gtkdiskfree symbolic links problem
Published:		15.09.2005
Source:		SECURITEAM
SecurityVulns ID:		5210
Type:		local
Level:		5/10
Description:		Symbolic links problem on temporary files creation.

Affected:

GTKDISKFREE : gtkdiskfree 1.9

Original document

SECURITEAM, [UNIX] Gtkdiskfree Insecure Temporary File Creation (15.09.2005)

Discuss:

Read or add your comments to this news (0 comments)

Oracle Reports SQL injection
Published:		15.09.2005
Source:		REDDATABASESEC
SecurityVulns ID:		5211
Type:		library
Level:		5/10
Description:		It's possible to inject SQL to report if it uses lexical references without parameter validation.

Affected:

ORACLE : Oracle Reports 2.0

Original document

Kornbrust, Alexander, Oracle Reports: Generic SQL Injection Vulnerability via lexical references (15.09.2005)

Files:		SQL Injection in Oracle Reports
Discuss:		Read or add your comments to this news (0 comments)

Multiple Centericq vulnerabilities
Published:		15.09.2005
Source:		FULL-DISCLOSURE
SecurityVulns ID:		5212
Type:		remote
Level:		6/10
Description:		Integer signedness errors and integer overflow on different platforms.

Affected:

CENTERICQ : centericq 4.20

Original document

DEBIAN, [Full-disclosure] [SECURITY] [DSA 813-1] New centericq packages fix several vulnerabilities (15.09.2005)

Discuss:

Read or add your comments to this news (0 comments)

GNU Texinfo symbolic links problem
Published:		15.09.2005
Source:		SECUNIA
SecurityVulns ID:		5214
Type:		local
Level:		5/10
Description:		texindex symbolic links problem during temporary file creation.

Affected:

GNU : Texinfo 4.7

Original document

SECUNIA, [SA16816] GNU Texinfo Insecure Temporary File Creation (15.09.2005)

Discuss:

Read or add your comments to this news (0 comments)

LineControl Java Client information leak
Published:		15.09.2005
Source:		SECUNIA
SecurityVulns ID:		5213
Type:		local
Level:		5/10
Description:		User's password is visible in log file.

Affected:

LINECONTROL : LineControl Java Client 0.8

Original document

SECUNIA, [SA16817] LineControl Java Client Log Messages Password Disclosure (15.09.2005)

Discuss:

Read or add your comments to this news (0 comments)

Lotus Domino crossite scripting
Published:		15.09.2005
Source:		SECUNIA
SecurityVulns ID:		5215
Type:		remote
Level:		5/10

Affected:

IBM : Lotus Domino 6.5

Original document

SECUNIA, [SA16830] IBM Lotus Domino "BaseTarget" and "Src" Cross-Site Scripting (15.09.2005)

Discuss:

Read or add your comments to this news (0 comments)

VisualBoyAdvanced Nintendo emulator buffer overflow
Published:		15.09.2005
Source:		SECURITEAM
SecurityVulns ID:		5209
Type:		local
Level:		5/10
Description:		Buffer overflow on command line arguments parsing.

Affected:

VISUALBOY : VisualBoy Advanced 1.7

Original document

SECURITEAM, [EXPL] VisualBoy Advanced Local Buffer Overflow (Exploit) (15.09.2005)

Files:		VisualBoyAdvanced 1.7.x BufferOver Flow exploit
Discuss:		Read or add your comments to this news (0 comments)