===========================================================================
The Secunia Weekly Advisory Summary
2003-10-16 - 2003-10-23
This week : 30 advisories
===========================================================================
7 New Microsoft Security Bulletins
Microsoft has released no less than 7 security bulletins for their
products.
Make sure that your system gets the appropriate patches installed! Read
more about the vulnerabilities and patches in the following Secunia
Advisories:
SA10010
http://secunia.com/SA10010/SA10011
http://secunia.com/SA10011/SA10012
http://secunia.com/SA10012/SA10013
http://secunia.com/SA10013/SA10014
http://secunia.com/SA10014/SA10015
http://secunia.com/SA10015/SA10016
http://secunia.com/SA10016/Secunia - Stay Secure
===========================================================================
============
2003-10-22
============
Web Wiz Forums Cross-Site Scripting Vulnerabilities
SA10050 - Less critical
http://www.secunia.com/advisories/10050/ --
eMule Long Password Denial of Service Vulnerability
SA10049 - Less critical
http://www.secunia.com/advisories/10049/ --
My Photo Gallery Unspecified Vulnerability
SA10048 - Moderately critical
http://www.secunia.com/advisories/10048/ --
My Classifieds SQL SQL Injection Vulnerability
SA10044 - Moderately critical
http://www.secunia.com/advisories/10044/ --
PSCS VPOP3 Email Server Cross Site Scripting Vulnerability
SA10042 - Less critical
http://www.secunia.com/advisories/10042/============
2003-10-21
============
GoldScripts Goldlink User Authentication Bypass Vulnerability
SA10047 - Moderately critical
http://www.secunia.com/advisories/10047/ --
phpGroupWare Unspecified Vulnerabilities
SA10046 - Moderately critical
http://www.secunia.com/advisories/10046/ --
Immunix update for fetchmail
SA10045 - Moderately critical
http://www.secunia.com/advisories/10045/ --
Oracle LD_PRELOAD Privilege Escalation
SA10043 - Less critical
http://www.secunia.com/advisories/10043/ --
Opera HREF Buffer Management Error
SA10041 - Not critical
http://www.secunia.com/advisories/10041/ --
PHP-Nuke Path Disclosure Vulnerability
SA10040 - Not critical
http://www.secunia.com/advisories/10040/ --
OpenServer Insecure tmp Files Vulnerability
SA10039 - Less critical
http://www.secunia.com/advisories/10039/ --
Mercur Mailserver AUTH Command Denial of Service Vulnerability
SA10038 - Moderately critical
http://www.secunia.com/advisories/10038/ --
Bajie Http Web Server Cross-Site Scripting Vulnerabilities
SA10023 - Less critical
http://www.secunia.com/advisories/10023/============
2003-10-20
============
Conectiva update for ircd
SA10037 - Not critical
http://www.secunia.com/advisories/10037/ --
Conectiva update for gdm
SA10036 - Not critical
http://www.secunia.com/advisories/10036/ --
OpenPKG update for ircd
SA10035 - Not critical
http://www.secunia.com/advisories/10035/ --
cpCommerce Arbitrary File Inclusion Vulnerability
SA10034 - Highly critical
http://www.secunia.com/advisories/10034/ --
Vivísimo Content Engine Search Parameter Cross-Site Scripting
SA10033 - Less critical
http://www.secunia.com/advisories/10033/ --
RealOne Insecure Temporary Files
SA10032 - Less critical
http://www.secunia.com/advisories/10032/ --
Caucho Resin Sample Scripts Cross Site Scripting Vulnerabilities
SA10031 - Not critical
http://www.secunia.com/advisories/10031/ --
Dansie Shopping Cart Reveals Installation Path
SA10030 - Not critical
http://www.secunia.com/advisories/10030/ --
Geeklog Password Request SQL Injection Vulnerability
SA10029 - Moderately critical
http://www.secunia.com/advisories/10029/ --
byteHoard Directory Traversal Vulnerability
SA10028 - Less critical
http://www.secunia.com/advisories/10028/ --
Mandrake update for gdm
SA10027 - Not critical
http://www.secunia.com/advisories/10027/ --
Mandrake update for fetchmail
SA10026 - Less critical
http://www.secunia.com/advisories/10026/ --
fetchmail Denial of Service Vulnerability
SA10025 - Less critical
http://www.secunia.com/advisories/10025/ --
GDM Local Denial of Service Vulnerabilities
SA10024 - Not critical
http://www.secunia.com/advisories/10024/============
2003-10-17
============
Novell iChain Multiple Vulnerabilities
SA10022 - Highly critical
http://www.secunia.com/advisories/10022/ --
AOL Instant Messenger File Transfer Error Message Buffer Overflow
Vulnerability
SA10021 - Moderately critical
http://www.secunia.com/advisories/10021/