[slackware-security] mozilla-thunderbird

New mozilla-thunderbird packages are available for Slackware 10.2, 11.0, 12.0, and -current to fix security issues. Here are the details from the Slackware 12.0 ChangeLog: patches/packages/mozilla-thunderbird-2.0.0.12-i686-1.tgz: Upgraded to thunderbird-2.0.0.12. This update fixes the following...

Unfixed XSS vulnerability at www.bosal.com

Security researcher Uber0n, has submitted on 03/01/2008 a cross-site-scripting XSS vulnerability affecting www.bosal.com, which at the time of submission ranked 160457 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 08/01/2008. It is currently...

openSUSE 10 Security Update : MozillaFirefox (MozillaFirefox-5002)

This update brings Mozilla Firefox to security update version 2.0.0.12 Following security problems were fixed : - MFSA 2008-11/CVE-2008-0594 Web forgery overwrite with div overlay - MFSA 2008-10/CVE-2008-0593 URL token stealing via stylesheet redirect - MFSA 2008-09/CVE-2008-0592 Mishandling of...

Slackware 10.2 / 11.0 / 12.0 / current : firefox, seamonkey (SSA:2008-043-01)

New mozilla-firefox packages are available for Slackware 10.2, 11.0, 12.0, and -current to fix security issues. New seamonkey updates are available for Slackware 11.0, 12.0, and -current to address similar issues. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and packa...

US-CERT Technical Cyber Security Alert TA08-043A -- Adobe Reader and Acrobat Vulnerabilities

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 National Cyber Alert System Technical Cyber Security Alert TA08-043A Adobe Reader and Acrobat Vulnerabilities Original release date: February 12, 2008 Last revised: -- Source: US-CERT Systems Affected Adobe Reader version 8.1.1 and earlier Adobe Acrob...

iDefense Security Advisory 02.08.08: Adobe Reader Security Provider Unsafe Libary Path Vulnerability

iDefense Security Advisory 02.08.08 http://labs.idefense.com/intelligence/vulnerabilities/ Feb 08, 2008 I. BACKGROUND Adobe Reader is a program for viewing Portable Document Format PDF documents. More information is available at the following URLs. http://www.adobe.com/products/reader/ II...

Solaris 10 (sparc) : 123402-01

SunOS 5.10: usbms patch. Date this patch was last updated by Sun : Jan/30/08 %NASLMINLEVEL 70300 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a recommended security fix. Disabled on 2011/09/17. C Tenable Network Security, Inc. if ! definedfunc"bnrandom"...

Solaris 9 (sparc) : 137038-01

SunOS 5.9: ImageMagick patch. Date this patch was last updated by Sun : Jan/24/08 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc'; include'compat.inc'; if description...

Solaris 9 (x86) : 137039-01

SunOS 5.9x86: ImageMagick patch. Date this patch was last updated by Sun : Jan/24/08 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc'; include'compat.inc'; if description...

Unfixed XSS vulnerability at www.digitalnet.eti.br

Security researcher mygotmanoel, has submitted on 29/01/2008 a cross-site-scripting XSS vulnerability affecting www.digitalnet.eti.br, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 15/03/2008. It is...

Unfixed XSS vulnerability at www.cc-egov.de

Security researcher Uber0n, has submitted on 26/01/2008 a cross-site-scripting XSS vulnerability affecting www.cc-egov.de, which at the time of submission ranked 7093983 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 08/03/2008. It is currentl...

Unfixed XSS vulnerability at search.tennessean.com

Security researcher flux, has submitted on 25/01/2008 a cross-site-scripting XSS vulnerability affecting search.tennessean.com, which at the time of submission ranked 30464 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 06/03/2008. It is...

SDL_Image 1.2.6 and prior GIF handling buffer overflow

Name : SDLImage 1.2.6 and prior GIF handling buffer overflow Type : Remote DoS / Code Execution ? Impact : Low / Medium ? Credits : Gynvael Coldwind / Team Vexillium Discovered: 2007-12-17 Published : 2008-01-23 Brief SDLImage is an open source library providing image file handling functionality...

Unfixed XSS vulnerability at www.ascomputadores.com.br

Security researcher mygotmanoel, has submitted on 24/01/2008 a cross-site-scripting XSS vulnerability affecting www.ascomputadores.com.br, which at the time of submission ranked 2485427 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 05/03/2008...

Unfixed XSS vulnerability at www.crm2day.com

Security researcher Kaospunk, has submitted on 24/01/2008 a cross-site-scripting XSS vulnerability affecting www.crm2day.com, which at the time of submission ranked 145305 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 05/03/2008. It is...

Unfixed XSS vulnerability at www.allenboard.com

Security researcher tenest, has submitted on 23/01/2008 a cross-site-scripting XSS vulnerability affecting www.allenboard.com, which at the time of submission ranked 1472980 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 05/03/2008. It is...

aflog 1.01 comments.php XSS / SQL Injection Vulnerability

No description provided by source. Name: aflog 1.01 and possibly earlier Webiste: http://aflog.org/ Vulnerability type: SQL Injection comments.php and XSS Author: shinmai, 2008-01-22 Description: SQL INJECTION: SQL injection is possible in comments.php for the GET variable 'id', like this:...

Mooseguy Blog System 1.0 - month SQL Injection

Mooseguy Blog System 1.0 - month SQL Injection MGBS 1.0 Remote SQL injection Script url http://sourceforge.net/project/showfiles.php?groupid=193233 Vulnerable code in blog.php ?php $month = $GET'month'; $result = mysqlquery"SELECT FROM blog WHERE posted='$month' ORDER BY id DESC" or die"HELP QUER...

Fixed XSS vulnerability at www.egames.com

Security researcher mygotmanoel, has submitted on 21/01/2008 a cross-site-scripting XSS vulnerability affecting www.egames.com, which at the time of submission ranked 100418 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 03/03/2008. It is...

Mini File Host 1.2.1 - 'language' Local File Inclusion

!/usr/bin/perl Name: Mini File Host 1.2.1 "Security Fixed release" and earlier Vulnerability type: Local File Inclusion through POST requests pages/upload.php Authors: Scary-Boys: original GET-vulnerability, 2008-01-17 shinmai: POST-request vulnerability in latest version perl POC, 2008-01-19...