Multiple Cisco Security Monitoring, Analysis and Response System security vulnerabilities
Published:		22.07.2006
Source:		BUGTRAQ
SecurityVulns ID:		6382
Type:		remote
Level:		6/10
Description:		Default preconfigured Oracle databse account, JBoss code execution, multiple administrative interface code executions.

Affected:		CISCO : CS-MARS 4.1
		CISCO : CS-MARS 4.2

Original document		Jon Hart, Cisco MARS < 4.2.1 remote compromise (22.07.2006)
		CISCO, Cisco Security Advisory: Multiple Vulnerabilities in Cisco Security Monitoring, Analysis and Response System (CS-MARS) (22.07.2006)

Files:		Exploits Cisco/Protego CS-MARS < 4.2.1 remote command execution, system compromise via insecure JBoss installation
Discuss:		Read or add your comments to this news (0 comments)

OutpostFirewall / Lavasoft Firewall privilege escalation
Published:		22.07.2006
Source:		BUGTRAQ
SecurityVulns ID:		6384
Type:		local
Level:		6/10
Description:		Firewall administration application launches explorer.exe with Local System privileges if explorer.exe is not running.

Affected:		AGNITUM : Outpost Firewall Pro 3.51
		LAVASOFT : Lavasoft Personal Firewall 1.0

Original document

mullware_(at)_gmail.com, Escalation of privileges in Outpost and Lavasoft Firewalls -Unusual ShellExecute behavior (22.07.2006)

Discuss:

Read or add your comments to this news (0 comments)

Weak Mercury Messenger permissions
Published:		22.07.2006
Source:		BUGTRAQ
SecurityVulns ID:		6387
Type:		local
Level:		5/10
Description:		Chat log director yis world-readable.

Original document

Hans Wolters, Mercury Messenger (22.07.2006)

Discuss:

Read or add your comments to this news (0 comments)

Multiple Ethereal / TEthereal / TShark / WireShark security vulnerabilities
Published:		22.07.2006
Source:		BUGTRAQ
SecurityVulns ID:		6383
Type:		remote
Level:		6/10
Description:		Buffer overflows in multiple protocols dessectors.

Affected:		WIRESHARK : wireshark 0.99
		TSHARK : tshark 0.99
		ETHEREAL : Ethereal 0.99
		ETHEREAL : TEthereal 0.99

Original document

MANDRAKE, [ MDKSA-2006:128 ] - Updated wireshark packages fix numerous vulnerabilities (22.07.2006)

Discuss:

Read or add your comments to this news (0 comments)

Linux kernel procfs race conditions
Published:		22.07.2006
Source:		BUGTRAQ
SecurityVulns ID:		6385
Type:		local
Level:		6/10
Description:		Privilege escalation is possible.

Affected:

LINUX : kernel 2.6

Original document

DEBIAN, [SECURITY] [DSA 1111-1] New Linux kernel 2.6.8 packages fix privilege escalation (22.07.2006)

Files:		Exploits Linux kernel /proc race conditions
Discuss:		Read or add your comments to this news (0 comments)

D-Link routers UPNP buffer overflow
Published:		22.07.2006
Source:		BUGTRAQ
SecurityVulns ID:		6386
Type:		remote
Level:		6/10
Description:		Buffer overflow on oversized UPNP (TCP/1900) M-SEARCH request.

Affected:		DLINK : D-Link DI-524
		DLINK : D-Link DI-624
		DLINK : D-Link DI-784
		DLINK : D-Link DI-604
		DLINK : D-Link EBR-2310
		DLINK : D-Link WBR-2310
		DLINK : D-Link WBR-1310

Original document

EEYE, D-Link Router UPNP Stack Overflow (22.07.2006)

Discuss:

Read or add your comments to this news (0 comments)

Multiple UFO2000 game security vulnerabilities
Published:		22.07.2006
Source:		BUGTRAQ
SecurityVulns ID:		6388
Type:		remote
Level:		5/10
Description:		Memory corruptions, buffer overflows, SQL injections, etc.

Affected:

UFO2000 : UFO2000 1057

Original document

Luigi Auriemma, Multiple vulnerabilities in UFO2000 svn 1057 (22.07.2006)

Discuss:

Read or add your comments to this news (0 comments)

Microsoft Internet Information services buffer overflow updated since 11.07.2006
Published:		22.07.2006
Source:		MICROSOFT
SecurityVulns ID:		6362
Type:		local
Level:		6/10
Description:		Buffer overflow in ASP files processing leads to privilege escalation.

Affected:		MICROSOFT : Windows 2000 Server
		MICROSOFT : Windows 2000 Professional
		MICROSOFT : Windows XP
		MICROSOFT : Windows 2003 Server

Original document		Brett Moore, ASP.DLL Include File Buffer Overflow (22.07.2006)
		MICROSOFT, Microsoft Security Bulletin MS06-034 Vulnerability in Microsoft Internet Information Services using Active Server Pages Could Allow Remote Code Execution (917537) (11.07.2006)

Files:		Microsoft Security Bulletin MS06-034 Vulnerability in Microsoft Internet Information Services using Active Server Pages Could Allow Remote Code Execution (917537)
Discuss:		Read or add your comments to this news (0 comments)