===================================
:Title: Authentication bypass in Interspire Shopping Cart
:Severity: Critical
:Reporter: Truong Van Tri and Blue Moon Consulting
:Products: Interspire Shopping Cart v4.0.1 Ultimate edition
:Fixed in: v4.0.2
Description
===================================
:Title: Two buffer overflows in Maxum Rumpus
:Severity: Critical
:Reporter: Blue Moon Consulting
:Products: Maxum Rumpus v6.0
:Fixed in: 6.0.1
Description
===================================
:Title: Backdoor in PyForum
:Severity: Critical
:Reporter: Blue Moon Consulting
:Products: PyForum v1.0.3
:Fixed in: --
Description
>> U.S.). Denial-of-service against arbitrary phone numbers through
>> mass-calling. User cannot prevent attack.
>>
>> -----------------------------
>>
>> Reporter: Collin Mulliner <collin[AT]mulliner.org>
>>
>> -----------------------------
>>
>> Affiliation: MUlliNER.ORG / the trifinite group / (Fraunhofer SIT)
>>
BLUE MOON SECURITY ADVISORY 2009-06
===================================
:Title: Remote code execution in BKAV eOffice
:Severity: Critical
:Reporter: Blue Moon Consulting
:Products: eOffice v5.1.5
:Fixed in: --
Description
-----------
===================================
:Title: Remote Denial of Service in Internet Explorer
:Severity: Moderate
:Reporter: Blue Moon Consulting
:Products: Internet Explorer 7 and 8
:Fixed in: --
Description
The unsupported Tomcat 3.x, 4.0.x and 5.0.x versions may be also affected
Note: Although this vulnerability affects relatively old versions of
Apache Tomcat, it was only discovered and reported to the Apache Tomcat
Security team in October 2008. Publication of this issue was then
postponed until now at the request of the reporter.
Description:
Bug 40771 (https://issues.apache.org/bugzilla/show_bug.cgi?id=40771) may
result in the disclosure of POSTed content from a previous request. For
a vulnerability to exist the content read from the input stream must be
Timeline:
2008-07-03: vulnerability report received
2008-07-08: contacted libxslt maintainer
2008-07-10: maintainer provides patch
2008-07-17: patch fixes finalized per reporter feedback
2008-07-18: contacted affected vendors
2008-07-31: advisory release
References:
http://www.scary.beasts.org/security/CESA-2008-003.html
Crash of the parser for various parts of NDEF records, reboots
graphical user interface (GUI) of phone.
-----------------------------
Reporter: Collin Mulliner <collin.mulliner[AT]sit.fraunhofer.de>
-----------------------------
Affiliation: Fraunhofer SIT / MUlliNER.ORG / the trifinite group
===================================
:Title: Multiple Vulnerabilities in PyForum
:Severity: Critical
:Reporter: Hoang Quoc Thinh and Blue Moon Consulting
:Products: PyForum v1.0.3
:Fixed in: --
Description
U.S.). Denial-of-service against arbitrary phone numbers through
mass-calling. User cannot prevent attack.
-----------------------------
Reporter: Collin Mulliner <collin[AT]mulliner.org>
-----------------------------
Affiliation: MUlliNER.ORG / the trifinite group / (Fraunhofer SIT)
