Secunia Research: Samba "receive_smb_raw()" Buffer Overflow Vulnerability

====================================================================== Secunia Research 28/05/2008 - Samba "receivesmbraw" Buffer Overflow Vulnerability - ====================================================================== Table of Contents Affected...

Boundary failure when parsing SMB responses

Description Secunia Research reported a vulnerability that allows for the execution of arbitrary code in smbd. This defect is is a result of an incorrect buffer size when parsing SMB replies in the routine receivesmbraw. Patch Availability A patch addressing this defect has been posted to...

Creative Software AutoUpdate Engine ActiveX (CTSUEng.ocx) Unspecified Overflow

The remote host contains the Creative Software AutoUpdate Engine ActiveX control, which is used to automatically update Creative Labs software. The version of this control installed on the remote host reportedly contains an unspecified stack-based buffer overflow. If an attacker can trick a user ...

HP Software Update HPeDiag ActiveX Control GetXmlFromIni buffer overflow

Added: 05/22/2008 CVE: CVE-2008-0712 BID: 28929 OSVDB: 44662 Background HP Software Update is shipped with various kinds of HP computers to keep HP software up to date. Problem A buffer overflow in the GetXmlFromIni method of the HPeDiag ActiveX control allows command execution when a user loads ...

Nagios -- Cross Site Scripting Vulnerability

Secunia reports: A vulnerability has been reported in Nagios, which can be exploited by malicious people to conduct cross-site scripting attacks...

Secunia Research: Foxit Reader "util.printf()" Buffer Overflow

====================================================================== Secunia Research 20/05/2008 - Foxit Reader "util.printf" Buffer Overflow - ====================================================================== Table of Contents Affected...

Citadel SMTP server RCPT TO buffer overflow

Added: 05/12/2008 CVE: CVE-2008-0394 BID: 27376 OSVDB: 40516 Background Citadel is an open-source e-mail and collaboration server. Problem A buffer overflow vulnerability in the makeuserkey function allows remote attackers to execute arbitrary commands by sending a long, specially crafted RCPT TO...

Citadel SMTP server RCPT TO buffer overflow

Added: 05/12/2008 CVE: CVE-2008-0394 BID: 27376 OSVDB: 40516 Background Citadel is an open-source e-mail and collaboration server. Problem A buffer overflow vulnerability in the makeuserkey function allows remote attackers to execute arbitrary commands by sending a long, specially crafted RCPT TO...

Citadel SMTP server RCPT TO buffer overflow

Added: 05/12/2008 CVE: CVE-2008-0394 BID: 27376 OSVDB: 40516 Background Citadel is an open-source e-mail and collaboration server. Problem A buffer overflow vulnerability in the makeuserkey function allows remote attackers to execute arbitrary commands by sending a long, specially crafted RCPT TO...

Asterisk IAX2 Multiple Method Handshake Spoofing DoS

The version of Asterisk running on the remote host does not properly validate an IAX2 handshake. By spoofing NEW and ACK messages, an unauthenticated, remote attacker may be able to leverage this issue to flood a third-party host with packets from the affected host containing audio data. C Tenabl...

FreeBSD : gnupg -- memory corruption vulnerability (30394651-13e1-11dd-bab7-0016179b2dd5)

Secunia reports : A vulnerability has been reported in GnuPG, which can potentially be exploited to compromise a vulnerable system. The vulnerability is caused due to an error when importing keys with duplicated IDs. This can be exploited to cause a memory corruption when importing keys via...

Firefox < 2.0.0.14 Javascript Garbage Collector DoS

The installed version of Firefox contains a stability problem that could result in a crash during JavaScript garbage collection. Although there are no examples of this extending beyond a crash, similar issues in the past have been shown to allow arbitrary code execution. C Tenable Network Securit...

Secunia Research: activePDF DocConverter Applix Graphics Parsing Vulnerabilities

====================================================================== Secunia Research 08/04/2008 - activePDF DocConverter Applix Graphics Parsing Vulnerabilities - ====================================================================== Table of Contents Affected...

Secunia Research: Lotus Notes htmsr.dll Buffer Overflows

====================================================================== Secunia Research 08/04/2008 - Lotus Notes htmsr.dll Buffer Overflows - ====================================================================== Table of Contents Affected...

Secunia Research: Internet Explorer Data Stream Handling Vulnerability

====================================================================== Secunia Research 08/04/2008 - Internet Explorer Data Stream Handling Vulnerability - ====================================================================== Table of Contents Affected...

Secunia Research: Lotus Notes EML Reader Buffer Overflows

====================================================================== Secunia Research 08/04/2008 - Lotus Notes EML Reader Buffer Overflows - ====================================================================== Table of Contents Affected...

Secunia Research: HP OpenView Network Node Manager OpenView5.exe Directory Traversal

====================================================================== Secunia Research 14/04/2008 - HP OpenView Network Node Manager OpenView5.exe Directory Traversal - ====================================================================== Table of Contents Affected...

Secunia Research: Symantec Mail Security Applix Graphics Parsing Vulnerabilities

====================================================================== Secunia Research 08/04/2008 - Symantec Mail Security Applix Graphics Parsing Vulnerabilities - ====================================================================== Table of Contents Affected...

Secunia Research: Autonomy Keyview EML Reader Buffer Overflows

====================================================================== Secunia Research 08/04/2008 - Autonomy Keyview EML Reader Buffer Overflows - ====================================================================== Table of Contents Affected...

Secunia Research: Lotus Notes kvdocve.dll Path Processing Buffer Overflow

====================================================================== Secunia Research 08/04/2008 - Lotus Notes kvdocve.dll Path Processing Buffer Overflow - ====================================================================== Table of Contents Affected...