Section: .. / 0707-advisories /
| /// File Name: |
dsa-1342-1.txt |
Description:
|
Debian Security Advisory 1342-1 - It was discovered that a race condition in the init.d script of the X Font Server allows the modification of file permissions of arbitrary files if the local administrator can be tricked into restarting the X font server.
| | Homepage: | http://www.debian.org/security | | File Size: | 4663 | | Related CVE(s): | CVE-2007-3103 | | Last Modified: | Jul 31 08:19:18 2007 |
| MD5 Checksum: | dcfee0c9d0bf3d013082cf2ace2e6fad |
|
| /// File Name: |
ASA-2007-018.txt |
Description:
|
Asterisk Project Security Advisory - The IAX2 channel driver in Asterisk is vulnerable to a denial of service attack when configured to allow unauthenticated calls.
| | Author: | Russell Bryant | | Homepage: | http://www.asterisk.org/security | | File Size: | 12583 | | Last Modified: | Jul 31 08:10:18 2007 |
| MD5 Checksum: | f10161aaa11ac16f83b440be2b06f0c7 |
|
| /// File Name: |
DRUPAL-SA-2007-018.txt |
Description:
|
Drupal security advisory - Drupal versions 4.7.x before version 4.7.7 and 5.x versions before version 5.2 suffer from cross site scripting vulnerabilities.
| | Author: | Heine Deelstra | | Homepage: | http://drupal.org/security | | File Size: | 2971 | | Last Modified: | Jul 31 08:08:42 2007 |
| MD5 Checksum: | 14ed81a89851a22a0c0d2354917b0018 |
|
| /// File Name: |
DRUPAL-SA-2007-017.txt |
Description:
|
Drupal security advisory - Several parts in Drupal core are not protected against cross site request forgeries due to improper use of the Forms API, or by taking action solely on GET requests. Malicious users are able to delete comments and content revisions and disable menu items by enticing a privileged users to visit certain URLs while the victim is logged-in to the targeted site. Drupal versions 5.x below 5.2 are affected.
| | Author: | Heine Deelstra | | Homepage: | http://drupal.org/security | | File Size: | 1786 | | Last Modified: | Jul 31 08:06:12 2007 |
| MD5 Checksum: | b734838a39dd108a42a7f302a14031cf |
|
| /// File Name: |
TS-2007-001-0.txt |
Description:
|
Template Security has discovered a serious denial of service vulnerability in the BlueCat Networks Adonis DNS/DHCP Appliance. When XHA is configured to place two Adonis servers in an active-passive pair to provide high availability, a remote attacker can transmit a single UDP datagram to crash the heartbeat control process. This can be used for example to create an active/active condition in the cluster pair.
| | Author: | forloop, defaultroute | | File Size: | 4319 | | Last Modified: | Jul 31 08:03:54 2007 |
| MD5 Checksum: | 93327c040982d60f65ac09b19795f2e6 |
|
| /// File Name: |
glsa-200707-14.txt |
Description:
|
Gentoo Linux Security Advisory GLSA 200707-14 - mu-b from Digital Labs discovered that the return value of a snprintf() call is not properly checked before being used. This could lead to an integer overflow. Versions less than 3.9.5-r3 are affected.
| | Homepage: | http://security.gentoo.org | | File Size: | 2618 | | Related CVE(s): | CVE-2007-3798 | | Last Modified: | Jul 31 07:13:36 2007 |
| MD5 Checksum: | c0978bd26a6994bc80e14e36548af670 |
|
| /// File Name: |
glsa-200707-13.txt |
Description:
|
Gentoo Linux Security Advisory GLSA 200707-13 - A vulnerability has been discovered in Fail2ban when parsing log files. Versions less than 0.8.0-r1 are affected.
| | Homepage: | http://security.gentoo.org | | File Size: | 2457 | | Last Modified: | Jul 31 07:12:42 2007 |
| MD5 Checksum: | e034057bb09ddf0d761efb27dc37dad0 |
|
| /// File Name: |
glsa-200707-12.txt |
Description:
|
Gentoo Linux Security Advisory GLSA 200707-12 - David Thiel from iSEC Partners Inc. discovered format string errors in various plugins when parsing data. The affected plugins include Vorbis, Theora, CDDA and SAP. Versions less than 0.8.6c are affected.
| | Homepage: | http://security.gentoo.org | | File Size: | 2609 | | Related CVE(s): | CVE-2007-3316 | | Last Modified: | Jul 31 07:11:55 2007 |
| MD5 Checksum: | 1e7a2848a581129128432616d7b887fc |
|
| /// File Name: |
sa26275.txt |
Description:
|
Secunia Security Advisory - Aria-Security Team has reported a vulnerability in Pay Roll, which can be exploited by malicious people to conduct SQL injection attacks.
| | Homepage: | http://secunia.com/advisories/26275/ | | File Size: | 2170 | | Last Modified: | Jul 31 05:45:08 2007 |
| MD5 Checksum: | 3a1ff0798fa1c136bb164383fdb2b666 |
|
| /// File Name: |
sa26274.txt |
Description:
|
Secunia Security Advisory - A vulnerability has been reported in Asterisk, which can be exploited by malicious people to cause a DoS (Denial of Service).
| | Homepage: | http://secunia.com/advisories/26274/ | | File Size: | 3111 | | Last Modified: | Jul 31 05:45:08 2007 |
| MD5 Checksum: | eea007ad1c1bb1d9eb9f8f589a443ebf |
|
| /// File Name: |
sa26269.txt |
Description:
|
Secunia Security Advisory - Gentoo has issued an update for vlc. This fixes some vulnerabilities, which can be exploited by malicious people to compromise a user's system.
| | Homepage: | http://secunia.com/advisories/26269/ | | File Size: | 2073 | | Last Modified: | Jul 31 05:45:08 2007 |
| MD5 Checksum: | 9e74b3903b29be230ee6bb1e80fe441d |
|
| /// File Name: |
sa26268.txt |
Description:
|
Secunia Security Advisory - Aria-Security Team has reported a vulnerability in Real Estate listing website application template, which can be exploited by malicious people to conduct SQL injection attacks.
| | Homepage: | http://secunia.com/advisories/26268/ | | File Size: | 2378 | | Last Modified: | Jul 31 05:45:08 2007 |
| MD5 Checksum: | bb2353db3b204b5e30ed1c3f7f3fdc43 |
|
| /// File Name: |
sa26266.txt |
Description:
|
Secunia Security Advisory - Gentoo has issued an update for tcpdump. This fixes a vulnerability, which potentially can be exploited by malicious people to compromise a user's system.
| | Homepage: | http://secunia.com/advisories/26266/ | | File Size: | 2095 | | Last Modified: | Jul 31 05:45:08 2007 |
| MD5 Checksum: | 4fbdbbb8882ddc949945d7fd800b3bab |
|
| /// File Name: |
sa26262.txt |
Description:
|
Secunia Security Advisory - darthballs has discovered a security issue in PHP-Blogger, which can be exploited by malicious people to disclose sensitive information.
| | Homepage: | http://secunia.com/advisories/26262/ | | File Size: | 2510 | | Last Modified: | Jul 31 05:45:08 2007 |
| MD5 Checksum: | 69d4d341f138cfef89d8148a6c286f02 |
|
| /// File Name: |
sa26260.txt |
Description:
|
Secunia Security Advisory - Yollubunlar has discovered some vulnerabilities in SuskunDuygular Üyelik Sistemi, which can be exploited by malicious people to conduct SQL injection attacks.
| | Homepage: | http://secunia.com/advisories/26260/ | | File Size: | 2354 | | Last Modified: | Jul 31 05:45:08 2007 |
| MD5 Checksum: | 1413fc199172055263557519364af624 |
|
| /// File Name: |
sa26259.txt |
Description:
|
Secunia Security Advisory - EgiX has discovered a vulnerability in LinPHA, which can be exploited by malicious people to conduct SQL injection attacks.
| | Homepage: | http://secunia.com/advisories/26259/ | | File Size: | 2324 | | Last Modified: | Jul 31 05:45:08 2007 |
| MD5 Checksum: | b19840afc36b7bc4517778d1eff4501f |
|
| /// File Name: |
sa26256.txt |
Description:
|
Secunia Security Advisory - Fortinet Global Security Research Team has reported a vulnerability in Baidu Soba, which can be exploited by malicious people to compromise a user's system.
| | Homepage: | http://secunia.com/advisories/26256/ | | File Size: | 2373 | | Last Modified: | Jul 31 05:45:08 2007 |
| MD5 Checksum: | 4a6077634d4216222ae084e3d15883a9 |
|
| /// File Name: |
sa26253.txt |
Description:
|
Secunia Security Advisory - Cr@zy_King has discovered a vulnerability in Metyus Forum Portal, which can be exploited by malicious people to conduct SQL injection attacks.
| | Homepage: | http://secunia.com/advisories/26253/ | | File Size: | 2371 | | Last Modified: | Jul 31 05:45:08 2007 |
| MD5 Checksum: | 08466d5ba86b363272b4704e2b0ae652 |
|
| /// File Name: |
sa26252.txt |
Description:
|
Secunia Security Advisory - Aria-Security Team has reported a vulnerability in WebEvents, which can be exploited by malicious people to conduct SQL injection attacks.
| | Homepage: | http://secunia.com/advisories/26252/ | | File Size: | 2178 | | Last Modified: | Jul 31 05:45:08 2007 |
| MD5 Checksum: | ee83ca4db977d4fb787be20e067f9832 |
|
| /// File Name: |
sa26246.txt |
Description:
|
Secunia Security Advisory - t0pP8uZz & xprog have discovered a vulnerability in WSN Links, which can be exploited by malicious people to conduct SQL injection attacks.
| | Homepage: | http://secunia.com/advisories/26246/ | | File Size: | 2362 | | Last Modified: | Jul 31 05:45:08 2007 |
| MD5 Checksum: | ff6e15773924bd69ac753c56a4234b0a |
|
| /// File Name: |
sa26241.txt |
Description:
|
Secunia Security Advisory - Hamid Ebadi has reported a vulnerability in t1lib, which can be exploited by malicious users to potentially compromise a vulnerable system.
| | Homepage: | http://secunia.com/advisories/26241/ | | File Size: | 2376 | | Last Modified: | Jul 31 05:45:08 2007 |
| MD5 Checksum: | 1060062b298b843a25068a9bfba64543 |
|
| /// File Name: |
sa26239.txt |
Description:
|
Secunia Security Advisory - Some vulnerabilities have been reported in Joomla!, which can be exploited by malicious people to conduct session fixation attacks, cross-site scripting attacks or HTTP response splitting attacks.
| | Homepage: | http://secunia.com/advisories/26239/ | | File Size: | 2947 | | Last Modified: | Jul 31 05:45:08 2007 |
| MD5 Checksum: | 63785e27f2d0045d88891ea92653c126 |
|
| /// File Name: |
sa26237.txt |
Description:
|
Secunia Security Advisory - Aria-Security Team has reported a vulnerability in WebStore, which can be exploited by malicious people to conduct SQL injection attacks.
| | Homepage: | http://secunia.com/advisories/26237/ | | File Size: | 2173 | | Last Modified: | Jul 31 05:45:08 2007 |
| MD5 Checksum: | 2d6b8e9bbbc7956a819537ea0d37fdce |
|
| /// File Name: |
sa26231.txt |
Description:
|
Secunia Security Advisory - Trustix has issued an update for multiple packages. This fixes some vulnerabilities and a weakness, which can be exploited by malicious, local users to bypass certain security restrictions, and by malicious people to bypass certain security restrictions, gain escalated privileges, poison the DNS cache, cause a DoS (Denial of Service), and potentially compromise a user's system.
| | Homepage: | http://secunia.com/advisories/26231/ | | File Size: | 5241 | | Last Modified: | Jul 31 05:45:08 2007 |
| MD5 Checksum: | 73d6f550880f44eb4f0b07ac3c907c9c |
|
|
|
|
|
![.:[ packet storm ]:.](/images/ps-ani.gif)
