08.12.2006)
		Hendrik Weimer, Multiple Vendor Unusual MIME Encoding Content Filter Bypass (08.12.2006)

Discuss:

Read or add your comments to this news (0 comments)

Filezilla FTP Server DoS
Published:		10.12.2006
Source:		MILW0RM
SecurityVulns ID:		6912
Type:		remote
Level:		5/10
Description:		Crash on invalid FTP commands sequence.

Affected:

FILEZILLA : Filezilla 0.9

Files:		Filezilla FTP Server 0.9.20 beta / 0.9.21 "LIST", "NLST" and "NLST -al" Denial Of Service
		Exploits Filezilla FTP Server 0.9.20 beta / 0.9.21 "STOR" Denial Of Service
Discuss:		Read or add your comments to this news (0 comments)

Daily web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)
Published:		10.12.2006
Source:
SecurityVulns ID:		6908
Type:		remote
Level:		5/10
Description:		PHP inclusions, SQL injections, directory traversals, crossite scripting, information leaks, etc.

Affected:		KDLAND : KDPics 1.16
		PRONEWS : ProNews 1.5
		SCRIPTHP : Messageriescripthp 2.0
		SCRIPTHP : AnnonceScriptHP 2.0
		MXBB : mxBB Module Profile Control Panel 0.91

Original document		bd0rk_(at)_hackermail.com, mxBB Module Profile Control Panel 0.91c Remote File Include Vulnerability (10.12.2006)
		Hagbard Celine, [Full-disclosure] DadaIMC default configuration vulnerability (10.12.2006)
		Mr_KaLiMaN, AnnonceScriptHP V2.0 Multiple Vulnerabilities (10.12.2006)
		Mr_KaLiMaN, Messageriescripthp V2.0 XSS & SQL Injection (10.12.2006)
		Mr_KaLiMaN, ProNews V1.5 XSS & SQL Injection (10.12.2006)
		Mr_KaLiMaN, KDPics Multiple Vulnerabities (10.12.2006)

Files:		TorrentFlux 2.2 Database Credentials Exposure Exploit
		TorrentFlux 2.2 Command Execution Exploit
Discuss:		Read or add your comments to this news (0 comments)

AOL ActiveX element buffer overflow
Published:		10.12.2006
Source:		SECUNIA
SecurityVulns ID:		6909
Type:		client
Level:		6/10
Description:		Buffer overflow in CDDBControlAOL.CDDBAOLControl ActiveX control.

Affected:		AOL : AOL 8.0
		AOL : AOL 9.0
		AOL : AOL 7.0

Original document

SECUNIA, [SA23043] AOL CDDBControl ActiveX Control "SetClientInfo()" Buffer Overflow (10.12.2006)

Discuss:

Read or add your comments to this news (0 comments)

Net-SNMP security protection bypass
Published:		10.12.2006
Source:		SECUNIA
SecurityVulns ID:		6911
Type:		remote
Level:		5/10
Description:		Under some conditions write access may be obtained to read-only community.

Affected:

NETSNMP : Net-SNMP 5.3

Original document

SECUNIA, [SA23285] Net-SNMP "rocommunity" and "rouser" Security Bypass (10.12.2006)

Discuss:

Read or add your comments to this news (0 comments)

Newtone ImageKit ActiveX buffer overflow
Published:		10.12.2006
Source:		SECUNIA
SecurityVulns ID:		6910
Type:		client
Level:		5/10
Description:		Buffer overflow in Newtone ImageKit ActiveX Control.

Affected:		NEWTONE : Newtone ImageKit 5
		NEWTONE : Newtone ImageKit 6
		CASIO : Casio Photo Loader 3.0

Original document

SECUNIA, [SA23286] Newtone ImageKit ActiveX Control Unspecified Buffer Overfow (10.12.2006)

Discuss:

Read or add your comments to this news (0 comments)