Multiple Veritas Backup Exec backup solutions vulnerabilities updated since 24.06.2005
Published:		30.06.2005
Source:		VULNWATCH
SecurityVulns ID:		4922
Type:		remote
Level:		7/10
Description:		Multiple vulnerabilities, including remote buffer overflows and DoS.

Affected:		VERITAS : Backup Exec 9.1
		VERITAS : Backup Exec 9.0
		VERITAS : Backup Exec 10.0

Original document		CERT, US-CERT Technical Cyber Security Alert TA05-180A -- VERITAS Backup Exec Software is actively being exploited (30.06.2005)
		IDEFENSE, [VulnWatch] iDEFENSE Security Advisory 06.23.05: Veritas Backup Exec Server Remote Registry Access Vulnerability (24.06.2005)
		IDEFENSE, [VulnWatch] Veritas Backup Exec Remote Agent NDMLSRVR.DLL DoS Vulnerability: Veritas Backup Exec Remote Agent NDMLSRVR.DLL DoS Vulnerability (24.06.2005)
		IDEFENSE, [VulnWatch] iDEFENSE Security Advisory 06.23.05: Veritas Backup Exec Agent Error Status Remote DoS Vulnerability (24.06.2005)
		IDEFENSE, [VulnWatch] iDEFENSE Security Advisory 06.23.05: Veritas Backup Exec Agent CONNECT_CLIENT_AUTH Buffer Overflow Vulnerability (24.06.2005)
		Mark Litchfield, [VulnWatch] Buffer overflow vulnerability in VERITAS Software Backup Exec Web Administration Console (BEWAC) (24.06.2005)
		Mark Litchfield, [VulnWatch] Remote Unauthenticated Heap Overflow VERITAS Backup Exec Server for Windows (24.06.2005)

Files:		Veritas Backup Exec Agent Buffer Overflow Exploit, CONNECT_CLIENT_AUTH
Discuss:		Read or add your comments to this news (0 comments)

FreeBSD ipfw packet filter race conditions
Published:		30.06.2005
Source:		BUGTRAQ
SecurityVulns ID:		4944
Type:		remote
Level:		5/10
Description:		Because of insuddicient locking it's possible to corrupt cached lookup table on machines with threading PREEMPTIVE multitasking.

Affected:

FREEBSD : FreeBSD 5.4

Original document

FREEBSD, FreeBSD Security Advisory FreeBSD-SA-05:13.ipfw (30.06.2005)

Discuss:

Read or add your comments to this news (0 comments)

Cisco RADIUS authentication bypass
Published:		30.06.2005
Source:		BUGTRAQ
SecurityVulns ID:		4945
Type:		remote
Level:		5/10
Description:		It's possible to bypass RADIUS authorisation is NONE is set at fallback authentication method.

Affected:		CISCO : IOS 12.2
		CISCO : IOS 12.3
		CISCO : IOS 12.4

Original document

CISCO, Cisco Security Advisory: RADIUS Authentication Bypass (30.06.2005)

Discuss:

Read or add your comments to this news (0 comments)

Adobe Reader for Linux symbolic links problem
Published:		30.06.2005
Source:		SECUNIA
SecurityVulns ID:		4946
Type:		local
Level:		5/10
Description:		Symbolic links problem on temporary files creation.

Affected:

ADOBE : Acrobat Reader 5.0

Original document

SECUNIA, [SA14457] Adobe Reader for Linux Insecure Temporary File Creation (30.06.2005)

Discuss:

Read or add your comments to this news (0 comments)

Multiple ClamAV antivirus DoS vulnerabilities
Published:		30.06.2005
Source:		BUGTRAQ
SecurityVulns ID:		4943
Type:		remote
Level:		6/10
Description:		Descriptors leak on MS-Expand and CAB files.

Affected:

CLAMAV : ClamAV 0.85

Original document		IDEFENSE, iDEFENSE Security Advisory 06.29.05: Clam AntiVirus ClamAV Cabinet File Handling DoS Vulnerability (30.06.2005)
		IDEFENSE, iDEFENSE Security Advisory 06.29.05: Clam AntiVirus ClamAV MS-Expand File Handling DoS Vulnerability (30.06.2005)

Discuss:

Read or add your comments to this news (0 comments)

Nortel Communication Server FTP DoS
Published:		30.06.2005
Source:		SECUNIA
SecurityVulns ID:		4947
Type:		remote
Level:		5/10

Original document

SECUNIA, [SA15826] Nortel Communication Server FTP Service Denial of Service (30.06.2005)

Discuss:

Read or add your comments to this news (0 comments)

Microsoft Message Queuing buffer overflow updated since 13.04.2005
Published:		30.06.2005
Source:		BUGTRAQ
SecurityVulns ID:		4677
Type:		remote
Level:		7/10
Description:		Buffer overflow in RPC-based protocol.

Affected:		MICROSOFT : Windows 2000 Server
		MICROSOFT : Windows 2000 Professional
		MICROSOFT : Windows XP

Original document

MICROSOFT, Microsoft Security Bulletin MS05-017 Vulnerability in Message Queuing Could Allow Code Execution (892944) (13.04.2005)

Files:		Vulnerability in Message Queuing Allows Code Execution (MS05-017, Exploit 2)
		Microsoft Security Bulletin MS05-017 Vulnerability in Message Queuing Could Allow Code Execution (892944)
Discuss:		Read or add your comments to this news (3 comments)

Soldier of Fortune II array index overflow
Published:		30.06.2005
Source:		BUGTRAQ
SecurityVulns ID:		4948
Type:		remote
Level:		5/10
Description:		/ignore command array index overflow.

Affected:		RAVENSOFT : Soldier of Fortune II 1.03
		RAVENSOFT : Soldier of Fortune II 1.02

Original document

Luigi Auriemma, In-game /ignore crash in Soldier of Fortune II 1.03 (30.06.2005)

Discuss:

Read or add your comments to this news (0 comments)