HP Integrated Lights Out unauthorized access
Published:		15.12.2006
Source:		BUGTRAQ
SecurityVulns ID:		6943
Type:		remote
Level:		5/10
Description:		Unauthorized access if SSH with key based authentication is used.

Affected:		HP : Integrated Lights Out
		HP : Integrated Lights Out 2

Original document

HP, [security bulletin] HPSBMA02173 SSRT061230 rev. 1 - HP Integrated Lights Out (iLO & iLO 2) Running SSH Key Based Authentication Remote Unauthorized Access (15.12.2006)

Discuss:

Read or add your comments to this news (0 comments)

Microsoft Project Server 2003 information leak
Published:		15.12.2006
Source:		BUGTRAQ
SecurityVulns ID:		6938
Type:		remote
Level:		6/10
Description:		Username and password for Microsoft SQL Server account is sent by client request.

Affected:

MICROSOFT : Project Server 2003

Original document

Brett Moore, Project Server 2003 - Credential Disclosure (15.12.2006)

Discuss:

Read or add your comments to this news (0 comments)

Daily web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl) updated since 15.12.2006
Published:		15.12.2006
Source:
SecurityVulns ID:		6937
Type:		remote
Level:		5/10
Description:		PHP inclusions, SQL injections, directory traversals, crossite scripting, information leaks, etc.

Affected:

YAPLAP : yaplap 0.6

Original document

H0tTurk, Bandsite portal system Admin Added Access (16.12.2006)

Files:		ar_memberex.html
		yaplap Remote File Inclusion Vulnerablity
Discuss:		Read or add your comments to this news (0 comments)

italkplus buffer overflow
Published:		15.12.2006
Source:		SECUNIA
SecurityVulns ID:		6940
Type:		remote
Level:		5/10

Affected:

ITALK : italkplus 0.92

Original document

ITALK, Italk Project Security Advisory (15.12.2006)

Discuss:

Read or add your comments to this news (0 comments)

Kerio Mail Server DoS
Published:		15.12.2006
Source:		BUGTRAQ
SecurityVulns ID:		6941
Type:		remote
Level:		5/10
Description:		Server crash on LDAP queries processing.

Affected:		KERIO : Kerio MailServer 6.3
		KERIO : Kerio MailServer 6.2

Original document

Evgeny Legerov, Kerio MailServer < 6.3.1 remote Denial of Service (15.12.2006)

Discuss:

Read or add your comments to this news (0 comments)

Microsoft Windows quartz.dll DoS
Published:		15.12.2006
Source:		SehaTo
SecurityVulns ID:		6936
Type:		client
Level:		5/10
Description:		Division by zero on malformed MIDI file or WMV file.

Affected:		MICROSOFT : Windows XP
		MICROSOFT : Windows Media Player 10
		MICROSOFT : Windows Media Player 11

Original document		sehato, Уязвимость Windows Explorer WMV File Denial Of Service (15.12.2006)
		sehato, Уязвимость Windows Media MID File Denial Of Service (15.12.2006)

Files:		Windows Media Player DoS PoC.
		Windows Explorer DoS PoC
Discuss:		Read or add your comments to this news (0 comments)

Coolplayer buffer overflows
Published:		15.12.2006
Source:		BUGTRAQ
SecurityVulns ID:		6939
Type:		remote
Level:		5/10
Description:		Multiple buffer overflows.

Affected:

COOLPLAYER : Coolplayer 215

Original document

Siegfried, [Full-disclosure] Coolplayer buffer overflow vulnerabilities (15.12.2006)

Discuss:

Read or add your comments to this news (0 comments)

BitDefender multiple software products buffer overflow
Published:		15.12.2006
Source:		BUGTRAQ
SecurityVulns ID:		6942
Type:		remote
Level:		5/10
Description:		Heap buffer overflow on PE files parsing.

Original document

security_(at)_nruns.com, BitDefender AV Packed PE File Parsing Engine Heap Overflow (15.12.2006)

Discuss:

Read or add your comments to this news (0 comments)