Firefox / Opera code execution updated since 21.09.2005
Published:		23.11.2005
Source:		SECUNIA
SecurityVulns ID:		5240
Type:		client
Level:		6/10
Description:		Command lines arguments can be pasted through URL if Firefox or Opera are invoked from external application in Unix-like systems.

Affected:		MOZILLA : Firefox 1.0
		OPERA : Opera 8.5

Original document		SECUNIA, [Full-disclosure] Secunia Research: Opera Command Line URL Shell Command Injection (22.11.2005)
		SECUNIA, Firefox Command Line URL Shell Command Injection (21.09.2005)

Discuss:

Read or add your comments to this news (0 comments)

IPUpdate dynamic DNS client buffer overflow
Published:		23.11.2005
Source:		SECUNIA
SecurityVulns ID:		5475
Type:		client
Level:		5/10
Description:		Buffer overflow on DNS server reply parsing.

Affected:

IPUPDATE : IPUpdate 1.0

Original document

SECUNIA, [SA17681] IPUpdate "memmcat" Buffer Overflow Vulnerability (23.11.2005)

Discuss:

Read or add your comments to this news (0 comments)

eix symbolic links problem
Published:		23.11.2005
Source:		FULL-DISCLOSURE
SecurityVulns ID:		5477
Type:		local
Level:		5/10
Description:		Symbolic links problem on temporary files creation.

Affected:

EIX : eix 0.5

Original document

GENTOO, [Full-disclosure] [ GLSA 200511-19 ] eix: Insecure temporary file creation (23.11.2005)

Discuss:

Read or add your comments to this news (0 comments)

fusemount mtab file coruuption
Published:		23.11.2005
Source:		BUGTRAQ
SecurityVulns ID:		5476
Type:		local
Level:		5/10
Description:		Mounted points special characters problem.

Affected:

FUSE : FUSE 2.4

Original document

GENTOO, [ GLSA 200511-17 ] FUSE: mtab corruption through fusermount (23.11.2005)

Discuss:

Read or add your comments to this news (0 comments)

ipmenu iptables/iproute2 GUI symbolic links
Published:		23.11.2005
Source:		FULL-DISCLOSURE
SecurityVulns ID:		5478
Type:		local
Level:		5/10
Description:		Symbolic links problem on temporary files creation.

Affected:

IPMENU : ipmenu 0.0

Original document

DEBIAN, [Full-disclosure] [SECURITY] [DSA 907-1] New ipmenu packages fix insecure temporary file creation (23.11.2005)

Discuss:

Read or add your comments to this news (0 comments)

Novell Zenworks authorization bypass
Published:		23.11.2005
Source:		SECUNIA
SecurityVulns ID:		5479
Type:		local
Level:		5/10
Description:		Remote diagnostics functions are available to regular user.

Affected:		NOVELL : ZENworks Desktop Management 6.5
		NOVELL : ZENworks for Desktops 4.0
		NOVELL : ZENworks for Servers 3.0

Original document

SECUNIA, [SA17700] Novell ZENworks Remote-Diagnostics Access Control Weakness (23.11.2005)

Discuss:

Read or add your comments to this news (0 comments)

IBM WebSphere application server double free bug
Published:		23.11.2005
Source:		SECUNIA
SecurityVulns ID:		5474
Type:		remote
Level:		5/10

Affected:

IBM : WebSphere 5.0

Original document

SECUNIA, [SA17658] IBM WebSphere Application Server for z/OS Double-Free Vulnerability (23.11.2005)

Discuss:

Read or add your comments to this news (0 comments)

Cerberus FTP Server DoS updated since 23.11.2005
Published:		19.01.2006
Source:		SECUNIA
SecurityVulns ID:		5480
Type:		remote
Level:		5/10
Description:		Request flood causes server to crash.

Affected:

CERBERUS : Cerberus FTP Server 2.32

Original document		cvh_(at)_kapda.ir, Cerberus FTP Server 2.32 Denial of Service (19.01.2006)
		SECUNIA, [SA17650] Cerberus FTP Server Denial of Service Vulnerability (23.11.2005)

Files:		Cerberus FTP Server <= v2.32 Dos Exploit
Discuss:		Read or add your comments to this news (0 comments)