Security Advisories | Entries from December 2011

SSCHADV2011-040 - Nagios Plugin 'check_ups' Local Buffer Overflow

Posted by Stefan Schurtz on Monday, December 26. 2011

Advisory:	Nagios Plugin 'check_ups' Local Buffer Overflow
Advisory ID:	SSCHADV2011-040
Author:	Stefan Schurtz
Affected Software:	Successfully tested on nagios-plugins-1.4.15
Vendor URL:	http://nagiosplugins.org/
Vendor Status:	informed
EDB-ID:	18278

==========================
Vulnerability Description:
==========================

The Nagios plugin 'check_ups' is prone to a Buffer Overflow

Posted by Stefan Schurtz on Wednesday, December 21. 2011

Advisory:	Tiki Wiki CMS Groupware Stored Cross-Site-Scripting
Advisory ID:	INFOSERVE-ADV2011-07
Author:	Stefan Schurtz
Contact:	security@infoserve.de
Affected Software:	Successfully tested on Tiki 8.1 & 6.4 LTS (affects all current releases)
Vendor URL:	http://info.tiki.org/
Vendor Status:	fixed
CVE-ID:	CVE-2011-4551

======================
Vulnerability Description
======================

All current releases of Tiki Wiki are prone to a stored XSS vulnerability

Posted by Stefan Schurtz on Thursday, December 15. 2011

Advisory:	Seotoaster SQL-Injection Admin Login Bypass
Advisory ID:	INFOSERVE-ADV2011-06
Author:	Stefan Schurtz
Contact:	security@infoserve.de
Affected Software:	Successfully tested on Seotoaster v.1.9
Vendor URL:	http://www.seotoaster.com/
Vendor Status:	fixed

======================
Vulnerability Description
======================

Seotoaster v.1.9 is prone to an SQL-Injection which bypass the admin login

Posted by Stefan Schurtz on Wednesday, December 14. 2011

Advisory:	PHP-SCMS 1.6.8 "lang" parameter XSS vulnerability
Advisory ID:	SSCHADV2011-035
Author:	Stefan Schurtz
Affected Software:	Successfully tested on PHP-SCMS 1.6.8
Vendor URL:	http://php-scms.sourceforge.net/
Vendor Status:	unpatched (no vendor feedback)

======================
Vulnerability Description:
======================

PHP-SCMS "lang" parameter is prone to a XSS vulnerability

Posted by Stefan Schurtz on Sunday, December 11. 2011

Advisory:	zFTPServer Suite 6.0.0.52 'rmdir' Directory Traversal
Advisory ID:	INFOSERVE-ADV2011-09
Author:	Stefan Schurtz
Contact:	security@infoserve.de
Affected Software:	Successfully tested on zFTPServer Suite 6.0.0.52
Vendor URL:	http://www.zftpserver.com/
Vendor Status:	fixed
CVE-ID:	CVE-2011-4717

==========================
Vulnerability Description
==========================

zFTPServer 'rmdir' is prone to a Directory Traversal, which makes it possible to delete directories in the system

Posted by Stefan Schurtz on Wednesday, December 7. 2011

Advisory:	PHP Inventory 1.3.1 Remote (Auth Bypass) SQL Injection Vulnerability
Advisory ID:	INFOSERVE-ADV2011-08
Author:	Stefan Schurtz
Contact:	security@infoserve.de
Affected Software:	Successfully tested on PHP Inventory 1.3.1
Vendor URL:	http://www.phpwares.com/
Vendor Status:	fixed
CVE-ID:	CVE-2009-4595,CVE-2009-4596,CVE-2009-4597

======================
Vulnerability Description
======================

PHP Inventory is (still) prone to a SQL-Injection (Auth Bypass) vulnerability