Contents:
* 10 Reported Vulnerabilities
* Sort by Risk
-------------------------------------------------

Date Reported: 2005/01/24
Name: PHP Unserialize Function Vulnerability
Risk: High
Category: Web Servers
Affect OS: Windows, UNIX
Description (Chinese): http://vdb.dragonsoft.com.tw/detail.php?id=2141
Description (English): http://vdb.dragonsoft.com/detail.php?id=2141

Date Reported: 2005/01/24
Name: PHP JPEG Image Buffer Overflow Vulnerability
Risk: High
Category: Web Servers
Affect OS: Windows, UNIX
Description (Chinese): http://vdb.dragonsoft.com.tw/detail.php?id=2139
Description (English): http://vdb.dragonsoft.com/detail.php?id=2139

Date Reported: 2005/01/24
Name: PHP phpinfo Remote Memory Disclosure Vulnerability
Risk: Medium
Category: Web Servers
Affect OS: Windows, UNIX
Description (Chinese): http://vdb.dragonsoft.com.tw/detail.php?id=2140
Description (English): http://vdb.dragonsoft.com/detail.php?id=2140

Date Reported: 2005/01/19
Name: Serv-U FTP Server Resource Denial Of Service Vulnerability
Risk: Medium
Category: FTP Servers
Affect OS: 95, 98, Windows NT4, 2000, XP, 2003
Description (Chinese): http://vdb.dragonsoft.com.tw/detail.php?id=2137
Description (English): http://vdb.dragonsoft.com/detail.php?id=2137

Date Reported: 2005/01/30
Name: War FTP Daemon Remote DoS Vulnerability
Risk: Medium
Category: FTP Servers
Affect OS: 95, 98, Windows NT4, 2000, XP, 2003
Description (Chinese): http://vdb.dragonsoft.com.tw/detail.php?id=2146
Description (English): http://vdb.dragonsoft.com/detail.php?id=2146

Date Reported: 2005/01/27
Name: MySQL MySQLAccess Insecure Temporary File Creation Vulnerability
Risk: Medium
Category: MySQL
Affect OS: Windows, UNIX
Description (Chinese): http://vdb.dragonsoft.com.tw/detail.php?id=2142
Description (English): http://vdb.dragonsoft.com/detail.php?id=2142

Date Reported: 2005/01/30
Name: BIND Validator Code Remote DoS Vulnerability
Risk: Low
Category: Dns Services
Affect OS: UNIX
Description (Chinese): http://vdb.dragonsoft.com.tw/detail.php?id=2145
Description (English): http://vdb.dragonsoft.com/detail.php?id=2145

Date Reported: 2005/01/30
Name: BIND Q_UseDNS Remote DoS Vulnerability
Risk: Low
Category: Dns Services
Affect OS: UNIX
Description (Chinese): http://vdb.dragonsoft.com.tw/detail.php?id=2144
Description (English): http://vdb.dragonsoft.com/detail.php?id=2144

Date Reported: 2005/01/27
Name: Squid Proxy NTLM Fakeauth_Auth Memory Leak DoS Vulnerability
Risk: Low
Category: Proxy
Affect OS: UNIX
Description (Chinese): http://vdb.dragonsoft.com.tw/detail.php?id=2143
Description (English): http://vdb.dragonsoft.com/detail.php?id=2143

Date Reported: 2005/01/19
Name: Squid Proxy NTLM Type 3 Message DoS Vulnerability
Risk: Low
Category: Proxy
Affect OS: UNIX
Description (Chinese): http://vdb.dragonsoft.com.tw/detail.php?id=2138
Description (English): http://vdb.dragonsoft.com/detail.php?id=2138

-------------------------------------------------

Risk:
  High: Allow immediate remote, or local access or immediate execution of code or commands,
          with unauthorized privileges, and bypassing security on firewalls.
  Medium: Potential of granting access or allowing code execution by means of complex or 
          lengthy exploit procedures. Examples are cross-site scripting, man-in-the-middle 
          attacks, SQL injection, denial of service, information disclosure.
  Low: deny service or provide non-system information that could be used to formulate 
         structured attacks on a target, but not directly gain unauthorized access.
-------------------------------------------------
Copyright (c) 2002 DragonSoft Security Associate, Inc. All rights reserved

Permission is hereby granted for the electronic redistribution of this document.
It is not to be edited or altered in any way without the express written consent
of the DragonSoft Security Associate. If you wish to reprint the whole or any
part of this document in any other medium excluding electronic media, please email
alert@dragonsoft.com for permission.

Disclaimer: The information in the database may change without notice.
Use of this information constitutes acceptance for use in an AS IS condition. 
There are NO warranties with regard to this information, implied or otherwise, 
with regard to this information or its use. Any use of this information is at 
the user's risk. In no event shall the author/distributor be held liable for any 
damages whatsoever arising out of or in connection with the use or spread of this information.

Please send suggestions, updates, and comments to: DragonSoft 
vdb_adm@dragonsoft.com of DragonSoft Security Associate, Inc.

About DragonSoft Security Associates:
DragonSoft Security Associates is a leading developer in Taiwan for network security software 
and an active contributor to network security education.
Founded in 2002, DragonSoft offers vulnerability management solutions, including 
vulnerability assessment, System Security Management and intrusion prevention.


DragonSoft Security Associate, Inc. http://www.dragonsoft.com/
Tel. +886-3-5630989
Fax. +886-3-5797758
6F, No. 30, Lane 607, Sec. 1, Guangfu Rd., Hsinchu, Taiwan 300, R.O.C