snort IDS intrusion detection bypass
Published:		18.02.2006
Source:		BUGTRAQ
SecurityVulns ID:		5793
Type:		remote
Level:		5/10
Description:		Invalid IP packets reassembly allows signatures bypass.

Affected:

SNORT : snort 2.4

Original document

siouxsie_(at)_entheogen.ru, SNORT Incorrect fragmented packet reassembly (18.02.2006)

Discuss:

Read or add your comments to this news (0 comments)

Mozilla Thunderbird buffer overflow
Published:		18.02.2006
Source:		FULL-DISCLOSURE
SecurityVulns ID:		5796
Type:		client
Level:		6/10
Description:		Buffer overflow on oversized LDIF file entry.

Affected:

MOZILLA : Thunderbird 1.5

Original document

Javor Ninov, [Full-disclosure] Mozila Thunderbird 1.5 Address Book DoS (18.02.2006)

Discuss:

Read or add your comments to this news (0 comments)

Multiple PatchLink Update Server patch management solution vulnerabilities updated since 18.02.2006
Published:		18.02.2006
Source:		BUGTRAQ
SecurityVulns ID:		5795
Type:		remote
Level:		5/10

Affected:

NOVELL : PatchLink Update Server 6.2

Original document

Brian Boner, Bugs/Security issues with PatchLink's Update Server (18.02.2006)

Discuss:

Read or add your comments to this news (0 comments)

Macallan Mail Solution directory traversal
Published:		18.02.2006
Source:		BUGTRAQ
SecurityVulns ID:		5798
Type:		remote
Level:		5/10
Description:		Directory traversal in IMAP server.

Affected:

MACALLAN : Macallan Mail Solution 4.8

Original document

SECUNIA, [SA18775] Macallan Mail Solution IMAP Commands Directory Traversal (18.02.2006)

Discuss:

Read or add your comments to this news (0 comments)

Daily web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)
Published:		18.02.2006
Source:
SecurityVulns ID:		5794
Type:		remote
Level:		5/10
Description:		PHP inclusions, SQL injections, directory traversals, crossite scripting, information leaks, etc.

Affected:		SMEGBHOST : SmE GB Host 1.21
		RUNCMS : Runcms 1.3
		SITEFRAME : Siteframe 5.0
		PHPMYSQLTIMESHEE : PHP/MYSQL Timesheet 2
		CALIMBA : CALimba 0.99
		VWEBMAIL : V-Webmail 1.6
		TECASCRIPTS : Quirex 2.0
		PERLBLOG : PerlBlog 1.08
		PERLBLOG : PerlBlog 1.09

Original document		SECUNIA, [SA18892] Siteframe Page Comment Script Insertion Vulnerability (18.02.2006)
		SECUNIA, [SA18923] Leif M. Wright's Blog Multiple Vulnerabilities (18.02.2006)
		SECUNIA, [SA18924] PerlBLOG Multiple Vulnerabilities (18.02.2006)
		SECUNIA, [SA18926] Quirex convert.cgi File Disclosure Vulnerability (18.02.2006)
		SECUNIA, [SA18776] V-webmail Cross-Site Scripting and Path Disclosure (18.02.2006)
		Aliaksandr Hartsuyeu, [eVuln] SmE GB Host Authentication Bypass Vulnerability (18.02.2006)
		Aliaksandr Hartsuyeu, [eVuln] CALimba Authentication Bypass Vulnerability (18.02.2006)
		Aliaksandr Hartsuyeu, [eVuln] PHP/MYSQL Timesheet Multiple SQL Injection Vulnerabilities (18.02.2006)
		h e, RUNCMS 1.3a SQL injection (18.02.2006)

Discuss:

Read or add your comments to this news (0 comments)

libapreq library DoS
Published:		18.02.2006
Source:		SECURITEAM
SecurityVulns ID:		5797
Type:		library
Level:		5/10
Description:		Incorrect functions "apreq_parse_headers()" and "apreq_parse_urlencoded()" implementation.

Affected:

LIBAPREQ : libapreq 2.06

Original document

SECUNIA, [SA18846] Libapreq2 Unspecified Vulnerability (18.02.2006)

Discuss:

Read or add your comments to this news (0 comments)