OSVDB has completed a major redesign, and this feed has been replaced with more customizable feeds. Please visit osvdb.org for more information on how to use our new services.

IMAP APPEND command handling vulnerability. Applications: Softalk IMAP Server 8.5 (02.09.2008)

Applications: WordNet 3.0 (02.09.2008)

File descriptor leaks under Linux. Applications: postfix 2.4, postfix 2.5, postfix 2.6 (02.09.2008)

It's possible to cause Postfix to deliver mail to system file by using hardlinks to symlink (available against standard in Linux, IRIX, Solaris). Applications: Postfix 2.3, postfix 2.4, postfix 2.5, postfix 2.6 (02.09.2008)

Applications: OpenView Network Node Manager 7.01, OpenView Network Node Manager 7.51, OpenView Network Node Manager 7.53 (02.09.2008)

DoS, Crossite scripting. (02.09.2008)

Multiple ActiveX vulnerabilities, privilege escalation, ISAPI filters DoS, third party components updates. Applications: VMware Workstation 5.5, VMware Player 1.0, VMware Server 1.0, VMware ACE 1.0, VMware Workstation 6.0, VMware Player 2.0, VMware ACE 2.0, VMware ESX 3.0 (02.09.2008)

Device crashes on oversized HTTP request. Applications: Dreambox DM500 (02.09.2008)

PHP inclusions, SQL injections, directory traversals, crossite scripting, information leaks, etc. myPHPNuke: SQL injection. Applications: myPHPNuke 1.8, vtigerCRM 5.0, Plesk 8.6 (02.09.2008)

Buffer overflow on MSN SLP messages parsing. Applications: Pidgin 2.4 (01.09.2008)

PHP inclusions, SQL injections, directory traversals, crossite scripting, information leaks, etc. FeedBurner FeedSmith: crossite scripting, information leak. myPHPNuke: crossite scripting, SQL injection. Applications: myPHPNuke 1.8, Invision Power Board 2.3, FeedBurner FeedSmith 2.3, PHPCart 4.6, PHPCart 3.4 (01.09.2008)

Directory traversal, unauthorized access. Applications: Mita Scanner File Utility 3.3 (01.09.2008)

Cleartext password is not erased from BIOS data buffer. Applications: DiskCryptor 0.2, Grub Legacy 0.97, lilo 22.6, DriveCrypt 3.9, TrueCrypt 5.0 (01.09.2008)

DoS attack with memory exhaustion. (01.09.2008)

Hussin X has discovered a vulnerability in Reciprocal Links Manager, which can be exploited by malicious people to conduct SQL injection attacks.


Be sure to check if your system is missing security updates or have insecure applications installed:
http://secunia.com/software_inspector/

Feature Overview - The Secunia Software Inspector:
* Detects insecure versions of applications installed
* Verifies that all Microsoft patches are applied
* Assists you in updating your system and applications
* Runs through your browser. No installation or download is required.

Hussin X has reported a vulnerability in Web directory, which can be exploited by malicious people to conduct SQL injection attacks.


Be sure to check if your system is missing security updates or have insecure applications installed:
http://secunia.com/software_inspector/

Feature Overview - The Secunia Software Inspector:
* Detects insecure versions of applications installed
* Verifies that all Microsoft patches are applied
* Assists you in updating your system and applications
* Runs through your browser. No installation or download is required.

Debian has issued an update for wordnet. This fixes some vulnerabilities, which can potentially be exploited by malicious, local users to gain escalated privileges, and by malicious people to compromise a vulnerable system.


Be sure to check if your system is missing security updates or have insecure applications installed:
http://secunia.com/software_inspector/

Feature Overview - The Secunia Software Inspector:
* Detects insecure versions of applications installed
* Verifies that all Microsoft patches are applied
* Assists you in updating your system and applications
* Runs through your browser. No installation or download is required.

Fabian Fingerle has discovered some vulnerabilities in vtiger CRM, which can be exploited by malicious people to conduct cross-site scripting attacks.


Be sure to check if your system is missing security updates or have insecure applications installed:
http://secunia.com/software_inspector/

Feature Overview - The Secunia Software Inspector:
* Detects insecure versions of applications installed
* Verifies that all Microsoft patches are applied
* Assists you in updating your system and applications
* Runs through your browser. No installation or download is required.

Francesco Tornieri has reported a vulnerability in Kyocera FS-118MFP, which can be exploited by malicious people to disclose potentially sensitive information.


Be sure to check if your system is missing security updates or have insecure applications installed:
http://secunia.com/software_inspector/

Feature Overview - The Secunia Software Inspector:
* Detects insecure versions of applications installed
* Verifies that all Microsoft patches are applied
* Assists you in updating your system and applications
* Runs through your browser. No installation or download is required.