Citrix Metaframe XP buffer overflow
Published:		23.12.2004
Source:		BUGTRAQ
SecurityVulns ID:		4299
Type:		remote
Level:		6/10

Affected:

CITRIX : MetaFrame XP

Original document

SECUNIA, [SA13618] Citrix Metaframe XP Unspecified Buffer Overflow Vulnerability (23.12.2004)

Discuss:

Read or add your comments to this news (0 comments)

LPRng symbolic links problem
Published:		23.12.2004
Source:		SECUNIA
SecurityVulns ID:		4300
Type:		local
Level:		5/10
Description:		Symbolic links problem in lprng_certs.sh.

Affected:

LPRNG : LPRng 3.8

Original document

SECUNIA, [SA13640] LPRng "lprng_certs.sh" Script Insecure Temporary File Creation (23.12.2004)

Discuss:

Read or add your comments to this news (0 comments)

Symantec Brightmail AntiSpam DoS
Published:		23.12.2004
Source:		SECUNIA
SecurityVulns ID:		4301
Type:		remote
Level:		5/10
Description:		Large number of quarantined spam messages causes notifier service to crash.

Affected:

SYMANTEC : Brightmail AntiSpam 6.0

Original document

SECUNIA, [SA13593] Symantec Brightmail AntiSpam Notifier Denial of Service (23.12.2004)

Discuss:

Read or add your comments to this news (1 comments)

SpySweeper privilege escalation
Published:		23.12.2004
Source:		SECUNIA
SecurityVulns ID:		4302
Type:		local
Level:		5/10
Description:		Privilege escalation with help subsystem.

Affected:		SPYSWEEPER : Spy Sweeper 1.5
CVE:		CVE-2004-2676 (The Spy Sweeper Enterprise Client (SpySweeperTray.exe) in WebRoot Spy Sweeper before 2.0 does not drop privileges when using the help functionality, which allows local users to gain privileges.)

Original document

SECUNIA, [SA13187] Spy Sweeper Enterprise Privilege Escalation Vulnerability (23.12.2004)

Discuss:

Read or add your comments to this news (0 comments)

Multiple PHP bugs updated since 16.12.2004
Published:		23.12.2004
Source:		BUGTRAQ
SecurityVulns ID:		4272
Type:		library
Level:		7/10
Description:		Integer overflow leading to memory content leak, safe mode protection bypass, openlog() buffer overflow, etc.

Affected:		PHP : PHP 4.3
		PHP : PHP 5.0

Original document		The Warlock, PHP v4.3.x exploit for Windows. (23.12.2004)
		Stefano Di Paola, PHP shmop.c module permits write of arbitrary memory. (21.12.2004)
		bad boy, phphpbb2 + php version < 4.3.10 unserialize() memory dump sql password from config.php exploit (18.12.2004)
		Daniel Fabian, PHP Input Validation Vulnerabilities (16.12.2004)
		Martin Eiszner, php unserialize (16.12.2004)
		PHP1, Advisory 01/2004: Multiple vulnerabilities in PHP 4/5 (16.12.2004)

Files:		PHP openlog() Windows local exploit
		PHP shmop safe mode bypass exploit
Discuss:		Read or add your comments to this news (0 comments)

debmake symbolic links problem
Published:		23.12.2004
Source:		BUGTRAQ
SecurityVulns ID:		4297
Type:		local
Level:		5/10
Description:		Invalid debstd temporary directories handling.

Affected:

DEBIAN : debmake 3.6

Original document

DEBIAN, [SECURITY] [DSA 615-1] New debmake package fixes insecure temporary directories (23.12.2004)

Discuss:

Read or add your comments to this news (0 comments)

Sybase ASE database multiple vulnerabilities updated since 23.12.2004
Published:		07.04.2005
Source:		BUGTRAQ
SecurityVulns ID:		4298
Type:		remote
Level:		6/10
Description:		Multiple buffer overflows and DoS conditions.

Affected:

SYBASE : Sybase ASE 12.5

Original document		NGSSoftware Insight Security Research, Sybase ASE Multiple Security Issues (#NISR05042005) (06.04.2005)
		NGSSoftware Insight Security Research Advisory (NISR), Sybase ASE 12.5.2 vulnerabilities (23.12.2004)

Discuss:

Read or add your comments to this news (0 comments)