Section: .. / 0606-advisories /
| /// File Name: |
MPCS02.txt |
Description:
|
MPCS version 0.2 appears susceptible to cross site scripting attacks.
| | Author: | luny | | File Size: | 496 | | Last Modified: | Jun 26 08:14:44 2006 |
| MD5 Checksum: | 828c99c4706e6e42231a39e05f31419c |
|
| /// File Name: |
housecarers.txt |
Description:
|
Housecarers.com is susceptible to cross site scripting attacks.
| | Author: | luny | | File Size: | 1201 | | Last Modified: | Jun 26 08:08:18 2006 |
| MD5 Checksum: | 4d45724d9795896351c6de080ab3d228 |
|
| /// File Name: |
TA06-167A.txt |
Description:
|
Technical Cyber Security Alert TA06-167A - Microsoft Excel contains an unspecified vulnerability. Opening a specially crafted Excel document, including documents hosted on web sites or attached to email messages, could trigger the vulnerability. Office documents can contain embedded objects. For example, a malicious Excel document could be embedded in an Word or PowerPoint document. Office documents other than Excel documents could be used as attack vectors.
| | Homepage: | http://www.cert.gov/ | | File Size: | 3895 | | Last Modified: | Jun 26 07:52:29 2006 |
| MD5 Checksum: | bbceb1deac2f9ff8b4f7b82c3e2e1f6f |
|
| /// File Name: |
simplePHP.txt |
Description:
|
Simple PHP Poll suffers from an authentication bypass vulnerability.
| | Author: | AlpEren, tugr | | Homepage: | http://www.ayyildiz.org/ | | File Size: | 1241 | | Last Modified: | Jun 26 07:48:13 2006 |
| MD5 Checksum: | 57e84b4597a8db14b91569fcea9df25a |
|
| /// File Name: |
USN-303-1.txt |
Description:
|
Ubuntu Security Notice 303-1 - An SQL injection vulnerability has been discovered when using less popular multibyte encodings (such as SJIS, or BIG5) which contain valid multibyte characters that end with the byte 0x5c.
| | Homepage: | http://www.ubuntu.com/ | | File Size: | 9722 | | Related CVE(s): | CVE-2006-2753 | | Last Modified: | Jun 26 07:44:26 2006 |
| MD5 Checksum: | 6ac8b8b6fc7f2c4a060bd0024c720f01 |
|
| /// File Name: |
aXent.txt |
Description:
|
aXentForum versions II and below suffer from a cross site scripting flaw.
| | Author: | Turkish hacker | | File Size: | 425 | | Last Modified: | Jun 26 07:42:43 2006 |
| MD5 Checksum: | 2a0252e3af6e1bbfd9bcd520f0316d4b |
|
| /// File Name: |
SSRT061077.txt |
Description:
|
HP Security Bulletin - A potential security vulnerability has been identified with HP-UX running Support Tools Manager (xstm, cstm, stm). The vulnerability could be exploited by a local user to create a Denial of Service (DoS).
| | Homepage: | http://www.hp.com | | File Size: | 6427 | | Last Modified: | Jun 26 07:17:58 2006 |
| MD5 Checksum: | f72225e3291640328ca487d90a5fa4ba |
|
| /// File Name: |
zeroboard.txt |
Description:
|
Zeroboard suffers from a file upload an extension bypass vulnerability.
| | Author: | Choi Min-sung | | File Size: | 3674 | | Last Modified: | Jun 26 06:57:10 2006 |
| MD5 Checksum: | 877057ceea0c5ce25e2a083c093ab2c5 |
|
| /// File Name: |
MDKSA-2006-106.txt |
Description:
|
Mandriva Linux Security Advisory MDKSA-2006-106 - A problem with how kdm manages the ~/.dmrc file was discovered by Ludwig Nussel. By using a symlink attack, a local user could get kdm to read arbitrary files on the system, including privileged system files and those belonging to other users. Mandriva's mdkkdm also suffers from this same problem and has been patched to correct it. Only Corporate 3 is affected; in Mandriva Linux 2006, mdkkdm is in contribs.
| | Homepage: | http://www.mandriva.com/security/advisories | | File Size: | 2529 | | Related CVE(s): | CVE-2006-2449 | | Last Modified: | Jun 26 06:49:46 2006 |
| MD5 Checksum: | a8943172d7a9ab5c2916ec8deb79eeff |
|
| /// File Name: |
MDKSA-2006-105.txt |
Description:
|
Mandriva Linux Security Advisory MDKSA-2006-105 - A problem with how kdm manages the ~/.dmrc file was discovered by Ludwig Nussel. By using a symlink attack, a local user could get kdm to read arbitrary files on the system, including privileged system files and those belonging to other users.
| | Homepage: | http://www.mandriva.com/security/advisories | | File Size: | 9946 | | Related CVE(s): | CVE-2006-2449 | | Last Modified: | Jun 26 06:48:36 2006 |
| MD5 Checksum: | f474b78ef730e71751067aef3c2a1095 |
|
| /// File Name: |
rPSA-2006-0106-1.txt |
Description:
|
KDM allows the user to select the session type for login. This setting is stored in the user home directory. Previous versions of KDM will follow a symbolic link and can thus disclose the contents of any file on the system (such as /etc/shadow) to arbitrary users. KDM is not the default window manager on rPath Linux.
| | Author: | rPath | | File Size: | 790 | | Related CVE(s): | CVE-2006-2449 | | Last Modified: | Jun 26 06:23:10 2006 |
| MD5 Checksum: | e3cab958613f46f6b8e39f96497d4d7e |
|
| /// File Name: |
ms06030notfixed.txt |
Description:
|
A quick note discussing that Microsoft has not fixed the NtClose/ZwClose DeadLock vulnerability as described in MS06-030.
| | Homepage: | http://www.reversemode.com | | File Size: | 1038 | | Last Modified: | Jun 26 06:21:35 2006 |
| MD5 Checksum: | e09f5cd54acfce3a64ce407e6f22270b |
|
| /// File Name: |
glsa-200606-19.txt |
Description:
|
Gentoo Linux Security Advisory GLSA 200606-19 - Frank Sheiness discovered that the mime8to7() function can recurse endlessly during the decoding of multipart MIME messages until the stack of the process is filled and the process crashes. Versions less than 8.13.6-r1 are affected.
| | Homepage: | http://security.gentoo.org | | File Size: | 3106 | | Last Modified: | Jun 26 06:14:49 2006 |
| MD5 Checksum: | d5494539ac2527afc3bf1cc2c7633219 |
|
| /// File Name: |
glsa-200606-18.txt |
Description:
|
Gentoo Linux Security Advisory GLSA 200606-18 - A flaw in handling the result of pam_get_item() as well as further unspecified flaws were discovered in PAM-MySQL. Versions less than 0.7_rc1 are affected.
| | Homepage: | http://security.gentoo.org | | File Size: | 2619 | | Last Modified: | Jun 26 06:14:27 2006 |
| MD5 Checksum: | e39adb999231e2f3b44d7e2d23acf552 |
|
| /// File Name: |
glsa-200606-17.txt |
Description:
|
Gentoo Linux Security Advisory GLSA 200606-17 - slurpd contains a buffer overflow when reading very long hostnames from the status file. Versions less than 2.3.22 are affected.
| | Homepage: | http://security.gentoo.org | | File Size: | 2635 | | Last Modified: | Jun 26 06:14:08 2006 |
| MD5 Checksum: | 19d06c4dcafabd19e841345b92629096 |
|
| /// File Name: |
USN-297-2.txt |
Description:
|
Ubuntu Security Notice 297-2 - USN-297-1 fixed some security vulnerabilities in Thunderbird. This update provides new versions of packaged extensions which work with the current Thunderbird version.
| | Homepage: | http://www.ubuntu.com/ | | File Size: | 4680 | | Last Modified: | Jun 26 06:10:27 2006 |
| MD5 Checksum: | 7f7fff1682cd6e9dae4f42e17aac2853 |
|
| /// File Name: |
USN-302-1.txt |
Description:
|
Ubuntu Security Notice 302-1 - A ridiculous amount of vulnerabilities have been patched in the Linux 2.6 kernel series for Ubuntu.
| | Homepage: | http://www.ubuntu.com/ | | File Size: | 153434 | | Related CVE(s): | CVE-2006-0038, CVE-2006-0744, CVE-2006-1055, CVE-2006-1056, CVE-2006-1522, CVE-2006-1527, CVE-2006-1528, CVE-2006-1855, CVE-2006-1856, CVE-2006-1857, CVE-2006-1858, CVE-2006-1859, CVE-2006-1860, CVE-2006-1864, CVE-2006-2071, CVE-2006-2271, CVE-2006-2272, CVE-2006-2274, CVE-2006-2275, CVE-2006-2444 | | Last Modified: | Jun 26 06:09:42 2006 |
| MD5 Checksum: | 0215018f5d0ee05f259b88e8462bbc2f |
|
| /// File Name: |
dsa-1100-1.txt |
Description:
|
Debian Security Advisory 1100-1 - A boundary checking error has been discovered in wv2, a library for accessing Microsoft Word documents, which can lead to an integer overflow induced by processing word files.
| | Homepage: | http://www.debian.org/security | | File Size: | 6755 | | Related CVE(s): | CVE-2006-2197 | | Last Modified: | Jun 25 23:26:26 2006 |
| MD5 Checksum: | b22e0a67c933f1715736baf5e395945b |
|
| /// File Name: |
MDKSA-2006-104.txt |
Description:
|
Mandriva Linux Security Advisory MDKSA-2006-104 - A vulnerability in the way Sendmail handles multi-part MIME messages was discovered that could allow a remote attacker to create a carefully crafted message that could crash the sendmail process during delivery.
| | Homepage: | http://www.mandriva.com/security/advisories | | File Size: | 5287 | | Last Modified: | Jun 25 23:25:47 2006 |
| MD5 Checksum: | dedf8270f5f765ba9e191105cfe06af3 |
|
| /// File Name: |
sa20792.txt |
Description:
|
Secunia Security Advisory - Debian has issued an update for courier. This fixes a vulnerability, which potentially can be exploited by malicious people to cause a DoS (Denial of Service).
| | Homepage: | http://secunia.com/advisories/20792/ | | File Size: | 57895 | | Last Modified: | Jun 25 22:51:40 2006 |
| MD5 Checksum: | e068cfd1ef7e261bac07b2b4578615e1 |
|
| /// File Name: |
sa20789.txt |
Description:
|
Secunia Security Advisory - Cisco has acknowledged a vulnerability in Cisco CallManager, which can be exploited by malicious people to bypass certain security restrictions.
| | Homepage: | http://secunia.com/advisories/20789/ | | File Size: | 2085 | | Last Modified: | Jun 25 22:51:40 2006 |
| MD5 Checksum: | 84483c877b0edeb59e82befcebe9b597 |
|
| /// File Name: |
sa20787.txt |
Description:
|
Secunia Security Advisory - VigilantMinds has reported a vulnerability in Opera browser, which can be exploited by malicious people to compromise a user's system.
| | Homepage: | http://secunia.com/advisories/20787/ | | File Size: | 2244 | | Last Modified: | Jun 25 22:51:40 2006 |
| MD5 Checksum: | ba1fd7799858f8999b60f1ec7ed001a8 |
|
| /// File Name: |
sa20786.txt |
Description:
|
Secunia Security Advisory - Gentoo has issued an update for aRts. This fixes a security issue, which potentially can be exploited by malicious, local users to perform certain actions with escalated privileges.
| | Homepage: | http://secunia.com/advisories/20786/ | | File Size: | 2161 | | Last Modified: | Jun 25 22:51:40 2006 |
| MD5 Checksum: | 52cd611d478f9cc0d2223995dfccce94 |
|
| /// File Name: |
sa20785.txt |
Description:
|
Secunia Security Advisory - Gentoo has issued an update for kdebase / KDM. This fixes a vulnerability, which can be exploited by malicious, local users to gain knowledge of sensitive information.
| | Homepage: | http://secunia.com/advisories/20785/ | | File Size: | 2142 | | Last Modified: | Jun 25 22:51:40 2006 |
| MD5 Checksum: | 78b1c51f62c04de63eda990d0896804c |
|
|
|
|
|
![.:[ packet storm ]:.](/images/ps-ani.gif)
