Sun Solaris lpadmin symbolic links problem
Published:		17.06.2005
Source:		SECUNIA
SecurityVulns ID:		4901
Type:		local
Level:		5/10

Affected:		SUN : Solaris 8
		SUN : Solaris 7
		SUN : Solaris 9

Original document

SECUNIA, [SA15723] Sun Solaris lpadmin Arbitrary File Overwrite Vulnerability (17.06.2005)

Discuss:

Read or add your comments to this news (0 comments)

Razor agent spam filtering network DoS
Published:		17.06.2005
Source:		SECUNIA
SecurityVulns ID:		4903
Type:		remote
Level:		5/10
Description:		Few bugs causing application crash or infinite loop.

Affected:

RAZOR : Razor-agents 2.71

Original document

SECUNIA, [SA15739] Razor-agents Denial of Service Vulnerabilities (17.06.2005)

Discuss:

Read or add your comments to this news (0 comments)

Gentoo Linux webapp-config symbolic links problem
Published:		17.06.2005
Source:		FULL-DISCLOSURE
SecurityVulns ID:		4904
Type:		local
Level:		5/10
Description:		Symbolic links problem on temporary files creation.

Affected:

GENTOO : webapp-config 1.10

Original document

GENTOO, [Full-disclosure] [ GLSA 200506-13 ] webapp-config: Insecure temporary file handling (17.06.2005)

Discuss:

Read or add your comments to this news (0 comments)

Yaws Webserver source code leak
Published:		17.06.2005
Source:		FULL-DISCLOSURE
SecurityVulns ID:		4899
Type:		remote
Level:		5/10
Description:		%00 at the end of executable file allows to see it's content.

Affected:

YAWS : Yaws Webserver 1.55

Original document

Daniel Fabian, [Full-disclosure] Source Code Disclosure in Yaws Webserver <1.56 (17.06.2005)

Discuss:

Read or add your comments to this news (0 comments)

Deep Freeze protection bypass updated since 17.06.2005
Published:		20.06.2005
Source:		SECURITEAM
SecurityVulns ID:		4902
Type:		local
Level:		5/10
Description:		With debugging application it's possible to bypass system state protection.

Affected:

FARONICS : Deep Freeze 3.32

Original document

SECURITEAM, [NT] Deep Freeze Unfreezer - Bypassing Deep Freeze Authentication (20.06.2005)

Discuss:

Read or add your comments to this news (2 comments)

Adobe Acrobat Reader local files access updated since 17.06.2005
Published:		28.06.2005
Source:		BUGTRAQ
SecurityVulns ID:		4898
Type:		client
Level:		5/10
Description:		By using XML External Entity document script can access local files and have them sent to remote site.

Affected:

ADOBE : Acrobat Reader 7.0

Original document		SECUNIA, [SA15827] Adobe Reader / Acrobat Two Vulnerabilities (28.06.2005)
		Sverre H. Huseby, Adobe Reader 7: XML External Entity (XXE) Attack (17.06.2005)

Discuss:

Read or add your comments to this news (0 comments)

SpamAssassin and Vipul's Razor antispam filters DoS updated since 17.06.2005
Published:		05.07.2005
Source:		BUGTRAQ
SecurityVulns ID:		4900
Type:		remote
Level:		5/10
Description:		CPU exhaustion on malcrafted e-mail headers.

Affected:		SPAMASSASSIN : SpamAssassin 3.0
		VIPUL : Razor 2.70

Original document		GENTOO, UPDATE: [ GLSA 200506-17 ] SpamAssassin 3, Vipul's Razor: Denial of Service vulnerability (05.07.2005)
		GENTOO, [Full-disclosure] [ GLSA 200506-17 ] SpamAssassin 3, Vipul's Razor: Denial of Service vulnerability (21.06.2005)
		SECUNIA, [SA15704] SpamAssassin Message Header Processing Denial of Service (17.06.2005)

Discuss:

Read or add your comments to this news (0 comments)