Dovecot IMAP server directory traversal
Published:		13.05.2006
Source:		BUGTRAQ
SecurityVulns ID:		6134
Type:		remote
Level:		5/10
Description:		Directory traversal in LIST command.

Affected:

DOVECOT : Dovecot 1.0

Original document

Timo Sirainen, Dovecot IMAP: Mailbox names list disclosure with mboxes (13.05.2006)

Discuss:

Read or add your comments to this news (0 comments)

Multiple Raydium game engine security vulnerabilities
Published:		13.05.2006
Source:		FULL-DISCLOSURE
SecurityVulns ID:		6135
Type:		remote
Level:		5/10
Description:		Buffer overflows, format string vulnerabilities, DoS conditions in both server and client parts.

Affected:

RADYIUM : Raydium 309

Original document

Luigi Auriemma, [Full-disclosure] Multiple vulnerabilities in Raydium rev 309 (13.05.2006)

Files:		Exploits Raydium <= SVN 309 multiple vulnerabilities
Discuss:		Read or add your comments to this news (0 comments)

Empire game DoS
Published:		13.05.2006
Source:		FULL-DISCLOSURE
SecurityVulns ID:		6137
Type:		remote
Level:		5/10
Description:		Uninitialized memory access.

Affected:

EMPIRE : Empire 4.3

Original document

Luigi Auriemma, [Full-disclosure] Server crash in Empire 4.3.2 (13.05.2006)

Files:		Exploits Empire <= 4.3.2 crash
Discuss:		Read or add your comments to this news (0 comments)

Multiple outgun game security vulnerabilities
Published:		13.05.2006
Source:		FULL-DISCLOSURE
SecurityVulns ID:		6138
Type:		remote
Level:		5/10
Description:		Buffer overflows, DoS conditions.

Affected:

OUTGUN : Outgun 1.0

Original document

Luigi Auriemma, [Full-disclosure] Multiple vulnerabilities in Outgun 1.0.3 bot 2 (13.05.2006)

Files:		Exploits Outgun <= 1.0.3 (bot 2) multiple vulnerabilities
Discuss:		Read or add your comments to this news (1 comments)

Daily web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)
Published:		13.05.2006
Source:
SecurityVulns ID:		6133
Type:		remote
Level:		5/10
Description:		PHP inclusions, SQL injections, directory traversals, crossite scripting, information leaks, etc.

Affected:		PHPBB : phpBB 2.0
		FLEXCHAT : FlexChat 2.0
		FOING : Foing 0.7

Original document		Dj_ReMix_20_(at)_hotmail.com, # MHG Security Team --- Gallery Upload Vulnerabilities (13.05.2006)
		Mster-X_(at)_hotmail.com, PHP Live Helper ASP(chat.php) XSS (13.05.2006)
		rgod_(at)_autistici.org, PHPBB 2.0.20 persistent issues with avatars (13.05.2006)
		botan_(at)_linuxmail.org, [Kurdish Security # 7] Foing Remote File Include Vulnerability [PHPBB] (13.05.2006)
		r0t, FlexChat XSS (13.05.2006)

Files:		Exploits PhpBB <= v2.0.20 Admin/Restore Database/default_lang remote commands execution
Discuss:		Read or add your comments to this news (0 comments)

GNUNet secure networking library DoS
Published:		13.05.2006
Source:		FULL-DISCLOSURE
SecurityVulns ID:		6139
Type:		library
Level:		5/10
Description:		Endless loop on zero sized UDP packet.

Affected:

GNUNET : GNUnet 0.7

Original document

Luigi Auriemma, [Full-disclosure] Socket unreachable in GNUnet rev 2780 (13.05.2006)

Files:		UDP packet generator
Discuss:		Read or add your comments to this news (0 comments)

Apple QuickTime multiple security vulnerabilities updated since 12.05.2006
Published:		13.05.2006
Source:		BUGTRAQ
SecurityVulns ID:		6129
Type:		remote
Level:		7/10
Description:		Buffer overflow on MOV files udta atom parsing. Buffer overflow on FPX files parsing. H.264 protocol parsing heap overflow.

Affected:		APPLE : QuickTime 7.0
		APPLE : QuickTime 10.3

Original document		CERT, US-CERT Technical Cyber Security Alert TA06-132B -- Apple QuickTime Vulnerabilities (13.05.2006)
		MCAFEE, [Full-disclosure] Apple QuickDraw/QuickTime Multiple Vulnerabilities (12.05.2006)
		ZDI, [Full-disclosure] ZDI-06-015: Apple QuickTime H.264 Parsing Heap Overflow Vulnerability (12.05.2006)
		EEYE, [Full-disclosure] [EEYEB-20060307] Apple QuickTime FPX Integer Overflow (12.05.2006)
		Sowhat ., Apple QuickTime udta ATOM Heap Overflow (12.05.2006)

Discuss:

Read or add your comments to this news (0 comments)

Multiple Genecys game security vulnerabilities
Published:		13.05.2006
Source:		FULL-DISCLOSURE
SecurityVulns ID:		6136
Type:		remote
Level:		5/10
Description:		Buffer overflow, DoS conoditions.

Affected:

GENECYS : Genecys 0.2

Original document

Luigi Auriemma, [Full-disclosure] Buffer-overflow and NULL pointer crash in Genecys 0.2 (13.05.2006)

Files:		Exploits Genecys <= 0.2 buffer-overflow and NULL pointer crash
Discuss:		Read or add your comments to this news (0 comments)