 |
|
|
|
| snort intrusion detection system (IDS) buffer overflow | | Published: |  | 19.10.2005 | | Source: |  | BUGTRAQ | | SecurityVulns ID: |  | 5363 | | Type: |  | remote | | Level: |  | 8/10 | | Description: |  | Buffer overflow in Back Orifice UDP preprocessing (any UDP port) |
| Sun Solaris SCTP socket option DoS | | Published: | | 19.10.2005 | | Source: | | SECUNIA | | SecurityVulns ID: | | 5366 | | Type: | | local |
| YIFF server sound files unauthorized access | | Published: | | 19.10.2005 | | Source: | | BUGTRAQ | | SecurityVulns ID: | | 5367 | | Type: | | local | | Level: | | 5/10 | | Description: | | File permissions are ignored while playing file. |
PHP open_basedir protection bypass
updated since 28.09.2005 | | Published: | | 19.10.2005 | | Source: | | SECUNIA | | SecurityVulns ID: | | 5270 | | Type: | | local | | Level: | | 5/10 | | Description: | | Under some rare conditions it's possible to open file from different directory. |
| Gentoo Linux multiple ports privilege escalation | | Published: | | 19.10.2005 | | Source: | | BUGTRAQ | | SecurityVulns ID: | | 5358 | | Type: | | library | | Level: | | 5/10 | | Description: | | User from portage group can place dynamic library into search path of vulnerable library. Vulnerable ports are perl, Qt-UnixODBC, CMake. |
| flexbackup backup utility symbolic links problem | | Published: | | 19.10.2005 | | Source: | | BUGTRAQ | | SecurityVulns ID: | | 5360 | | Type: | | local | | Level: | | 5/10 | | Description: | | Symbolic links problem during temporary files creation. |
| NetPBM graphical utilities buffer overflow | | Published: | | 19.10.2005 | | Source: | | BUGTRAQ | | SecurityVulns ID: | | 5361 | | Type: | | library | | Level: | | 5/10 | | Description: | | Buffer overflow on PNM file parsing in pnmtopng utility. |
| Cisco Content Switch SSL DoS | | Published: | | 19.10.2005 | | Source: | | FULL-DISCLOSURE | | SecurityVulns ID: | | 5364 | | Type: | | remote | | Level: | | 6/10 | | Description: | | Memory corruption on malformed certificate handling. |
| AIX lscfg symbolic links problem | | Published: | | 19.10.2005 | | Source: | | SECUNIA | | SecurityVulns ID: | | 5365 | | Type: | | local | | Level: | | 5/10 |
| lynx text mode web browser buffer overflow | | Published: | | 19.10.2005 | | Source: | | BUGTRAQ | | SecurityVulns ID: | | 5359 | | Type: | | remote | | Level: | | 6/10 | | Description: | | Buffer overflow on NNTP server reply parsing. |
Web applications security vulnerabilities (PHP, ASP, CGI, Perl, etc)
updated since 19.10.2005 | | Published: | | 22.10.2005 | | Source: | | | | SecurityVulns ID: | | 5362 | | Type: | | remote | | Level: | | 5/10 | | Description: | | PHP inclusions, SQL injections, directory traversals, crossite scripting, information leaks, etc. |
| Original document |  | God Of Death (G.O.D), [Full-disclosure] Vulnerability in AL-Caricatier, V.2.5 And Prior Versions (22.10.2005) |
| | | K-Gen Gen, [Full-disclosure] phpBB 2.0.17 (and other BB systems as well) Cookie disclosure exploit. (22.10.2005) |
| | | Stefan Esser, [Full-disclosure] Advisory 16/2005: phpMyAdmin Local File Inclusion Vulnerability (22.10.2005) |
| | | papipsycho_(at)_hotmail.com, Nuked klan 1.7: XSS vulnerability (22.10.2005) |
| | | SECUNIA, [SA17201] W-Agora Local File Inclusion and File Upload Vulnerabilities (20.10.2005) |
| | | SECUNIA, [SA17219] Comersus Power Pack Premium Cross-Site Scripting Vulnerabilities (20.10.2005) |
| | | SECUNIA, [SA17218] PHP-Nuke NukeFixes Addon "file" Local File Inclusion Vulnerability (20.10.2005) |
| | | alireza hassani, XSS & Path Disclosure in Chipmunk's products (20.10.2005) |
| | | SECUNIA, [SA17240] MailSite Express Attachment Upload Vulnerability (19.10.2005) |
| | | SECUNIA, [SA17243] Xerver Multiple Vulnerabilities (19.10.2005) |
| | | sp3x_(at)_securityreason.com, SecurityAlert SA025 : PHPNuke Remote Directory Traversal (19.10.2005) |
| | | why_(at)_nsfocus.com, e107 remote commands execution (19.10.2005) |
| | | why_(at)_nsfocus.com, NetFlow Analyzer 4 XSS Vulnerability (19.10.2005) |
| | | SECUNIA, Secunia Research: MySource Cross-Site Scripting and File Inclusion Vulnerabilities (19.10.2005) |
|
|
|
|
|
|
|
|
