About the security content of AirPort Update 2006-001 and Security Update 2006-005

About the security content of AirPort Update 2006-001 and Security Update 2006-005 This document describes Security Update 2006-005 and the security content of AirPort Update 2006-001, which can be downloaded and installed via Software Update preferences, or from Apple Downloads. For the protecti...

CVE-2006-4910

The web administration interface mainApp to Cisco IDS before 4.15c, and IPS 5.0 before 5.06p1 and 5.1 before 5.12 allows remote attackers to cause a denial of service unresponsive device via a crafted SSLv2 Client Hello packet...

CVE-2006-4910

The CVE affects Cisco IDS/IPS web administration interfaces. Specifically, Cisco IDS before 4.1(5c) and Cisco IPS before 5.0(6p1) and 5.1 before 5.1(2) are vulnerable to a denial-of-service via a crafted SSLv2 Client Hello that causes the mainApp web management process to become unresponsive. The...

CVE-2006-4910

The web administration interface mainApp to Cisco IDS before 4.15c, and IPS 5.0 before 5.06p1 and 5.1 before 5.12 allows remote attackers to cause a denial of service unresponsive device via a crafted SSLv2 Client Hello packet...

CVE-2006-4910: Undefined Security Weakness

The web administration interface mainApp to Cisco IDS before 4.15c, and IPS 5.0 before 5.06p1 and 5.1 before 5.12 allows remote attackers to cause a denial of service unresponsive device via a crafted SSLv2 Client Hello packet...

Re: Cisco IOS VTP issues

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Hello, This is a Cisco response to an advisory published by FX of Phenoelit posted as of September 13, 2006 at: http://www.securityfocus.com/archive/1/445896/30/0/threaded and entitled "Cisco Systems IOS VTP multiple vulnerabilities". An official...

Microsoft Windows Server 2003 - NetpIsRemote() Remote Overflow (MS06-040) (Metasploit)

Microsoft Windows Server 2003 - NetpIsRemote Remote Overflow MS06-040 Metasploit netapiwin2003.pm MS06-040 Exploit for Windows Server 2003 SP0 Author: Trirat Puttaraksa Kira http://sf-freedom.blogspot.com For educational purpose only Note: This exploit is developed because of my question "Is it...

[Full-disclosure] RE: Cisco IOS GRE issue

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Hello, This is a Cisco response to an advisory published by FX of Phenoelit posted as of September 06, 2006 at http://www.securityfocus.com/archive/1/445322/30/0/threaded, and entitled "Cisco Systems IOS GRE decapsulation fault". An official response ...

Compression Plus and Tumbleweed EMF Stack Overflow Security Advisory

Compression Plus and Tumbleweed EMF Stack Overflow Security Advisory Summary The Compression Plus library is designed to handle de/compression of popular archiving formats such as ARC, ARK, PAK, ARJ, CAB, GZ, LBR, TAR, TAZ, TGZ, Z, ZIP, and ZOO. The code fails to properly validate input while...

[SECURITY] [DSA 1161-1] New Mozilla Firefox packages fix several vulnerabilities

-------------------------------------------------------------------------- Debian Security Advisory DSA 1161-1 [email protected] http://www.debian.org/security/ Martin Schulze August 29th, 2006 http://www.debian.org/security/faq -...

CVE-2006-3859

CVE-2006-3859 affects IBM Informix Dynamic Server (IDS). The vulnerability allows remote authenticated users to create and overwrite arbitrary files via the LOTOFILE and trl_tracefile_set functions, and via the SET DEBUG FILE command. The underlying issue is that these APIs/commands can be abused...

CVE-2006-3860

CVE-2006-3860 affects IBM Informix Dynamic Server (IDS) versions prior to 9.40.xC7 and 10.00 prior to 10.00.xC3. The vulnerability allows remote authenticated users to execute arbitrary operating system commands through three vectors: (1) the SQL statement SET DEBUG FILE, and the (2) start_onploa...

CVE-2006-3860: Undefined Security Weakness

IBM Informix Dynamic Server IDS before 9.40.xC7 and 10.00 before 10.00.xC3 allows allows remote authenticated users to execute arbitrary commands via the 1 "SET DEBUG FILE" SQL command, and the 2 startonpload and 3 dbexp functions...

CORE-2006-0714: Microsoft SRV.SYS SMB_COM_TRANSACTION Denial of Service

Core Security Technologies Advisory http://www.coresecurity.com Microsoft SRV.SYS SMBCOMTRANSACTION Denial of Service Date Published: 2006-08-14 Last Update: 2006-08-14 Advisory ID: CORE-2006-0714 Bugtraq ID: 19215 CVE Name: CVE-2006-3942 Title: Microsoft SRV.SYS SMBCOMTRANSACTION Denial of Servi...

CVE-2006-3857

Multiple buffer overflows in IBM Informix Dynamic Server IDS before 9.40.TC6 and 10.00 before 10.00.TC3 allow remote authenticated users to execute arbitrary code via 1 the getname function, as used by a sqremview, b sqremproc, c sqremperms, d sqdistfetch, and e sqdcatalog; and the 2 SET DEBUG...

CVE-2006-3861

IBM Informix Dynamic Server IDS before 9.40.xC7 and 10.00 before 10.00.xC3 does not use database creation permissions, which allows remote authenticated users to create arbitrary databases...

CVE-2006-3862

CVE-2006-3862: Buffer overflow in IBM Informix Dynamic Server (IDS) allowing arbitrary code execution via the SQLIDEBUG environment variable. Affected versions: IDS 9.40.TC5–9.40.xC7 and 10.00.TC1–10.00.xC3. Exploitation status is not stated in the provided documents; no remediation details are g...

CVE-2006-3855

Affected product: IBM Informix Dynamic Server (IDS). Vulnerability: The ifx_load_internal function allows remote authenticated users to load an arbitrary library and execute code via DllMain (Windows) or _init (Linux) when the library is loaded, enabling arbitrary C code execution. This constitut...

CVE-2006-3861

IBM Informix Dynamic Server (IDS) is affected by CVE-2006-3861. Affected versions are IDS 9.40.xC6 and earlier and 10.00.xC2/C1 before 9.40.xC7 and 10.00.xC3, where the product does not enforce database creation permissions. This allows remote authenticated users to create arbitrary databases, po...

CVE-2006-3856

CVE-2006-3856 affects IBM Informix Dynamic Server (IDS) prior to 9.40.xC7 and 10.00 prior to 10.00.xC3, where a local user can cause a denial of service (crash) via unspecified vectors. The vulnerability is documented as a local DoS and is complemented by related entries describing multiple Infor...