CVE-2006-6415

PHP remote file inclusion vulnerability in admin/lib-maintenance.inc.php in phpAdsNew 2.0.4-pr2 allows remote attackers to execute arbitrary PHP code via a URL in the phpAdspath parameter, a different component than CVE-2006-3984. NOTE: this issue is disputed by CVE, since phpAdspath is used as a...

CVE-2006-6406

Clam AntiVirus ClamAV 0.88.6 allows remote attackers to bypass virus detection by inserting invalid characters into base64 encoded content in a multipart/mixed MIME file, as demonstrated with the EICAR test file...

CVE-2006-6403

CVE-2006-6403 affects mystats.php in MyStats 1.0.8 and earlier. The issue allows remote attackers to obtain the installation path via (1) details and (2) array parameters, likely causing a path disclosure in an error message. The NVD entry assigns CVSSv2? vector AV:N/AC:L/Au:N/C:P/I:N/A:N with ba...

CVE-2006-6411

The CVE-2006-6411 entry affects Linksys WIP 330 Wireless-G IP Phone, version 1.00.06A, where PhoneCtrl.exe is vulnerable. The underlying issue permits remote denial of service (crash) via a TCP SYN scan, demonstrated by scanning TCP ports 1–65535 with nmap. The public description explicitly state...

CVE-2006-6407

CVE-2006-6407 concerns F-Prot Antivirus for Linux x86 Mail Servers 4.6.6. The vulnerability allows remote attackers to bypass virus detection by injecting invalid characters into base64-encoded content within a multipart/mixed MIME file, demonstrated using the EICAR test file. This indicates a fl...

CVE-2006-6400

CVE-2006-6400 affects JustSystems Hanako family and related Ichitaro components (Hanako 2004–2006, Hanako viewer 1.x, Ichitaro 2004–2005, Ichitaro Lite2, Ichitaro viewer 4.x, Sanshiro 2005). The root cause is a buffer overflow in string length handling affecting the 1) Keyword and 2) Title fields...

CVE-2006-6410

The CVE-2006-6410 entry describes a buffer overflow in an ActiveX control in VMware 5.5.1 that allows local users to execute arbitrary code by passing a long VmdbDb parameter to the Initialize function. The NVD entry corroborates this description and lists a CVSSv2 base score of 4.6 (Medium) with...

CVE-2006-6408

CVE-2006-6408 affects Kaspersky Anti-Virus for Linux Mail Servers 5.5.10. The issue allows remote attackers to bypass virus detection by inserting invalid characters into base64-encoded content within a multipart/mixed MIME file (as demonstrated with the EICAR test file). The CVSS shows network a...

CVE-2006-6406

CVE-2006-6406 affects ClamAV up to version 0.88.6, allowing remote attackers to bypass virus detection by inserting invalid characters into base64 content in a multipart/mixed MIME file (as demonstrated with the EICAR test file). Connected documents corroborate this CVE and relate it to related i...

CVE-2006-5874

The CVE-2006-5874 entry concerns ClamAV

CVE-2006-6405

BitDefender Mail Protection for SMB 2.0 is affected by a vulnerability where remote attackers can bypass virus detection by inserting invalid characters into base64-encoded content within a multipart/mixed MIME file, as demonstrated with the EICAR test file. The issue is described in CVE-2006-640...

CVE-2006-6409

CVE-2006-6409 affects F-Secure Anti-Virus for Linux Gateways 4.65. The vulnerability allows remote attackers to cause a denial of service (potentially fatal scan error) and possibly bypass virus detection by inserting invalid characters into base64-encoded content within a multipart/mixed MIME fi...

CVE-2006-6401

CVE-2006-6401; XSS in mystats.php of MyStats 1.0.8 and earlier allows remote injection of script/HTML via the parameters (connexion, by, details). Severity ~6.8 (Medium) per NVD; no exploit details provided in the documents. Affected versions: 1.0.8 and earlier; no remediation details are include...

CVE-2006-6402

CVE-2006-6402 describes a SQL injection in the file mystats.php of MyStats 1.0.8 and earlier via the details parameter. The vulnerability allows remote attackers to execute arbitrary SQL commands . Documents list the affected product and impact but do not provide exploitation steps, affected vers...

DSA-1233 kernel-source-2.6.8 - several

Bulletin has no description...

[Full-disclosure] iDefense Security Advisory 12.08.06: Multiple Vendor Antivirus RAR File Denial of Service Vulnerability

Multiple Vendor Antivirus RAR File Denial of Service Vulnerability iDefense Security Advisory 12.08.06 http://labs.idefense.com/intelligence/vulnerabilities/ Dec 08, 2006 I. BACKGROUND AntiVirus products typically handle searching files for known viruses within their scan engines. Most scan engin...

[Full-disclosure] iDefense Security Advisory 12.08.06: Sophos Antivirus CHM Chunk Name Length Memory Corruption Vulnerability

Sophos Antivirus CHM Chunk Name Length Memory Corruption Vulnerability iDefense Security Advisory 12.08.06 http://labs.idefense.com/intelligence/vulnerabilities/ Dec 08, 2006 I. BACKGROUND Sophos AntiVirus offers protection from the latest Trojans, worms and Viruses. More information is available...

[Full-disclosure] iDefense Security Advisory 12.08.06: Sophos Antivirus CHM File Heap Overflow Vulnerability

Sophos Antivirus CHM File Heap Overflow Vulnerability iDefense Security Advisory 12.08.06 http://labs.idefense.com/intelligence/vulnerabilities/ Dec 08, 2006 I. BACKGROUND Sophos AntiVirus offers protection from the latest Trojans, worms and Viruses. More information is available on the vendors...

PHP 5.2.0 session.save_path safe_mode and open_basedir bypass

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 PHP 5.2.0 session.savepath safemode and openbasedir bypass Author: Maksymilian Arciemowicz SecurityReason Date: - - Written: 02.10.2006 - - Public: 08.12.2006 SecurityAlert Id: 43 CVE: CVE-2006-6383 SecurityRisk: High Affected Software: PHP 5.2.0...

ThinkEdit 1.9.2 (render.php) Remote File Inclusion Vulnerability

No description provided by source. r0ut3r Presents... Another r0ut3r discovery! writ3r at gmail.com ThinkEdit Remote File Inclusion Exploit Software: ThinkEdit 1.9.2 Vendor: http://www.thinkedit.org/ Released: 2006/12/08 Discovered & Exploit By:...