RICOH Aficio DoS
Published:		16.12.2004
Source:		BUGTRAQ
SecurityVulns ID:		4267
Type:		remote
Level:		5/10
Description:		Printer reboots on malcrafted ICMP packet.

Affected:		RICOH : Aficio 450
		RICOH : Aficio 455

Original document

felix zhou, RICOH Aficio 450/455 PCL 5e Printer ICMP DOS vulnerability (16.12.2004)

Discuss:

Read or add your comments to this news (0 comments)

Roxio Toast format string bug
Published:		16.12.2004
Source:		BUGTRAQ
SecurityVulns ID:		4268
Type:		local
Level:		5/10
Description:		TDIXSupport suid application format string bug.

Affected:

ROXIO : Toast 6

Original document

fintler, Possible local root vulnerability in Roxio Toast on Mac OS X (16.12.2004)

Discuss:

Read or add your comments to this news (0 comments)

Asante FM2008 backdoor account
Published:		16.12.2004
Source:		BUGTRAQ
SecurityVulns ID:		4269
Type:		remote
Level:		5/10
Description:		Undocumented superuser/asante account.

Affected:

ASANTE : Asante FM2008

Original document

Joe Philipps, Asante FM2008 10/100 Ethernet switch backdoor login (16.12.2004)

Discuss:

Read or add your comments to this news (0 comments)

3cdaemon buffer overflow
Published:		16.12.2004
Source:		BUGTRAQ
SecurityVulns ID:		4270
Type:		remote
Level:		5/10
Description:		Buffer overflow on oversized TFTP filename.

Affected:

3COM : 3CDaemon 2.0

Original document

Wang Ning, 3cdaemon tftp server DOS vulnerability (16.12.2004)

Discuss:

Read or add your comments to this news (0 comments)

vim privilege escalation
Published:		16.12.2004
Source:		BUGTRAQ
SecurityVulns ID:		4271
Type:		local
Level:		5/10
Description:		Icorrect modelines options handling.

Affected:		VIM : vim 6.3
		VIM : gvim 6.3

Original document

GENTOO, [ GLSA 200412-10 ] Vim, gVim: Vulnerable options in modelines (16.12.2004)

Discuss:

Read or add your comments to this news (0 comments)

Cisco Unity default password
Published:		16.12.2004
Source:		BUGTRAQ
SecurityVulns ID:		4273
Type:		remote
Level:		6/10
Description:		Few Accounts with default passwords.

Affected:

CISCO : Cisco Unity 4.0

Original document

CISCO, Cisco Security Advisory: Cisco Unity Integrated with Exchange Has Default Passwords (16.12.2004)

Discuss:

Read or add your comments to this news (0 comments)

Cisco Guard and Traffic Anomaly Detector default password
Published:		16.12.2004
Source:		BUGTRAQ
SecurityVulns ID:		4274
Type:		remote
Level:		6/10
Description:		Default root password is used.

Affected:		CISCO : Cisco Guard 3.1
		CISCO : Cisco Anomaly Detector 3.1

Original document

CISCO, Cisco Security Advisory: Default Administrative Password in Cisco Guard and Traffic Anomaly Detector (16.12.2004)

Discuss:

Read or add your comments to this news (0 comments)

FirstClass DoS
Published:		16.12.2004
Source:		DILA
SecurityVulns ID:		4276
Type:		remote
Level:		5/10
Description:		/Search requests flood causes server to fail.

Affected:		CENTRINITY : FirstClass 7.1
		CENTRINITY : FirstClass 8.0

Original document

dila, Fwd: OpenText FirstClass 8.0 HTTP Daemon /Search Remote DoS Vulnerability (16.12.2004)

Discuss:

Read or add your comments to this news (0 comments)

Multiple Unix applications bugs updated since 16.12.2004
Published:		17.12.2004
Source:		BUGTRAQ
SecurityVulns ID:		4277
Type:		remote
Level:		8/10
Description:		Different vulnerabilities in multiple applications.

Affected:		CUPS : cups 1.1
		XINELIB : xine-lib 1.0
		BSB2PPM : bsb2ppm 0.0
		CHANGEPASSWORD : ChangePassword 0.8
		CHBG : chbg 1.5
		CONVEX3D : Convex 3D 0.8
		CSV2XML : csv2xml 0.5
		DXFSCOPE : dxfscope 0.2
		ELMBOLTHOLE : elm/bolthole 2.6
		GREED : greed 0.81
		HTML2HDML : html2hdml 1.0
		IGLOOFTP : IglooFTP 0.6
		JCABC2PS : jcabc2ps
		JPEG2AVI : jpegtoavi 1.5
		JUNKIE : junkie 0.3
		LINPOPUP : LinPopUp 1.2
		MESHVIEWVER : Mesh Viewer 0.2
		NAPSHARE : NapShare 1.2
		NASM : NASM 0.98
		O3READ : o3read 0.0
		PCAL : pcal 4.7
		PGN2WEB : pgn2web 0.3
		RINGETONETOOLS : ringtonetools 2.22
		RTF2LATEX2E : rtf2latex2e 1.0
		TNFTP : tnftp 20030825
		UMLUTILITIES : uml-utilities 20030903
		UNRTF : unrtf 0.19
		VB2C : vb2c 0.02
		VILISTEXTUM : vilistextum 2.6
		XLREADER : xlreader 0.9
		YAMT : YAMT 0.5
		YANF : Yanf 0.4
		QWIKMAIL : qwik-smtpd 0.3
		MPLAYER : MPlayer 1.0
		MPG123 : mpg123 0.59
		A2FAX : a2fax 3.04
		ABC2MIDI : abc2midi
		ABC2MTEX : abc2mtex 1.6
		ABCM2PS : abcm2ps 3.7
		ABCPP : abcpp 1.3
		ABCTABS2PS : abctab2ps 1.6
		ASP2PHP : asp2php 0.76

Original document		IDEFENSE, iDEFENSE Security Advisory 12.16.04: MPlayer Bitmap Parsing Remote Heap Overflow Vulnerability (17.12.2004)
		IDEFENSE, iDEFENSE Security Advisory 12.16.04: MPlayer MMST Streaming Stack Overflow Vulnerability (17.12.2004)
		IDEFENSE, iDEFENSE Security Advisory 12.16.04: MPlayer Remote RTSP HeapOverflow Vulnerability (17.12.2004)
		Thor Larholm, DJB's students release 44 *nix software vulnerability advisories (16.12.2004)

Discuss:

Read or add your comments to this news (0 comments)

Samba integer overflow updated since 16.12.2004
Published:		17.12.2004
Source:		BUGTRAQ
SecurityVulns ID:		4275
Type:		remote
Level:		7/10

Affected:

SAMBA : Samba 3.0

Original document		IDEFENSE, iDEFENSE Security Advisory 12.16.04: Samba smbd Security Descriptor Integer Overflow Vulnerability (17.12.2004)
		SAMBA, [SAMBA] CAN-2004-1154 : Integer overflow could lead to remote code execution in Samba 2.x, 3.0.x <= 3.0.9 (16.12.2004)

Discuss:

Read or add your comments to this news (0 comments)

Multiple PHP bugs updated since 16.12.2004
Published:		23.12.2004
Source:		BUGTRAQ
SecurityVulns ID:		4272
Type:		library
Level:		7/10
Description:		Integer overflow leading to memory content leak, safe mode protection bypass, openlog() buffer overflow, etc.

Affected:		PHP : PHP 4.3
		PHP : PHP 5.0

Original document		The Warlock, PHP v4.3.x exploit for Windows. (23.12.2004)
		Stefano Di Paola, PHP shmop.c module permits write of arbitrary memory. (21.12.2004)
		bad boy, phphpbb2 + php version < 4.3.10 unserialize() memory dump sql password from config.php exploit (18.12.2004)
		Daniel Fabian, PHP Input Validation Vulnerabilities (16.12.2004)
		Martin Eiszner, php unserialize (16.12.2004)
		PHP1, Advisory 01/2004: Multiple vulnerabilities in PHP 4/5 (16.12.2004)

Files:		PHP openlog() Windows local exploit
		PHP shmop safe mode bypass exploit
Discuss:		Read or add your comments to this news (0 comments)