SecuriTeam - Palm Desktop for Mac OS X Security Vulnerability

Security News - Security Reviews - Exploits - Tools - UNIX Focus - Windows Focus

Ask the Team
Mailing Lists
Advertising Info
Advisories
About SecuriTeam
Blogs

Brought to you by:

Suppliers of:

SecuriTeam in Your Inbox

New vulnerability?
New tool?
Tell us
(Our PGP key).

Palm Desktop's synchronizing program allows users of Palm to keep a current record of all their content of the Palm on their computer. A security vulnerability in the Palm Desktop Mac OS X version causes the directories containing the content to be world readable, even if their settings are manually changed.

Credit:
The information has been provided by Victor Kruger.

Website Security Scan	Code Vulnerability Test	Network Assessment Tool
Detect hidden vulnerabilities	Exhaustive automated testing	Real-time, continuous security
Get guidance from professionals	of internal or 3rd party code.	scanning for your entire network

Protect your website!
Use an External Vulnerability Scanner!
Nothing to install. First report in 1 hour!
www.beyondsecurity.com/vulnerability-scanner

Vulnerable systems:
Palm Desktop 4.0b76-77 for Mac OS X

	LedgerSMB Multiple Vulnerabilities
	Kaspersky Lab Multiple Products Local Privilege Escalation Vulnerability
	Piwik Cookie Unserialize Vulnerability
	Invision Power Board SQL PHP File Inclusion and SQL Injection
	U.S. Defense Information Systems Agency (DISA) Unix Security Readiness Review (SRR) Vulnerability
	DevIL DICOM Buffer Overflow Vulnerability
	Marvell Driver Multiple Information Element Overflows
	HP Data Protector Express and Single Server Edition (SSE) DoS and Code Execution
	HP Color LaserJet Printers Unauthorized Access to Data and DoS
	KDE KDELibs Remote Array Overrun with Arbitrary Code Execution
	Gimp BMP Image Parsing Integer Overflow Vulnerability
	Avast aswRdr.sys Kernel Pool Corruption and Local Privilege Escalation
	WordPress Unrestricted File Upload Arbitrary PHP Code Execution
	Atheros Driver Reserved Frame DoS Vulnerability
	McAfee Security Manager Authentication Bypass and Session Hijacking Vulnerability

Featured Articles

	Microsoft Embedded OpenType Font Engine Heap Buffer Overflow (MS09-029)
	Virtualmin Multiple Vulnerabilities
	Microsoft WordPad Word97 Converter Stack Buffer Overflow Vulnerability (MS09-010)
	WordPress Unchecked Privileges in admin.php and Multiple Information Disclosures
	Microsoft PowerPoint Conversion Filter Heap Corruption Vulnerability (MS09-017)
	Adobe Shockwave Player Director File Parsing Pointer Overwrite
	Mozilla Firefox Java Applet Loading Vulnerability

Security News - Security Reviews - Exploits - Tools - UNIX Focus - Windows Focus - Blogs - CVEs