Daily web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)
Published:		19.07.2008
Source:
SecurityVulns ID:		9159
Type:		remote
Level:		5/10
Description:		PHP inclusions, SQL injections, directory traversals, crossite scripting, information leaks, etc. Contrexx CMS: crossite scripting, registration automation.

Affected:		CLAROLINE : Claroline 1.8
		CONTREX : Contrexx CMS 2.0
		DEFBLOG : Def_Blog 1.0

Original document		Digital Security Research Group [DSecRG], [DSECRG-08-030] Claroline 1.8.9 Multiple Security Vulnerabilities (19.07.2008)
		MustLive, Vulnerabilities in Contrexx CMS (19.07.2008)

Discuss:

Read or add your comments to this news (0 comments)

afuse shell characters problem
Published:		19.07.2008
Source:		BUGTRAQ
SecurityVulns ID:		9161
Type:		local
Level:		5/10
Description:		Privilege escalation with shell characters in filenames.

Affected:		AFUSE : afuse 0.1
		AFUSE : afuse 0.2
CVE:		CVE-2008-2232

Original document

DEBIAN, [SECURITY] [DSA 1611-1] New afuse packages fix privilege escalation (19.07.2008)

Discuss:

Read or add your comments to this news (0 comments)

Oracle SQL injection lateral attacks updated since 27.04.2008
Published:		19.07.2008
Source:		BUGTRAQ
SecurityVulns ID:		8951
Type:		library
Level:		5/10
Description:		SQL injection into uncontrolled PL/SQL procedires is possible with e.g. modification of data format with ALTER SESSION.

Original document		David Litchfield, Lateral SQL Injection Revisited - No Special Privs Required (19.07.2008)
		David Litchfield, A New Class of Vulnerability in Oracle: Lateral SQL Injection (27.04.2008)

Files:		LateralSQLInjection
Discuss:		Read or add your comments to this news (0 comments)

F-Prot antivirus DoS
Published:		19.07.2008
Source:		BUGTRAQ
SecurityVulns ID:		9160
Type:		remote
Level:		5/10
Description:		Out-of-bound memory access on CHM files parsing.

Affected:

FPROT : F-Prot Antivirus 4.4

Original document

security_(at)_nruns.com, n.runs-SA-2008.002 - F-Prot Out-of-Bound Memory Access DoS (remote) (19.07.2008)

Discuss:

Read or add your comments to this news (0 comments)

HP Select Identity unauthorized access
Published:		19.07.2008
Source:		BUGTRAQ
SecurityVulns ID:		9162
Type:		remote
Level:		6/10
Description:		Unauthorized access via Active Directory Bidirectional LDAP Connector.

Affected:		HP : HPSI Active Directory Bidirectional LDAP Connector 2..20
		HP : HPSI Active Directory Bidirectional LDAP Connector 2..30
CVE:		CVE-2008-1665

Original document

HP, HPSBMA02346 SSRT080097 rev.2 - HP Select Identity Active Directory Bidirectional LDAP Connector, Remote Unauthorized Access (19.07.2008)

Discuss:

Read or add your comments to this news (0 comments)