JunkBuster filtering proxy multiple vulnerabilities
Published:		14.04.2005
Source:		BUGTRAQ
SecurityVulns ID:		4692
Type:		remote
Level:		5/10
Description:		Heap corruption, content spoofing.

Affected:

JUNKBUSTER : Junkbuster 2.0

Original document

GENTOO, [ GLSA 200504-11 ] JunkBuster: Multiple vulnerabilities (14.04.2005)

Discuss:

Read or add your comments to this news (0 comments)

Squid proxy cache double memory free vulnerability
Published:		14.04.2005
Source:		BUGTRAQ
SecurityVulns ID:		4694
Type:		client
Level:		6/10
Description:		Double memory free on aborted PUT or POST request.

Affected:

SQUID : squid 2.5

Original document

UBUNTU, [Full-disclosure] [USN-111-1] Squid vulnerability (14.04.2005)

Discuss:

Read or add your comments to this news (0 comments)

PHP multiple vulnerabilities updated since 13.04.2005
Published:		14.04.2005
Source:		NTBUGTRAQ
SecurityVulns ID:		4684
Type:		remote
Level:		5/10
Description:		Integer overflows on EXIF tags parsing.

Affected:		PHP : PHP 4.3
		PHP : PHP 5.0

Original document		UBUNTU, [Full-disclosure] [USN-112-1] PHP4 vulnerabilities (14.04.2005)
		NGSSoftware Insight Security Research, Multiple medium risk flaws fixed in new version of PHP (late advisory) (13.04.2005)

Discuss:

Read or add your comments to this news (0 comments)

Multiple Microsoft Internet Explorer memory corruptions updated since 13.04.2005
Published:		14.04.2005
Source:		MICROSOFT
SecurityVulns ID:		4675
Type:		client
Level:		6/10
Description:		Memory corruptions of different types, including buffer overflows.

Affected:		MICROSOFT : Internet Explorer 5.5
		MICROSOFT : Internet Explorer 6.0

Original document		3APA3A, Internet Explorer wininet.dll URL parsing memory corruption details (14.04.2005)
		IDEFENSE, iDEFENSE Security Advisory 04.12.05: Microsoft Internet Explorer DHTML Engine Race Condition Vulnerability (13.04.2005)
		IDEFENSE, iDEFENSE Security Advisory 04.12.05: Microsoft Windows Internet Explorer Long Hostname Heap Corruption Vulnerability (13.04.2005)
		MICROSOFT, Microsoft Security Bulletin MS05-020 Cumulative Security Update for Internet Explorer (890923) (13.04.2005)

Files:		Internet Exploiter 2: a remote exploit for MSIE DHTML Object memory corruption vulnerability (MS05-20)
		Ms05-020 Content Advisor Memory Corruption Vulnerability POC
		Microsoft Security Bulletin MS05-020 Cumulative Security Update for Internet Explorer (890923)
Discuss:		Read or add your comments to this news (0 comments)

IBM WebSphere application server information leak
Published:		14.04.2005
Source:		BUGTRAQ
SecurityVulns ID:		4691
Type:		remote
Level:		6/10
Description:		It's possible to obtain JSP page source code by requesting non-existing virtual host.

Affected:

IBM : WebSphere 6.0

Original document

SPI Labs, IBM WebSphere Widespread configuration JSP disclosure (14.04.2005)

Discuss:

Read or add your comments to this news (0 comments)

LG mobile phones DoS
Published:		14.04.2005
Source:		BUGTRAQ
SecurityVulns ID:		4693
Type:		remote
Level:		5/10
Description:		Phone crashes on corrupted MIDI file.

Affected:

LG : U8120

Original document

Luca Ercoli, LG U8120 Mobile Phone Denial of Service (14.04.2005)

Discuss:

Read or add your comments to this news (0 comments)

WinHex editor buffer overflow
Published:		14.04.2005
Source:		UNL0CK
SecurityVulns ID:		4695
Type:		local
Level:		4/10
Description:		Buffer overflow on oversized file name.

Affected:

XWAYS : WinHex 12.05

Original document

darkeagle, WinHex 12.05 SR-14 (maybe others) (14.04.2005)

Discuss:

Read or add your comments to this news (0 comments)