AT-TFTP / 3CTftpSvc TFTP servers buffer overflow
Published:		27.11.2006
Source:		BUGTRAQ
SecurityVulns ID:		6860
Type:		remote
Level:		5/10
Description:		Buffer overflows in GET and PUT commands.

Affected:		ALLIEDTELESYN : AT-TFTP Server 1.9
		3COM : 3CTftpSvc TFTP Server 2.0

Original document		liuqx_(at)_nipc.org.cn, TFTP Server 3CTftpSvc Buffer Overflow Vulnerability (Long transporting mode) (27.11.2006)
		liuqx_(at)_nipc.org.cn, TFTP Server AT-TFTP Server v 1.9 Buffer Overflow Vulnerability (Long filename) (27.11.2006)

Files:		AT-TFTP Buffer Overflow (Long filename) Vulnerability Exploit
		Exploits 3CTftpSvc Server 2.0.1 Long Requesat Buffer Overflow (metasploit)
		3ctftpsvc Buffer Overflow (Long transporting mode) Vulnerability Exploit
		3CTftpSvc transport mode name buffer overflowexploit
Discuss:		Read or add your comments to this news (0 comments)

Daily web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)
Published:		27.11.2006
Source:		BUGTRAQ
SecurityVulns ID:		6862
Type:		remote
Level:		5/10
Description:		PHP inclusions, SQL injections, directory traversals, crossite scripting, information leaks, etc.

Affected:

MALBUM : mAlbum 0.3

Original document		nagazakig74_(at)_hotmail.com, Siap Cms Sql Injection (login.asp) (27.11.2006)
		nagazakig74_(at)_hotmail.com, Wisi Portal [Sql Injection By Jesus Tovar] (27.11.2006)
		tux025_(at)_gmail.com, mAlbum v0.3 local file inclusion (27.11.2006)
		Advisory_(at)_Aria-Security.net, ClickGallery Sql Injection (27.11.2006)
		Advisory_(at)_Aria-Security.net, [Aria-Security Team] Evolve shopping cart SQL Injection Vulnerability (27.11.2006)
		Advisory_(at)_Aria-Security.net, [Aria-Security Team] General Shopping Cart SQL Injection Vulnerability (27.11.2006)
		Advisory_(at)_Aria-Security.net, Clickblog Sql Injection (27.11.2006)

Discuss:

Read or add your comments to this news (0 comments)

ps2text unfiltered shell characters code execution
Published:		27.11.2006
Source:		BUGTRAQ
SecurityVulns ID:		6859
Type:		local
Level:		4/10
Description:		Shell characters problem thorugh filename.

Affected:

PSTOTEXT : pstotext 1.9

Original document

DEBIAN, [SECURITY] [DSA 1220-1] New pstotext packages fix arbitrary shell command execution (27.11.2006)

Discuss:

Read or add your comments to this news (0 comments)

QBIK Wingate DoS
Published:		27.11.2006
Source:		BUGTRAQ
SecurityVulns ID:		6861
Type:		remote
Level:		5/10
Description:		Nedless loop on compressed DNS requests processing.

Affected:

QBIK : Wingate 6.1

Original document

IDEFENSE, iDefense Security Advisory 11.26.06: Qbik WinGate Compressed Name Pointer Denial of Service Vulnerability (27.11.2006)

Discuss:

Read or add your comments to this news (0 comments)