Turquoise SuperStat Fidonet / Usenet statistics utility buffer overflow
Published:		16.09.2005
Source:		BUGTRAQ
SecurityVulns ID:		5217
Type:		client
Level:		5/10
Description:		Buffer overflow on NNTP server reply parsing.

Affected:

TURQSTAT : turqstat 2.2

Original document

DEBIAN, [SECURITY] [DSA 812-1] New turqstat packages fix buffer overflow (15.09.2005)

Discuss:

Read or add your comments to this news (0 comments)

SimpleCDR-X symbolic links problem
Published:		16.09.2005
Source:		FULL-DISCLOSURE
SecurityVulns ID:		5221
Type:		local
Level:		5/10
Description:		Insecure temporary files creation.

Affected:

SIMPLECDRX : SimpleCDR-X 1.3

Original document

jonas.thambert_(at)_hush.ai, [Full-disclosure] SimpleCDR-X - Insecure tempfile handling (15.09.2005)

Discuss:

Read or add your comments to this news (0 comments)

vxWeb Web server for Pocket PC buffer overflow
Published:		16.09.2005
Source:		BUGTRAQ
SecurityVulns ID:		5223
Type:		remote
Level:		5/10
Description:		Buffer overflow on oversized request URI.

Affected:

CAMBRIDGE : vxWeb 1.1

Original document

contact_(at)_airscanner.com, Airscanner Mobile Security Advisory #05081101: vxWeb v.1.1.4 Denial of Service Vulnerability (15.09.2005)

Discuss:

Read or add your comments to this news (0 comments)

NuMega SoftICE Driver Studio authentication bypass
Published:		16.09.2005
Source:		BUGTRAQ
SecurityVulns ID:		5220
Type:		remote
Level:		5/10
Description:		It's posible to access DriverStudio Remote Control with NTLM Null session.

Affected:		NUMEGA : DriverStudio 2.7
		NUMEGA : DriverStudio 3.0

Original document

cocoruder_(at)_163.com, DriverStudio Remote Control Authentication Bypass Vulnerability (15.09.2005)

Discuss:

Read or add your comments to this news (0 comments)

vxFtpSrv FTP server for Pocket PC buffer overflow
Published:		16.09.2005
Source:		BUGTRAQ
SecurityVulns ID:		5224
Type:		remote
Level:		5/10
Description:		Buffer overflow on oversized USER command.

Affected:

CAMBRIDGE : vxFtpSrv 0.9

Original document

contact_(at)_airscanner.com, Airscanner Mobile Security Advisory #05081102: vxFtpSrv 0.9.7 Remote Code Execution Buffer Overflow Vulnerability (15.09.2005)

Discuss:

Read or add your comments to this news (0 comments)

FileZilla FTP client information leak
Published:		16.09.2005
Source:		FULL-DISCLOSURE
SecurityVulns ID:		5225
Type:		local
Level:		5/10
Description:		Configuration including FTP sites access passwords is stored in public directory.

Affected:

FILEZILLA : FileZilla 2.2

Original document

m123303_(at)_richmond.ac.uk, [Full-disclosure] FileZilla (client) public credentials vulnerability (16.09.2005)

Discuss:

Read or add your comments to this news (0 comments)

gwcc symbolic links problem
Published:		16.09.2005
Source:		VULNWATCH
SecurityVulns ID:		5226
Type:		local
Level:		5/10
Description:		Symbolic links problem on temporary file creation.

Affected:

GWCC : gwcc 0.9

Original document

ZATAZ.net, [VulnWatch] gwcc insecure temporary file creation (16.09.2005)

Discuss:

Read or add your comments to this news (0 comments)

ncompress symbolic links problem
Published:		16.09.2005
Source:		VULNWATCH
SecurityVulns ID:		5227
Type:		local
Level:		5/10
Description:		Symbolic links problem on temporary file creation.

Affected:

NCOMPRESS : ncompress 4.2

Original document

ZATAZ.net, [VulnWatch] ncompress insecure temporary file creation (16.09.2005)

Discuss:

Read or add your comments to this news (0 comments)

Multiple Ahnlab V3 Antivirus vulnerabilities
Published:		16.09.2005
Source:		BUGTRAQ
SecurityVulns ID:		5216
Type:		client
Level:		6/10
Description:		Privilege escalation with v3flt2k.sys driver, buffer overflow and directory traversal on archives scanning.

Affected:		AHNLAB : AhnLab V3Pro 2004
		AHNLAB : AhnLab V3 VirusBlock 2005
		AHNLAB : AhnLab V3Net for Windows Server 6.0

Original document

SECUNIA, Secunia Research: Ahnlab V3 Antivirus Multiple Vulnerabilities (15.09.2005)

Discuss:

Read or add your comments to this news (0 comments)

Avocents CCM console server protection bypass
Published:		16.09.2005
Source:		BUGTRAQ
SecurityVulns ID:		5219
Type:		remote
Level:		5/10
Description:		It's possible to bypass port access control.

Affected:

AVOCENT : CCM4850

Original document

spam_(at)_drwetter.org, Avocent CCM: Port Access Control Bypass Vulnerability (15.09.2005)

Discuss:

Read or add your comments to this news (0 comments)

vxTftpSrv TFTP server for Pocket PC buffer overflow
Published:		16.09.2005
Source:		BUGTRAQ
SecurityVulns ID:		5222
Type:		remote
Level:		5/10
Description:		Buffer overflow on oversized file name.

Affected:		CAMBRIDGE : vxTftpSrv 1.7
		CAMBRIDGE : vxWeb 1.1

Original document

contact_(at)_airscanner.com, Airscanner Mobile Security Advisory #05081203: vxTftpSrv 1.7.0 Remote Code Execution Buffer Overflow Vulnerability (15.09.2005)

Discuss:

Read or add your comments to this news (0 comments)

Orion / Compaq HTTP Server crossite scripting
Published:		16.09.2005
Source:		BUGTRAQ
SecurityVulns ID:		5218
Type:		remote
Level:		5/10
Description:		Crossite scripting with error messages.

Affected:		ORION : Orion 1.3
		ORION : Orion 1.4
		COMPAQ : CompaqHTTPServer 2.1

Original document

Josh Zlatin-Amishav, 404 error XSS (15.09.2005)

Discuss:

Read or add your comments to this news (0 comments)