Apache2::Request perl library DoS
Published:		14.03.2006
Source:		FULL-DISCLOSURE
SecurityVulns ID:		5894
Type:		library
Level:		5/10
Description:		CPU consumption.

Affected:

LIBAPAREQ : libapreq 2.04

Original document

DEBIAN, [SECURITY] [DSA 1000-1] New Apache2::Request packages fix denial of service (14.03.2006)

Discuss:

Read or add your comments to this news (0 comments)

Daily web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)
Published:		14.03.2006
Source:
SecurityVulns ID:		5892
Type:		remote
Level:		5/10
Description:		PHP inclusions, SQL injections, directory traversals, crossite scripting, information leaks, etc.

Affected:		DRUPAL : Drupal 4.5
		GEMINI : Gemini 2.0
		CGISESSION : CGI::Session 4.03

Original document		SECUNIA, [SA19211] CGI::Session Insecure Default Session File Permissions (14.03.2006)
		SECUNIA, [SA19049] Gemini "rtcDescription$RadEditor1" Script Insertion Vulnerability (14.03.2006)
		SECUNIA, [SA19216] vCard Cross-Site Scripting Vulnerabilities (14.03.2006)
		DRUPAL, [DRUPAL-SA-2006-004] Drupal 4.6.6 / 4.5.8 fixes mail header injection issue (14.03.2006)
		DRUPAL, [DRUPAL-SA-2006-002] Drupal 4.6.6 / 4.5.8 fixes XSS issue (14.03.2006)
		DRUPAL, [DRUPAL-SA-2006-003] Drupal 4.6.6 / 4.5.8 fixes session fixation issue (14.03.2006)
		DRUPAL, [DRUPAL-SA-2006-001] Drupal 4.6.6 / 4.5.8 fixes access control issue (14.03.2006)

Discuss:

Read or add your comments to this news (0 comments)

MacOS X Mail.app mail client buffer overflow
Published:		14.03.2006
Source:		BUGTRAQ
SecurityVulns ID:		5893
Type:		client
Level:		6/10
Description:		Buffer overflow on MacMIME format parsing.

Affected:

APPLE : Mac OS X 10.4

Original document

Kevin Finisterre, DMA[2006-0313a] - 'Apple OSX Mail.app RFC1740 Real Name Buffer Overflow' (14.03.2006)

Discuss:

Read or add your comments to this news (0 comments)