apf firewall privilege escalation
Published:		14.01.2005
Source:		BUGTRAQ
SecurityVulns ID:		4362
Type:		local
Level:		5/10
Description:		Local user can bypass internal protection and execute administration commands.

Affected:

APF : apf 0.9

Original document

x90c, SB2005002: pron to bypass APF checking uid(0) routine (14.01.2005)

Discuss:

Read or add your comments to this news (0 comments)

OpenBSD TCP Retransmission Timeout Calculation Denial of Service
Published:		14.01.2005
Source:		SECUNIA
SecurityVulns ID:		4363
Type:		remote
Level:		6/10
Description:		Packets with specially crafted timestamp value can lead to denial of service.

Affected:		OPENBSD : OpenBSD 3.5
		OPENBSD : OpenBSD 3.6

Original document

SECUNIA, [SA13819] OpenBSD TCP Retransmission Timeout Calculation Denial of Service (14.01.2005)

Files:		OpenBSD 2.0 - 3.6 Remote DoS Exploit
Discuss:		Read or add your comments to this news (0 comments)

squid web cache proxy multiple bugs
Published:		14.01.2005
Source:		SECUNIA
SecurityVulns ID:		4365
Type:		remote
Level:		7/10
Description:		WCCP_I_SEE_YOU message WCCP (Web Cache Communication Protocol) DoS, gopher protocol buffer overflow.

Affected:

SQUID : squid 2.5

Original document

SECUNIA, [SA13825] Squid Two Vulnerabilities (14.01.2005)

Discuss:

Read or add your comments to this news (0 comments)

Apple iTunes playlist buffer overflow updated since 13.01.2005
Published:		14.01.2005
Source:		BUGTRAQ
SecurityVulns ID:		4356
Type:		remote
Level:		5/10
Description:		Overflow on multiple playlists format parsing (.m3u, .pls).

Affected:

APPLE : iTunes 4.7

Original document		IDEFENSE, iDEFENSE Security Advisory 01.13.05 - Apple iTunes Playlist Parsing Buffer Overflow Vulnerability (14.01.2005)
		APPLE, APPLE-SA-2005-01-11 iTunes 4.7.1 (13.01.2005)

Files:		PoC for iTunes on OS X 10.3.7
Discuss:		Read or add your comments to this news (0 comments)

Multiple gopherd bugs updated since 14.01.2005
Published:		01.10.2005
Source:		BUGTRAQ
SecurityVulns ID:		4364
Type:		remote
Level:		5/10
Description:		Integer overflows, format string bug in logging.

Affected:		UMN : gopherd 3.0
		UMN : gopher 3.0

Original document		DEBIAN, [SECURITY] [DSA 832-1] New gopher packages fix several buffer overflows (30.09.2005)
		DEBIAN, [SECURITY] [DSA 638-1] New gopher packages fix several vulnerabilities (14.01.2005)

Files:		UMN Gopher Client Buffer Overflows Exploit
Discuss:		Read or add your comments to this news (0 comments)