Unauthorized Barracuda Spam Firewall message relaying
Published:		12.02.2005
Source:		BUGTRAQ
SecurityVulns ID:		4476
Type:		remote
Level:		5/10
Description:		If there is a whitelisted domain any mail originated from this domain is relayed.

Affected:

BARRACUDANETWORK : Barracuda Spam Firewall 3.1

Original document

Sean Sosik-Hamor, Barracuda Spam Firewall <= 3.1.10 acts as open relay for whitelisted senders. (12.02.2005)

Discuss:

Read or add your comments to this news (0 comments)

KDE desktop manager dcopidlng script symbolic links problem
Published:		12.02.2005
Source:		BUGTRAQ
SecurityVulns ID:		4477
Type:		local
Level:		5/10
Description:		Unsafe temporary files handling.

Affected:

KDE : kdelibs 3.3

Original document

Davide Madrisan, insecure temporary file creation in kdelibs 3.3.2 (12.02.2005)

Discuss:

Read or add your comments to this news (0 comments)

sympa mailling list manager buffer overflow
Published:		12.02.2005
Source:		BUGTRAQ
SecurityVulns ID:		4478
Type:		local
Level:		5/10
Description:		Buffer overflow in setuid sympa script.

Affected:

SYMPA : sympa 3.3

Original document

DEBIAN, [SECURITY] [DSA 677-1] New sympa packages fix potential arbitrary code execution (12.02.2005)

Discuss:

Read or add your comments to this news (0 comments)

rwhod (remote who daemon) DoS
Published:		12.02.2005
Source:		BUGTRAQ
SecurityVulns ID:		4479
Type:		remote
Level:		5/10

Affected:

RWHOD : rwhod 0.17

Original document

DEBIAN, [SECURITY] [DSA 678-1] New netkit-rwho packages fix denial of service (12.02.2005)

Discuss:

Read or add your comments to this news (0 comments)

ZoneAlarm personal firewall DoS
Published:		12.02.2005
Source:		FULL-DISCLOSURE
SecurityVulns ID:		4480
Type:		local
Level:		4/10
Description:		NtConnectPort() API hook allows invalid pointer dereference.

Affected:

ZONELABS : ZoneAlarm 5.1

Original document

IDEFENSE, [Full-Disclosure] iDEFENSE Security Advisory 02.11.05: ZoneAlarm 5.1 Invalid Pointer Dereference Vulnerability (12.02.2005)

Discuss:

Read or add your comments to this news (0 comments)

PHP/ASP/CGI web applications security bugs updated since 08.02.2005
Published:		12.02.2005
Source:
SecurityVulns ID:		4448
Type:		remote
Level:		5/10
Description:		PHP inclusions, SQL injections, directory traversals, crossite scripting, etc.

Affected:		WWWBOARD : WWWboard 2.0
		WORDPRESS : WordPress 1.2
		PHPFUSION : PHP-Fusion 4.01
		WWWBOARD : WWWBoard 2.1
		PERLDESK : PerlDesk 1.0
		CHIPMUNK : Chipmunk forum
		BXCP : BXCP 0.3
		CMSCORE : CMSCore
		XGB : xGB 2.0
		MYPHP : MyPHP 1.0
		ASPJAR : ASPJar 1.0

Original document		farhad koosha, ASPjar guestbook (Injection in login page) (12.02.2005)
		SECUNIA, [SA14205] MyPHP Forum Multiple SQL Injection Vulnerabilities (11.02.2005)
		hio hou, [Full-Disclosure] XSS VULNERABILITY AT MODULE PostWrap (09.02.2005)
		SECUNIA, [SA14181] xGB Administrative User Authentication Bypass Vulnerability (09.02.2005)
		SECUNIA, [SA14142] CMScore Multiple SQL Injection Vulnerabilities (09.02.2005)
		SECUNIA, [SA14141] BXCP "show" Local File Inclusion Vulnerability (09.02.2005)
		SECURITEAM, [UNIX] Multiple SQL Injection Vulnerabilties in Chipmunk Forum (09.02.2005)
		thegreatone2176_(at)_yahoo.com, php-fusion 4.x vuln (08.02.2005)
		deluxe_(at)_security-project.org, [SePro Bugtraq] SQL-Injection in PerlDesk 1.x (08.02.2005)
		kreon, WordPress 1.2.x SQL Injection Advisory (08.02.2005)
		kreon, WordPress 1.2.x XSS Advisory (08.02.2005)
		Pedram hayati, [PersianHacker.NET 200502-05] WWWoard passwd (08.02.2005)

Discuss:

Read or add your comments to this news (0 comments)

xpcd PhotoCD viewer buffer overflow updated since 10.08.2003
Published:		12.02.2005
Source:		BUGTRAQ
SecurityVulns ID:		3048
Type:		local
Level:		5/10
Description:		Buffer overflow in xpcd-svga on oversized HOME environment variable.

Affected:

XPCD : xpcd 2.08

Original document		DEBIAN, [SECURITY] [DSA 676-1] New xpcd packages fix arbitrary code execution as root (12.02.2005)
		MANDRAKE, MDKSA-2004:053 - Updated xpcd package fix vulnerabilities (03.06.2004)
		DEBIAN, [SECURITY] [DSA-368-1] New xpcd packages fix buffer overflow (10.08.2003)

Discuss:

Read or add your comments to this news (0 comments)

WinFTP FTP Server buffer overflows updated since 12.02.2005
Published:		20.02.2005
Source:		UNL0CK
SecurityVulns ID:		4481
Type:		remote
Level:		5/10
Description:		Buffer overflows in different FTP commands.

Affected:

WINFTP : WinFTP 1.6

Original document		Donato Ferrante, [Full-disclosure] Unicode Buffer Overflow in WinFtp Server 1.6.8 (17.08.2005)
		Dark, #11 by unl0ck team (12.02.2005)

Discuss:

Read or add your comments to this news (0 comments)