Daily web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)
Published:		28.01.2006
Source:
SecurityVulns ID:		5705
Type:		remote
Level:		5/10
Description:		PHP inclusions, SQL injections, directory traversals, crossite scripting, information leaks, etc.

Affected:		RANDSHOP : randshop 1.1
		ARTICLEBEACH : free articles
		ASPTHAI : ASPThai Forums 8.0
		AZBB : azbb 1.1

Original document		roozbeh afrasiabi, [CORRECTIONS AND ADDITIONS ]Azbb v1.1.00 Cross-Site Scripting (28.01.2006)
		cvh_(at)_kapda.ir, The WorldsEnd.NET - Free Ping Script, written in PHP (2 vulns) (28.01.2006)
		roozbeh afrasiabi, Azbb v1.1.00 Cross-Site Scripting (28.01.2006)
		code.shell_(at)_yahoo.com, hello (28.01.2006)
		SaiLynx, Уязвимость в Randshop <V1_1 (28.01.2006)

Discuss:

Read or add your comments to this news (0 comments)

Shareaza peeer-to-peer network client multiple integer overflows
Published:		28.01.2006
Source:		BUGTRAQ
SecurityVulns ID:		5706
Type:		remote
Level:		5/10
Description:		Multiple integer overflows in different functions.

Affected:

SHAREAZA : Shareaza 2.2

Original document

Ryan Smith, Shareaza P2P Remote Vulnerability (28.01.2006)

Discuss:

Read or add your comments to this news (0 comments)

libAST buffer overflow updated since 26.01.2006
Published:		28.01.2006
Source:		BUGTRAQ
SecurityVulns ID:		5695
Type:		library
Level:		5/10
Description:		conf_find_file() buffer overflow

Affected:

LIBAST : libAST 0.7

Original document		Michael Jennings, LibAST 0.7 Release Fixes Security Vulnerability (28.01.2006)
		angelo_(at)_rosiello.org, Rosiello Security - Eterm-LibAST Advisory (26.01.2006)

Files:		Eterm libAST buffer overflow exploit
Discuss:		Read or add your comments to this news (0 comments)

Multiple Stalker Communigate Pro / IBM Lotus Domino / Sun directory server / IBM Tivoli vulnerabilities updated since 28.01.2006
Published:		16.02.2006
Source:		BUGTRAQ
SecurityVulns ID:		5707
Type:		remote
Level:		5/10
Description:		Multiple LDAP server vulnerabilities.

Affected:		STALKER : CommuniGate Pro 5.0
		IBM : Lotus Domino 7.0
		SUN : Sun ONE Directory Server 5.2
		SUN : Sun Java System Directory Server 5.2
		ISODE : M-Vault 11.3

Original document		SECUNIA, [SA18888] MailSite LDAP Service Denial of Service Vulnerability (16.02.2006)
		SECUNIA, [SA18818] Isode M-Vault Server LDAP Vulnerability (16.02.2006)
		SECUNIA, [SA18779] IBM Tivoli Directory Server LDAP Denial of Service (13.02.2006)
		IDEFENSE, iDEFENSE Security Advisory 02.10.06: IBM Lotus Domino Server LDAP DoS Vulnerability (13.02.2006)
		SECUNIA, [SA18769] Sun Java System Directory Server LDAP Denial of Service (09.02.2006)
		SECUNIA, [SA18738] IBM Lotus Domino LDAP Server Denial of Service Vulnerability (08.02.2006)
		Evgeny Legerov, [Full-disclosure] ProtoVer LDAP vs CommuniGate Pro 5.0.7 (05.02.2006)
		Evgeny Legerov, Multiple vulnerabilities in CommuniGate Pro Server (28.01.2006)

Files:		Proof of concept for CommuniGate Pro Server vulnerability
Discuss:		Read or add your comments to this news (0 comments)

Gnome Evolution mail client DoS updated since 28.01.2006
Published:		21.03.2006
Source:		FULL-DISCLOSURE
SecurityVulns ID:		5708
Type:		client
Level:		5/10
Description:		Inline text attachment with oversized string causes application to hang.

Affected:		GNOME : Evolution 2.4
		CAIRO : libcairo 1.0
		CAIRO : cairo 1.0

Original document		MANDRIVA, [ MDKSA-2006:057 ] - Updated cairo packages to address Evolution DoS vulnerability (21.03.2006)
		Mike Davis, [Full-disclosure] gnome evolution mail client inline text file DoS issue (28.01.2006)

Discuss:

Read or add your comments to this news (0 comments)