|
|
Colapse all |
Post message
[USN-313-2] OpenOffice.org vulnerabilities 2006-07-19 Martin Pitt (martin pitt canonical com) =========================================================== Ubuntu Security Notice USN-313-2 July 19, 2006 openoffice.org2-amd64, openoffice.org2 vulnerabilities CVE-2006-2198, CVE-2006-2199, CVE-2006-3117 =========================================================== A security issue affects th [ more ] [ reply ] VMSA-2006-0003 VMware possible incorrect permissions on SSL key files 2006-07-18 VMware Security Team (security vmware com) Cisco Security Advisory: Multiple Vulnerabilities in Cisco Security Monitoring, Analysis and Response System (CS-MARS) 2006-07-19 Cisco Systems Product Security Incident Response Team (psirt cisco com) -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Cisco Security Advisory: Multiple Vulnerabilities in Cisco Security Monitoring, Analysis and Response System (CS-MARS) Document ID: 70728 Advisory ID: cisco-sa-20060719-mars http://www.cisco.com/warp/public/707/cisco-sa-20060719-mars.shtml Revisi [ more ] [ reply ] rPSA-2006-0132-1 tshark wireshark 2006-07-19 Justin M. Forbes (jmforbes rpath com) rPath Security Advisory: 2006-0132-1 Published: 2006-07-19 Products: rPath Linux 1 Rating: Severe Exposure Level Classification: Remote Root Deterministic Unauthorized Access Updated Versions: wireshark=/conary.rpath.com@rpl:devel//1/0.99.2-2.2-1 tshark=/conary.rpath.com@rpl:devel//1/0.9 [ more ] [ reply ] [ MDKSA-2006:128 ] - Updated wireshark packages fix numerous vulnerabilities 2006-07-19 security mandriva com [ MDKSA-2006:126 ] - Updated libtunepimp packages fixes buffer overflow vulnerabilities. 2006-07-19 security mandriva com [ MDKSA-2006:127 ] - Updated gimp packages fix buffer overflow vulnerability. 2006-07-19 security mandriva com [USN-320-1] PHP vulnerabilities 2006-07-19 Martin Pitt (martin pitt canonical com) =========================================================== Ubuntu Security Notice USN-320-1 July 19, 2006 php4, php5 vulnerabilities CVE-2006-0996, CVE-2006-1490, CVE-2006-1494, CVE-2006-1608, CVE-2006-1990, CVE-2006-1991, CVE-2006-2563, CVE-2006-2660, CVE-2006-3011, CVE-2006-3016, CV [ more ] [ reply ] [USN-319-2] Linux kernel vulnerability 2006-07-19 Martin Pitt (martin pitt canonical com) =========================================================== Ubuntu Security Notice USN-319-2 July 19, 2006 linux-source-2.6.10, linux-source-2.6.12 vulnerability CVE-2006-3626 =========================================================== A security issue affects the following Ubuntu rel [ more ] [ reply ] [ MDKSA-2006:125 ] - Updated webmin packages fix arbitray file read vulnerability. 2006-07-19 security mandriva com New PowerPoint Trojan installs itself as LSP 2006-07-18 Juha-Matti Laurio (juha-matti laurio netti fi) It appears that there is a new type of PowerPoint 0-day Trojan spreading, more details at this write-up: http://www.symantec.com/enterprise/security_response/writeup.jsp?docid=2 006-071812-3213-99 What the technical details section says is: "Installs the file SNootern.dll as a layered service provi [ more ] [ reply ] Re: crashing firefox <= 1.5.0.4 2006-07-15 bugtraq radev net I cannot reproduce it with "Mozilla/5.0 (Windows; U; Windows NT 5.1; bg; rv:1.8.0.4) Gecko/20060508 Firefox/1.5.0.4". Are you sure you tested it on a clean install? Because I observed the same behaviour several weeks ago and I found it vanished after deactivating the "LiveHTTPHeaders" extension. [ more ] [ reply ] Webmin / Usermin Arbitrary File Disclosure Vulnerability Perl 2006-07-15 Alexander Hristov (joffer gmail com) This time coded on perl Name : Webmin / Usermin Arbitrary File Disclosure Vulnerability exploit Link : http://securitydot.net/xpl/exploits/vulnerabilities/articles/1152/exploi t.html Date : 2006-06-30 Patch : update to version 1.290 Advisory : http://securitydot.net/xpl/exploits/vulnerabilities/arti [ more ] [ reply ] ASP.DLL Include File Buffer Overflow 2006-07-18 Brett Moore (brett moore security-assessment com) ======================================================================== = ASP.DLL Include File Buffer Overflow = = MS Bulletin posted: = http://www.microsoft.com/technet/security/Bulletin/MS06-034.mspx = = Affected Software: = IIS 5.0 = IIS 5.1 = IIS 6.0 = = Public disclosure on July 19, [ more ] [ reply ] [security bulletin] HPSBTU02132 SSRT061154 rev.1 - HP Tru64 UNIX running NIS ypserv, Remote Denial of Service (DoS) 2006-07-18 security-alert hp com -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 SUPPORT COMMUNICATION - SECURITY BULLETIN Document ID: c00724992 Version: 1 HPSBTU02132 SSRT061154 rev.1 - HP Tru64 UNIX running NIS ypserv, Remote Denial of Service (DoS) NOTICE: The information in this Security Bulletin should be acted upon as soon [ more ] [ reply ] Invision Power Board v2.1 <= 2.1.6 sql injection exploit 2006-07-18 paul14075 gmail com exploit: http://www.milw0rm.com/exploits/2010 bug report: http://forums.invisionpower.com/index.php?autocom=bugtracker&code=show_b ug&bug_title_id=2043&bug_cat_id=3 exploit allows: * Create new admin accounts * Read existing account info, including session ID's. * Read password hashes. * [ more ] [ reply ] ExtCalendar Mambo Module <= v2( extcalendar.php ) Remote File Include Vulnerabilities 2006-07-18 saudi unix hotmail com ------------------------------------------------------------------------ -------- Title : ExtCalendar Mambo Module <= v2 Remote File Include Vulnerabilities ######################################################################## ####### Discovered By saudihackrz -------------------------------- [ more ] [ reply ] Consumers of Broadband Providers (ISP) may be open to hijack attacks 2006-07-16 peter_philipp freenet de For this risk advisory in german please search down to "D> Deutsche Version". >Originator: Peter Philipp >Organization: Daemonic Networks >Synopsis: Consumer of Broadband Providers (ISP) may be open to hijack attacks >Severity: serious >Priority: medium >Category: network security >Class: systemi [ more ] [ reply ] |
|
Privacy Statement |
SQL Injection can be tested by inserting the classic 'or 1=1-- into the search field. The result is that the first record is returned. We can also pe
[ more ] [ reply ]