mplayer movie player buffer overflow
Published:		24.08.2005
Source:		FULL-DISCLOSURE
SecurityVulns ID:		5141
Type:		client
Level:		5/10
Description:		Buffer overflow on video file audio header.

Affected:

MPLAYER : MPlayer 1.0

Original document

Sven Tantau, [Full-disclosure] mplayer overflow (24.08.2005)

Discuss:

Read or add your comments to this news (0 comments)

ZipTorrent BitTorrent client information leak
Published:		24.08.2005
Source:		BUGTRAQ
SecurityVulns ID:		5139
Type:		local
Level:		5/10
Description:		Proxy server path is stored in local readable file.

Affected:

ZIPTORRENT : ZipTorrent 1.3

Original document

kozan_(at)_spyinstructors.com, ZipTorrent 1.3.7.3 Discloses Proxy Passwords to Local Users (24.08.2005)

Discuss:

Read or add your comments to this news (0 comments)

Ventrilo VoIP sotware DoS
Published:		24.08.2005
Source:		FULL-DISCLOSURE
SecurityVulns ID:		5138
Type:		remote
Level:		5/10
Description:		DoS on parsing incoplete UDP message of status service (UDP/3784).

Affected:

VENTRILO : Ventrilo 2.3

Original document

Luigi Auriemma, [Full-disclosure] Server crash in Ventrilo 2.3.0 (24.08.2005)

Files:		Ventrilo <= 2.3.0 server crash
Discuss:		Read or add your comments to this news (0 comments)

Hauri antiviral products buffer overflow
Published:		24.08.2005
Source:		SECUNIA
SecurityVulns ID:		5140
Type:		remote
Level:		6/10
Description:		Buffer overflow on parsing ACE archives.

Affected:		HAURI : ViRobot 2.0
		HAURI : LiveCall 2005.6
		HAURI : ViRobot Expert 4.0
		HAURI : ViRobot Linux Server 2.0

Original document

SECUNIA, [SA16488] HAURI Anti-Virus ACE Archive Handling Buffer Overflow (24.08.2005)

Discuss:

Read or add your comments to this news (0 comments)

QNX inputtrap unauthorized files access
Published:		24.08.2005
Source:		FULL-DISCLOSURE
SecurityVulns ID:		5142
Type:		local
Level:		5/10
Description:		-e flag allows to specify input file, file ownership and privileges are not checked.

Affected:		QNX : QNX 6.1
		QNX : QNX 6.2
		QNX : QNX 6.3

Original document

Julio Cesar Fort, [Full-disclosure] [RLSA_01-2005] QNX inputtrap arbitrary file read vulnerability (24.08.2005)

Discuss:

Read or add your comments to this news (0 comments)

Adobe Version Cue multiple vulnerabilities updated since 24.08.2005
Published:		31.08.2005
Source:		SECUNIA
SecurityVulns ID:		5143
Type:		local
Level:		5/10
Description:		Executable files are writable. It's possible to attach user's library to suid executable. Symbolic links problem.

Affected:

ADOBE : Version Cue 1.0

Original document		IDEFENSE, iDEFENSE Security Advisory 08.29.05: Adobe Version Cue VCNative Arbitrary File Overwrite Vulnerability (31.08.2005)
		IDEFENSE, iDEFENSE Security Advisory 08.29.05: Symantec AntiVirus 9 Corporate Edition Local Privilege Escalation Vulnerability (31.08.2005)
		IDEFENSE, iDEFENSE Security Advisory 08.29.05: Adobe Version Cue VCNative Arbitrary Library Loading Vulnerability (31.08.2005)
		SECUNIA, [SA16541] Adobe Version Cue VCNative Privilege Escalation (24.08.2005)

Files:		[EXPL] Adobe Version Cue VCNative Privileges Escalation Exploit
		Adobe Version Cue VCNative Symlink Attack Exploit
Discuss:		Read or add your comments to this news (0 comments)