Microsoft Windows Explorer code execution
Published:		20.04.2005
Source:		VULNWATCH
SecurityVulns ID:		4713
Type:		local
Level:		5/10
Description:		It's possible to execute script automatically on file selection.

Affected:		MICROSOFT : Windows 2000 Server
		MICROSOFT : Windows 2000 Professional

Original document

GreyMagic Software, [VulnWatch] File Selection May Lead to Command Execution (GM#015-IE) (20.04.2005)

Discuss:

Read or add your comments to this news (0 comments)

RealPlayer media player buffer overflow
Published:		20.04.2005
Source:		FULL-DISCLOSURE
SecurityVulns ID:		4715
Type:		client
Level:		6/10
Description:		Buffer overflow on RAM (real media audio) files parsing.

Affected:		REAL : RealPlayer 10
		REAL : RealPlayer 10.5

Original document

Piotr Bania, [Full-disclosure] RealNetworks RealPlayer/RealOne Player/Helix Player Remote Heap Overflow (20.04.2005)

Discuss:

Read or add your comments to this news (0 comments)

f2c fortran to c translator symbolic links problems
Published:		20.04.2005
Source:		BUGTRAQ
SecurityVulns ID:		4714
Type:		local
Level:		5/10
Description:		Symbolic links problem on temporary files creation.

Affected:

F2C : f2c 3.2

Original document

DEBIAN, [SECURITY] [DSA 661-2] New f2c packages fix insecure temporary files (20.04.2005)

Discuss:

Read or add your comments to this news (0 comments)

Microsoft Exchange Server SMTP protocol buffer overflow updated since 13.04.2005
Published:		20.04.2005
Source:		MICROSOFT
SecurityVulns ID:		4680
Type:		remote
Level:		9/10
Description:		Heap overflow on extended SMTP commands.

Affected:		MICROSOFT : Exchange 2000
		MICROSOFT : Exchange 2003

Original document		Evgeny Pinchuk, MS05-021 Microsoft Exchange X-LINK2STATE Heap Overflow PoC (20.04.2005)
		X-FORCE, ISS Protection Brief: Microsoft Exchange Remote Compromise (13.04.2005)
		MICROSOFT, Microsoft Security Bulletin MS05-021 Vulnerability in Exchange Server Could Allow Remote Code Execution (894549) (13.04.2005)

Files:		MS05-021 Microsoft Exchange X-LINK2STATE Heap Overflow PoC
		Microsoft Security Bulletin MS05-021 Vulnerability in Exchange Server Could Allow Remote Code Execution (894549)
		Microsoft Exchange Remote Compromise
Discuss:		Read or add your comments to this news (0 comments)

Sun Java System Web Proxy Server buffer overflow
Published:		20.04.2005
Source:		SECUNIA
SecurityVulns ID:		4717
Type:		remote
Level:		5/10

Affected:

SUN : Sun Java System Web Proxy Server 3.6

Original document

SECUNIA, [SA14901] Sun Java System Web Proxy Server Unspecified Buffer Overflow (20.04.2005)

Discuss:

Read or add your comments to this news (0 comments)

Solaris unprivileged port hijacking updated since 20.04.2005
Published:		07.07.2005
Source:		SECUNIA
SecurityVulns ID:		4716
Type:		local
Level:		6/10
Description:		It possible to bind a process to a non-privileged network port, which already has been bound

Affected:		ORACLE : Solaris 8
		ORACLE : Solaris 9

Original document		c0ntexb_(at)_gmail.com, Solaris Socket Hijack (07.07.2005)
		SECUNIA, [SA14981] Sun Solaris Network Port Hijacking Vulnerability (20.04.2005)

Files:		Solaris Socket Hijack local exploit
Discuss:		Read or add your comments to this news (0 comments)