Daily web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)
Published:		29.11.2006
Source:
SecurityVulns ID:		6869
Type:		remote
Level:		5/10
Description:		PHP inclusions, SQL injections, directory traversals, crossite scripting, information leaks, etc.

Affected:		HORDE : Kronolith 2.0
		B2EVOLUTION : b2evolution 1.8
		HORDE : Kronolith 2.1
		B2EVOLUTION : b2evolution 1.9

Original document		tarkus_(at)_tiifp.org, b2evolution Remote File inclusion Vulnerability (29.11.2006)
		tarkus_(at)_tiifp.org, b2evolution XSS Vulnerabilities (29.11.2006)
		IDEFENSE, iDefense Security Advisory 11.29.06: Horde Kronolith Arbitrary Local File Inclusion Vulnerability (29.11.2006)

Discuss:

Read or add your comments to this news (0 comments)

Borland idsql32.dll library buffer overflow
Published:		29.11.2006
Source:		FULL-DISCLOSURE
SecurityVulns ID:		6870
Type:		library
Level:		6/10
Description:		Buffer overflow in DbiQExec() function.

Affected:		REVILLOC : RevilloC Mailserver 1.21
		BORLAND : Borland Developer Studio 2006

Original document

SECUNIA, [Full-disclosure] Secunia Research: Borland Products idsql32.dll Buffer Overflow Vulnerability (29.11.2006)

Discuss:

Read or add your comments to this news (0 comments)

Novell Netware Client multiple security vulnerabilities updated since 29.11.2006
Published:		01.12.2006
Source:		BUGTRAQ
SecurityVulns ID:		6868
Type:		remote
Level:		6/10
Description:		Buffer overflow in EnumPrinters() and OpenPrinter() functions. Format string vulnerability in Novell Modular Authentication Services.

Affected:		NOVELL : NetWare Client 4.91
CVE:		CVE-2006-5854 (Multiple buffer overflows in the Spooler service (nwspool.dll) in Novell Netware Client 4.91 through 4.91 SP2 allow remote attackers to execute arbitrary code via a long argument to the (1) EnumPrinters and (2) OpenPrinter functions.)

Original document		Deral Heiland, [Full-disclosure] Layered Defense Advisory: Novell Client 4.91 Format String Vulnerability (01.12.2006)
		ZDI, ZDI-06-043: Novell Netware Client Print Provider Buffer Overflow Vulnerability (29.11.2006)

Files:		Citrix Metaframe Presentation Server / Javvin DiskAccess printer provider buffer overflow
Discuss:		Read or add your comments to this news (0 comments)