 |
|
|
|
| ASP.NET invalid components usage DoS | | Published: |  | 22.03.2006 | | Source: |  | HACKINGSPIRIT | | SecurityVulns ID: |  | 5921 | | Type: |  | remote | | Level: |  | 4/10 | | Description: |  | w2wp process can crash or exhaust resources on .Net applications written without “AspCompat” directive. |
| snmptrapfmt symbolic links vulnerability | | Published: | | 22.03.2006 | | Source: | | BUGTRAQ | | SecurityVulns ID: | | 5924 | | Type: | | remote | | Level: | | 5/10 | | Description: | | Symbolic links problem on temporary files creation. |
| RunIt chpst privilege escalation | | Published: | | 22.03.2006 | | Source: | | SECUNIA | | SecurityVulns ID: | | 5926 | | Type: | | local | | Level: | | 5/10 | | Description: | | It's possible to obtain root group privilege. |
| WebLogic Server / WebLogic Express multiple security vulnerabilities | | Published: | | 22.03.2006 | | Source: | | BUGTRAQ | | SecurityVulns ID: | | 5927 | | Type: | | remote | | Level: | | 5/10 | | Description: | | DoS, local filesystem access. |
| util-vserver restrictions bypass | | Published: | | 22.03.2006 | | Source: | | BUGTRAQ | | SecurityVulns ID: | | 5933 | | Type: | | remote | | Level: | | 5/10 | | Description: | | All unknown capacities are allowed by default. |
| Motorola cellular phones multiple bluetooth vulnerabilities | | Published: | | 22.03.2006 | | Source: | | FULL-DISCLOSURE | | SecurityVulns ID: | | 5925 | | Type: | | remote | | Level: | | 5/10 | | Description: | | Security dialog spoofing, buffer overflow. |
| BEA WebLogic Portal information leak | | Published: | | 22.03.2006 | | Source: | | SECUNIA | | SecurityVulns ID: | | 5928 | | Type: | | remote | | Level: | | 5/10 | | Description: | | Incorrect caching algorithm leads to user's portlet data may be leaked to another portlet. |
| opie one time password system privilege escalation | | Published: | | 22.03.2006 | | Source: | | BUGTRAQ | | SecurityVulns ID: | | 5930 | | Type: | | remote | | Level: | | 6/10 | | Description: | | Under some conditions unprivileged user can be validated as 'root'. |
| FreeBSD IPSec replay attack | | Published: | | 22.03.2006 | | Source: | | BUGTRAQ | | SecurityVulns ID: | | 5931 | | Type: | | remote | | Level: | | 6/10 | | Description: | | fast_ipsec implementation doesn't increment packet sequence number, allowing replay attack for captured packet. |
| Daily web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl) | | Published: | | 22.03.2006 | | Source: | | | | SecurityVulns ID: | | 5922 | | Type: | | remote | | Level: | | 5/10 | | Description: | | PHP inclusions, SQL injections, directory traversals, crossite scripting, information leaks, etc. |
Linux kernel multiple vulnerabilities
updated since 22.03.2006 | | Published: | | 23.03.2006 | | Source: | | BUGTRAQ | | SecurityVulns ID: | | 5932 | | Type: | | library | | Level: | | 7/10 | | Description: | | Integer overflow in netfilter's do_replace() function, memory corruption in usb/gadget driver. Kernel memory content leak through sockaddr_in.sin_zero. |
Sendmail mail server race conditions
updated since 22.03.2006 | | Published: | | 24.03.2006 | | Source: | | BUGTRAQ | | SecurityVulns ID: | | 5929 | | Type: | | remote | | Level: | | 9/10 | | Description: | | Race conditions on signals processing with setjmp/longjmp allow remote code execution. |
Multiple Microsoft Internet Explorer security vulnerabilities
updated since 22.03.2006 | | Published: | | 27.05.2006 | | Source: | | FULL-DISCLOSURE | | SecurityVulns ID: | | 5923 | | Type: | | client | | Level: | | 9/10 | | Description: | | Jump to ininitialized function pointer by referencing unspupported object's method (createTextRange() for checkbox). Potentially can be used for code execution and hidden malware installation. Memory corruption on uninitialized event handlers. HTA code execution. HTML parsing memory corrution. COM objects memory corruption. Crossite scripting. |
| Original document |  | Thomas Waldegger, [BuHa-Security] DoS Vulnerability in MS IE 6 SP2 (27.05.2006) |
| | | Thomas Waldegger, [BuHa-Security] MS06-013: HTML Tag Memory Corruption Vulnerability in MS IE 6 SP2 (27.05.2006) |
| | | Thomas Waldegger, [BuHa-Security] Multiple Vulnerabilities in MS IE 6.0 SP2 (13.04.2006) |
| | | Sowhat ., [Full-disclosure] Microsoft Internet Explorer DBCS Remote Memory Corruption Vulnerability (12.04.2006) |
| | | X-FORCE, ISS Protection Bried: ie_patch_ms_06-13 (12.04.2006) |
| | | Sowhat ., Microsoft Internet Explorer DBCS Remote Memory Corruption Vulnerability (12.04.2006) |
| | | CERT, US-CERT Technical Cyber Security Alert TA06-101A -- Microsoft Windows and Internet Explorer Vulnerabilities (12.04.2006) |
| | | MICROSOFT, Microsoft Security Bulletin MS06-013 Cumulative Security Update for Internet Explorer (912812) (11.04.2006) |
| | | Determina Secure, Determina Fix for CVE-2006-1359 (Zero Day MS Internet Explorer Remote "CreateTextRange()" Code Execution) (29.03.2006) |
| | | EEYE, [Full-disclosure] EEYE: Temporary workaround for IE createTextRange vulnerability (28.03.2006) |
| | | H D Moore, [Full-disclosure] Fun with DHTML (23.03.2006) |
| | | SECUNIA, [SA18680] Microsoft Internet Explorer "createTextRange()" Code Execution (22.03.2006) |
| | | Computer Terrorism (UK) :: Incident Response Centre, [Full-disclosure] Microsoft Internet Explorer (mshtml.dll) - Remote Code Execution (22.03.2006) |
| | | Stelian Ene, [Full-disclosure] IE crash (22.03.2006) |
|
|
|
|
|
|
|
|
