FreeBSD IEEE 802.11 wireless network buffer overflow updated since 19.01.2006
Published:		20.01.2006
Source:		SECUNIA
SecurityVulns ID:		5667
Type:		remote
Level:		7/10
Description:		Buffer overflow on parsing IEEE 802.11 control frames.

Affected:

FREEBSD : FreeBSD 6.0

Original document		FREEBSD, FreeBSD Security Advisory FreeBSD-SA-06:05.80211 (20.01.2006)
		SECUNIA, [SA18353] FreeBSD IEEE 802.11 Buffer Overflow Vulnerability (19.01.2006)

Discuss:

Read or add your comments to this news (0 comments)

tftpd32 TFTP server format string vulnerability
Published:		20.01.2006
Source:		CRITICAL
SecurityVulns ID:		5671
Type:		remote
Level:		5/10
Description:		SEND and GET TFTP commands format string bug.

Affected:

TFTPD32 : TFTPD 2.81

Original document

mircia, tftpd32 format string (20.01.2006)

Files:		Tftpd32 Format String PoC DoS
Discuss:		Read or add your comments to this news (0 comments)

Unauthorized ecartis mailing lists manager access
Published:		20.01.2006
Source:		BUGTRAQ
SecurityVulns ID:		5673
Type:		remote
Level:		6/10
Description:		Attachment sent to -request address is saved to web accessible folder, allowing to put files on the Web server.

Affected:

ECARTIS : ecartis 1.0

Original document

SECUNIA, [SA18524] Ecartis "pantomime" Functionality Attachment Handling Security Issue (20.01.2006)

Discuss:

Read or add your comments to this news (0 comments)

Multiple RockLife MailSite mail server vulnerabilities
Published:		20.01.2006
Source:		BUGTRAQ
SecurityVulns ID:		5672
Type:		remote
Level:		5/10
Description:		Crossite scripting and DoS.

Affected:		ROCKLIFE : MailSite 6.1
		ROCKLIFE : MailSite 7.0

Original document		OS2A BTO, [Full-disclosure] RockLiffe MailSite wconsole.dll Denial of Service/Script Injection Vulnerability (20.01.2006)
		SECUNIA, [SA18551] MailSite Cross-Site Scripting and Denial of Service (20.01.2006)

Discuss:

Read or add your comments to this news (0 comments)

Daily web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)
Published:		20.01.2006
Source:
SecurityVulns ID:		5670
Type:		remote
Level:		5/10
Description:		PHP inclusions, SQL injections, directory traversals, crossite scripting, information leaks, etc.

Affected:		ETOMITE : Etomite 0.6
		GALLERY : Gallery 1.5
		ARBLOG : ar-blog 5.2
		WEBSPOT : WebspotBlogging 3.0
		TYPO3 : TYPO3 3.7

Original document		SECUNIA, [SA18557] Gallery Fullname Script Insertion Vulnerability (20.01.2006)
		SECUNIA, [SA18556] Etomite "cij" Shell Command Execution Backdoor Security Issue (20.01.2006)
		Aliaksandr Hartsuyeu, [eVuln] WebspotBlogging Authentication Bypass Vulnerability (20.01.2006)
		night_warrior771_(at)_hotmail.com, Land Down Under Signature HTML Code Injection (20.01.2006)
		s3ude_(at)_hotmail.com, -2- [XSS] in ar-blog v 5.2 (20.01.2006)
		:) :), Phpclanwebsite BBCode IMG Tag XSS Vulnerability (20.01.2006)
		:) :), phpXplorer file inclusion biyosecurity.be (20.01.2006)

Discuss:

Read or add your comments to this news (0 comments)

KDE libraries / Konqueror buffer overflow updated since 20.01.2006
Published:		22.01.2006
Source:		FULL-DISCLOSURE
SecurityVulns ID:		5669
Type:		remote
Level:		6/10
Description:		Buffer overflow on Unicode URL parsing within JavaScript processor.

Affected:		KDE : KDE 3.2
		KDE : KDE 3.3
		KDE : KDE 3.4
		KDE : kdelibs 3.4
		KDE : KDE 3.5

Original document		KDE, [KDE Security Advisory] kjs encodeuri/decodeuri heap overflow (22.01.2006)
		UBUNTU, [Full-disclosure] [USN-245-1] KDE library vulnerability (20.01.2006)

Discuss:

Read or add your comments to this news (0 comments)