Security Vulnerabilities

A remotely exploitable vulnerability has been discovered in the file parsing engine of Sophos AntiVirus versions prior to 2.48.0. The bug exists during the file parsing of GZIP packed files.

A remote exploitable vulnerability exists in clamav-milter when used with sendmail due to an insecure call to popen(). ClamAV versions prior to 0.91.2 are affected.

Tikiwiki version 1.9.7 is susceptible to cross site scripting attacks.

rPSA-2007-0172-1 tar

AST-2007-021: Crash from invalid/corrupted MIME bodies when using voicemail with IMAP storage

More on VMWare poor guest isolation design >> Advertisement ALERT: "How A Hacker Launches A Blind SQL Injection Attack Step-by-Step"!" - White Paper Blind SQL Injection can deliver total control of your server to a hacker giving them the ability to read, write and manipulate all data stored in your backend systems! Download this *FREE* white paper from SPI Dynamics for a complete guide to protection! https://download.spidynamics.com/1/ad/bsq.asp?Campaign_ID=701600000004c29

security vulnerability in VMware

Security vulnerability in BufferZone 2.5

Re: VMWare poor guest isolation design

VMware Workstation VMStor-60 Driver Buffer Overflow Vulnerability >> Advertisement ALERT: "How A Hacker Launches A Blind SQL Injection Attack Step-by-Step"!" - White Paper Blind SQL Injection can deliver total control of your server to a hacker giving them the ability to read, write and manipulate all data stored in your backend systems! Download this *FREE* white paper from SPI Dynamics for a complete guide to protection! https://download.spidynamics.com/1/ad/bsq.asp?Campaign_ID=701600000004c29

GNU Tar Hostile Destination Path Variant Vulnerability

GNU Tar Dot_Dot Function Remote Directory Traversal Vulnerability

GNU Tar Hostile Destination Path Vulnerability

Sophos Antivirus UPX and BZIP Multiple Remote Vulnerabilities

RETIRED: SPIP Inc-Calcul.PHP3 Remote File Include Vulnerability >> Advertisement ALERT: "How A Hacker Launches A Blind SQL Injection Attack Step-by-Step"!" - White Paper Blind SQL Injection can deliver total control of your server to a hacker giving them the ability to read, write and manipulate all data stored in your backend systems! Download this *FREE* white paper from SPI Dynamics for a complete guide to protection! https://download.spidynamics.com/1/ad/bsq.asp?Campaign_ID=701600000004c29

Asterisk Malformed MIME Body Remote Denial of Service Vulnerability

ProFTPD version 1.x mod_tls remote buffer overflow exploit.

Ubuntu Security Notice 502-1 - It was discovered that Konqueror could be tricked into displaying incorrect URLs. Remote attackers could exploit this to increase their chances of tricking a user into visiting a phishing URL, which could lead to credential theft.

ESTsoft ALPass version 2.7 suffers from an arbitrary code execution vulnerability when importing a specially crafted DB file.

Bugzilla versions below 2.20.5 and versions below 3.0.1 are susceptible to input validation and cross site scripting vulnerabilities.