[SECURITY] [DSA-1230-1] new l2tpns packages fix buffer overflow

------------------------------------------------------------------------ Debian Security Advisory DSA-1230-1 [email protected] http://www.debian.org/security/ Steve Kemp December 08, 2006 - ------------------------------------------------------------------------ Package : l2tpns 2.0.14-1sarge1...

DSquare Exploit Pack: D2SEC_WFICA

Name| d2secwfica ---|--- CVE| CVE-2006-6334 Exploit Pack| D2ExploitPack Description| Citrix Metaframe Presentation Server Client - ActiveX Heap Overflow Notes|...

CVE-2006-6391

Multiple directory traversal vulnerabilities in Open Solution Quick.Cart 2.0, when registerglobals is enabled and magicquotesgpc is disabled, allow remote attackers to include arbitrary files via a .. dot dot in the configdbtype parameter to 1 actionsadmin/other.php and 2 actionsclient/gallery.ph...

CVE-2006-6385

Stack-based buffer overflow in Intel PRO 10/100, PRO/1000, and PRO/10GbE PCI, PCI-X, and PCIe network adapter drivers aka NDIS miniport drivers before 20061205 allows local users to execute arbitrary code with "kernel-level" privileges via an incorrect function call in certain OID handlers...

CVE-2006-6396

CVE-2006-6396 is a stack-based buffer overflow in BlazeVideo HDTV Player 2.1 (and possibly earlier; 3.5 noted) that allows remote code execution via a long filename in a PLF playlist. Public records indicate the issue affects BlazeVideo BlazeDVD products with PLF handling vulnerabilities, and mul...

CVE-2006-6395

The CVE-2006-6395 entry concerns the Ulrik Petersen Emdros Database Engine, affected in versions before 1.2.0.pre231. According to the description, it suffers multiple memory leaks that allow local users to cause a denial of service via memory consumption. The report notes this is a separate issu...

CVE-2006-6386

CVE-2006-6386 is a Cross-site Scripting (XSS) vulnerability in Drupal’s CVS management/tracker components (4.7.x-1.0, 4.7.x-2.0, 4.7.0 before 20060807). The flaw allows remote attackers to inject arbitrary web script or HTML via the motivation field on the CVS application page, because the value ...

CVE-2006-6391

CVE-2006-6391 affects Open Solution Quick.Cart 2.0. The issue is a directory traversal vulnerability that allows remote attackers to include arbitrary files via a .. in the config[db_type] parameter sent to actions_admin/other.php and actions_client/gallery.php when register_globals is enabled an...

CVE-2006-6387

CVE-2006-6387 describes multiple SQL injection vulnerabilities in the LINK Content Management Server (CMS). The affected components are the web scripts navigacija.php (parameter IDMeniGlavni) and prikazInformacije.php (parameter IDStranicaPodaci). The underlying issue is unsafely constructed SQL ...

CVE-2006-6385

CVE-2006-6385 describes a stack-based buffer overflow in Intel PRO Ethernet NDIS miniport drivers (PRO 10/100, PRO/1000, PRO/10GbE for PCI, PCI-X, PCIe) before 2006-12-05. The flaw allows a local attacker to execute arbitrary code with kernel-level privileges via an incorrect OID-handling functio...

CVE-2006-6393

CVE-2006-6393 is an XSS vulnerability in Jonas Gauffin Publicera 1.0-rc2 and earlier. The issue arises from InputFilter::getString, allowing remote attackers to inject arbitrary script/HTML via unspecified vectors. Documented impact is client-side data/script integrity and potential user interact...

CVE-2006-6399

CVE-2006-6399 concerns Superfreaker Studios UPublisher 1.0, where a SQL injection flaw in the login.asp Username parameter allows remote execution of arbitrary SQL commands. The vulnerability is described across multiple sources (NVD, Red Hat, CVE List) with the same core detail, but no concrete ...

CVE-2006-6334

CVE-2006-6334 is a heap-based buffer overflow in the SendChannelData function of wfica.ocx, part of the Citrix Presentation Server Client for Windows, affected up to version 9.230. An attacker-controlled DataSize that is smaller than the Data buffer length can allow remote code execution when a u...

CVE-2006-6390

CVE-2006-6390 concerns multiple directory traversal vulnerabilities in Open Solution Quick.Cart 2.0 . When register_globals is enabled and magic_quotes_gpc is disabled, remote attackers can exploit a .. path in the config[db_type] parameter to (1) categories.php, (2) couriers.php, (3) orders.php,...

CVE-2006-6394

The CVE-2006-6394 entry describes an SQL injection vulnerability in certain database classes of Jonas Gauffin Publicera 1.0-rc2 and earlier, potentially allowing remote attackers to execute arbitrary SQL commands via unspecified vectors. Affected software: Jonas Gauffin Publicera 1.0-rc2 and earl...

CVE-2006-6398

CVE-2006-6398 has concrete details in connected documents: it describes multiple SQL injection vulnerabilities in Superfreaker Studios UPublisher 1.0. Affected components include viewarticle.asp (CVE-5888) and, for CVE-6398, sendarticle.asp, printarticle.asp, index.asp, and preferences.asp via th...

CVE-2006-6388

CVE-2006-6388 is a Cross-site scripting (XSS) vulnerability in LINK Content Management Server (CMS) affecting naprednaPretraga.php via the txtPretraga parameter. The root cause is unsanitized input leading to arbitrary script/HTML injection, with CVSSv2 base score 6.8 (NETWORK, MEDIUM, no authent...

CVE-2006-6396

Stack-based buffer overflow in BlazeVideo HDTV Player 2.1, and possibly earlier, allows remote attackers to execute arbitrary code via a long filename in a PLF playlist, a different product than CVE-2006-6199. NOTE: it was later reported that 3.5 is also affected...

CVE-2006-6389

CVE-2006-6389 and related CVEs describe multiple cross-site scripting (XSS) vulnerabilities in the ac4p Mobile application. The flaws enable remote attackers to inject arbitrary web script or HTML by submitting crafted input to specific parameters: (1) Taaa to up.php and (2) pollhtml and (3) Blok...

CVE-2006-6397

The CVE-2006-6397 entry concerns an alleged integer overflow in the banner/banner.c component across FreeBSD, NetBSD, and OpenBSD. The issue is disputed by CVE and others and, because the banner is not setuid, an exploit would not cross privilege boundaries in normal operations; the notes explici...