Sun Solaris kcms_configure (Kodak Color Management System) symbolic links problem
Published:		24.02.2005
Source:		FULL-DISCLOSURE
SecurityVulns ID:		4519
Type:		local
Level:		5/10
Description:		Symbolic links problem then accessing current directory KCS_ClogFile file with elevated privileges.

Affected:		ORACLE : Solaris 8
		ORACLE : Solaris 9

Original document

IDEFENSE, [Full-Disclosure] iDEFENSE Security Advisory 02.23.05: Sun Solaris kcms_configure Arbitrary File Corruption Vulnerability (24.02.2005)

Discuss:

Read or add your comments to this news (0 comments)

Argosoft FTP server SITE COPY .lnk files directory traversal
Published:		24.02.2005
Source:		SECUNIA
SecurityVulns ID:		4520
Type:		remote
Level:		5/10
Description:		With SITE COPY command it's possible to place .lnk file pointing outside FTP root directory.

Affected:

ARGOSOFT : Argosoft FTP Server 1.4

Original document

SECUNIA, [SA14372] ArGoSoft FTP Server "SITE COPY" Shortcuts Security Issue (24.02.2005)

Discuss:

Read or add your comments to this news (0 comments)

fallback-reboot DoS
Published:		24.02.2005
Source:		SECUNIA
SecurityVulns ID:		4521
Type:		remote
Level:		5/10

Affected:

FALLBACKREBOOT : fallback-reboot 0.994

Original document

SECUNIA, [SA14328] fallback-reboot Daemon Status Denial of Service Vulnerability (24.02.2005)

Discuss:

Read or add your comments to this news (0 comments)

Knox Arkeia Network Backup multiple vulnerabilities updated since 13.01.2005
Published:		24.02.2005
Source:		BUGTRAQ
SecurityVulns ID:		4354
Type:		remote
Level:		6/10
Description:		Database files and password file have weak security premossions by default. Default root password is empty. Buffer overflow.

Affected:		KNOX : Arkeia Backup 4.2
		KNOX : Arkeia Backup 5.2
		KNOX : Arkeia Backup 5.3

Original document		ARKEIA, Release of Arkeia Network Backup 5.3.5 fixes security issue [bugtraq id 12594] (24.02.2005)
		Maciej Bogucki, Arkeia Possible remote root & information leakage (13.01.2005)

Files:		Knox Arkeia remote root/system exploit
Discuss:		Read or add your comments to this news (0 comments)

Cyrus IMAP mail server multiple bugs updated since 24.11.2004
Published:		24.02.2005
Source:		BUGTRAQ
SecurityVulns ID:		4211
Type:		remote
Level:		7/10
Description:		Multiple buffer overflows, memory corruptions.

Affected:

CYRUS : cyrus-imapd 2.2

Original document		GENTOO, [ GLSA 200502-29 ] Cyrus IMAP Server: Multiple overflow vulnerabilities (24.02.2005)
		Stefan Esser, Advisory 15/2004: Cyrus IMAP Server multiple remote vulnerabilities (24.11.2004)

Files:		Cyrus imapd v 2.2.4 - 2.2.8 (imapmagicplus) Remote Exploit
		Cyrus IMAP Server <=2.2.8 IMAPMAGICPLUS preauthentification overflow PoC
Discuss:		Read or add your comments to this news (0 comments)