PlatinumFTP FTP Server format string vulnerability updated since 14.03.2005
Published:		17.03.2005
Source:		BUGTRAQ
SecurityVulns ID:		4572
Type:		remote
Level:		5/10
Description:		Format string bug in username during FTP authentication.

Affected:

ROBOSHAREWARE : PlatinumFTP 1.0

Original document		c0d3r_(at)_ihsteam.com, PlatinumFTPserver format string vulnerability ( IHSTeam ) (17.03.2005)
		Ramon Kukla, PlatinumFTP 1.0.18 remote DoS (14.03.2005)

Discuss:

Read or add your comments to this news (0 comments)

KDE desktop environment multiple bugs
Published:		17.03.2005
Source:		BUGTRAQ
SecurityVulns ID:		4581
Type:		local
Level:		5/10
Description:		Local Desktop Communication Protocol (DCOP) DoS, symbolic links problem in dcopidlng.

Affected:

KDE : KDE 3.3

Original document

KDE, Multiple KDE Security Advisories (2005-03-16) (17.03.2005)

Discuss:

Read or add your comments to this news (0 comments)

OpenPGP/GnuPG chosen ciphertext cryptography attack
Published:		17.03.2005
Source:		BUGTRAQ
SecurityVulns ID:		4582
Type:		remote
Level:		5/10
Description:		With CFB mode encryption attacker can recover part of the plaintext if 2 first bytes of the message block are known.

Affected:

GNUPG : gnupg 1.2

Original document

MANDRAKE, MDKSA-2005:057 - Updated gnupg packages fix vulnerability (17.03.2005)

Discuss:

Read or add your comments to this news (0 comments)

Servers Alive servers monitoring tool privilege escalation
Published:		17.03.2005
Source:		BUGTRAQ
SecurityVulns ID:		4583
Type:		local
Level:		5/10
Description:		With help subsystem it's possible to start application with LocalSystem privileges.

Affected:		WOODSTONE : Servers Alive 4.1
		WOODSTONE : Servers Alive 5.0

Original document

Michael Starks, Servers Alive: Local Privilege Escalation (17.03.2005)

Discuss:

Read or add your comments to this news (0 comments)

Windows License Logging Service buffer overflow updated since 09.02.2005
Published:		17.03.2005
Source:		MICROSOFT
SecurityVulns ID:		4458
Type:		remote
Level:		7/10
Description:		Buffer overflow during request parsing.

Affected:		MICROSOFT : Windows NT 4.0 Server
		MICROSOFT : Windows 2000 Server
		MICROSOFT : Windows 2003 Server

Original document		Dave Aitel, [VulnWatch] LLSSRV Clarifications [Immunity] (17.03.2005)
		MICROSOFT, Microsoft Security Bulletin MS05-010 Vulnerability in the License Logging Service Could Allow Code Execution (885834) (09.02.2005)

Files:		LLSSRV: Clarification and correction of information on a public vulnerability
		Microsoft Security Bulletin MS05-010 Vulnerability in the License Logging Service Could Allow Code Execution (885834)
Discuss:		Read or add your comments to this news (0 comments)

DataRescue Interactive Disassembler Pro (IDA Pro disassembler/debugger) buffer overflow and format string bug updated since 25.01.2005
Published:		17.03.2005
Source:		BUGTRAQ
SecurityVulns ID:		4402
Type:		local
Level:		5/10
Description:		Buffer overflow on oversized inported library name, format string bug in library name.

Affected:		DATARESCUE : IDA Pro 4.6
		DATARESCUE : IDA Pro 4.7
		PEID : PEiD 0.92

Original document		Piotr Bania, ADVISORY: DataRescue Interactive Disassembler Pro Debugger Format String Vulnerability (17.03.2005)
		IDEFENSE, iDEFENSE Security Advisory 01.24.05: DataRescue Interactive Disassembler Pro Buffer Overflow Vulnerability (25.01.2005)

Discuss:

Read or add your comments to this news (0 comments)