Search:Vulnerability:14.12.2006 - security vulnerabilities database

[EN] securityvulns.ru
no-pyccku

kdegraphics KDE graphics library DoS
Published: 14.12.2006
Source: BUGTRAQ
SecurityVulns ID: 6924
Type: library
Level: 5/10
Description: Malformed EXIF section of JPEG file causes infinite recursion with stack overflow (stack memory consumption).

Affected: KDE : KDE 3.5

Original document MANDRIVA, [ MDKSA-2006:227 ] - Updated kdegraphics packages fix EXIF vulnerability (14.12.2006)

Discuss: Read or add your comments to this news (0 comments)

OpenLDAP slapd LDAP server buffer overflow
Published: 14.12.2006
Source: BUGTRAQ
SecurityVulns ID: 6925
Type: remote
Level: 6/10
Description: Buffer overflow on Kerberos v4 authentication.

Affected: OPENLDAP : OpenLDAP 2.4

Original document Solar Eclipse, OpenLDAP kbind authentication buffer overflow (14.12.2006)

Files: OpenLDAP kbind remote exploit
Discuss: Read or add your comments to this news (0 comments)

Quicktime crossite scripting
Published: 14.12.2006
Source: MAXIMIZEDESIGNS
SecurityVulns ID: 6927
Type: client
Level: 6/10
Description: XML file with .MOV extension allows to execute script in local zone with qtnext parameter of EMBED tag with embedded short movie.

Affected: APPLE : QuickTime 7.1

Original document Maximize Designs, Unpatchable Quicktime XSS (14.12.2006)

Discuss: Read or add your comments to this news (0 comments)

GNOME gdmchooser format string vulnerability
Published: 14.12.2006
Source: FULL-DISCLOSURE
SecurityVulns ID: 6934
Type: local
Level: 6/10
Description: Format string vulnerability in remote hostname.

Affected: GNUME : gdm 2.14

Original document IDEFENSE, [Full-disclosure] iDefense Security Advisory 12.14.06: GNOME Foundation Display Manager gdmchooser Format String Vulnerability (14.12.2006)

Discuss: Read or add your comments to this news (0 comments)

Multiple Sun Solaris vulnerabilities
Published: 14.12.2006
Source: BUGTRAQ
SecurityVulns ID: 6926
Type: local
Level: 6/10
Description: Buffer overflow in ld.so doprf(), directory traversal on parsing different environment variables in ld.so.

Affected: SUN : Solaris 10

Original document IDEFENSE, iDefense Security Advisory 12.12.06: Sun Microsystems Solaris ld.so 'doprf()' Buffer Overflow Vulnerability (14.12.2006)

IDEFENSE, iDefense Security Advisory 12.12.06: Sun Microsystems Solaris ld.so Directory Traversal Vulnerability (14.12.2006)

Discuss: Read or add your comments to this news (0 comments)

IBM DB2 database server DoS
Published: 14.12.2006
Source: BUGTRAQ
SecurityVulns ID: 6928
Type: remote
Level: 5/10
Description: NULL pointer dereference on malformed SQLJRA packet.

Affected: IBM : DB2 8.1
IBM : DB2 8.2

Original document SHATTER, IBM DB2 Remote DoS during CONNECT processing (14.12.2006)

Discuss: Read or add your comments to this news (0 comments)

Daily web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)
Published: 14.12.2006
Source:
SecurityVulns ID: 6931
Type: remote
Level: 5/10
Description: PHP inclusions, SQL injections, directory traversals, crossite scripting, information leaks, etc.

Affected: RADINKS : Rad Upload 3.02
GENESIS : GenesisTrader 1.0

Original document Hackers Center Security Group, shopsite advisory (14.12.2006)

Mr_KaLiMaN, GenesisTrader v1.0 - Multiple Vulnerabilities (14.12.2006)

HACKERS PAL, BLOG:CMS Remote file include Vulnerability (14.12.2006)

rko.thelegendkiller_(at)_gmail.com, Web Apps- Rad Upload Version 3.02 Remote File Include Vulnerability (14.12.2006)

Discuss: Read or add your comments to this news (0 comments)

enemies-of-carlotta mailing list processor shell characters
Published: 14.12.2006
Source: BUGTRAQ
SecurityVulns ID: 6933
Type: remote
Level: 5/10
Description: Shell characters problem on e-mail address parsing.

Affected: ENEMIESOFCARLOTT : enemies-of-carlotta 1.3

Original document DEBIAN, [SECURITY] [DSA-1236-1] New enemies-of-carlotta package fix missing sanity checks (14.12.2006)

Discuss: Read or add your comments to this news (0 comments)

SiteKiosk security protection bypass
Published: 14.12.2006
Source: BUGTRAQ
SecurityVulns ID: 6930
Type: local
Level: 5/10
Description: It's possible to access disk content with broser path ABOUT:hello<a href=\>click here</a>.

Affected: SITEKIOSK : SiteKiosk 6.5

Original document Brett Moore, [SBDA] SiteKiosk - FileSystem Access (14.12.2006)

Discuss: Read or add your comments to this news (0 comments)

Multiple HyperAccess telnet / ssh terminal security vulnerabilities
Published: 14.12.2006
Source: BUGTRAQ
SecurityVulns ID: 6932
Type: client
Level: 6/10
Description: Code execution with .HAW files and telnet: protocol handler.

Affected: HILGRAEVE : HyperAccess 8.4

Original document Brett Moore, HyperAccess - Multiple Vulnerabilities (14.12.2006)

Discuss: Read or add your comments to this news (0 comments)