Apple Safari for Windows buffer overflow and content spoofing updated since 22.03.2008
Published:		23.03.2008
Source:		BUGTRAQ
SecurityVulns ID:		8819
Type:		client
Level:		5/10
Description:		Buffer overflow on oversized download filename.

Original document		jplopezy_(at)_gmail.com, Safari browser 3.1 (525.13) spoofing (23.03.2008)
		jplopezy_(at)_gmail.com, Safari 3.1 for windows download bug (22.03.2008)

Discuss:

Read or add your comments to this news (0 comments)

Daily web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)
Published:		23.03.2008
Source:
SecurityVulns ID:		8824
Type:		remote
Level:		5/10
Description:		PHP inclusions, SQL injections, directory traversals, crossite scripting, information leaks, etc.

Affected:

PHPADDRESSBOOK : phpAddressBook 2.11

Original document

Guns_(at)_0x90.com.ar, phpAddressBook v2.11 Multiple Local File Inclusion Vulnerabilities (23.03.2008)

Discuss:

Read or add your comments to this news (0 comments)

Mitsubishi GB-50A unauthorized access
Published:		23.03.2008
Source:		BUGTRAQ
SecurityVulns ID:		8823
Type:		remote
Level:		5/10
Description:		Access authentication is not implemented.

Affected:

MITSUBISHI : GB-50A

Original document

Chris Withers, hacking the mitsubishi GB-50A (23.03.2008)

Files:		Exploits mitsubishi GB-50A
Discuss:		Read or add your comments to this news (0 comments)

unzip / bzip2 DoS updated since 23.03.2008
Published:		30.03.2009
Source:		BUGTRAQ
SecurityVulns ID:		8822
Type:		remote
Level:		5/10

Affected:		BZIP : bzip2 1.0
		ANALOG : analog 6.0
CVE:		CVE-2008-1372 (bzlib.c in bzip2 before 1.0.5 allows user-assisted remote attackers to cause a denial of service (crash) via a crafted file that triggers a buffer over-read, as demonstrated by the PROTOS GENOME test suite for Archive Formats.)
		CVE-2008-0888 (The NEEDBITS macro in the inflate_dynamic function in inflate.c for unzip can be invoked using invalid buffers, which allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via unknown vectors that trigger a free of uninitialized or previously-freed data.)

Original document		GENTOO, [ GLSA 200903-40 ] Analog: Denial of Service (30.03.2009)
		RPATH, rPSA-2008-0118-1 bzip2 (23.03.2008)
		RPATH, rPSA-2008-0116-1 unzip (23.03.2008)

Discuss:

Read or add your comments to this news (0 comments)