Secunia Research: Microsoft Internet Explorer Keyboard Shortcut Processing Vulnerability

====================================================================== Secunia Research 13/12/2005 Microsoft Internet Explorer Keyboard Shortcut Processing Vulnerability ====================================================================== Table of Contents Affected...

[SA18001] SSH Tectia Server Host-Based Authentication Security Issue

TITLE: SSH Tectia Server Host-Based Authentication Security Issue SECUNIA ADVISORY ID: SA18001 VERIFY ADVISORY: http://secunia.com/advisories/18001/ CRITICAL: Less critical IMPACT: Security Bypass, Privilege escalation WHERE: From remote SOFTWARE: SSH Tectia Server 5.x...

[SA17922] Mac OS X Perl "$<" Privilege Dropping Security Issue

TITLE: Mac OS X Perl "$" Privilege Dropping Security Issue SECUNIA ADVISORY ID: SA17922 VERIFY ADVISORY: http://secunia.com/advisories/17922/ CRITICAL: Less critical IMPACT: Security Bypass WHERE: From remote OPERATING SYSTEM: Apple Macintosh OS X http://secunia.com/product/96/ DESCRIPTION: Jason...

trac -- search module SQL injection vulnerability

Secunia reports: A vulnerability has been reported in Trac, which can be exploited by malicious people to conduct SQL injection attacks. Some unspecified input passed in the search module isn't properly sanitised before being used in a SQL query. This can be exploited to manipulate SQL queries by...

MailEnable IMAP W3C Logging Buffer Overflow

Added: 12/03/2005 CVE: CVE-2005-3155 BID: 15006 OSVDB: 19842 Background MailEnable is a mail server for Windows platforms. The standard edition supports the SMTP and POP3 protocols. MailEnable Professional and MailEnable Enterprise also support IMAP and HTTPMail. Problem MailEnable's IMAP service...

drupal -- multiple vulnerabilities

Secunia reports: Some vulnerabilities have been reported in Drupal, which can be exploited by malicious people to bypass certain security restrictions, and conduct script insertion and HTTP response splitting attacks. 1 An input validation error in the filtering of HTML code can be exploited to...

RSA SecurID Web Agent for IIS redirect buffer overflow

Added: 11/30/2005 CVE: CVE-2005-4734 BID: 26424 OSVDB: 20151 Background RSA SecurID Web Agent for IIS provides access control for IIS web servers using one-time authentication tokens. Problem A buffer overflow in IISWebAgentIF.dll could allow a remote attacker to execute arbitrary commands using ...

[SA17779] Ampache Snoopy "_httpsrequest()" Command Injection Vulnerability

TITLE: Ampache Snoopy "httpsrequest" Command Injection Vulnerability SECUNIA ADVISORY ID: SA17779 VERIFY ADVISORY: http://secunia.com/advisories/17779/ CRITICAL: Highly critical IMPACT: System access WHERE: From remote SOFTWARE: Ampache 3.x http://secunia.com/product/5347/ DESCRIPTION: A...

Novell eDirectory iMonitor buffer overflow

Added: 11/29/2005 CVE: CVE-2005-2551 BID: 14548 OSVDB: 18703 Background iMonitor is a web service which is a component of Novell eDirectory. Problem A buffer overflow when processing long HTTP or HTTPS requests leads to remote command execution. Resolution Upgrade to eDirectory 8.7.3 IR7 or highe...

Secunia Research: SpeedProject Products ZIP/UUE File Extraction Buffer Overflow

====================================================================== Secunia Research 24/11/2005 - SpeedProject Products ZIP/UUE File Extraction Buffer Overflow - ====================================================================== Table of Contents Affected...

[SA17674] FreeMED XML_RPC PHP Code Execution Vulnerability

TITLE: FreeMED XMLRPC PHP Code Execution Vulnerability SECUNIA ADVISORY ID: SA17674 VERIFY ADVISORY: http://secunia.com/advisories/17674/ CRITICAL: Highly critical IMPACT: System access WHERE: From remote SOFTWARE: FreeMED 0.x http://secunia.com/product/6190/ DESCRIPTION: A vulnerability has been...

[SA17693] vtiger CRM Multiple Vulnerabilities

TITLE: vtiger CRM Multiple Vulnerabilities SECUNIA ADVISORY ID: SA17693 VERIFY ADVISORY: http://secunia.com/advisories/17693/ CRITICAL: Highly critical IMPACT: Security Bypass, Cross Site Scripting, Manipulation of data, Exposure of sensitive information, System access WHERE: From remote SOFTWARE...

[SA17675] Joomla! SQL Injection and Cross-Site Scripting Vulnerabilities

TITLE: Joomla! SQL Injection and Cross-Site Scripting Vulnerabilities SECUNIA ADVISORY ID: SA17675 VERIFY ADVISORY: http://secunia.com/advisories/17675/ CRITICAL: Moderately critical IMPACT: Cross Site Scripting, Manipulation of data WHERE: From remote SOFTWARE: Joomla! 1.x...

[Full-disclosure] Secunia Research: Opera Command Line URL Shell Command Injection

====================================================================== Secunia Research 22/11/2005 - Opera Command Line URL Shell Command Injection - ====================================================================== Table of Contents Affected...

[SA17652] e-Quick Cart SQL Injection Vulnerabilities

TITLE: e-Quick Cart SQL Injection Vulnerabilities SECUNIA ADVISORY ID: SA17652 VERIFY ADVISORY: http://secunia.com/advisories/17652/ CRITICAL: Moderately critical IMPACT: Manipulation of data WHERE: From remote SOFTWARE: e-Quick Cart http://secunia.com/product/6165/ DESCRIPTION: BiPiHaCk has...

[SA17634] Hitachi Products Cross-Site Scripting and Denial of Service

TITLE: Hitachi Products Cross-Site Scripting and Denial of Service SECUNIA ADVISORY ID: SA17634 VERIFY ADVISORY: http://secunia.com/advisories/17634/ CRITICAL: Moderately critical IMPACT: Cross Site Scripting, DoS WHERE: From remote SOFTWARE: Cosminexus 6.x http://secunia.com/product/5795/ Groupm...

[Full-disclosure] Secunia Research: MailEnable Buffer Overflow and Directory Traversal Vulnerabilities

====================================================================== Secunia Research 18/11/2005 - MailEnable Buffer Overflow and Directory Traversal Vulnerabilities - ====================================================================== Table of Contents Affected...

[Full-disclosure] Secunia Research: Winmail Server Multiple Vulnerabilities

====================================================================== Secunia Research 18/11/2005 - Winmail Server Multiple Vulnerabilities - ====================================================================== Table of Contents Affected...

mambo -- "register_globals" emulation layer overwrite vulnerability

A Secunia Advisory reports: peter MC tachatte has discovered a vulnerability in Mambo, which can be exploited by malicious people to manipulate certain information and compromise a vulnerable system. The vulnerability is caused due to an error in the "registerglobals" emulation layer in...

[SA17580] Help Center Live "file" Local File Inclusion Vulnerability

TITLE: Help Center Live "file" Local File Inclusion Vulnerability SECUNIA ADVISORY ID: SA17580 VERIFY ADVISORY: http://secunia.com/advisories/17580/ CRITICAL: Moderately critical IMPACT: Exposure of sensitive information WHERE: From remote SOFTWARE: Help Center Live 2.x...