Section: .. / 0801-advisories /
| /// File Name: |
sa28729.txt |
Description:
|
Secunia Security Advisory - A vulnerability has been reported in the Comment Upload Module for Drupal, which can be exploited by malicious users to compromise a vulnerable system.
| | Homepage: | http://secunia.com/advisories/28729/ | | File Size: | 2513 | | Last Modified: | Jan 31 20:56:43 2008 |
| MD5 Checksum: | e7c7e58344bac13cd2d4e44d7aacd27f |
|
| /// File Name: |
sa28730.txt |
Description:
|
Secunia Security Advisory - A vulnerability has been reported in the Userpoints module for Drupal, which can be exploited by malicious people to conduct cross-site request forgery attacks.
| | Homepage: | http://secunia.com/advisories/28730/ | | File Size: | 2654 | | Last Modified: | Jan 31 20:56:43 2008 |
| MD5 Checksum: | 1fd57cf74e8aaf03fea70e1bec2214dd |
|
| /// File Name: |
sa28731.txt |
Description:
|
Secunia Security Advisory - Some vulnerabilities have been reported in the Project Issue Tracking module for Drupal, which can be exploited by malicious users to conduct script insertion attacks and compromise a vulnerable system.
| | Homepage: | http://secunia.com/advisories/28731/ | | File Size: | 3098 | | Last Modified: | Jan 31 20:56:43 2008 |
| MD5 Checksum: | 12a9553655eba96fdbe91a0bee61c2ec |
|
| /// File Name: |
sa28732.txt |
Description:
|
Secunia Security Advisory - A vulnerability has been reported in the Secure Site module for Drupal, which can be exploited by malicious people to bypass certain security restrictions.
| | Homepage: | http://secunia.com/advisories/28732/ | | File Size: | 2435 | | Last Modified: | Jan 31 20:56:43 2008 |
| MD5 Checksum: | 7ac0d6254d032637e18f217459abae92 |
|
| /// File Name: |
sa28691.txt |
Description:
|
Secunia Security Advisory - D4m14n has discovered a vulnerability in Bigware Shop, which can be exploited by malicious people to conduct SQL injection attacks.
| | Homepage: | http://secunia.com/advisories/28691/ | | File Size: | 2423 | | Last Modified: | Jan 31 01:46:05 2008 |
| MD5 Checksum: | 1ed72159c4435de21e46b2fc8d0ddeaf |
|
| /// File Name: |
sa28642.txt |
Description:
|
Secunia Security Advisory - Thomas Pollet has discovered a vulnerability in SQLiteManager, which can be exploited by malicious people to disclose sensitive information or to compromise a vulnerable system.
| | Homepage: | http://secunia.com/advisories/28642/ | | File Size: | 2388 | | Last Modified: | Jan 31 01:45:53 2008 |
| MD5 Checksum: | a04e2d31d6a7ea3bd7584ece4437e318 |
|
| /// File Name: |
sa28682.txt |
Description:
|
Secunia Security Advisory - Some vulnerabilities have been reported in Coppermine Photo Gallery, which can be exploited by malicious people to conduct cross-site scripting attacks and by malicious users to conduct SQL injection attacks or compromise a vulnerable system.
| | Homepage: | http://secunia.com/advisories/28682/ | | File Size: | 2943 | | Last Modified: | Jan 31 01:45:53 2008 |
| MD5 Checksum: | a471c6077d92f3c7459e641be5270419 |
|
| /// File Name: |
sa28704.txt |
Description:
|
Secunia Security Advisory - HouSSaMix has discovered a vulnerability in Connectix Boards, which can be exploited by malicious people to disclose sensitive information or to compromise a vulnerable system.
| | Homepage: | http://secunia.com/advisories/28704/ | | File Size: | 2475 | | Last Modified: | Jan 31 01:45:53 2008 |
| MD5 Checksum: | 1ae41e6741c1cf0139d5652666cc8504 |
|
| /// File Name: |
sa28600.txt |
Description:
|
Secunia Security Advisory - A vulnerability has been reported in IBM AIX, which can be exploited by malicious, local users to cause a DoS (Denial of Service) or to potentially gain escalated privileges.
| | Homepage: | http://secunia.com/advisories/28600/ | | File Size: | 2240 | | Last Modified: | Jan 30 19:35:39 2008 |
| MD5 Checksum: | 533054211bc37bcffb2eb7551bd1ebd4 |
|
| /// File Name: |
glsa-200801-20.txt |
Description:
|
Gentoo Linux Security Advisory GLSA 200801-20 - Brad Fitzpatrick reported that the xmlCurrentChar() function does not properly handle some UTF-8 multibyte encodings. Versions less than 2.6.30-r1 are affected.
| | Homepage: | http://security.gentoo.org | | File Size: | 2928 | | Related CVE(s): | CVE-2007-6284 | | Last Modified: | Jan 30 19:35:20 2008 |
| MD5 Checksum: | babc5646802512595cd30bd3764acf17 |
|
| /// File Name: |
glsa-200801-19.txt |
Description:
|
Gentoo Linux Security Advisory GLSA 200801-19 - GOffice includes a copy of PCRE which is vulnerable to multiple buffer overflows and memory corruptions vulnerabilities (GLSA 200711-30). Versions less than 0.6.1 are affected.
| | Homepage: | http://security.gentoo.org | | File Size: | 3088 | | Last Modified: | Jan 30 19:34:58 2008 |
| MD5 Checksum: | 9fb00d5ec5d3d89d2fb7e95cb3dd5ead |
|
| /// File Name: |
glsa-200801-18.txt |
Description:
|
Gentoo Linux Security Advisory GLSA 200801-18 - Kazehakase includes a copy of PCRE which is vulnerable to multiple buffer overflows and memory corruptions vulnerabilities (GLSA 200711-30). Versions less than 0.5.0 are affected.
| | Homepage: | http://security.gentoo.org | | File Size: | 2877 | | Last Modified: | Jan 30 19:34:42 2008 |
| MD5 Checksum: | 02d72e2e36ca3363000d6e1079f5e01c |
|
| /// File Name: |
oraclecpu-priv.txt |
Description:
|
PeteFinnigan.com Limited advisory for Oracle January 2008 CPU - The Oracle Ultra-Search provides excessive privileges assigned to the WKSYS database schema/user account.
| | Author: | Pete Finnigan | | Homepage: | http://www.petefinnigan.com/ | | File Size: | 2271 | | Last Modified: | Jan 30 19:30:05 2008 |
| MD5 Checksum: | 6906a708358d7894317df5a1b21f079d |
|
| /// File Name: |
cisco-sa-200080130-wcs.txt |
Description:
|
Cisco Security Advisory - Apache Tomcat is the servlet container for JavaServlet and JavaServer Pages Web within the Cisco Wireless Control System (WCS). A vulnerability exists in the mod_jk.so URI handler within Apache Tomcat which, if exploited, may result in a remote code execution attack.
| | Homepage: | http://www.cisco.com/ | | File Size: | 12331 | | Related CVE(s): | CVE-2007-0774 | | Last Modified: | Jan 30 19:27:28 2008 |
| MD5 Checksum: | 3e7e563897fb70280fe79e9cd829bfb0 |
|
| /// File Name: |
sa28626.txt |
Description:
|
Secunia Security Advisory - Debian has issued an update for linux-2.6. This fixes some vulnerabilities, which can be exploited by malicious, local users to disclose potentially sensitive information, bypass certain security restrictions, and corrupt a file system, or by malicious people to cause a DoS (Denial of Service).
| | Homepage: | http://secunia.com/advisories/28626/ | | File Size: | 106891 | | Last Modified: | Jan 30 19:21:58 2008 |
| MD5 Checksum: | 4e7ead657a8ab02008d8924acc57837a |
|
| /// File Name: |
sa28650.txt |
Description:
|
Secunia Security Advisory - Gentoo has issued an update for maradns. This fixes a vulnerability, which can be exploited by malicious people to cause a DoS (Denial of Service).
| | Homepage: | http://secunia.com/advisories/28650/ | | File Size: | 2001 | | Last Modified: | Jan 30 19:21:30 2008 |
| MD5 Checksum: | bff23d880f37bcf5393fd70d6858dfc4 |
|
| /// File Name: |
sa28697.txt |
Description:
|
Secunia Security Advisory - Gentoo has acknowledged a vulnerability in netkit-ftpd, which can be exploited by malicious users to cause a DoS (Denial of Service).
| | Homepage: | http://secunia.com/advisories/28697/ | | File Size: | 2232 | | Last Modified: | Jan 30 19:21:30 2008 |
| MD5 Checksum: | e3e40c81d81f52f38ab338fc8de0ea2d |
|
| /// File Name: |
MDVSA-2008-028.txt |
Description:
|
Mandriva Linux Security Advisory - The mysql_change_db() function in MySQL 5.0.x before 5.0.40 did not restore THD::db_access privileges when returning from SQL SECURITY INVOKER stored routines, which allowed remote authenticated users to gain privileges. The federated engine in MySQL 5.0.x, when performing a certain SHOW TABLE STATUS query, did not properly handle a response with a small number of columns, which could allow a remote MySQL server to cause a denial of service (federated handler crash and daemon crash) via a response that lacks the minimum required number of columns.
| | Homepage: | http://www.mandriva.com/security/ | | File Size: | 10407 | | Related CVE(s): | CVE-2007-2692, CVE-2007-6304 | | Last Modified: | Jan 30 19:12:32 2008 |
| MD5 Checksum: | f10807d69e9bab5a2df809509cb505b0 |
|
| /// File Name: |
sa28692.txt |
Description:
|
Secunia Security Advisory - Some vulnerabilities have been reported in Hal Networks products, which can be exploited by malicious people to conduct cross-site scripting attacks.
| | Homepage: | http://secunia.com/advisories/28692/ | | File Size: | 2321 | | Last Modified: | Jan 30 18:37:37 2008 |
| MD5 Checksum: | 169a3b7e11333ea7e7a013594f103d18 |
|
| /// File Name: |
sa28326.txt |
Description:
|
Secunia Security Advisory - Secunia Research has discovered a vulnerability in XnView and NConvert, which can be exploited by malicious people to compromise a user's system.
| | Homepage: | http://secunia.com/advisories/28326/ | | File Size: | 2605 | | Last Modified: | Jan 30 18:37:19 2008 |
| MD5 Checksum: | bb618385accba904774e431d68185e44 |
|
| /// File Name: |
sa28637.txt |
Description:
|
Secunia Security Advisory - Mandriva has issued an update for mysql. This fixes a security issue and a vulnerability, which can be exploited by malicious users to gain escalated privileges or cause a DoS (Denial of Service).
| | Homepage: | http://secunia.com/advisories/28637/ | | File Size: | 4505 | | Last Modified: | Jan 30 18:37:19 2008 |
| MD5 Checksum: | c716cf142620e8eac3f872791225bf31 |
|
| /// File Name: |
sa28661.txt |
Description:
|
Secunia Security Advisory - ShaFuck31 has reported a vulnerability in AmpJuke, which can be exploited by malicious people to conduct cross-site scripting attacks.
| | Homepage: | http://secunia.com/advisories/28661/ | | File Size: | 2351 | | Last Modified: | Jan 30 18:37:19 2008 |
| MD5 Checksum: | 424b6fae4debc5e5602e544cadf8b9d3 |
|
| /// File Name: |
sa28665.txt |
Description:
|
Secunia Security Advisory - Larry W. Cashdollar has reported two security issues in the PatchLink Update client for Unix, which can be exploited by malicious, local users to truncate arbitrary files and to gain escalated privileges.
| | Homepage: | http://secunia.com/advisories/28665/ | | File Size: | 2456 | | Last Modified: | Jan 30 18:37:19 2008 |
| MD5 Checksum: | 22b847a0644f271f1db3c58e5e74b2bb |
|
| /// File Name: |
sa28675.txt |
Description:
|
Secunia Security Advisory - Russ McRee has reported some vulnerabilities in SoftCart, which can be exploited by malicious people to conduct cross-site scripting attacks.
| | Homepage: | http://secunia.com/advisories/28675/ | | File Size: | 2310 | | Last Modified: | Jan 30 18:37:19 2008 |
| MD5 Checksum: | e4475648472fe5fb661df961eb253283 |
|
| /// File Name: |
sa28680.txt |
Description:
|
Secunia Security Advisory - Alexandr Polyakov and Stas Svistunovich have reported a vulnerability in Nucleus CMS, which can be exploited by malicious people to conduct cross-site scripting attacks.
| | Homepage: | http://secunia.com/advisories/28680/ | | File Size: | 2296 | | Last Modified: | Jan 30 18:37:19 2008 |
| MD5 Checksum: | cd58230f24d4371173d79b025aba9572 |
|
|
|
|
|