Secunia Advisories

August 19, 2005

From Tony Bradley, CISSP-ISSAP, former About.com Guide

Below are the Secunia Security Advisories rated as Highly Critical (or higher) from August 19, 2005.

Secunia Advisory 16475
LiveSupport PEAR XML_RPC Nested XML Tags PHP Code Execution
- Criticality: High
- Description: A vulnerability has been reported in LiveSupport, which can be exploited by malicious people to compromise a vulnerable system.
- Secunia Advisory: http://secunia.com/advisories/16475/
Secunia Advisory 16504
Zorum prod.php Arbitrary Command Execution Vulnerability
- Criticality: High
- Description: rgod has discovered a vulnerability in Zorum, which can be exploited by malicious people to compromise a vulnerable system.
  Input passed to the "argv[1]" parameter in gorum/prod.php is not properly sanitised before being used in the "system()" function. This can be exploited to execute arbitrary commands on the server.
- Secunia Advisory: http://secunia.com/advisories/16504/
Secunia Advisory 16505
Gentoo update for acroread
- Criticality: High
- Description: Gentoo has issued an update for acroread. This fixes a vulnerability, which potentially can be exploited by malicious people to compromise a user's system.
- Secunia Advisory: http://secunia.com/advisories/16505/