QuickTime/Darwin Streaming Server multiple bugs updated since 26.02.2003
Published:		24.02.2004
Source:		BUGTRAQ
SecurityVulns ID:		2617
Type:		remote
Level:		6/10
Description:		Multiple bugs including uncommented shell characters, buffer overflows, etc.

Affected:		APPLE : Darwin Streaming Server 4.1
		APPLE : QuickTime Streaming Server 4.1

Original document		IDEFENSE, [Full-Disclosure] iDEFENSE Security Advisory 02.23.04: Darwin Streaming Server Remote Denial of Service Vulnerability (24.02.2004)
		Rapid 7 Security Advisories, [Full-Disclosure] R7-0015: Multiple Vulnerabilities Apple QuickTime/Darwin Streaming Server (23.07.2003)
		Joe Testa, Re: QuickTime/Darwin Streaming Server security issues (24.05.2003)
		Sir Mordred The Traitor, QuickTime/Darwin Streaming Server security issues (23.05.2003)
		Joe Testa, Re: QuickTime/Darwin Streaming Administration Server Multiple vulnerabilities (03.03.2003)
		L0PHT, QuickTime/Darwin Streaming Administration Server Multiple vulnerabilities (26.02.2003)

Discuss:

Read or add your comments to this news (0 comments)

Windows XP EMF buffer overflow
Published:		24.02.2004
Source:		BUGTRAQ
SecurityVulns ID:		3465
Type:		client
Level:		6/10
Description:		Heap overflow on image preview.

Affected:

MICROSOFT : Windows XP

Original document

sunglasses_(at)_bay-watch.com, Windows XP explorer.exe heap overflow. (24.02.2004)

Discuss:

Read or add your comments to this news (0 comments)

Avirt buffer overflow
Published:		24.02.2004
Source:		BUGTRAQ
SecurityVulns ID:		3466
Type:		remote
Level:		5/10
Description:		Buffer overflow in web interface on oversized GET request.

Affected:		AVIRT : Avirt Soho 4.3
		AVIRT : Avirt Voice 4.0

Original document		Donato Ferrante, Remote Buffer Overflow in Avirt Voice 4.0 (24.02.2004)
		Donato Ferrante, Multiple Remote Buffer Overflow in Avirt Soho 4.3 (24.02.2004)

Discuss:

Read or add your comments to this news (0 comments)

nCipher HSM information leak
Published:		24.02.2004
Source:		BUGTRAQ
SecurityVulns ID:		3467
Type:		local
Level:		5/10
Description:		Under special conditions it's possible access private application data, including keys.

Original document

NCIPHER, nCipher Advisory #9: Host-side attackers can access secret data (24.02.2004)

Discuss:

Read or add your comments to this news (0 comments)

TeamFactor integer overflow
Published:		24.02.2004
Source:		BUGTRAQ
SecurityVulns ID:		3468
Type:		remote
Level:		5/10
Description:		Integer overflow on signed/unsigned conversion.

Affected:

TEAMFACTOR : Team Factor 1.25

Original document

Luigi Auriemma, Remote server crash in Team Factor <= 1.25 (24.02.2004)

Files:		Team Factor DoS
Discuss:		Read or add your comments to this news (0 comments)

CGI bugs
Published:		24.02.2004
Source:
SecurityVulns ID:		3469
Type:		remote
Level:		5/10

Affected:		AVENTUREMEDIA : XMB 1.8
		WEBZEDIT : WebzEdit 1.9
		EZBOARD : ezBoard 7.3

Original document		SECURITEAM, [UNIX] phpNewsManager Directory Travarsal (24.02.2004)
		Cheng Peng Su, ezBoard Cross Site Scripting Vulnerability (24.02.2004)
		Cheng Peng Su, Cross Site Scripting in WebzEdit (24.02.2004)
		Janek Vind, [waraxe-2004-SA#004] - Multiple vulnerabilities in XMB 1.8 Partagium Final SP2 (24.02.2004)

Discuss:

Read or add your comments to this news (0 comments)

Confirm shell character problem
Published:		24.02.2004
Source:		BUGTRAQ
SecurityVulns ID:		3470
Type:		remote
Level:		5/10
Description:		shell characters problem on e-mail address parsing.

Affected:

CONFIRM : Confirm 0.62

Original document

Mariusz Woloszyn, Lam3rZ Security Advisory #3/2004: A bug in Confirm leads to remote command execution (24.02.2004)

Discuss:

Read or add your comments to this news (0 comments)

Load Sharing Facility multiple bugs
Published:		24.02.2004
Source:		BUGTRAQ
SecurityVulns ID:		3471
Type:		remote
Level:		5/10
Description:		Code execution, DoS.

Affected:

PLATFORM : Load Sharing Facility 6.0

Original document		Tomasz Grabowski , Lam3rZ Security Advisory #1/2004: LSF eauth vulnerability leads to remote code execution (24.02.2004)
		Tomasz Grabowski , Lam3rZ Security Advisory #2/2004: LSF eauth vulnerability leads to a possibility of controlling cluster jobs on behalf of other users (24.02.2004)

Discuss:

Read or add your comments to this news (0 comments)

MacOS X ppd format string bug
Published:		24.02.2004
Source:		BUGTRAQ
SecurityVulns ID:		3472
Type:		remote
Level:		5/10
Description:		It's possible to read process memory.

Affected:

APPLE : MacOS X 10.3

Original document

L0PHT, Mac OS X pppd format string vulnerability (24.02.2004)

Discuss:

Read or add your comments to this news (0 comments)

TypSoft FTP Server DoS
Published:		24.02.2004
Source:		BUGTRAQ
SecurityVulns ID:		3473
Type:		remote
Level:		5/10
Description:		DoS on UNC filename.

Affected:

TYPSOFT : TYPSoft FTP Server 1.10

Original document

intuit bug_hunter, TYPSoft FTP Server 1.10 multiple vulnerabilities (24.02.2004)

Discuss:

Read or add your comments to this news (0 comments)