Microsoft Windows NetDDE buffer overflow updated since 13.10.2004
Published:		22.01.2005
Source:		MICROSOFT
SecurityVulns ID:		4084
Type:		remote
Level:		7/10

Affected:		MICROSOFT : Windows NT 4.0 Server
		MICROSOFT : Windows 2000 Server
		MICROSOFT : Windows 2000 Professional
		MICROSOFT : Windows XP
		MICROSOFT : Windows 2003 Server

Original document		NGSSoftware Insight Security Research, [VulnWatch] Microsoft NetDDE Service Unauthenticated Remote Buffer Overflow (22.01.2005)
		Sinan Eren, ms04-031 pre-auth ?? (18.10.2004)
		MICROSOFT, Microsoft Security Bulletin MS04-031 (13.10.2004)

Files:		(MS04-031) NetDDE buffer overflow vulnerability PoC
		Microsoft Security Bulletin MS04-031 Vulnerability in NetDDE Could Allow Remote Code Execution (841533)
Discuss:		Read or add your comments to this news (0 comments)

xtrlock X display locker buffer overflow
Published:		22.01.2005
Source:		BUGTRAQ
SecurityVulns ID:		4385
Type:		local
Level:		5/10
Description:		Buffer overflow allows to crash application and access desktop.

Affected:

XTRLOCK : xtrlock 2.0

Original document

DEBIAN, [SECURITY] [DSA 649-1] New xtrlock packages fix authentication bypass (22.01.2005)

Discuss:

Read or add your comments to this news (0 comments)

3COM OfficeConnect Wireless 11g AP wireless access point unauthorized access
Published:		22.01.2005
Source:		BUGTRAQ
SecurityVulns ID:		4386
Type:		remote
Level:		5/10
Description:		It's possible to accesss configuration data including cleartext passwords without any authentication.

Affected:

3COM : 3CRWE454G72

Original document

IDEFENSE, iDEFENSE Security Advisory 01.20.05: 3Com OfficeConnect Wireless 11g AP Information Disclosure Vulnerability (22.01.2005)

Discuss:

Read or add your comments to this news (0 comments)

fkey directory traversal
Published:		22.01.2005
Source:		BUGTRAQ
SecurityVulns ID:		4387
Type:		remote
Level:		5/10

Affected:

FKEY : fkey 0.0

Original document

Vade 79, fkey[v0.0.2]: local/remote file accessibility exploit. (22.01.2005)

Files:		fkey[v0.0.2]: local/remote file accessibility exploit.
Discuss:		Read or add your comments to this news (0 comments)

DivX Player skin files directory traversal
Published:		22.01.2005
Source:		FULL-DISCLOSURE
SecurityVulns ID:		4388
Type:		client
Level:		5/10
Description:		During installation of DivX skin file it's possible ot overwrite any files in any location.

Affected:

DIVX : DivX Player 2.6

Original document

Luigi Auriemma, [Full-Disclosure] Arbitrary files overwriting through skins in DivX Player 2.6 (22.01.2005)

Discuss:

Read or add your comments to this news (0 comments)

KDE KOffice buffer overflow
Published:		22.01.2005
Source:		SECUNIA
SecurityVulns ID:		4389
Type:		client
Level:		5/10
Description:		Buffer overflow in Decrypt::makeFileKey2() function.

Affected:

KDE : KOffice 1.3

Original document

SECUNIA, [SA13934] KOffice "Decrypt::makeFileKey2()" Buffer Overflow (22.01.2005)

Discuss:

Read or add your comments to this news (0 comments)

GhostScript symbolic links problem
Published:		22.01.2005
Source:		SECUNIA
SecurityVulns ID:		4390
Type:		local
Level:		5/10
Description:		Symbolic links problem in multiple scripts.

Affected:

GHOSTSCRIPT : Ghostscript 8.50

Original document

SECUNIA, [SA13933] Ghostscript Various Scripts Insecure Temporary File Creation (22.01.2005)

Discuss:

Read or add your comments to this news (0 comments)

Sun Java plugin sandbox protection bypass
Published:		22.01.2005
Source:		SECUNIA
SecurityVulns ID:		4391
Type:		client
Level:		7/10
Description:		It's possible to break sandbox protection and access local files and applications.

Affected:		SUN : JRE 1.3
		ORACLE : JRE 1.4
		IBM : Java SDK 1.3
		IBM : Java SDK 1.4

Original document

SECUNIA, [SA13918] Sun Java Plug-In Two Vulnerabilities (22.01.2005)

Discuss:

Read or add your comments to this news (0 comments)

Sybari Antigen for Domino antivirus multiple vulnerabilities
Published:		22.01.2005
Source:		SECUNIA
SecurityVulns ID:		4392
Type:		remote
Level:		6/10
Description:		Protection bypass, buffer overflow on MIME parsing in Antigen for Domino on Solaris.

Affected:

SYBARI : AntiGen for Domino 7.0

Original document

SECUNIA, [SA13929] AntiGen for Domino Multiple Vulnerabilities (22.01.2005)

Discuss:

Read or add your comments to this news (0 comments)

Multiple Oracle Database Server security problems updated since 18.01.2005
Published:		22.01.2005
Source:		BUGTRAQ
SecurityVulns ID:		4378
Type:		local
Level:		7/10
Description:		SQL injection, privilege escalation, buffer overflows.

Affected:		ORACLE : Oracle 9i
		ORACLE : Oracle E-Business Suite 11.0
		ORACLE : Oracle E-Business Suite 11.5
		ORACLE : Oracle 10g
		ORACLE : Oracle Application Server 1.0

Original document		Jose Antonio, Various Buffer Overflows in Oracle 10g Tools (22.01.2005)
		Integrigy Security Alerts, [Full-Disclosure] Integrigy Security Advisory - High Risk Security Issues in the Oracle Database and Oracle Applications (20.01.2005)
		SECUNIA, [SA13862] Oracle Products 23 Vulnerabilities (19.01.2005)
		Pete Finnigan, PeteFinnigan.com - Oracle security advisory (19.01.2005)
		NGSSoftware Insight Security Research, Multiple high risk vulnerabilities in Oracle RDBMS 10g/9i (18.01.2005)

Discuss:

Read or add your comments to this news (0 comments)