BorderWare MXtreme firewall Web interface vulnerability
Published:		17.03.2006
Source:		SECUNIA
SecurityVulns ID:		5903
Type:		remote
Level:		5/10

Affected:		BORDERWARE : Borderware MXtreme 5.0
		BORDERWARE : Borderware MXtreme 6.0

Original document

SECUNIA, [SA19223] BorderWare MXtreme Web Administration Unspecified Vulnerability (17.03.2006)

Discuss:

Read or add your comments to this news (0 comments)

Microsoft Internet Explorer array index overflow
Published:		17.03.2006
Source:		BUGTRAQ
SecurityVulns ID:		5900
Type:		client
Level:		8/10
Description:		Array index overflow for large number of HTML tag's events handlers. Vulnerability can be used for hidden malware installation.

Affected:

MICROSOFT : Internet Explorer 6.0

Original document

Michal Zalewski, Remote overflow in MSIE script action handlers (mshtml.dll) (17.03.2006)

Discuss:

Read or add your comments to this news (0 comments)

Daily web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)
Published:		17.03.2006
Source:
SecurityVulns ID:		5902
Type:		remote
Level:		5/10
Description:		PHP inclusions, SQL injections, directory traversals, crossite scripting, information leaks, etc.

Affected:		IPB : Dragoran Portal 1.4
		MILKEYWAY : Milkeyway Captive Portal WebCalendar 0.1

Original document		SECUNIA, [SA19255] OxyNews "oxynews_comment_id" SQL Injection Vulnerability (17.03.2006)
		ascii, Milkeyway Multiple Vulnerabilities (17.03.2006)
		dev0id@mail.ru, Portal 1.4.7 by Dragoran (17.03.2006)

Discuss:

Read or add your comments to this news (0 comments)

Monotone code execution versioning controle system code execution
Published:		17.03.2006
Source:		SECUNIA
SecurityVulns ID:		5904
Type:		local
Level:		5/10
Description:		Problems with case insensitive filesystems.

Affected:

MONOTONE : monotone 0.25

Original document

SECUNIA, [SA19260] monotone "MT" Bookkeeping Directory Arbitrary Lua Code Execution (17.03.2006)

Discuss:

Read or add your comments to this news (0 comments)

MERCUR Mailserver buffer overflow updated since 19.07.2002
Published:		17.03.2006
Source:		BUGTRAQ
SecurityVulns ID:		2164
Type:		remote
Level:		6/10
Description:		Buffer overflow in configuration interface (TCP/32000) access verification. Multiple overflows in IMAP, POP3, SNTP protocol.

Affected:		ATRIUM : Mercur Mailserver 4.2
		ATRIUM : Mercur Mailserver 5.0

Original document		Tim Taylor, [Full-disclosure] Mercur IMAPD 5.0 SP3 DoS Exploit or more? (17.03.2006)
		SECURITEAM, [NT] MERCUR Mail Server Control-Service Vulnerability (Exploit) (28.10.2003)
		Kostya KORTCHINSKY, [Full-Disclosure] Vulnerability in MERCUR Mail Server v4.2 SP3 and below (27.10.2003)
		SECURITEAM, [NT] Multiple Buffer Overflow Vulnerabilities Found in MERCUR Mail Server (24.06.2003)
		Dennis Rand, Multiple Buffer Overflow Vulnerabilities Found in MERCUR Mail server v.4.2 (SP2) - IMAP protocol (09.06.2003)
		2c79cbe14ac7d0b8472d3f129fa1df, MERCUR Mailserver advisory/remote exploit (19.07.2002)

Files:		MERCUR Mailserver buffer overflow remote exploit
		>Mercur Mailserver 5.0 SP3 Remote Buffer Overflow Exploit
		Mercur IMAPD 5.0 SP3 Remote Exploit
Discuss:		Read or add your comments to this news (0 comments)

Multiple Adobe Macromedia Flash products vulnerabilities updated since 17.03.2006
Published:		09.05.2006
Source:		CERT
SecurityVulns ID:		5901
Type:		client
Level:		8/10
Description:		Multiple vulnerabilities, including standard browser's plugins. Can be used for silent malware installation.

Affected:		ADOBE : Flash MX 2004
		ADOBE : Flash Player 8.0
		MACROMEDIA : Flash Professional 8
		MACROMEDIA : Flash Debug Player 7.0
		ADOBE : Flex 1.5
		MACROMEDIA : Breeze Meeting Add-In 5.1
		MACROMEDIA : Shockwave Player 10.1

Original document		MICROSOFT, Microsoft Security Bulletin MS06-020 Vulnerabilities in Macromedia Flash Player from Adobe Could Allow Remote Code Execution (913433) (09.05.2006)
		MICROSOFT, Microsoft Security Advisory (916208) Adobe Security Bulletin: APSB06-03 Flash Player Update to Address Security Vulnerabilities (17.03.2006)
		CERT, US-CERT Technical Cyber Security Alert TA06-075A -- Adobe Macromedia Flash Products Multiple Vulnerabilities (17.03.2006)

Files:		Microsoft Security Bulletin MS06-020 Vulnerabilities in Macromedia Flash Player from Adobe Could Allow Remote Code Execution (913433)
		Microsoft Security Advisory (916208) Adobe Security Bulletin: APSB06-03 Flash Player Update to Address Security Vulnerabilities
Discuss:		Read or add your comments to this news (1 comments)