Daily web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)
Published:		28.03.2006
Source:
SecurityVulns ID:		5950
Type:		remote
Level:		5/10
Description:		PHP inclusions, SQL injections, directory traversals, crossite scripting, information leaks, etc.

Affected:		GREYMATTER : Greymatter 1.3
		PHPCOIN : phpCOIN 1.2
		MAMBO : AkoComment 2.0
		CONNECTDAILY : Connect Daily 3.2
		CONTROLZX : CONTROLzx 3.3
		ACTIVECAMPAIGN : SupportTrio 2.5
		FUSIONZONE : couponZONE 4.2
		FUSIONZONE : realestateZONE 4.2
		FUSIONZONE : classifiedZONE 1.2
		VWAR : VWar 1.5
		CONFTOOL : ConfTool 1.1
		DSLOGIN : DSLogin 1.0
		MAIANWEBLOG : Maian Weblog 2.0
		MUSICBOX : Music Box 2.3
		PHPLIVEHELPER : phplivehelper 1.8
		PHPCOLLAB : phpCollab 2.5
		NETOFFICE : NetOffice 2.6
		CALENDAREVENT : Calendar Event 3.0
		SSLINKS : ssLinks 1.22

Original document		Cyber Lords, XSS in ssLinks v1.22 (28.03.2006)
		Cyber Lords, XSS in Calendar Event 3.0 (28.03.2006)
		Cyber Lords, XSS in PowerNews (28.03.2006)
		SECUNIA, [SA19392] Mambo AkoComment Module SQL Injection Vulnerabilities (28.03.2006)
		SECUNIA, [SA19423] Greymatter gm-upload.cgi File Upload Vulnerability (28.03.2006)
		stormhacker_(at)_hotmail.com, PHPLiveHelper 1.8 remote command execution (include) Xploit (perl) (28.03.2006)
		xx_hack_xx_2004_(at)_hotmail.com, XSS & SQL Injection in Music Box v2.3 (28.03.2006)
		D.Snezhkov, [DDSi-SA] XSS in Raindance Communications Web Conferencing Pro (28.03.2006)
		dabdoub_mosikar_(at)_forislam.com, Blog Pixel Motion<=1.xx Authentication Bypass Vulnerability & SQL injection (28.03.2006)
		Aliaksandr Hartsuyeu, [eVuln] Maian Weblog Multiple SQL Injection Vulnerabilities (28.03.2006)
		Aliaksandr Hartsuyeu, [eVuln] DSLogin Authentication Bypass Vulnerability (28.03.2006)
		botan_(at)_linuxmail.org, CanfTool v1.1 Cross Site Scripting Attack (28.03.2006)
		uid0, VWar <= 1.5.0 R11 Remote Code Execution Exploit (28.03.2006)
		r0t, phpCOIN v1.2.2 XSS vuln. (28.03.2006)
		r0t, classifiedZONE v1.2 XSS vuln. (28.03.2006)
		r0t, realestateZONE 4.2 Multiple XSS vuln. (28.03.2006)
		r0t, couponZONE v.4.2 Multiple vuln. (28.03.2006)
		r0t, ActiveCampaign SupportTrio 2.5 vuln. (28.03.2006)
		r0t, CONTROLzx HMS - Hosting Management System vuln. (28.03.2006)
		r0t, Connect Daily Web Calendar Software Multiple XSS vuln. (28.03.2006)

Files:		PHPCollab v2.x / NetOffice v2.x sendpassword.php SQL Injection
		GREYMATTER Exploit
		Greymatter exploit
		VWar <= 1.5.0 R11 Remote Code Execution Exploit
Discuss:		Read or add your comments to this news (0 comments)

Symantec Veritas NetBackup network backup daemons multiple buffer overflows
Published:		28.03.2006
Source:		BUGTRAQ
SecurityVulns ID:		5951
Type:		remote
Level:		7/10
Description:		Buffer overflows in vnetd, volume manager, database manager.

Affected:

SYMANTEC : Veritas NetBackup 6.0

Original document		ZDI, TSRT-06-01: Symantec VERITAS NetBackup vnetd Buffer Overflow Vulnerability (28.03.2006)
		ZDI, ZDI-06-006: Symantec VERITAS NetBackup Database Manager Buffer Overflow (28.03.2006)
		ZDI, ZDI-06-005: Symantec VERITAS NetBackup Volume Manager Buffer Overflow (28.03.2006)

Discuss:

Read or add your comments to this news (0 comments)

flex fast lexical analyzer generator buffer overflow
Published:		28.03.2006
Source:		BUGTRAQ
SecurityVulns ID:		5952
Type:		library
Level:		5/10
Description:		Buffer overflow on REJECT rule parsing.

Affected:

FLEX : flex 2.5

Original document

DEBIAN, [SECURITY] [DSA 1020-1] New flex packages fix insecure code generation (28.03.2006)

Discuss:

Read or add your comments to this news (0 comments)

Sun Solaris ps information leak
Published:		28.03.2006
Source:		SECUNIA
SecurityVulns ID:		5953
Type:		local
Level:		5/10
Description:		ps -e allows to see environment variables for any process.

Affected:		ORACLE : Solaris 8
		ORACLE : Solaris 9

Original document

SECUNIA, [SA19426] Sun Solaris Process Environment Disclosure Security Issue (28.03.2006)

Discuss:

Read or add your comments to this news (0 comments)

cURL command line download utility buffer overflow updated since 20.03.2006
Published:		28.03.2006
Source:		FULL-DISCLOSURE
SecurityVulns ID:		5910
Type:		client
Level:		6/10
Description:		Buffer overflow on parsing tftp:// URL.

Affected:		CURL : curl 7.15
		CURL : libcurl 7.15
		OPENOFFICE : OpenOffice 2.0

Original document		GENTOO, [ GLSA 200603-25 ] OpenOffice.org: Heap overflow in included libcurl (28.03.2006)
		Ulf Harnhammar, [Full-disclosure] [SSAG#001] :: cURL tftp:// URL Buffer Overflow (20.03.2006)

Discuss:

Read or add your comments to this news (0 comments)