Latest Advisories
2003-10-09
Secunia
Security Tracker
Security Focus
Symantec


Secunia
Secunia Highlights:
Microsoft Internet Explorer Multiple Vulnerabilities
Multiple vulnerabilities have been identified in Microsoft Internet Explorer. Some could expose sensitive information others may lead to execution of arbitrary code.
Microsoft Internet Explorer Update fixes the Object Data Vulnerability
Microsoft has released a new cumulative patch for Internet Explorer. This fixes the Object Data vulnerability, which was inadequatedly addressed in MS03-32.

Latest 15 Secunia Security Advisories:
2003-10-09
- EnGarde update for OpenSSL

- Red Hat update for MySQL

- OpenOffice UNO Denial of Service Vulnerability

- HP-UX dtprintinfo DISPLAY Buffer Overflow Vulnerability

- HP-UX AAA Server OpenSSL Vulnerabilities

- HP SCM update for MySQL

- HP WBEM Services for HP-UX OpenSSL Vulnerabilities

- DeskPRO SQL Injection Vulnerability

2003-10-08
- SuSE Linux SuSEconfig.susewm Privilege Escalation

- SuSE Linux SuSEconfig.javarunt Privilege Escalation

- FirstClass Internet Services Heap Overflow Vulnerability

- Adobe SVG Viewer Multiple Vulnerabilities

- Geeklog Cross Site Scripting and Weak Session Control

- Red Hat update for SANE

- slocate User Database Privilege Escalation Vulnerability
More Advisories
Top 5 Most Read Secunia Security Advisories (Last 24 hours):

- Microsoft Internet Explorer Update fixes the Object Data Vulnerability

- Microsoft Internet Explorer Multiple Vulnerabilities

- Adobe SVG Viewer Multiple Vulnerabilities

- Microsoft Windows Media Player DHTML Local Zone Access

- Red Hat update for SANE
Security Tracker
Special Alerts - OpenSSL ASN.1 decoding flaws may result in remote code execution.
Various applications using OpenSSL may be affected.

Medieval Total War Game Can Be Crashed By Remote Users

Two vulnerabilities were reported in the Medieval Total War game software. A remote user can crash the target server. A remote user can also crash a match before the match has started.

Impact: Denial of service via network

ltrace Heap Overflow May Let Local Users Execute Arbitrary Code With Root Privileges

A buffer overflow vulnerability was reported in 'ltrace'. A local user may be able to execute arbitrary code with root privileges.

Impact: Execution of arbitrary code via local system, Root access via local system

Adobe SVG Viewer Cross-Domain Access Flaw Lets Remote Users Execute Code in Arbitrary Domains

Another cross-domain security vulnerability was reported in the Adobe SVG Viewer. A remote user can execute arbitrary commands and write files on the target user's system.

Impact: Disclosure of system information, Disclosure of user information, Execution of arbitrary code via network, Modification of system information, Modification of user information, User access via network

Adobe SVG Viewer Discloses Arbitrary Files to Remote Users

An information disclosure vulnerability was reported in the Adobe SVG Viewer and browser control. A remote user can view files on the target user's system and remotely located files that are readable by the target user's browser.

Impact: Disclosure of system information, Disclosure of user information


PeopleSoft PeopleTools May Disclose Exported Searches to Remote Users

A vulnerability was reported in the PeopleSoft PeopleTools application. A remote user can view certain files on the system due to a flaw in the grid option.

Impact: Disclosure of system information, Disclosure of user information

SecurityFocus BugTraq
SecurityFocus Vulnerabilities

10/08/2003 Re: [PAPER] Juggling with packets: floating data storage Michal Zalewski
10/08/2003 Re: [PAPER] Juggling with packets: floating data storage David Heigl
10/08/2003 Re: [PAPER] Juggling with packets: floating data storage Eugen Leitl
10/08/2003 Re: [PAPER] Juggling with packets: floating data storage Doug Moen
10/08/2003 Re: [Full-Disclosure] Re: [PAPER] Juggling with packets: floating data storage Valdis Kletnieks vt edu
10/08/2003 Re: [PAPER] Juggling with packets: floating data storage Rick Wash
10/08/2003 Re: [PAPER] Juggling with packets: floating data storage Nicholas Weaver
10/08/2003 Re: [PAPER] Juggling with packets: floating data storage Michal Zalewski
10/08/2003 Re: [Full-Disclosure] RE: [PAPER] Juggling with packets: floating data storage Michal Zalewski
10/08/2003 Re: [Full-Disclosure] Re: I have fixes for the Geeklog vulnerabilities Chris Kulish us ing com
10/08/2003 RE: [PAPER] Juggling with packets: floating data storage Alun Jones
10/08/2003 Re: PHP-Nuke SQL Injection 3APA3A
10/08/2003 RE: IE 6 XML Patch Bypass GreyMagic Software
10/08/2003 Microsoft Windows Server 2003 Shell Folders Directory Traversal Vulnerability Eiji James Yoshida
10/08/2003 PHP-Nuke SQL Injection mod
10/08/2003 ZH2003-28SA (security advisory): file inclusion vulnerability in PayPal Store Front Astharot
10/08/2003 HPUX dtprintinfo buffer overflow vulnerability Davide Del Vecchio
10/08/2003 Openoffice 1.1.0 DoS Marc Schoenefeld
10/08/2003 Betr.: IE 6 XML Patch Bypass Philip Wagenaar
10/08/2003 Re: [Full-Disclosure] Re: I have fixes for the Geeklog vulnerabilities jelmer
2003-10-05: ProFTPD ASCII File Transfer Buffer Overrun Vulnerability
2003-10-05: GuppY Remote File Access Vulnerability
2003-10-05: GuppY Cross-Site Scripting Vulnerability
2003-10-05: CFEngine CFServD Transaction Packet Buffer Overrun Vulnerability
2003-10-04: EternalMart Multiple Remote File Include Vulnerabilities
2003-10-04: Microsoft Internet Explorer Absolute Position Block Denial Of Service Vulnerability
2003-10-04: PHP-Nuke mailattach.php Remote File Upload Vulnerability
2003-10-04: Microsoft Windows Media Player IE Zone Access Control Bypass Vulnerability
2003-10-04: Cisco CatOS Password Prompt Unauthorized Remote Command Execution Vulnerability
2003-10-04: Microsoft Internet Explorer Browser Popup Window Object Type Validation Vulnerability
2003-10-04: Multiple Vendor C Library realpath() Off-By-One Buffer Overflow Vulnerability

Symantec SSR
Backdoor.Spigot.C
Backdoor.G_Spot.20 [KAV], BackDoor-AAG [McAfee] October 8, 2003 October 9, 2003
Backdoor.Lixy October 8, 2003 October 8, 2003
PWSteal.Nikana October 8, 2003 October 8, 2003
W32.Gramos October 7, 2003 October 8, 2003
Backdoor.SDBot.Q October 7, 2003 October 8, 2003