cURL file download agent and library authentication buffer overflow
Published:		22.02.2005
Source:		BUGTRAQ
SecurityVulns ID:		4513
Type:		library
Level:		5/10
Description:		Buffer overflow during NTLM and Kerberos authentication.

Affected:

CURL : cURL 7.12

Original document		IDEFENSE, iDEFENSE Security Advisory 02.21.05: Multiple Unix/Linux Vendor cURL/libcURL Kerberos Authentication Buffer Overflow Vulnerability (22.02.2005)
		IDEFENSE, iDEFENSE Security Advisory 02.21.05: Multiple Unix/Linux Vendor cURL/libcURL NTLM Authentication Buffer Overflow Vulnerability (22.02.2005)

Discuss:

Read or add your comments to this news (0 comments)

Multiple Gigafast EE400-R router vulnerabilities
Published:		22.02.2005
Source:		BUGTRAQ
SecurityVulns ID:		4514
Type:		remote
Level:		5/10
Description:		DoS, configuration access (including administration password in cleartext).

Affected:

GIGAFAST : EE400-R

Original document

Gary H. Jones II, Gigafast/CompUSA router (model EE400-R) vulnerabilities (22.02.2005)

Discuss:

Read or add your comments to this news (0 comments)

SD Server HTTP server directory traversal
Published:		22.02.2005
Source:		BUGTRAQ
SecurityVulns ID:		4515
Type:		remote
Level:		5/10

Affected:

GDSOFTWARE : SD Server 4.0

Original document

CorryL, [Full-Disclosure] SD Server 4.0.70 Directory Traversal Bug (22.02.2005)

Discuss:

Read or add your comments to this news (0 comments)

Tarantella Secure Global Desktop user enumeration
Published:		22.02.2005
Source:		SECUNIA
SecurityVulns ID:		4516
Type:		remote
Level:		4/10
Description:		If RSA SecurID is used for authentication error messages differes for invalid username.

Affected:		TARANTELLA : Secure Global Desktop 4.0
		TARANTELLA : Secure Global Desktop 3.42
		TARANTELLA : Tarantella 3.40
		TARANTELLA : Tarantella 3.30

Original document

SECUNIA, [SA14365] SD Server Directory Traversal Vulnerability (22.02.2005)

Discuss:

Read or add your comments to this news (0 comments)

PuTTY SSH client integer overflow updated since 21.02.2005
Published:		22.02.2005
Source:		SECUNIA
SecurityVulns ID:		4511
Type:		remote
Level:		5/10
Description:		Integer overflow in SFTP (SSH File Transfer Protocol) implementation.

Affected:

PUTTY : PuTTY 0.56

Original document		IDEFENSE, iDEFENSE Security Advisory 02.21.05: Multiple PuTTY SFTP Client Packet Parsing Integer Overflow Vulnerabilities (22.02.2005)
		SECUNIA, [SA14333] PuTTY Two Integer Overflow Vulnerabilities (21.02.2005)

Discuss:

Read or add your comments to this news (0 comments)

Apache Batik Squiggle SVG browser protection bypass
Published:		22.02.2005
Source:		SECUNIA
SecurityVulns ID:		4518
Type:		client
Level:		5/10

Affected:

APACHE : Batik 1.5

Original document

SECUNIA, [SA14336] Batik Squiggle Browser Unspecified Security Bypass (22.02.2005)

Discuss:

Read or add your comments to this news (0 comments)

uim multilingval support library privilege escalation updated since 22.02.2005
Published:		05.10.2005
Source:		BUGTRAQ
SecurityVulns ID:		4517
Type:		library
Level:		5/10
Description:		Invalid environment variables handling.

Affected:

UIM : uim 0.4

Original document		GENTOO, [ GLSA 200510-03 ] Uim: Privilege escalation vulnerability (05.10.2005)
		SECUNIA, [SA13981] uim Environment Variable Trust Privilege Escalation (22.02.2005)

Discuss:

Read or add your comments to this news (0 comments)