SecuObs.com http://www.secuobs.com Observatoire de la securite Internet fr webmaster@secuobs.com VulnWatch Source Boston 2008 security con, March 12-14 (vw)L'ensemble des archives de la mailing vwhttp://www.secuobs.com/secumail/vwsecumail/msg00402.shtml http://www.secuobs.com/secumail/vwsecumail/msg00402.shtml VulnWatch iDefense Security Advisory 02.12.08: ClamAV libclamav PE File Integer Overflow Vulnerability (vw)L'ensemble des archives de la mailing vwhttp://www.secuobs.com/secumail/vwsecumail/msg00401.shtml http://www.secuobs.com/secumail/vwsecumail/msg00401.shtml VulnWatch CSA-L03: Linux kernel vmsplice unchecked user-pointer dereference (vw)L'ensemble des archives de la mailing vwhttp://www.secuobs.com/secumail/vwsecumail/msg00400.shtml http://www.secuobs.com/secumail/vwsecumail/msg00400.shtml VulnWatch iDefense Security Advisory 02.04.08: Hewlett-Packard Network Node Manager Topology Manager Service DoS Vulnerability (vw)L'ensemble des archives de la mailing vwhttp://www.secuobs.com/secumail/vwsecumail/msg00399.shtml http://www.secuobs.com/secumail/vwsecumail/msg00399.shtml VulnWatch iDefense Security Advisory 01.31.08: IBM Informix Dynamic Server onedcu File Creation Vulnerability (vw)L'ensemble des archives de la mailing vwhttp://www.secuobs.com/secumail/vwsecumail/msg00398.shtml http://www.secuobs.com/secumail/vwsecumail/msg00398.shtml VulnWatch iDefense Security Advisory 01.31.08: IBM Informix Dynamic Server SQLIDEBUG File Creation Vulnerability (vw)L'ensemble des archives de la mailing vwhttp://www.secuobs.com/secumail/vwsecumail/msg00397.shtml http://www.secuobs.com/secumail/vwsecumail/msg00397.shtml VulnWatch CORE-2007-1218: MPlayer 1.0rc2 buffer overflow vulnerability (vw)L'ensemble des archives de la mailing vwhttp://www.secuobs.com/secumail/vwsecumail/msg00396.shtml http://www.secuobs.com/secumail/vwsecumail/msg00396.shtml VulnWatch CORE-2008-0122: MPlayer arbitrary pointer dereference (vw)L'ensemble des archives de la mailing vwhttp://www.secuobs.com/secumail/vwsecumail/msg00395.shtml http://www.secuobs.com/secumail/vwsecumail/msg00395.shtml VulnWatch Cisco Security Advisory: Cisco Wireless Control System Tomcat mod_jk.so Vulnerability (vw)L'ensemble des archives de la mailing vwhttp://www.secuobs.com/secumail/vwsecumail/msg00394.shtml http://www.secuobs.com/secumail/vwsecumail/msg00394.shtml VulnWatch CORE-2007-1219: Firebird Remote Memory Corruption (vw)L'ensemble des archives de la mailing vwhttp://www.secuobs.com/secumail/vwsecumail/msg00393.shtml http://www.secuobs.com/secumail/vwsecumail/msg00393.shtml VulnWatch Syhunt: HFS (HTTP File Server) Username Spoofing and Log Forging/Injection Vulnerability (vw)L'ensemble des archives de la mailing vwhttp://www.secuobs.com/secumail/vwsecumail/msg00392.shtml http://www.secuobs.com/secumail/vwsecumail/msg00392.shtml VulnWatch Syhunt: HFS (HTTP File Server) Log Arbitrary File/Directory Manipulation and Denial-of-Service Vulnerabilities (vw)L'ensemble des archives de la mailing vwhttp://www.secuobs.com/secumail/vwsecumail/msg00391.shtml http://www.secuobs.com/secumail/vwsecumail/msg00391.shtml VulnWatch Syhunt: HFS (HTTP File Server) Template Cross-Site Scripting and Information Disclosure Vulnerabilities (vw)L'ensemble des archives de la mailing vwhttp://www.secuobs.com/secumail/vwsecumail/msg00390.shtml http://www.secuobs.com/secumail/vwsecumail/msg00390.shtml VulnWatch Cisco Security Advisory: Default Passwords in the Application Velocity System (vw)L'ensemble des archives de la mailing vwhttp://www.secuobs.com/secumail/vwsecumail/msg00389.shtml http://www.secuobs.com/secumail/vwsecumail/msg00389.shtml VulnWatch iDefense Security Advisory 01.09.08: Novell NetWare Client nicm.sys Local Privilege Escalation Vulnerability (vw)L'ensemble des archives de la mailing vwhttp://www.secuobs.com/secumail/vwsecumail/msg00388.shtml http://www.secuobs.com/secumail/vwsecumail/msg00388.shtml VulnWatch Corsaire Security Advisory: Sun J2RE DoS issue (vw)L'ensemble des archives de la mailing vwhttp://www.secuobs.com/secumail/vwsecumail/msg00387.shtml http://www.secuobs.com/secumail/vwsecumail/msg00387.shtml VulnWatch iDefense Security Advisory 01.07.08: Motorola netOctopus Agent MSR Write Privilege Escalation Vulnerability (vw)L'ensemble des archives de la mailing vwhttp://www.secuobs.com/secumail/vwsecumail/msg00386.shtml http://www.secuobs.com/secumail/vwsecumail/msg00386.shtml VulnWatch CORE-2007-1106: SynCE Remote Command Injection (vw)L'ensemble des archives de la mailing vwhttp://www.secuobs.com/secumail/vwsecumail/msg00385.shtml http://www.secuobs.com/secumail/vwsecumail/msg00385.shtml VulnWatch iDefense Security Advisory 12.24.07: Novell ZENworks Endpoint Security Management Local Privilege Escalation Vulnerability (vw)L'ensemble des archives de la mailing vwhttp://www.secuobs.com/secumail/vwsecumail/msg00384.shtml http://www.secuobs.com/secumail/vwsecumail/msg00384.shtml VulnWatch AST-2008-001: Crash from transfer using BYE with Also header (vw)L'ensemble des archives de la mailing vwhttp://www.secuobs.com/secumail/vwsecumail/msg00383.shtml http://www.secuobs.com/secumail/vwsecumail/msg00383.shtml VulnWatch Cisco Security Advisory: Application Inspection Vulnerability in Cisco Firewall Services Module (vw)L'ensemble des archives de la mailing vwhttp://www.secuobs.com/secumail/vwsecumail/msg00382.shtml http://www.secuobs.com/secumail/vwsecumail/msg00382.shtml VulnWatch AST-2007-027 - Database matching order permits host-based authentication to be ignored (vw)L'ensemble des archives de la mailing vwhttp://www.secuobs.com/secumail/vwsecumail/msg00381.shtml http://www.secuobs.com/secumail/vwsecumail/msg00381.shtml VulnWatch iDefense Security Advisory 12.18.07: ClamAV libclamav MEW PE File Integer Overflow Vulnerability (vw)L'ensemble des archives de la mailing vwhttp://www.secuobs.com/secumail/vwsecumail/msg00380.shtml http://www.secuobs.com/secumail/vwsecumail/msg00380.shtml VulnWatch iDefense Security Advisory 12.17.07: Apple Mac OS X mount_smbfs Stack Based Buffer Overflow Vulnerability (vw)L'ensemble des archives de la mailing vwhttp://www.secuobs.com/secumail/vwsecumail/msg00379.shtml http://www.secuobs.com/secumail/vwsecumail/msg00379.shtml VulnWatch iDefense Security Advisory 12.11.07: Microsoft DirectX 7 and 8 DirectShow Stack Buffer Overflow Vulnerability (vw)L'ensemble des archives de la mailing vwhttp://www.secuobs.com/secumail/vwsecumail/msg00378.shtml http://www.secuobs.com/secumail/vwsecumail/msg00378.shtml VulnWatch iDefense Security Advisory 12.11.07: Microsoft Internet Explorer JavaScript setExpression Heap Corruption Vulnerability (vw)L'ensemble des archives de la mailing vwhttp://www.secuobs.com/secumail/vwsecumail/msg00377.shtml http://www.secuobs.com/secumail/vwsecumail/msg00377.shtml VulnWatch R7-0031: JFreeChart Image Map Cross-Site Scripting Vulnerabilities (vw)L'ensemble des archives de la mailing vwhttp://www.secuobs.com/secumail/vwsecumail/msg00376.shtml http://www.secuobs.com/secumail/vwsecumail/msg00376.shtml VulnWatch NSFOCUS SA2007-02 : Cisco Security Agent Remote Buffer Overflow Vulnerability (vw)L'ensemble des archives de la mailing vwhttp://www.secuobs.com/secumail/vwsecumail/msg00375.shtml http://www.secuobs.com/secumail/vwsecumail/msg00375.shtml VulnWatch Cisco Security Advisory: Cisco Security Agent for Windows System Driver Remote Buffer Overflow Vulnerability (vw)L'ensemble des archives de la mailing vwhttp://www.secuobs.com/secumail/vwsecumail/msg00374.shtml http://www.secuobs.com/secumail/vwsecumail/msg00374.shtml VulnWatch CORE-2007-1004: VLC Activex Bad Pointer Initialization Vulnerability (vw)L'ensemble des archives de la mailing vwhttp://www.secuobs.com/secumail/vwsecumail/msg00373.shtml http://www.secuobs.com/secumail/vwsecumail/msg00373.shtml VulnWatch PR07-39: Multiple vulnerabilities on Absolute News Manager.NET 5.1 including file retrieval and SQL injection (vw)L'ensemble des archives de la mailing vwhttp://www.secuobs.com/secumail/vwsecumail/msg00372.shtml http://www.secuobs.com/secumail/vwsecumail/msg00372.shtml VulnWatch PR07-37: XSS on Apache HTTP Server 413 error pages via malformed HTTP method (vw)L'ensemble des archives de la mailing vwhttp://www.secuobs.com/secumail/vwsecumail/msg00371.shtml http://www.secuobs.com/secumail/vwsecumail/msg00371.shtml VulnWatch PR07-14: Cross-site Scripting (XSS) / HTML injection on F5 FirePass 4100 SSL VPN 'my.activation.php3' server-side script (vw)L'ensemble des archives de la mailing vwhttp://www.secuobs.com/secumail/vwsecumail/msg00370.shtml http://www.secuobs.com/secumail/vwsecumail/msg00370.shtml VulnWatch AST-2007-026 - SQL Injection issue in cdr_pgsql (vw)L'ensemble des archives de la mailing vwhttp://www.secuobs.com/secumail/vwsecumail/msg00369.shtml http://www.secuobs.com/secumail/vwsecumail/msg00369.shtml VulnWatch AST-2007-025 - SQL Injection issue in res_config_pgsql (vw)L'ensemble des archives de la mailing vwhttp://www.secuobs.com/secumail/vwsecumail/msg00368.shtml http://www.secuobs.com/secumail/vwsecumail/msg00368.shtml VulnWatch iDefense Security Advisory 10.23.07: IBM Lotus Domino IMAP Buffer Overflow Vulnerability (vw)L'ensemble des archives de la mailing vwhttp://www.secuobs.com/secumail/vwsecumail/msg00367.shtml http://www.secuobs.com/secumail/vwsecumail/msg00367.shtml VulnWatch iDefense Security Advisory 10.23.07: IBM Lotus Notes Client TagAttributeListCopy Buffer Overflow Vulnerability (vw)L'ensemble des archives de la mailing vwhttp://www.secuobs.com/secumail/vwsecumail/msg00366.shtml http://www.secuobs.com/secumail/vwsecumail/msg00366.shtml VulnWatch Corsaire Security Advisory - Citrix Access Gateway session ID disclosure issue (vw)L'ensemble des archives de la mailing vwhttp://www.secuobs.com/secumail/vwsecumail/msg00365.shtml http://www.secuobs.com/secumail/vwsecumail/msg00365.shtml VulnWatch iDefense Security Advisory 10.11.07: Multiple Vendor FLAC Library Multiple Integer Overflow Vulnerabilities (vw)L'ensemble des archives de la mailing vwhttp://www.secuobs.com/secumail/vwsecumail/msg00364.shtml http://www.secuobs.com/secumail/vwsecumail/msg00364.shtml