Multiple Macromedia flash player security vulnerabilities
Published:		11.07.2006
Source:		FORTINET
SecurityVulns ID:		6360
Type:		client
Level:		7/10
Description:		Multiple security vulnerabilities lead to code execution with possibility for silent malware installation.

Affected:

ADOBE : Flash Player 8.0

Original document

FORTINET, Vulnerability in Macromedia Flash Player Could Allow Remote Code Execution (11.07.2006)

Discuss:

Read or add your comments to this news (0 comments)

Multiple FlexWATCH network camera security vulnerabilities
Published:		11.07.2006
Source:		BUGTRAQ
SecurityVulns ID:		6356
Type:		remote
Level:		5/10
Description:		Crossite scripting, authentication bypass.

Affected:

FLEXWATCH : FlexWATCH Network Camera 3.0

Original document

info_(at)_digitalarmaments.com, Digital Armaments Security Advisory 10.07.2006: Flexwath Authorization Bypassing and XSS Vulnerability (11.07.2006)

Discuss:

Read or add your comments to this news (0 comments)

ASP.NET source code disclosure
Published:		11.07.2006
Source:		MICROSOFT
SecurityVulns ID:		6361
Type:		remote
Level:		6/10
Description:		It's possible to retrieve source codes for scripts and executable, except protected file extensions.

Affected:		MICROSOFT : Windows XP
		MICROSOFT : Windows 2003 Server
		MICROSOFT : .NET Framework 2.0

Original document

MICROSOFT, Microsoft Security Bulletin MS06-033 Vulnerability in ASP.NET Could Allow Information Disclosure (917283) (11.07.2006)

Files:		Microsoft Security Bulletin MS06-033 Vulnerability in ASP.NET Could Allow Information Disclosure (917283)
Discuss:		Read or add your comments to this news (0 comments)

Daily web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)
Published:		11.07.2006
Source:
SecurityVulns ID:		6355
Type:		remote
Level:		5/10
Description:		PHP inclusions, SQL injections, directory traversals, crossite scripting, information leaks, etc.

Affected:		RANDSHOP : randshop 1.1
		EDGEWALL : Trac 0.9
		SQUERY : SQuery 4.5
		OTTOMAN : Ottoman CMS 1.1
		PCCOOKBOOK : pc_cookbook 0.3
		PHPPOLLS : phpPolls 1.0
		FARSINEWS : Farsinews 3.0
		BLUEDOJO : Graffiti Forums 1.0
		SQUERY : SQuery 4.0
		SQUERY : SQuery 3.9
		EJ3 : TOPo 2.1
		SABDRIMER : Sabdrimer PRO 2.2

Original document		SECUNIA, [SA20958] Trac "reStructuredText" Directives Vulnerability (11.07.2006)
		A.nosrati, Sabdrimer PRO (v.2.2.4 ) Remote File Include Vulnerability (11.07.2006)
		SHiKaA, SQuery <= 4.5(libpath) Remote File Inclusion Exploit (11.07.2006)
		paisterist.nst_(at)_gmail.com, Graffiti Forums v1.0 SQL Injection Vulnerabilities (11.07.2006)
		StorM BoY, MT rmcek Toplist v2.2 Version Microsoft Access Driver ( MDB ) Download (11.07.2006)
		Saudi Hackrz, randshop <= 1.1.x (index.php) Remote File Inclusion Vulnerability (11.07.2006)
		armin390_(at)_9mail.com, Local file inclusion in Farsinews3.0BETA1 (11.07.2006)
		alp_eren_(at)_ayyildiz.org, phpPolls 1.0.3 Administration ByPass (11.07.2006)
		matdhule_(at)_gmail.com, [ECHO_ADV_37$2006] pc_cookbook Mambo/Joomla Component <= v0.3 Remote File Include Vulnerabilities (11.07.2006)

Files:		EJ3 TOPO 2.2 Remote Code Execution Exploit
		Ottoman CMS <= 1.1.3 Remote File Inclusion Exploit
Discuss:		Read or add your comments to this news (0 comments)

Samba file server DoS
Published:		11.07.2006
Source:		BUGTRAQ
SecurityVulns ID:		6357
Type:		remote
Level:		5/10
Description:		Memory exhaustion in smbd by issuing large number of share connection requests.

Original document

SAMBA, [ANNOUNCEMENT] Samba 3.0.1 - 3.0.22: memory exhaustion DoS against smbd (11.07.2006)

Files:		Samba Internal Data Structures Denial of Service Vulnerability Exploit
Discuss:		Read or add your comments to this news (0 comments)

Juniper DX crossite scripting
Published:		11.07.2006
Source:		BUGTRAQ
SecurityVulns ID:		6358
Type:		remote
Level:		5/10
Description:		Web administration system log crossite scripting thorugh username.

Affected:

JUNIPER : Juniper DX 5.1

Original document

Darren Bounds, Juniper Networks DX Web Administration Persistent System Log XSS Vulnerability (11.07.2006)

Discuss:

Read or add your comments to this news (0 comments)

WinGate directory traversal
Published:		11.07.2006
Source:		BUGTRAQ
SecurityVulns ID:		6359
Type:		remote
Level:		6/10
Description:		Directory traversal with IMAP.

Affected:

QBIK : Wingate 6.1

Original document

SECUNIA, [SA20707] WinGate IMAP Commands Directory Traversal Vulnerability (11.07.2006)

Files:		Imap directory traversal file listing, retrieval and deletion tools
Discuss:		Read or add your comments to this news (0 comments)

Microsoft Internet Information services buffer overflow updated since 11.07.2006
Published:		22.07.2006
Source:		MICROSOFT
SecurityVulns ID:		6362
Type:		local
Level:		6/10
Description:		Buffer overflow in ASP files processing leads to privilege escalation.

Affected:		MICROSOFT : Windows 2000 Server
		MICROSOFT : Windows 2000 Professional
		MICROSOFT : Windows XP
		MICROSOFT : Windows 2003 Server

Original document		Brett Moore, ASP.DLL Include File Buffer Overflow (22.07.2006)
		MICROSOFT, Microsoft Security Bulletin MS06-034 Vulnerability in Microsoft Internet Information Services using Active Server Pages Could Allow Remote Code Execution (917537) (11.07.2006)

Files:		Microsoft Security Bulletin MS06-034 Vulnerability in Microsoft Internet Information Services using Active Server Pages Could Allow Remote Code Execution (917537)
Discuss:		Read or add your comments to this news (0 comments)

Multiple Microsoft Windows Server service security vulnerabilities updated since 11.07.2006
Published:		21.08.2006
Source:		MICROSOFT
SecurityVulns ID:		6363
Type:		remote
Level:		8/10
Description:		Kernel mode heap overflow on mailslots processing. Information leak from SMB buffers.

Affected:		MICROSOFT : Windows 2000 Server
		MICROSOFT : Windows 2000 Professional
		MICROSOFT : Windows XP
		MICROSOFT : Windows 2003 Server

Original document		CORE SECURITY TECHNOLOGIES ADVISORIES, CORE-2006-0714: Microsoft SRV.SYS SMB_COM_TRANSACTION Denial of Service (16.08.2006)
		Gerardo Richarte, Mailslot bug (MS06-035) vs non-Mailslot bug (CVE-2006-3942) (16.08.2006)
		EEYE, [Full-disclosure] EEYE: Free scanning tool for critical MS06-040 flaw (10.08.2006)
		MICROSOFT, Microsoft Security Bulletin MS06-040 Vulnerability in Server Service Could Allow Remote Code Execution (921883) (08.08.2006)
		X-FORCE, ISS Protection Brief: Vulnerability in Server Driver could result in Denial of Service (29.07.2006)
		MCAFEE, [Full-disclosure] Microsoft SMB Information Disclosure Vulnerability CVE-2006-1315 (12.07.2006)
		TIPPINGPOINT, TSRT-06-02: Microsoft SRV.SYS Mailslot Ring0 Memory Corruption Vulnerability (11.07.2006)
		MICROSOFT, Microsoft Security Bulletin MS06-035 Vulnerability in Server Service Could Allow Remote Code Execution (917159) (11.07.2006)

Files:		Microsoft NetpIsRemote() MSO6-040 Overflow exploit (MetaSploit)
		MS06-040 Remote Code Execution Proof of Concept
		Microsoft Windows CanonicalizePathName() Remote Code Execution Exploit
		Microsoft SRV.SYS Mailslot Ring0 Memory Corruption(MS06-035) Exploit
		Microsoft Security Bulletin MS06-040 Vulnerability in Server Service Could Allow Remote Code Execution (921883)
		Microsoft Security Bulletin MS06-035 Vulnerability in Server Service Could Allow Remote Code Execution (917159)
Discuss:		Read or add your comments to this news (0 comments)

Microsoft Windows DHCP client buffer overflow updated since 11.07.2006
Published:		30.08.2006
Source:		MICROSOFT
SecurityVulns ID:		6364
Type:		remote
Level:		7/10
Description:		Buffer overflow on DHCP server response parsing.

Affected:		MICROSOFT : Windows 2000 Server
		MICROSOFT : Windows 2000 Professional
		MICROSOFT : Windows XP
		MICROSOFT : Windows 2003 Server

Original document		Mariano Nuсez Di Croce, CYBSEC - Security Advisory: Microsoft Windows DHCP Client Service Remote Buffer Overflow (30.08.2006)
		Mariano Nuсez Di Croce, CYBSEC - Security Pre-Advisory: Microsoft Windows DHCP Client Service Remote Buffer Overflow (11.07.2006)
		MICROSOFT, Microsoft Security Bulletin MS06-036 Vulnerability in DHCP Client Service Could Allow Remote Code Execution (914388) (11.07.2006)

Discuss:

Read or add your comments to this news (0 comments)