New Security Vulnerabilities 21st March 2007

The following new security tests were added to Telspace' database:

TOTAL THREATS IN THE DATABASE   14200

NEW THREATS RISK FACTOR SUMMARY
   (*****)  Urgent Risk          1
   (**** )  Critical Risk        16
   (***  )  High Risk            1
   (**   )  Medium Risk          4
   (*    )  Low Risk             1

NEW THREATS FAMILY SUMMARY
   Mandrake Local Checks          8
   Gentoo Local Checks            4
   FreeBSD Local Checks           3
   Windows                        2
   MacOS X Local Checks           2
   Fedora Local Checks            2
   Denial of Service              1
   Debian Local Checks            1

(*****)  Urgent Risk  -  Windows
Vulnerability in Plug and Play Could Allow Remote Code Execution and
Local Elevation of Privilege (905749) - Network Check

(**** )  Critical Risk  -  Fedora Local Checks
Fedora Core 6 2007-322: ekiga

(**** )  Critical Risk  -  Mandrake Local Checks
MDKSA-2007:057: xine-lib

(**** )  Critical Risk  -  Gentoo Local Checks
 [GLSA-200703-19] LTSP: Authentication bypass in included LibVNCServer code

(**** )  Critical Risk  -  Mandrake Local Checks
MDKSA-2007:060: kernel

(**** )  Critical Risk  -  Mandrake Local Checks
MDKSA-2007:056: tcpdump

(**** )  Critical Risk  -  MacOS X Local Checks
Mac OS X < 10.4.9 / Security Update 2007-003

(**** )  Critical Risk  -  Mandrake Local Checks
MDKSA-2007:058: ekiga

(**** )  Critical Risk  -  Fedora Local Checks
Fedora Core 5 2007-321: ekiga

(**** )  Critical Risk  -  Denial of Service
Squid < 2.6.STABLE7

(**** )  Critical Risk  -  Mandrake Local Checks
MDKA-2007:018-1: timezone

(**** )  Critical Risk  -  Mandrake Local Checks
MDKSA-2007:055: mplayer

(**** )  Critical Risk  -  Gentoo Local Checks
 [GLSA-200703-17] ulogd: Remote execution of arbitrary code

(**** )  Critical Risk  -  Mandrake Local Checks
MDKSA-2007:059: gnupg

(**** )  Critical Risk  -  MacOS X Local Checks
iPhoto < 6.0.6

(**** )  Critical Risk  -  Debian Local Checks
 [DSA1269] DSA-1269-1 lookup-el

(**** )  Critical Risk  -  Mandrake Local Checks
MDKSA-2007:054: kdelibs

(***  )  High Risk  -  Gentoo Local Checks
 [GLSA-200703-18] Mozilla Thunderbird: Multiple vulnerabilities

(**   )  Medium Risk  -  Gentoo Local Checks
 [GLSA-200703-20] LSAT: Insecure temporary file creation

(**   )  Medium Risk  -  FreeBSD Local Checks
FreeBSD : ktorrent -- multiple vulnerabilities (927)

(**   )  Medium Risk  -FreeBSD Local Checks
FreeBSD : trac -- cross site scripting vulnerability (926)

(**   )  Medium Risk  -  FreeBSD Local Checks
FreeBSD : mplayer -- DMO File Parsing Buffer Overflow Vulnerability (925)

(*    )  Low Risk  -  Windows
Nessus Windows Scan not performed with admin privileges