Secunia Advisories
July 21, 2005

From Tony Bradley, CISSP-ISSAP, for About.com

Filed In:

Below are the Secunia Security Advisories rated as Highly Critical (or higher) from July 21, 2005.

Secunia Advisory 15776
avast! Antivirus ACE File Handling Two Vulnerabilities
- Criticality: High
- Description: Secunia Research has discovered two vulnerabilities in avast!, which can be exploited by malicious people to compromise a vulnerable system. 1) An input validation error during extraction of ACE archives for scanning can be exploited to write files to arbitrary directories. 2) A boundary error in the scanning of ACE archives can be exploited to cause a stack-based buffer overflow when scanning a specially crafted ACE archive containing a file with a filename of more than 290 bytes.
- Secunia Advisory: http://secunia.com/advisories/15776/
Secunia Advisory 16136
Debian update for cacti
- Criticality: High
- Description: Debian has issued an update for cacti. This fixes some vulnerabilities, which can be exploited by malicious people to conduct SQL injection attacks, bypass certain security restrictions and compromise a vulnerable system.
- Secunia Advisory: http://secunia.com/advisories/16136/
Secunia Advisory 16140
ekg libgadu Multiple Vulnerabilities
- Criticality: High
- Description: Some vulnerabilities have been reported in libgadu, which potentially can be exploited by malicious people to cause a DoS (Denial of Service) or compromise a vulnerable system. The vulnerabilities are caused due to some input validation errors and an integer overflow in libgadu.c. This can potentially be exploited to crash an application using libgadu or to execute arbitrary code.
- Secunia Advisory: http://secunia.com/advisories/16140/
Secunia Advisory 16141
Ubuntu update for mozilla-firefox
- Criticality: High
- Description: Ubuntu has issued an update for mozilla-firefox. This fixes some vulnerabilities, which can be exploited by malicious people to bypass certain security restrictions, conduct cross-site scripting and spoofing attacks, and compromise a user's system.
- Secunia Advisory: http://secunia.com/advisories/16141/
Secunia Advisory 16150
Fedora update for thunderbird
- Criticality: High
- Description: Fedora has issued an update for thunderbird. This fixes some vulnerabilities, which can be exploited by malicious people to bypass certain security restrictions, gain knowledge of potentially sensitive information, conduct cross-site scripting attacks and compromise a user's system.
- Secunia Advisory: http://secunia.com/advisories/16150/
Secunia Advisory 16151
Fedora update for firefox
- Criticality: High
- Description: Fedora has issued an update for firefox. This fixes some vulnerabilities, which can be exploited by malicious people to bypass certain security restrictions, conduct cross-site scripting and spoofing attacks, and compromise a user's system.
- Secunia Advisory: http://secunia.com/advisories/16151/
Secunia Advisory 16155
KDE Kopete update for libgadu
- Criticality: High
- Description: KDE has issued an update for Kopete. This fixes some vulnerabilities in libgadu, which potentially can be exploited by malicious people to cause a DoS (Denial of Service) or compromise a vulnerable system.
- Secunia Advisory: http://secunia.com/advisories/16155/
Secunia Advisory 16157
Red Hat update for firefox
- Criticality: High
- Description: Red Hat has issued an update for firefox. This fixes some vulnerabilities, which can be exploited by malicious people to bypass certain security restrictions, conduct cross-site scripting and spoofing attacks, and compromise a user's system.
- Secunia Advisory: http://secunia.com/advisories/16157/

Explore Internet / Network Security

Must Reads

Secunia AdvisoriesJuly 21, 2005

Secunia Advisories
July 21, 2005