[Full-disclosure] iDEFENSE Security Advisory 08.02.05: CA BrightStor ARCserve Backup Agent for MS SQL Server Buffer Overflow

CA BrightStor ARCserve Backup Agent for MS SQL Server Buffer Overflow iDEFENSE Security Advisory 08.02.05 www.idefense.com/application/poi/display?id=287&type=vulnerabilities August 2, 2005 I. BACKGROUND BrightStor ARCserve Backup for Windows delivers backup and restore protection for all Windows...

Fedora Core 3 : httpd-2.0.53-3.2 (2005-638)

This update includes version 2.0.53 of the Apache HTTP server, and also adds security fixes for CVE-2005-2088 and CVE-2005-1268. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clea...

CVE-2005-1762

The ptrace call in the Linux kernel 2.6.8.1 and 2.6.10 for the AMD64 platform allows local users to cause a denial of service kernel crash via a "non-canonical" address...

Solaris 10 (sparc) : 120469-07

SunOS 5.10: kerberos patch. Date this patch was last updated by Sun : Apr/10/07 %NASLMINLEVEL 70300 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a recommended security fix. Disabled on 2011/09/17. C Tenable Network Security, Inc. if ! definedfunc"bnrandom"...

Solaris 10 (sparc) : 118822-30

SunOS 5.10: kernel Patch. Date this patch was last updated by Sun : Feb/23/06 %NASLMINLEVEL 70300 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a recommended security fix. Disabled on 2011/09/17. C Tenable Network Security, Inc. if ! definedfunc"bnrandom"...

[SECURITY] [DSA 771-1] New pdns packages fix denial of service

-------------------------------------------------------------------------- Debian Security Advisory DSA 771-1 [email protected] http://www.debian.org/security/ Martin Schulze August 1st, 2005 http://www.debian.org/security/faq -...

[SECURITY] [DSA 771-1] New pdns packages fix denial of service

-------------------------------------------------------------------------- Debian Security Advisory DSA 771-1 [email protected] http://www.debian.org/security/ Martin Schulze August 1st, 2005 http://www.debian.org/security/faq -...

CVE-2005-2411

Cross-Site Request Forgery CSRF vulnerability in tDiary 2.1.1, and tDiary 2.0.1 and earlier, allows remote attackers to conduct actions as another user, and execute commands on the server, via a URL that is activated by the user...

CVE-2005-2410

Format string vulnerability in the nminfohandler function in Network Manager may allow remote attackers to execute arbitrary code via format string specifiers in a Wireless Access Point identifier, which is not properly handled in a syslog call...

CVE-2005-2411

CVE-2005-2411 is a CSRF vulnerability in tDiary 2.1.1 and earlier (2.0.1 and older). A remote attacker can act as another user and even execute commands on the server via a URL the victim visits. Debian/DSA advisories indicate fixes in newer packages (e.g., 2.0.1-1sarge1, 2.0.2-1); upgrade to rem...

CVE-2005-2411

Cross-Site Request Forgery CSRF vulnerability in tDiary 2.1.1, and tDiary 2.0.1 and earlier, allows remote attackers to conduct actions as another user, and execute commands on the server, via a URL that is activated by the user...

CVE-2005-2411

Cross-Site Request Forgery CSRF vulnerability in tDiary 2.1.1, and tDiary 2.0.1 and earlier, allows remote attackers to conduct actions as another user, and execute commands on the server, via a URL that is activated by the user...

CVE-2005-2409

The vulnerability is in nbSMTP 0.99 and earlier (util.c) where, when in debug mode, format string specifiers are mishandled in a syslog call, allowing remote code execution. Affected product: nbSMTP (nbSMTP). Root cause: improper handling of format strings in a syslog path. Impact: arbitrary code...

CVE-2005-2410

The CVE-2005-2410 entry concerns NetworkManager’s nm_info_handler, where a format string vulnerability arises from improper handling of a Wireless Access Point identifier in a syslog call. The impact described in the sources is remote code execution via crafted input, with attack vector over the ...

CVE-2005-2359

CVE-2005-2359: In FreeBSD 5.3 and 5.4, a programming error in the AES-XCBC-MAC implementation causes a constant key to be used for authentication when IPsec is used without encryption. This allows an attacker to forge packets and establish an IPsec session, compromising integrity of that channel....

CVE-2005-2410

Format string vulnerability in the nminfohandler function in Network Manager may allow remote attackers to execute arbitrary code via format string specifiers in a Wireless Access Point identifier, which is not properly handled in a syslog call...

FreeBSD : fetchmail -- remote root/code injection from malicious POP3 server (3497d7be-2fef-45f4-8162-9063751b573a)

fetchmail's POP3/UIDL code does not truncate received UIDs properly. A malicious or compromised POP3 server can thus corrupt fetchmail's stack and inject code when fetchmail is using UIDL, either through configuration, or as a result of certain server capabilities. Note that fetchmail is run as...

IPSwitch IMail Server 8.15 - IMAPD Remote Code Execution

IpSwitch IMAIL Server IMAPD Remote r00t Exploit by kcope June 2005 Confidential! use IO::Socket; 316 bytes $cbsc = "\xEB\x10\x5B\x4B\x33\xC9\x66\xB9\x25\x01\x80\x34\x0B\xC2\xE2\xFA" ."\xEB\x05\xE8\xEB\xFF\xFF\xFF" ."\x2B\x39\xC2\xC2\xC2\x9D\xA6\x63\xF2\xC2\xC2\xC2\x49\x82\xCE\x49"...

IPSwitch IMail Server 8.15 - IMAPD Remote Code Execution

IPSwitch IMail Server 8.15 - IMAPD Remote Code Execution IpSwitch IMAIL Server IMAPD Remote r00t Exploit by kcope June 2005 Confidential! use IO::Socket; 316 bytes $cbsc = "\xEB\x10\x5B\x4B\x33\xC9\x66\xB9\x25\x01\x80\x34\x0B\xC2\xE2\xFA" ."\xEB\x05\xE8\xEB\xFF\xFF\xFF"...

FreeBSD : phppgadmin -- 'formLanguage' local file inclusion vulnerability (88188a8c-eff6-11d9-8310-0001020eed82)

A Secunia Advisory reports : A vulnerability has been reported in phpPgAdmin, which can be exploited by malicious people to disclose sensitive information. Input passed to the 'formLanguage' parameter in 'index.php' isn't properly verified, before it is used to include files. This can be exploite...