Section: .. / 0703-advisories /
| /// File Name: |
sa24365.txt |
Description:
|
Secunia Security Advisory - Red Hat has issued an update for gnupg. This fixes a vulnerability, which potentially can be exploited by malicious people to bypass certain security restrictions when applications use GnuPG in an insecure manner.
| | Homepage: | http://secunia.com/advisories/24365/ | | File Size: | 2644 | | Last Modified: | Mar 8 01:54:52 2007 |
| MD5 Checksum: | 9ee15e33438eac44c63368a0aa063168 |
|
| /// File Name: |
sa24359.txt |
Description:
|
Secunia Security Advisory - Some vulnerabilities have been reported in Apple QuickTime, which potentially can be exploited by malicious people to compromise a user's system.
| | Homepage: | http://secunia.com/advisories/24359/ | | File Size: | 3372 | | Last Modified: | Mar 8 01:54:52 2007 |
| MD5 Checksum: | 0ef5ee01f4a94de2aaf40644fbe9be90 |
|
| /// File Name: |
sa24358.txt |
Description:
|
Secunia Security Advisory - Stefano Angaran has discovered a vulnerability in Snitz Forums 2000, which can be exploited by malicious users to conduct script insertion attacks.
| | Homepage: | http://secunia.com/advisories/24358/ | | File Size: | 2326 | | Last Modified: | Mar 8 01:54:52 2007 |
| MD5 Checksum: | 5e4d08df1684ec83b2547cefd8e33126 |
|
| /// File Name: |
sa24355.txt |
Description:
|
Secunia Security Advisory - ajann has reported a vulnerability in Links Management Application, which can be exploited by malicious people to conduct SQL injection attacks.
| | Homepage: | http://secunia.com/advisories/24355/ | | File Size: | 2213 | | Last Modified: | Mar 8 01:54:52 2007 |
| MD5 Checksum: | e5ac17eb1e3f3a350af09d05404df2da |
|
| /// File Name: |
sa24353.txt |
Description:
|
Secunia Security Advisory - rgod has discovered a vulnerability in PHP's MSSQL Extension, which can be exploited to bypass certain security restrictions.
| | Homepage: | http://secunia.com/advisories/24353/ | | File Size: | 2653 | | Last Modified: | Mar 8 01:54:52 2007 |
| MD5 Checksum: | 3cc774a5e3e049c6713a40f58d61937e |
|
| /// File Name: |
03.02.07.txt |
Description:
|
iDefense Security Advisory 03.02.07 - Remote exploitation of a denial of service (DoS) vulnerability in Kaspersky Lab's Antivirus could allow an attacker to conduct a DoS attack on a targeted host. The antivirus engine is vulnerable to a DoS condition when processing an executable packed with UPX compression. Malformed compressed data causes the decompression routine to enter an infinite loop. Specifically, a negative data offset results in the same compressed data chunk being processed endlessly. iDefense has confirmed the existence of this vulnerability in Kaspersky Labs Antivirus Engine version 6.0.1.411 for Windows and 5.5-10 for Linux. Previous versions may also be affected. Any products that use the scanning engine are also affected, which includes the Kaspersky e-mail gateway scanner.
| | Homepage: | http://www.idefense.com/ | | File Size: | 3561 | | Last Modified: | Mar 6 09:56:37 2007 |
| MD5 Checksum: | abd06d19441a10cf0a0631ab4e99f695 |
|
| /// File Name: |
ZDI-07-008.txt |
Description:
|
A vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Apache Tomcat JK Web Server Connector. Authentication is not required to exploit this vulnerability. Tomcat JK Web Server Connector version 1.2.19 and 1.2.20 are affected. Tomcat 4.1.34 and 5.5.20 are affected.
| | Homepage: | http://www.zerodayinitiative.com/ | | File Size: | 2721 | | Related CVE(s): | CVE-2007-0774 | | Last Modified: | Mar 6 09:54:14 2007 |
| MD5 Checksum: | 2535802235fc407a788406584530831d |
|
| /// File Name: |
USN-428-2.txt |
Description:
|
Ubuntu Security Notice 428-2 - USN-428-1 fixed vulnerabilities in Firefox 1.5. However, changes to library paths caused applications depending on libnss3 to fail to start up. This update fixes the problem.
| | Homepage: | http://security.ubuntu.com/ | | File Size: | 10457 | | Last Modified: | Mar 6 07:28:58 2007 |
| MD5 Checksum: | ec1197bb4064525a19187ab03b62c30f |
|
| /// File Name: |
glsa-200703-06.txt |
Description:
|
Gentoo Linux Security Advisory GLSA 200703-06 - An integer overflow flaw has been found in the pixmap handling of Qt, making the AMD64 x86 emulation Qt library vulnerable as well. Versions less than 10.0 are affected.
| | Homepage: | http://security.gentoo.org | | File Size: | 2858 | | Related CVE(s): | CVE-2006-4811 | | Last Modified: | Mar 6 07:27:28 2007 |
| MD5 Checksum: | 670ba1eabf17812b84ec4d806b1544e5 |
|
| /// File Name: |
glsa-200703-05.txt |
Description:
|
Gentoo Linux Security Advisory GLSA 200703-05 - Several vulnerabilities ranging from code execution with elevated privileges to information leaks affect the Mozilla Suite. Versions less than or equal to 1.7.13 are affected.
| | Homepage: | http://security.gentoo.org | | File Size: | 3685 | | Last Modified: | Mar 6 07:26:37 2007 |
| MD5 Checksum: | 9488c354f170da6e9cda12e22fed0989 |
|
| /// File Name: |
glsa-200703-04.txt |
Description:
|
Gentoo Linux Security Advisory GLSA 200703-04 - Tom Ferris reported a heap-based buffer overflow involving wide SVG stroke widths that affects Mozilla Firefox 2 only. Various researchers reported some errors in the JavaScript engine potentially leading to memory corruption. Mozilla Firefox also contains minor vulnerabilities involving cache collision and unsafe pop-up restrictions, filtering or CSS rendering under certain conditions. Versions less than 2.0.0.2 are affected.
| | Homepage: | http://security.gentoo.org | | File Size: | 5477 | | Related CVE(s): | CVE-2006-6077, CVE-2007-0775, CVE-2007-0776, CVE-2007-0777, CVE-2007-0778, CVE-2007-0779, CVE-2007-0780, CVE-2007-0800, CVE-2007-0801, CVE-2007-0981, CVE-2007-0995 | | Last Modified: | Mar 6 07:26:26 2007 |
| MD5 Checksum: | 6331191602764866f36202dbe22f78c0 |
|
| /// File Name: |
glsa-200703-03.txt |
Description:
|
Gentoo Linux Security Advisory GLSA 200703-03 - An anonymous researcher discovered a file descriptor leak error in the processing of CAB archives and a lack of validation of the id parameter string used to create local files when parsing MIME headers. Versions less than 0.90 are affected.
| | Homepage: | http://security.gentoo.org | | File Size: | 2969 | | Related CVE(s): | CVE-2007-0897, CVE-2007-0898 | | Last Modified: | Mar 6 07:26:01 2007 |
| MD5 Checksum: | 33bc6d40f57da6256fc52a70e23f27ee |
|
| /// File Name: |
glsa-200703-02.txt |
Description:
|
Gentoo Linux Security Advisory GLSA 200703-02 - SpamAssassin does not correctly handle very long URIs when scanning emails. Versions less than 3.1.8 are affected.
| | Homepage: | http://security.gentoo.org | | File Size: | 2418 | | Related CVE(s): | CVE-2007-0451 | | Last Modified: | Mar 6 07:25:46 2007 |
| MD5 Checksum: | d6a4dd1dc1e7c9b0900d955b0eb6c5d2 |
|
| /// File Name: |
glsa-200703-01.txt |
Description:
|
Gentoo Linux Security Advisory GLSA 200703-01 - The Snort DCE/RPC preprocessor does not properly reassemble certain types of fragmented SMB and DCE/RPC packets. Versions less than 2.6.1.3 are affected.
| | Homepage: | http://security.gentoo.org | | File Size: | 2753 | | Related CVE(s): | CVE-2006-5276 | | Last Modified: | Mar 6 07:25:25 2007 |
| MD5 Checksum: | c8daaa4b64e5525ba0b8065825d98f08 |
|
| /// File Name: |
ieee80211-offbyone.txt |
Description:
|
tcpdump versions 3.9.5 and below suffer from an off-by-one heap overflow in the ieee802.11 printer.
| | Author: | Moritz Jodeit | | File Size: | 1603 | | Last Modified: | Mar 6 06:26:51 2007 |
| MD5 Checksum: | 383dc3787ea2a29b074be8053cfaa44f |
|
| /// File Name: |
comodo-bypass.txt |
Description:
|
Comodo Firewall Pro (former Comodo Personal Firewall) stores some of its internal settings in the registry key HKLM\SYSTEM\Software\Comodo\Personal Firewall. This key is protected by Comodo drivers such that other applications are not able to change the settings. This protection can be bypassed if very special conditions are met.
| | Homepage: | http://www.matousec.com/ | | Related Exploit: | BTP00001P005CF.zip | | File Size: | 1294 | | Last Modified: | Mar 6 06:22:57 2007 |
| MD5 Checksum: | 4b82edf086020945d71a792b7b57c18f |
|
| /// File Name: |
USN-416-2.txt |
Description:
|
Ubuntu Security Notice 416-2 - USN-416-1 fixed various vulnerabilities in the Linux kernel. Unfortunately that update caused the 'nvidia-glx-config' script to not work any more. The new version fixes the problem.
| | Homepage: | http://security.ubuntu.com/ | | File Size: | 10179 | | Last Modified: | Mar 6 06:19:40 2007 |
| MD5 Checksum: | bafe30e5e76365335224708d7e76e81f |
|
| /// File Name: |
cisco-sa-20070228-nam.txt |
Description:
|
Cisco Security Advisory - Cisco Catalyst 6000, 6500 series and Cisco 7600 series that have a Network Analysis Module installed are vulnerable to an attack, which could allow an attacker to gain complete control of the system. Only Cisco Catalyst systems that have a NAM on them are affected. This vulnerability affects systems that run Internetwork Operating System (IOS) or Catalyst Operating System (CatOS).
| | Homepage: | http://www.cisco.com/ | | File Size: | 19056 | | Last Modified: | Mar 6 05:25:18 2007 |
| MD5 Checksum: | 44eeb78f88fddd0c6fe4d8626f26a436 |
|
| /// File Name: |
02.27.07-1.txt |
Description:
|
iDefense Security Advisory 02.27.07 - Computer Associates eTrust Intrusion Detection is susceptible to a denial of service condition during key length validation. iDefense has confirmed this vulnerability in Computer Associates eTrust Intrusion Detection version 3.0.5.57. Other versions are suspected vulnerable.
| | Homepage: | http://www.idefense.com/ | | File Size: | 3299 | | Related CVE(s): | CVE-2007-1005 | | Last Modified: | Mar 6 05:15:55 2007 |
| MD5 Checksum: | 3782103db7e6d2c6d3e94970cac75966 |
|
| /// File Name: |
SSRT071306.txt |
Description:
|
HP Security Bulletin - Various potential security vulnerabilities have been identified in Microsoft software that is running on the Storage Management Appliance (SMA). Some of these vulnerabilities may be pertinent to the SMA, please check the table in the Resolution section of this Security Bulletin.
| | Homepage: | http://www.hp.com | | File Size: | 11797 | | Last Modified: | Mar 6 01:54:23 2007 |
| MD5 Checksum: | b592ae245b56c47aa08c42b73055a4d5 |
|
| /// File Name: |
sa24402.txt |
Description:
|
Secunia Security Advisory - justin has reported a vulnerability in Simple Invoices, which can be exploited by malicious people to bypass certain security restrictions.
| | Homepage: | http://secunia.com/advisories/24402/ | | File Size: | 2159 | | Last Modified: | Mar 6 00:12:53 2007 |
| MD5 Checksum: | 9ad7ae5ec87ff86d3d852e59fb22661d |
|
| /// File Name: |
sa24400.txt |
Description:
|
Secunia Security Advisory - Fedora has issued an update for the kernel. This fixes some vulnerabilities, which can be exploited by malicious, local users to cause a DoS (Denial of Service) and potentially gain escalated privileges, and by malicious people to cause a DoS.
| | Homepage: | http://secunia.com/advisories/24400/ | | File Size: | 10316 | | Last Modified: | Mar 6 00:12:53 2007 |
| MD5 Checksum: | 143336e128d4443b2e93f9ea677f7b91 |
|
| /// File Name: |
sa24399.txt |
Description:
|
Secunia Security Advisory - Some vulnerabilities have been reported in VirtueMart, which can be exploited by malicious people to conduct cross-site scripting attacks.
| | Homepage: | http://secunia.com/advisories/24399/ | | File Size: | 2255 | | Last Modified: | Mar 6 00:12:53 2007 |
| MD5 Checksum: | 0d2128f0dd661ab022524859c129a12d |
|
| /// File Name: |
sa24398.txt |
Description:
|
Secunia Security Advisory - A vulnerability has been reported in Apache Tomcat JK Web Server Connector, which can be exploited by malicious people to compromise a vulnerable system.
| | Homepage: | http://secunia.com/advisories/24398/ | | File Size: | 2739 | | Last Modified: | Mar 6 00:12:53 2007 |
| MD5 Checksum: | e6225c91bc9751bb7077f90f842110a0 |
|
| /// File Name: |
sa24395.txt |
Description:
|
Secunia Security Advisory - Red Hat has issued an update for thunderbird. This fixes some vulnerabilities, which potentially can be exploited by malicious people to compromise a user's system.
| | Homepage: | http://secunia.com/advisories/24395/ | | File Size: | 2136 | | Last Modified: | Mar 6 00:12:53 2007 |
| MD5 Checksum: | 08dc64e6a8da445285751f9fabca2987 |
|
|
|
|
|
![.:[ packet storm ]:.](/images/ps-ani.gif)
