今日のセキュリティホール情報

セキュリティホール情報

SIDfm - セキュリティ情報提供サービス

GNU C ライブラリの catchsegv スクリプトにシンボリックリンク攻撃を受ける問題
KDE の Konqueror に Java applet の制限を回避される問題
HTGET の URL の処理にバッファオーバーフローの問題

Secunia - Security and Virus Information

2004-12-20
Gentoo update for nasm (重要度2/5)
KDE Konqueror Java Sandbox Security Bypass Vulnerabilities (重要度4/5)
Crystal FTP Client "LIST" Buffer Overflow Vulnerability (重要度3/5)
Trustix update for samba (重要度3/5)
Red Hat update for XFree86 (重要度4/5)
Debian update for htget (重要度3/5)
htget Buffer Overflow Vulnerability (重要度3/5)
Windows Media Player ActiveX Control Two Vulnerabilities (重要度2/5)
PHPFormMail "output_html()" Cross-Site Scripting Vulnerabilities (重要度2/5)
PHP-Nuke Workboard Module Cross-Site Scripting (重要度2/5)
Fedora update for CUPS (重要度3/5)
ArGoSoft Mail Server Script Insertion Vulnerability (重要度3/5)
Gentoo update for Samba (重要度3/5)
Mandrake update for php (重要度4/5)
HP-UX newgrp Privilege Escalation Vulnerability (重要度2/5)
IMG2ASCII Unspecified Vulnerability (重要度3/5)
Kayako eSupport Cross-Site Scripting and SQL Injection(重要度3/5)
Gentoo update for PHP (重要度4/5)
Gentoo update for Ethereal (重要度4/5)
Gentoo update for kdelibs / kdebase (重要度3/5)
Gentoo update for KDE kfax (重要度4/5)
Gentoo update for abcm2ps (重要度3/5)
Gentoo update for phpMyAdmin (重要度4/5)
Email Sanitizer Unspecified MIME Denial of Service Vulnerability (重要度2/5)
Yanf "get()" Buffer Overflow Vulnerability(重要度3/5)
YAMT "id3tag_sort()" Function Vulnerability (重要度3/5)
xlreader "book_format_sql()" Buffer Overflow Vulnerability (重要度3/5)
Vilistextum "get_attr()" Buffer Overflow Vulnerability (重要度3/5)
vb2c "parse()" Buffer Overflow Vulnerability (重要度3/5)
UnRTF "process_font_table()" Buffer Overflow Vulnerability (重要度3/5)
uml-utilites Ethernet Connection Drop Security Issue (重要度1/5)
Ringtone Tools "parse_emelody()" Function Buffer Overflow (重要度3/5)
Pcal "getline()" and "get_holiday()" Buffer Overflow Vulnerabilities (重要度3/5)
o3read "parse_html()" Function Buffer Overflow Vulnerability (重要度3/5)
NapShare "auto_filter_extern()" Function Buffer Overflow Vulnerability (重要度4/5)
Mesh Viewer "Mesh::type()" Function Buffer Overflow Vulnerability (重要度3/5)
LinPopUp "strexpand()" Function Buffer Overflow Vulnerability (重要度3/5)
Junkie FTP Client Two Vulnerabilities (重要度3/5)
jpegtoavi "get_file_list_stdin()" Function Buffer Overflow Vulnerability (重要度3/5)
IglooFTP File Manipulation Vulnerabilities (重要度3/5)
GREED "DownloadLoop()" Function Vulnerabilities (重要度3/5)
Bolthole Filter "save_embedded_address()" Function Buffer Overflow (重要度4/5)
DXFscope DXF File Parsing Buffer Overflow Vulnerability (重要度3/5)
Debian update for a2ps (重要度2/5)

SecurityFocus

HP-UXのnewgrpにローカル権限昇格の脆弱性

■Noah System Labs. Inc.

Windows Media Player に情報漏洩の脆弱性

■idefense

IBM AIXのinvscoutにローカル権限昇格の脆弱性