Desktop Rover remote desktop application DoS
Published:		21.04.2005
Source:		BUGTRAQ
SecurityVulns ID:		4718
Type:		remote
Level:		5/10
Description:		DoS on parsing TCP/61427 data.

Affected:

NELSOSOFTWARE : Desktop Rover 3.0

Original document

Adam Baldwin, Neslo Desktop Rover Remote DoS Vulnerability (21.04.2005)

Discuss:

Read or add your comments to this news (0 comments)

PostgreSQL weak cryptography
Published:		21.04.2005
Source:		BUGTRAQ
SecurityVulns ID:		4719
Type:		remote
Level:		5/10
Description:		Username is used as a salt for MD5-hashed passwords. In addition, during authentication hash may be used directly without knowledge of cleartext password.

Affected:

POSTGRES : PostgreSQL 7.4

Original document

Stephen Frost, Postgres: pg_hba.conf, md5, pg_shadow, encrypted passwords (21.04.2005)

Discuss:

Read or add your comments to this news (0 comments)

Yawcam webcam software directory traversal
Published:		21.04.2005
Source:		FULL-DISCLOSURE
SecurityVulns ID:		4720
Type:		remote
Level:		5/10

Affected:

YAWCAM : Yawcam 0.2

Original document

Donato Ferrante, [Full-disclosure] directory traversal in Yawcam 0.2.5 (21.04.2005)

Discuss:

Read or add your comments to this news (0 comments)

telnet client multiple buffer overflows updated since 31.03.2005
Published:		21.04.2005
Source:		BUGTRAQ
SecurityVulns ID:		4620
Type:		client
Level:		6/10
Description:		env_opt_add(), slc_add_reply() buffer overflows.

Affected:		ORACLE : Solaris 9
		APPLE : MacOS X 10.3
		ORACLE : Solaris 10
		HEIMDAL : Heimdal Kerberos 0.6
		FREEBSD : FreeBSD 4.10
		MIT : krb5 1.3
		FREEBSD : FreeBSD 5.3
		FREEBSD : FreeBSD 5.4
		FREEBSD : FreeBSD 4.11
		TELNET : telnet 3.0

Original document		SECUNIA, [SA15035] Heimdal Telnet Client Buffer Overflow Vulnerabilities (21.04.2005)
		IDEFENSE, iDEFENSE Security Advisory 03.28.05: Multiple Telnet Client slc_add_reply() Buffer Overflow Vulnerability (31.03.2005)
		IDEFENSE, iDEFENSE Security Advisory 03.28.05: Multiple Telnet Client env_opt_add() Buffer Overflow Vulnerability (31.03.2005)

Discuss:

Read or add your comments to this news (0 comments)