Pavuk buffer overflow updated since 27.07.2004
Published:		13.11.2004
Source:		BUGTRAQ
SecurityVulns ID:		3868
Type:		remote
Level:		5/10
Description:		Buffer overflow on parsing digest authentication.

Affected:

PAVUK : pavuk 0.9

Original document		GENTOO, [ GLSA 200411-19 ] Pavuk: Multiple buffer overflows (13.11.2004)
		GENTOO, [ GLSA 200407-19 ] Pavuk: Digest authentication helper buffer overflow (27.07.2004)

Files:		Pavuk Digest Authentication Buffer Overflow exploit
Discuss:		Read or add your comments to this news (0 comments)

Cisco Security Agent buffer overflow
Published:		13.11.2004
Source:		BUGTRAQ
SecurityVulns ID:		4186
Type:		remote
Level:		7/10
Description:		Race conditions leading to buffer overflow.

Affected:

CISCO : Cisco Security Agent 4.0

Original document

CISCO, Cisco Security Advisory: Crafted Timed Attack Evades Cisco Security Agent Protections (13.11.2004)

Discuss:

Read or add your comments to this news (0 comments)

unarj buffer overflow
Published:		13.11.2004
Source:		BUGTRAQ
SecurityVulns ID:		4187
Type:		remote
Level:		5/10
Description:		Buffer overflow on oversized archive filename.

Affected:

UNARJ : unarj 2.63

Original document

SECUNIA, [SA13177] UNARJ Filename Handling Buffer Overflow Vulnerability (13.11.2004)

Discuss:

Read or add your comments to this news (0 comments)

CGI bugs updated since 10.11.2004
Published:		13.11.2004
Source:
SecurityVulns ID:		4170
Type:		remote
Level:		5/10

Affected:		WEBCALENDAR : WebCalendar 0.9
		PHPBB : phpBB 2.0
		VBULLETIN : vBulletin 3.0
		PHPWEBSITE : phpWebSite 0.9
		PHORUM : Phorum 5.0
		MANTIS : Mantis 0.19
		EGROUPWARE : eGroupWare 1.0
		JAF : JAF CMS 3.0
		NUCLEUS : Nucleus 3.1
		INFUSEUM : Infuseum ASP Message Board 2.2
		PHPBT : PHP Bug Traq 0.9
		TWIKI : TWiki 20030201

Original document		Hans Ulrich Niedermann, [Full-Disclosure] TWiki search function allows arbitrary shell command execution (13.11.2004)
		jessica soules, phpBB Code EXEC (v2.0.10) (13.11.2004)
		jessica soules, SQL Injection in phpBT (bug.php) (13.11.2004)
		VBULLETIN, Vulnerability not with vBulletin (13.11.2004)
		Janek Vind, [waraxe-2004-SA#037 - Sql injection bug in Phorum 5.0.12 and older versions] (13.11.2004)
		Maestro De-Seguridad, security hole (http response splitting) in phpwebsite (13.11.2004)
		Dr. Death, SQL injection in vBulletin forums (last10.php) (13.11.2004)
		MANTIS, [SA13111] Mantis Information Disclosure Vulnerabilities (11.11.2004)
		SECUNIA, [SA13137] Infuseum ASP Message Board Unspecified Cross-Site Scripting and SQL Injection (11.11.2004)
		SECUNIA, [SA13136] Nucleus Unspecified Cross-Site Scripting and SQL Injection (11.11.2004)
		SECUNIA, [SA13110] eGroupWare Unspecified "JiNN" Vulnerability (11.11.2004)
		Jose Antonio, Multiple Vulnerabilities in WebCalendar (11.11.2004)
		y3dips_(at)_www.securityfocus.com, Vulnerabilities in JAF CMS (10.11.2004)

Discuss:

Read or add your comments to this news (0 comments)