Multiple Apple MacOS X security vulnerabilities updated since 12.05.2006
Published:		14.05.2006
Source:		SECUNIA
SecurityVulns ID:		6132
Type:		remote
Level:		7/10
Description:		Security update for May fixes 25 different vulnerabilities.

Affected:		APPLE : MacOS X 10.3
		APPLE : Mac OS X 10.4

Original document		CERT, US-CERT Technical Cyber Security Alert TA06-132A -- Apple Mac Products Affected by Multiple Vulnerabilities (14.05.2006)
		SECUNIA, [SA20077] Mac OS X Security Update Fixes Multiple Vulnerabilities (12.05.2006)

Discuss:

Read or add your comments to this news (0 comments)

Daily web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)
Published:		14.05.2006
Source:
SecurityVulns ID:		6140
Type:		remote
Level:		5/10
Description:		PHP inclusions, SQL injections, directory traversals, crossite scripting, information leaks, etc.

Affected:		PHPCOIN : phpCOIN 1.2
		E107 : e107 0.7
		GPHOTOS : GPhotos 1.5
		OSJOURNALS : OZJournals 1.2

Original document		SECUNIA, [SA20088] phpCOIN E-Mail Address Disclosure of Arbitrary Messages (14.05.2006)
		SECUNIA, [SA20060] Web-Labs CMS Cross-Site Scripting Vulnerabilities (14.05.2006)
		socsam_(at)_linuxmail.org, SQL-Injection in e107 allows attacker to become a site admininstrator (14.05.2006)
		SECUNIA, [SA20091] OZJournals "vname" Parameter Cross-Site Scripting (14.05.2006)
		doz_(at)_bsdmail.com, Gphotos Directory Traversal and Cross Site Scripting (14.05.2006)

Discuss:

Read or add your comments to this news (0 comments)

FreeSSHd / FreeFTPd / wodSSHServer / FortressSSH SSH servers buffer overflow updated since 14.05.2006
Published:		17.05.2006
Source:		SECUNIA
SecurityVulns ID:		6141
Type:		remote
Level:		5/10
Description:		Buffer overflow on cryptographic keys exchange.

Affected:		FREEFTPD : FreeFTPd 1.0
		FREESSHD : FreeSSHd 1.0
		WEONLYDO : wodSSHServer 1.2
		WEONLYDO : wodSSHServer 1.3
		PRAGMA : FortressSSH 4.0

Original document		SECUNIA, [SA20136] FreeFTPd SFTP Key Exchange Algorithm String Buffer Overflow (17.05.2006)
		SECUNIA, [SA20114] FortressSSH SSH_MSG_KEXINIT Logging Buffer Overflow (16.05.2006)
		SECUNIA, [SA19845] wodSSHServer Key Exchange Algorithm String Buffer Overflow (14.05.2006)
		SECUNIA, [SA19846] FreeSSHd Key Exchange Algorithm String Buffer Overflow (14.05.2006)

Files:		POC exploit for freeSSHd version 1.0.9
Discuss:		Read or add your comments to this news (0 comments)