Daily web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)
Published:		23.01.2006
Source:
SecurityVulns ID:		5679
Type:		remote
Level:		5/10
Description:		PHP inclusions, SQL injections, directory traversals, crossite scripting, information leaks, etc.

Affected:		ZOPH : Zoph 0.5
		AZBB : AZ Bulletin Board 1.1

Original document		SECUNIA, [SA18565] AZ Bulletin Board Cross-Site Scripting Vulnerabilities (23.01.2006)
		SECUNIA, [SA18563] Zoph SQL Injection Vulnerabilities (23.01.2006)

Discuss:

Read or add your comments to this news (0 comments)

tor hidden services information disclosure
Published:		23.01.2006
Source:		SECUNIA
SecurityVulns ID:		5680
Type:		client
Level:		5/10
Description:		It's possible to discover location of hidden service by setting up malicious tor server, accessing hidden service repeatedly and tracking who builds circuits.

Affected:

TOR : tor 0.1

Original document

SECUNIA, [SA18576] Tor Hidden Service Disclosure Weakness (23.01.2006)

Discuss:

Read or add your comments to this news (0 comments)

lsh SSH server file descriptor leak
Published:		23.01.2006
Source:		SECUNIA
SecurityVulns ID:		5683
Type:		local
Level:		5/10
Description:		Random generator's seed file is not closed before executing command processor.

Affected:

LSH : lsh 2.0

Original document

SECUNIA, [SA18564] LSH lshd Seed-file File Descriptor Leak Vulnerability (23.01.2006)

Discuss:

Read or add your comments to this news (0 comments)

libTIFF TIFF library NULL pointer dereference
Published:		23.01.2006
Source:		SECUNIA
SecurityVulns ID:		5682
Type:		library
Level:		5/10
Description:		tif_dir.c NULL pointer dereference.

Affected:

LIBTIFF : libtiff 3.8

Original document

SECUNIA, [SA18587] LibTIFF TIFFVSetField Denial of Service Vulnerability (23.01.2006)

Discuss:

Read or add your comments to this news (0 comments)

FetchMail mail processor DoS updated since 23.01.2006
Published:		24.01.2006
Source:		BUGTRAQ
SecurityVulns ID:		5681
Type:		remote
Level:		5/10
Description:		Error on bounce message generation cause uninitialized memory reference.

Affected:

FETCHMAIL : fetchmail 6.3

Original document		ma+nomail_(at)_dt.e-technik.uni-dortmund.de, [VulnWatch] fetchmail security announcement fetchmail-SA-2006-01 (CVE-2006-0321) (24.01.2006)
		SECUNIA, [SA18571] Fetchmail Bounced Message Denial of Service Vulnerability (23.01.2006)

Discuss:

Read or add your comments to this news (0 comments)