Multiple libuser bugs
Published:		19.05.2004
Source:		BUGTRAQ
SecurityVulns ID:		3698
Type:		library
Level:		5/10
Description:		Multiple bugs causing linked application to crash.

Affected:

LIBUSER : libuser 0.51

Original document

MANDRAKE, MDKSA-2004:044 - Updated libuser packages fix vulnerability (19.05.2004)

Discuss:

Read or add your comments to this news (0 comments)

OmniHTTPd integer overflow
Published:		19.05.2004
Source:		BUGTRAQ
SecurityVulns ID:		3699
Type:		remote
Level:		6/10
Description:		Integer overflow in Range: header

Affected:

OMNICRON : OmniHTTPd 3.0

Original document

Han_B, Overflow@OmniHTTPd (19.05.2004)

Files:		OmniHTTP integer overflow exploit
Discuss:		Read or add your comments to this news (0 comments)

CVS heap overflow
Published:		19.05.2004
Source:		BUGTRAQ
SecurityVulns ID:		3700
Type:		remote
Level:		7/10
Description:		Heap overflow during modification flag analisys.

Affected:		CVS : cvs 1.11
		CVS : CVS 1.12

Original document

Stefan Esser, Advisory 07/2004: CVS remote vulnerability (19.05.2004)

Files:		CVS Remote Entry Line Heap Overflow Root Exploit (Linux/FreeBSD)
		CVS Remote Entry Line Heap Overflow Root Exploit (Solaris Ver.)
Discuss:		Read or add your comments to this news (0 comments)

ZoneMinder buffer overflow
Published:		19.05.2004
Source:		SECURITEAM
SecurityVulns ID:		3702
Type:		remote
Level:		5/10

Affected:

ZONEMINDER : ZoneMinder 1.19

Original document

SECURITEAM, [UNIX] ZoneMinder Query String Buffer Overflow Vulnerability (19.05.2004)

Discuss:

Read or add your comments to this news (0 comments)

neon format string bugs and heap overflow updated since 14.04.2004
Published:		19.05.2004
Source:		BUGTRAQ
SecurityVulns ID:		3605
Type:		library
Level:		5/10
Description:		Format string bugs in few functions.

Affected:		neon : neon 0.24
		CADAVER : cadaver 0.22
		SUBVERSION : subversion 0.27
		SITECOPY : sitecopy 0.13
		TLA : tla 1.2
		OPENOFFICE : OpenOffice 1.0
		OPENOFFICE : OpenOffice 1.1

Original document		Stefan Esser, Advisory 06/2004: libneon date parsing vulnerability (19.05.2004)
		GENTOO, [ GLSA 200405-04 ] OpenOffice.org vulnerability when using DAV servers (12.05.2004)
		Thomas Wana, void.at - neon format string bugs (17.04.2004)
		OPENPKG, [Full-Disclosure] [OpenPKG-SA-2004.016] OpenPKG Security Advisory (neon) (17.04.2004)
		REDHAT, [Full-Disclosure] [RHSA-2004:159-01] Updated Subversion packages fix security vulnerability in neon (15.04.2004)
		REDHAT, [Full-Disclosure] [RHSA-2004:158-01] Updated cadaver package fixes security vulnerability in neon (14.04.2004)

Discuss:

Read or add your comments to this news (0 comments)

Outlook Express HTML file writing updated since 11.05.2004
Published:		19.05.2004
Source:		BUGTRAQ
SecurityVulns ID:		3672
Type:		client
Level:		6/10
Description:		During reply to a message with HTML file attached this file is saved to known location.

Affected:

MICROSOFT : Outlook 2003

Original document		http-equiv@excite.com, ROCKET SCIENCE: Outllook 2003 (19.05.2004)
		http-equiv@excite.com, OUTLOOK 2003: OuchLook (11.05.2004)

Files:		Outlook 2003 silent delivery and installation demonstration
Discuss:		Read or add your comments to this news (0 comments)

Irix rpc.mount multiple bugs updated since 22.11.2003
Published:		19.05.2004
Source:		FULL-DISCLOSURE
SecurityVulns ID:		3277
Type:		remote
Level:		5/10
Description:		Iinformation leak, DoS, access from unprivileged client port.

Affected:

SGI : IRIX 6.5

Original document		SGI, IRIX 6.5.24 rpc.mountd infinte loop (19.05.2004)
		SGI, [Full-Disclosure] rpc.mountd Vulnerabilities on SGI IRIX (22.11.2003)

Discuss:

Read or add your comments to this news (0 comments)

Subversion/Chora buffer overflow updated since 19.05.2004
Published:		14.06.2004
Source:		BUGTRAQ
SecurityVulns ID:		3701
Type:		remote
Level:		6/10
Description:		Stack overflow on parsing svn*:// IRIs, heap overflow on stack parsing.

Affected:		SUBVERSION : Subversion 1.0
		CHORA : Chora 1.1

Original document		SECURITEAM, [UNIX] Chora CVS/SVN Viewer Remote Vulnerability (14.06.2004)
		GENTOO, [Full-Disclosure] [ GLSA 200406-07 ] Subversion: Remote heap overflow (11.06.2004)
		Stefan Esser, [Full-Disclosure] Advisory 08/2004: Subversion remote vulnerability (19.05.2004)

Discuss:

Read or add your comments to this news (0 comments)