ISC DHCP buffer overflow updated since 23.06.2004
Published:		29.06.2004
Source:		CERT
SecurityVulns ID:		3773
Type:		remote
Level:		7/10
Description:		Buffer overflow on oversized hostname in DHCP query, if hostname is splitted to few attributes.

Affected:

ISC : DHCP 3.0

Original document		Cerberus Vulgaris, ISC DHCP overflows (29.06.2004)
		CERT, US-CERT Technical Cyber Security Alert TA04-174A -- Multiple Vulnerabilities in ISC DHCP 3 (23.06.2004)

Discuss:

Read or add your comments to this news (0 comments)

D-LINK 614 DoS
Published:		29.06.2004
Source:		BUGTRAQ
SecurityVulns ID:		3793
Type:		remote
Level:		5/10
Description:		Multiple DHCP processing bugs.

Affected:

DLINK : D-LINK 614

Original document		Cerberus Vulgaris, DLINK 614+ - SOHO routers, system DOS (29.06.2004)
		Cerberus Vulgaris, DLINK 614+ - SOHO routers, DHCP service DOS (29.06.2004)

Discuss:

Read or add your comments to this news (0 comments)

MPlayer buffer overflow
Published:		29.06.2004
Source:		BUGTRAQ
SecurityVulns ID:		3794
Type:		client
Level:		5/10
Description:		Buffer overflow on oversized playlist file/URL entry.

Affected:

MPLAYER : MPlayer 1.0

Original document

c0ntex_(at)_open-security.org, MPlayer MeMPlayer.c (29.06.2004)

Discuss:

Read or add your comments to this news (0 comments)

SUN virtual java machine DoS
Published:		29.06.2004
Source:		BUGTRAQ
SecurityVulns ID:		3795
Type:		client
Level:		4/10
Description:		Invalid fonts handling can crash virtual machine under Windows.

Affected:		SUN : JDK 1.4
		SUN : JRE 1.4

Original document

Marc Schönefeld, Java applet crashing with native assertion (29.06.2004)

Files:		Harmful java applet crashing with assertion
Discuss:		Read or add your comments to this news (0 comments)

popclient buffer overflow
Published:		29.06.2004
Source:		BUGTRAQ
SecurityVulns ID:		3796
Type:		client
Level:		5/10
Description:		Off-by-one buffer overflow on oversized message line.

Affected:

POPCLIENT : popclient 3.0

Original document

John Cartwright, [Full-Disclosure] DoS in popclient 3.0b6 (29.06.2004)

Discuss:

Read or add your comments to this news (0 comments)

nCipher netHSM information leak
Published:		29.06.2004
Source:		BUGTRAQ
SecurityVulns ID:		3797
Type:		local
Level:		6/10
Description:		Pass phrases entered by means of the nCipher netHSM front panel, either using the built in thumbwheel or using a directly attached keyboard, are exposed in the netHSM system log

Affected:

NCIPHER : netHSM

Original document

NCIPHER, nCipher Advisory #10: Pass phrases are exposed in netHSM log files (29.06.2004)

Discuss:

Read or add your comments to this news (0 comments)

Apache integer overfow updated since 29.06.2004
Published:		30.06.2004
Source:		FULL-DISCLOSURE
SecurityVulns ID:		3798
Type:		remote
Level:		5/10
Description:		MIME header length is unlimited, leading to possible memory exhaustion. On 64bit platforms integer overflow during MIME headers parsing (requires sending of large amount of data).

Affected:

APACHE : Apache 2.0

Original document

TYNISOFA, TSSA-2004-012 - apache (30.06.2004)

Files:		exploit for apache ap_get_mime_headers_core() vuln
Discuss:		Read or add your comments to this news (0 comments)