SquirrelMail Web mail Change Passwd plugin buffer overflow
Published:		25.01.2006
Source:		SECURITEAM
SecurityVulns ID:		5688
Type:		local
Level:		5/10
Description:		Buffer overflow on parsing command line arguments.

Affected:

SQUIRRELMAIL : Squirrelmail Change passwd 3.1

Files:		Change_passwd v3.1(SquirrelMail plugin) exploit
Discuss:		Read or add your comments to this news (0 comments)

Red Hat Certificate Server / Directory server buffer overflow
Published:		25.01.2006
Source:		BUGTRAQ
SecurityVulns ID:		5690
Type:		remote
Level:		7/10

Affected:		REDHAT : Red Hat Directory Server 7.1
		REDHAT : Red Hat Certificate Server 7.1

Original document

NGSSoftware Insight Security Research Advisory (NISR), High Risk Vulnerability in Red Hat Directory Server and Red Hat Certificate Server (25.01.2006)

Discuss:

Read or add your comments to this news (0 comments)

Daily web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)
Published:		25.01.2006
Source:
SecurityVulns ID:		5691
Type:		remote
Level:		5/10
Description:		PHP inclusions, SQL injections, directory traversals, crossite scripting, information leaks, etc.

Affected:		PHPBB : phpBB 2.0
		E-MOTIONALIS : e-moBLOG 1.3
		NOTEADAY : Note-A-Day 2.1
		WEBWORK : WeBWorK Online Homework Delivery System 2.1
		MYBB : MyBB 1.02
		REAMDAY : Reamday Enterprises Magic News Plus 1.0
		REAMDAY : Reamday Enterprises Magic News Lite 1.3

Original document		SECUNIA, [SA18601] Reamday Enterprises Magic News Password Change Bypass (25.01.2006)
		h4cky0u, [Full-disclosure] HYSA-2006-001 phpBB 2.0.19 search.php and profile.php DOS Vulnerability (25.01.2006)
		SECUNIA, [SA18603] MyBB User Control Panel Cross-Site Request Forgery (25.01.2006)
		SECUNIA, [SA18594] WeBWorK Arbitrary Command Execution Vulnerability (25.01.2006)
		Aliaksandr Hartsuyeu, [eVuln] Note-A-Day Weblog Sensitive Information Disclosure (25.01.2006)
		Aliaksandr Hartsuyeu, [eVuln] e-moBLOG SQL Injection Vulnerability (25.01.2006)

Files:		phpBBDosReloaded - Originally NsT-phpBB DoS
Discuss:		Read or add your comments to this news (0 comments)

Kerio WinRoute FireWall multiple DoS conditions updated since 19.01.2006
Published:		25.01.2006
Source:		SECUNIA
SecurityVulns ID:		5664
Type:		remote
Level:		6/10
Description:		DoS on HTML documents parsing and on oversized Active Directory server reply.

Affected:

KERIO : WinRoute Firewall 6.1

Original document		SECUNIA, [SA18589] Kerio WinRoute Firewall Web Browsing Denial of Service (25.01.2006)
		SECUNIA, [SA18542] Kerio WinRoute Firewall Denial of Service Vulnerabilities (19.01.2006)

Discuss:

Read or add your comments to this news (0 comments)

Multiple E-Post Mail Servers vulnerabilities
Published:		25.01.2006
Source:		SECUNIA
SecurityVulns ID:		5692
Type:		remote
Level:		6/10
Description:		SMTP authentication buffer overflow, POP3 APOP authentication buffer overflow, LDAP buffer overflow, IMAP directory traversal and multiple DoS conditions.

Affected:		EPOST : E-Post Mail Server 4.10
		EPOST : SPA-PRO Mail @Soloman 4.00

Original document

SECUNIA, [SA18480] E-Post Mail Server Products Multiple Vulnerabilities (25.01.2006)

Discuss:

Read or add your comments to this news (0 comments)

FreeBSD ioctl kernal memory access updated since 25.01.2006
Published:		26.01.2006
Source:		SECUNIA
SecurityVulns ID:		5693
Type:		local
Level:		5/10
Description:		Two vulnerabilities allow to read kernel memory.

Affected:		FREEBSD : FreeBSD 5.3
		FREEBSD : FreeBSD 5.4
		FREEBSD : FreeBSD 6.0

Original document		FREEBSD, FreeBSD Security Advisory FreeBSD-SA-06:06.kmem (26.01.2006)
		SECUNIA, [SA18599] FreeBSD Kernel Memory Disclosure Vulnerabilities (25.01.2006)

Discuss:

Read or add your comments to this news (0 comments)

Sami FTP Server buffer overflow updated since 25.01.2006
Published:		05.05.2006
Source:		CRITICAL
SecurityVulns ID:		5689
Type:		remote
Level:		5/10
Description:		Buffer overflow on oversized FTP USER command.

Affected:

KRAJASOFT : Sami FTP 2.0

Original document		rewterz, [REWTERZ-20060504] - Sami FTP Server Remote Buffer Overflow Vulnerability (05.05.2006)
		mircia, samiftpd buffer overflow (25.01.2006)

Files:		Sami FTP Server v2.0.1 Remote notepad.exe execution PoC
		KarjaSoft Sami FTP Server 2.0.2 USER/PASS buffer overflow
Discuss:		Read or add your comments to this news (0 comments)