CVE-2006-6353

The CVE-2006-6353 entry affects Mac OS X, specifically the BOMArchiveHelper component. The vulnerability is described as multiple unspecified issues that allow user-assisted remote attackers to cause a denial of service (application crash). The impact is limited to availability (PARTIAL) with no ...

CVE-2006-6351

CVE-2006-6351 affects KhaledMuratList, where sensitive data is stored under the web root with insufficient access control. This allows remote attackers to download the embedded database files directly (examples: CL2F9R1A2C1N.mdb and Data2F9R1A2C1N.mdb), impacting confidentiality and potentially i...

CVE-2006-6352

CVE-2006-6352 relates to FRISK Software F-Prot Antivirus prior to 4.6.7. OpenVAS/Gentoo GLSA-200612-12 describe a vulnerability where a crafted ACE file can cause a denial of service via an infinite loop, with mentions of a heap-based buffer overflow and possible overlap with CVE-2006-6294/6293. ...

CVE-2006-6346

SAP Internet Graphics Service (IGS) affected: 6.40 Patchlevel 15 and earlier, and 7.00 Patchlevel 3 and earlier (CVE-2006-6346). Described as an unspecified vulnerability related to "Undocumented Features" that could allow remote attackers to cause a denial of service, obtain configuration files,...

CVE-2006-6344

Neocrome Seditio 1.10 and earlier are affected by SQL injection vulnerabilities across multiple pages/components, including plugins/ipsearch/ipsearch.admin.php, pfs/pfs.edit.inc.php, and users/users.register.inc.php. The CVE-2006-6344 entry notes these as unspecified vulnerabilities with possible...

CVE-2006-6357

PHPNews 1.3.0 and earlier contains a cross-site scripting (XSS) vulnerability in templates/cat_temp.php. The issue allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. The public details specify the affected product and file but do not provide exploit steps, aff...

CVE-2006-6348

CVE-2006-6348 describes a cross-site scripting (XSS) vulnerability in the board.php component of mowdBB RC-6. The flaw allows remote attackers to inject arbitrary web script or HTML through the forum_name[] parameter. The CVSS metrics indicate a network-accessible vulnerability with medium comple...

CVE-2006-6345

CVE-2006-6345 affects SAP Internet Graphics Service (IGS) 6.40 Patchlevel 16 and earlier, and 7.00 Patchlevel 6 and earlier, with a directory traversal in HTTP requests that lets remote attackers delete arbitrary files. Root cause: traversal sequences exploited by the HTTP handling in IGS. Impact...

[ MDKSA-2006:225 ] - Updated ruby packages fix DoS vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Mandriva Linux Security Advisory MDKSA-2006:225 http://www.mandriva.com/security/ Package : ruby Date : December 6, 2006 Affected: 2006.0, 2007.0, Corporate 3.0, Corporate 4.0 Problem Description: Another vulnerability has been discovered in the CGI...

GnuPG: remotely controllable function pointer [CVE-2006-6235]

GnuPG: remotely controllable function pointer CVE-2006-6235 =============================================================== 2006-12-04 Summary ======= Tavis Ormandy of the Gentoo security team identified a severe and exploitable bug in the processing of encrypted packets in GnuPG. Please do not...

Moderate wireshark security update

0.99.4-EL4.1.1 - Oracle OCFS2 network patch 0.99.4-1 - upgrade to 0.99.4, fixes multiple security issues 211993 - use dist tag - CVE-2006-5468 - The HTTP dissector could dereference a null pointer. - CVE-2006-5469 - The WBXML dissector could crash. - CVE-2006-5470 - The LDAP dissector and possibl...

The Ipswitch IMail Server is vulnerable to a buffer overflow

Overview The Ipswitch IMail Server is vulnerable to a buffer overflow. This vulnerability may allow a remote, unauthenticated attacker to execute arbitrary code or cause a denial-of-service condition. Description According to Ipswitch Security Advisory 20061101:A vulnerability that allowed remote...

SYMSA-2006-012: 2X ThinClientServer Create Admin Account Replay Vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Symantec Vulnerability Research http://www.symantec.com/research Security Advisory Advisory ID: SYMSA-2006-012 Advisory Title: 2X ThinClientServer Create Admin Account Replay Vulnerability Author: Oliver Karow / [email protected] Release Date:...

TSRT-06-15: Citrix Presentation Server Client ActiveX Heap Overflow Vulnerability

TSRT-06-15: Citrix Presentation Server Client ActiveX Heap Overflow Vulnerability http://www.tippingpoint.com/security/advisories/TSRT-06-15.html December 6, 2006 -- CVE ID: CVE-2006-6334 -- Affected Vendor: Citrix -- Affected Products: Citrix Presentation Server Client for Windows v9.230 --...

Moderate wireshark security update

0.99.4-EL4.1.1 - Oracle OCFS2 network patch 0.99.4-1 - upgrade to 0.99.4, fixes multiple security issues 211993 - use dist tag - CVE-2006-5468 - The HTTP dissector could dereference a null pointer. - CVE-2006-5469 - The WBXML dissector could crash. - CVE-2006-5470 - The LDAP dissector and possibl...

Moderate wireshark security update

0.99.4-EL4.1.1 - Oracle OCFS2 network patch 0.99.4-1 - upgrade to 0.99.4, fixes multiple security issues 211993 - use dist tag - CVE-2006-5468 - The HTTP dissector could dereference a null pointer. - CVE-2006-5469 - The WBXML dissector could crash. - CVE-2006-5470 - The LDAP dissector and possibl...

CVE-2006-6333

The trrx function in ibmtr.c for Linux kernel 2.6.19 assigns the wrong flag to the ipsummed field, which allows remote attackers to cause a denial of service memory corruption via crafted packets that cause the kernel to interpret another field as an offset...

[slackware-security] gnupg

New gnupg packages are available for Slackware 9.0, 9.1, 10.0, 10.1, 10.2, and 11.0 to fix security issues. More details about the issues may be found here: http://lists.gnupg.org/pipermail/gnupg-announce/2006q4/000491.html https://vulners.com/cve/CVE-2006-6235 https://vulners.com/cve/CVE-2006-61...

CVE-2006-6112

LifeType 1.0.x/1.1.x suffer a path-disclosure flaw due to insufficient access control on PHP scripts under class/ and plugins/. Remote attackers can elicit the installation path via direct requests to scripts such as bayesianfilter.class.php and bootstrap.php. Affected components: bayesianfilter....

CVE-2006-6333

The CVE-2006-6333 issue affects Linux kernel 2.6.19: the tr_rx function in ibmtr.c can assign the wrong flag to ip_summed, enabling remote attackers to trigger a memory-corruption DoS by crafting packets that mislead the kernel to treat a field as an offset. The vulnerability is supported by mult...