bugtraq - SecurityLab report: The Top 10 Most Critical Vulnerabilities in June 2004

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [day] [month] [year] [list]

Message-ID: <200406301912.i5UJC6u27996@netsys.com>
Date: Wed, 30 Jun 2004 23:12:12 +0400
From: "Alexander" <pigrelax@...dex.ru>
To: <full-disclosure@...ts.netsys.com>
Cc: <bugtraq@...urityfocus.com>
Subject: SecurityLab report: The Top 10 Most Critical Vulnerabilities in June 2004

SecurityLab report: The Top 10 Most Critical Vulnerabilities in June 2004

.	Firebird Remote Pre-Authentication Database Name Buffer Overrun
Vulnerability, http://www.securitylab.ru/45626.html , Bugtraq ID 10446
.	Squid Proxy NTLM Authentication Buffer Overflow Vulnerability,
http://www.securitylab.ru/45762.html , Bugtraq ID 10500
.	Spamguard Multiple Buffer Overflow Vulnerabilities,
http://www.securityLab.ru/45539.html , Bugtraq ID 10434
.	PHP Microsoft Windows Shell Escape Functions Command Execution
Vulnerability, http://www.securityLab.ru/45718.html , Bugtraq ID 10471
.	Apache Mod_Proxy Remote Negative Content-Length Buffer Overflow
Vulnerability , http://www.securityLab.ru/45832.html, Bugtraq ID 10508
.	CVS Multiple Vulnerabilities , http://www.securityLab.ru/45785.html,
Bugtraq ID 10499
.     RealNetwork RealPlayer Media File Heap Overflow Vulnerabilities ,
http://www.securityLab.ru/45846.html, Bugtraq ID 10520
.	IBM ACPRunner ActiveX Control Dangerous Method Vulnerability,
http://www.securityLab.ru/45916.html, Bugtraq ID 10561, 10562
.	Epic Games Unreal Engine Memory Corruption Vulnerability,
http://www.securityLab.ru/45959.html, Bugtraq ID 10570
.	Oracle E-Business Suite Multiple Unspecified SQL Injection
Vulnerabilities, http://www.securityLab.ru/45685.html, Bugtraq ID 10465 

----
MaxPatrol - professional network security scanner of superior quality. The
only scanner today that can detect more than 30% of future's
vulnerabilities. Free demo download is available. www.maxpatrol.com
----

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.netsys.com/full-disclosure-charter.html