Multiple Sun Solaris perl modules problems
Published:		24.06.2005
Source:		SECUNIA
SecurityVulns ID:		4927
Type:		library
Level:		5/10
Description:		Safe.pm protection bypass, CGI.pm crossite scripting.

Affected:		SUN : Solaris 8
		SUN : Solaris 9

Original document

SECUNIA, [SA13638] Sun Solaris Perl Modules Two Vulnerabilities (24.06.2005)

Discuss:

Read or add your comments to this news (0 comments)

SGI Irix arrayd authentication spoofing
Published:		24.06.2005
Source:		SECUNIA
SecurityVulns ID:		4928
Type:		remote
Level:		5/10

Affected:

SGI : IRIX 6.5

Original document

SECUNIA, [SA15785] SGI IRIX arrayd Authentication Spoofing Vulnerability (24.06.2005)

Discuss:

Read or add your comments to this news (0 comments)

HP VCRM (Version Control Repository Manager) information leak
Published:		24.06.2005
Source:		BUGTRAQ
SecurityVulns ID:		4929
Type:		remote
Level:		5/10
Description:		A part of the password may be shown if one contains '@' sign.

Affected:

HP : Version Control Repository Manager 2.1

Original document

SECUNIA, [SA15790] HP VCRM Proxy Server Password Disclosure Security Issue (24.06.2005)

Discuss:

Read or add your comments to this news (0 comments)

Multiple Linux kernel vulnerabilities
Published:		24.06.2005
Source:		SECUNIA
SecurityVulns ID:		4924
Type:		local
Level:		5/10
Description:		DoS with signal handler, another one ptrace privilege escalation vulnerability.

Original document

SECUNIA, [SA15786] Linux Kernel Two Vulnerabilities (24.06.2005)

Discuss:

Read or add your comments to this news (1 comments)

Linux kernel msync race conditions
Published:		24.06.2005
Source:		BUGTRAQ
SecurityVulns ID:		4925
Type:		local
Level:		7/10
Description:		Race conditions allow inject dynamic library into process space.

Affected:

LINUX : kernel 2.6

Original document

Florian Strankowski (fs), Local Root exploit (Fedora Core 4) (24.06.2005)

Files:		linux kernel msync race condition
Discuss:		Read or add your comments to this news (0 comments)

Sendmail clamav-milter antivirus DoS
Published:		24.06.2005
Source:		BUGTRAQ
SecurityVulns ID:		4926
Type:		remote
Level:		6/10
Description:		By keeping client connection for a long time during database reloads it's possible to prevent server from accepting new connections.

Affected:		CLAMAV : clamav-milter 0.84
		CLAMAV : clamav-milter 0.85

Original document

Damian Menscher, long sendmail timeouts let attacker prevent milter quiesce (24.06.2005)

Discuss:

Read or add your comments to this news (0 comments)

RealPlayer multiple vulnerabilities updated since 24.06.2005
Published:		28.06.2005
Source:		VULNWATCH
SecurityVulns ID:		4923
Type:		remote
Level:		7/10
Description:		Heap overflow on RealText format parsing. Heap overflow on AVI files parsing. Possibility to overwrite local files, ActiveX execution from MP3 file.

Affected:		REAL : RealPlayer 8
		REAL : RealPlayer 10
		REAL : RealOne Player 2
		REAL : RealPlayer 10.5
		REAL : RealOne Player

Original document		NGSSoftware Insight Security Research, High Risk Vulnerability in RealPlayer for Windows (28.06.2005)
		EEYE, [VulnWatch] eEye Advisory - EEYEB-200505 - RealPlayer AVI Processing Overflow (24.06.2005)
		IDEFENSE, [VulnWatch] iDEFENSE Security Advisory 06.23.05: RealNetworks RealPlayer RealText Parsing Heap Overflow Vulnerability (24.06.2005)

Discuss:

Read or add your comments to this news (0 comments)

Multiple Veritas Backup Exec backup solutions vulnerabilities updated since 24.06.2005
Published:		30.06.2005
Source:		VULNWATCH
SecurityVulns ID:		4922
Type:		remote
Level:		7/10
Description:		Multiple vulnerabilities, including remote buffer overflows and DoS.

Affected:		VERITAS : Backup Exec 9.1
		VERITAS : Backup Exec 9.0
		VERITAS : Backup Exec 10.0

Original document		CERT, US-CERT Technical Cyber Security Alert TA05-180A -- VERITAS Backup Exec Software is actively being exploited (30.06.2005)
		IDEFENSE, [VulnWatch] iDEFENSE Security Advisory 06.23.05: Veritas Backup Exec Server Remote Registry Access Vulnerability (24.06.2005)
		IDEFENSE, [VulnWatch] Veritas Backup Exec Remote Agent NDMLSRVR.DLL DoS Vulnerability: Veritas Backup Exec Remote Agent NDMLSRVR.DLL DoS Vulnerability (24.06.2005)
		IDEFENSE, [VulnWatch] iDEFENSE Security Advisory 06.23.05: Veritas Backup Exec Agent Error Status Remote DoS Vulnerability (24.06.2005)
		IDEFENSE, [VulnWatch] iDEFENSE Security Advisory 06.23.05: Veritas Backup Exec Agent CONNECT_CLIENT_AUTH Buffer Overflow Vulnerability (24.06.2005)
		Mark Litchfield, [VulnWatch] Buffer overflow vulnerability in VERITAS Software Backup Exec Web Administration Console (BEWAC) (24.06.2005)
		Mark Litchfield, [VulnWatch] Remote Unauthenticated Heap Overflow VERITAS Backup Exec Server for Windows (24.06.2005)

Files:		Veritas Backup Exec Agent Buffer Overflow Exploit, CONNECT_CLIENT_AUTH
Discuss:		Read or add your comments to this news (0 comments)