Opera 8 multiple security vulnerabilities updated since 16.06.2005
Published:		30.07.2005
Source:		SECUNIA
SecurityVulns ID:		4897
Type:		remote
Level:		6/10
Description:		Crossite scripting on message generation if automatic redirection is disabled. javascript: crossite scripting. XMLHttpRequest object crossite access. Download dialog spoofing. Crossite scripting on image dragging.

Affected:		OPERA : Opera 8.0
		OPERA : Opera 8.01

Original document		SECUNIA, [SA15756] Opera Image Dragging Vulnerability (30.07.2005)
		SECUNIA, [SA15870] Opera Download Dialog Spoofing Vulnerability (30.07.2005)
		SECUNIA, [SA15008] Opera XMLHttpRequest Security Bypass (16.06.2005)
		SECUNIA, [SA15411] Opera "javascript:" URL Cross-Site Scripting Vulnerability (16.06.2005)
		SECUNIA, [SA15423] Opera Redirection Cross-Site Scripting Vulnerability (16.06.2005)

Discuss:

Read or add your comments to this news (0 comments)

Cisco routers IOS IPv6 vulnerability
Published:		30.07.2005
Source:		BUGTRAQ
SecurityVulns ID:		5054
Type:		remote
Level:		7/10
Description:		Bug during IPv6 packets parsing leads to router crash and potentially to code execution.

Affected:		CISCO : IOS 12.0
		CISCO : IOS 12.1
		CISCO : IOS 12.2
		CISCO : IOS 12.3

Original document		CERT, US-CERT Technical Cyber Security Alert TA05-210A -- Cisco IOS IPv6 Vulnerability (30.07.2005)
		CISCO, Cisco Security Advisory: IPv6 Crafted Packet Vulnerability (29.07.2005)

Discuss:

Read or add your comments to this news (0 comments)

Novell eDirectory NMAS unauthorized access
Published:		30.07.2005
Source:		SECUNIA
SecurityVulns ID:		5058
Type:		remote
Level:		6/10
Description:		Forgotten password recovery option allows to recover password without answering secret question.

Affected:		NOVELL : eDirectory 8.7
		NOVELL : NMAS 2.3

Original document

SECUNIA, [SA16267] Novell eDirectory NMAS Password Challenge Bypass (30.07.2005)

Discuss:

Read or add your comments to this news (0 comments)

The Holy Grail: Cisco IOS shellcode And Exploitation Techniques updated since 30.07.2005
Published:		03.11.2005
Source:		FULL-DISCLOSURE
SecurityVulns ID:		5057
Type:		remote
Level:		7/10
Description:		Michaels Lynn's presentation on Cisco routers malicious code execution possibility.

Affected:		CISCO : IOS 12.0
		CISCO : IOS 12.1
		CISCO : IOS 12.2
		CISCO : IOS 12.3

Original document

CISCO, Cisco Security Advisory: IOS Heap-based Overflow Vulnerability in System Timers (03.11.2005)

Files:		The Holy Grail: Cisco IOS shellcode And Exploitation Techniques
Discuss:		Read or add your comments to this news (1 comments)