RarLab WinRAR filenames spoof
Published:		30.09.2009
Source:		BUGTRAQ
SecurityVulns ID:		10277
Type:		remote
Level:		4/10
Description:		Visible filename inside ZIP archive can differ from extracted file name.

Affected:

RARLAB : WinRAR 3.80

Original document

chr1x, WinRAR v3.80 - ZIP Filename Spoofing (30.09.2009)

Discuss:

Read or add your comments to this news (0 comments)

Adobe Photoshop Elements weak service permissions
Published:		30.09.2009
Source:		BUGTRAQ
SecurityVulns ID:		10278
Type:		local
Level:		5/10
Description:		Weak permissions for AdobeActiveFileMonitor8.0 service allow executable file spoofing.

Affected:

ADOBE : Photoshop Elements 8.0

Original document

nospam@gmail.it, Adobe Photoshop Elements 8.0 Active File Monitor Service Bad Security Descriptor Local Elevation Of Privileges (30.09.2009)

Discuss:

Read or add your comments to this news (0 comments)

Web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)
Published:		30.09.2009
Source:		BUGTRAQ
SecurityVulns ID:		10275
Type:		remote
Level:		5/10
Description:		PHP inclusions, SQL injections, directory traversals, crossite scripting, information leaks, etc.

Affected:

FLATPRESS : FlatPress 0.812

Original document		Giuseppe Fuggiano, FlatPress 0.804-0.812.1 Local File Inclusion to Remote Command Execution (30.09.2009)
		MustLive, Cross-Site Scripting vulnerability in eCaptcha (30.09.2009)

Files:		FlatPress 0.804-0.812.1 Local File Inclusion to Remote Command Execution vulnerability exploit
Discuss:		Read or add your comments to this news (0 comments)

TrustPort Antivirus / TrustPort PC Security weak security permissions
Published:		30.09.2009
Source:		BUGTRAQ
SecurityVulns ID:		10276
Type:		local
Level:		5/10
Description:		Weak permissions for program files.

Affected:		TRUSTPORT : TrustPort Antivirus 2.8
		TRUSTPORT : TrustPort PC Security 2.0

Original document

ShineShadow, Local privilege escalation vulnerability in Trustport security software (30.09.2009)

Discuss:

Read or add your comments to this news (0 comments)

HP Remote Graphics Software unauthorized access
Published:		30.09.2009
Source:		BUGTRAQ
SecurityVulns ID:		10279
Type:		remote
Level:		6/10

Affected:		HP : Remote Graphics Software 5.1
		HP : Remote Graphics Software 5.2
CVE:		CVE-2009-2683 (Unspecified vulnerability in the Sender module in HP Remote Graphics Software (RGS) 5.1.3 through 5.2.6 allows remote authenticated users to execute arbitrary code via unknown vectors.)

Original document

HP, [security bulletin] HPSBMA02461 SSRT090187 rev.1 - HP Remote Graphics Software (RGS) Sender, Remote Unauthorized Access (30.09.2009)

Discuss:

Read or add your comments to this news (0 comments)