Report an Incident

If you are a CNI organisation and you have encountered or suspect a cyber threat, please complete and return an Incident Reporting Form.

All incident reports provided to the CCIP are treated in the strictest of confidence. Please see our Confidentiality Charter for more details. Read More


New at CCIP

Current e-Bulletin The CCIP e-Bulletin provides a snapshot of security related news
Read More


New Zealand Government Website

August 2006

The following table includes the Vulnerability Alerts for the month.
Note: These links reference external sites. CCIP can not accept responsibility for outdated links or such links contents.
Reference Description Date
Mandriva
Mandriva update for ImageMagick
 31/08/06
Debian
Debian update for libmusicbrainz-2.0
 31/08/06
Avaya
Avaya CMS / IR Sun Solaris Sendmail Denial of Service
 31/08/06
Debian
Debian update for mozilla-firefox
 31/08/06
rPath
rPath update for ImageMagick
 31/08/06
PmWiki
PmWiki Table Markups Script Insertion Vulnerability
 30/08/06
Joomla
Joomla! Multiple Vulnerabilities
 30/08/06
Debian
Debian update for mozilla
 30/08/06
Secunia
CJ Tag Board PHP Code Injection Vulnerabilities
 30/08/06
Redhat
Red Hat update for seamonkey
 29/08/06
OpenBSD
Sendmail Long Header Denial of Service Vulnerability
 29/08/06
Redhat
Red Hat update for kdegraphics
 29/08/06
Debian
Debian update for mozilla-thunderbird
 29/08/06
Mandriva
Mandriva update for kernel
 29/08/06
Joomla
Joomla Community Builder Component File Inclusion
 29/08/06
Wireshark
Wireshark Multiple Vulnerabilities
 29/08/06
Mandriva
Mandriva update for xorg-x11
 28/08/06
SGI
SGI Advanced Linux Environment Multiple Updates
 28/08/06
Sourceforge
Streamripper HTTP Header Buffer Overflow Vulnerabilities
 28/08/06
Sun
Sun Java System Content Delivery Server Arbitrary File Disclosure
 28/08/06
rPath
rPath update for xorg-x11
 28/08/06
Trustix
Trustix updates for multiple packages
 28/08/06
Zend
Zend Platform Multiple Vulnerabilities
 28/08/06
Sun
Sun Solaris update for mozilla
 28/08/06
Cisco
Firewall Products Unintentional Password Modification
 25/08/06
Debian
Update for Sendmail
 25/08/06
Secunia
MDaemon POP3 Server Buffer Overflow Vulnerabilities
 24/08/06
Mandriva
Update for mozilla-thunderbird
 24/08/06
Secunia
Empire CMS "check_path" File Inclusion Vulnerability
 24/08/06
Microsoft
Internet Explorer URL Parsing Buffer Overflow Vulnerability
 24/08/06
Apple
Xsan Filesystem Path Name Buffer Overflow Vulnerability
 23/08/06
Debian
Update for clamav
 23/08/06
Red Hat
Red Hat update for wireshark
 17/08/06
Sony
Sony VAIO Media Integrated Server Two Vulnerabilities
 17/08/06
Mandriva
Mandriva update for gnupg
 17/08/06
Avaya
Avaya Products Multiple Vulnerabilities
 17/08/06
Zen Cart
Zen Cart SQL Injection and File Inclusion Vulnerabilities
 17/08/06
PHProjekt
PHProjekt "path_pre"/"lib_path" File Inclusion Vulnerabilities
 17/08/06
Microsoft
MS06-042: Cumulative security update for Internet Explorer
 16/08/06
IBM
IBM WebSphere Application Server Multiple Vulnerabilities
 16/08/06
SUSE
SUSE Update for Multiple Packages
 16/08/06
Mambo
Mambo MMP Component File Inclusion Vulnerability
 16/08/06
Gentoo
Gentoo update for rails
 16/08/06
WEBInsta
WEBInsta CMS "templates_dir" File Inclusion Vulnerability
 16/08/06
Suse
Updates for Multiple Packages
 15/08/06
Kolab
Server ClamAV Buffer Overflow Vulnerability
 15/08/06
Trustix
Update for clamav
 15/08/06
SAP
Internet Graphics Service Two Vulnerabilities
 15/08/06
Symantec
Backup Exec Remote Agent RPC Interface Buffer Overflows
 15/08/06
Joomla
Webring Component "component_dir" File Inclusion
 15/08/06
IBM
IBM WebSphere Application Server Multiple Vulnerabilities
 11/08/06
AlsaPlayer
AlsaPlayer Multiple Buffer Overflow Vulnerabilities
 11/08/06
Secunia
ncompress "decompress()" Buffer Overflow Vulnerability
 11/08/06
Ubuntu
Ubuntu update for libwmf
 10/08/06
Drupal
Drupal Bibliography Module Cross-Site Scripting and SQL Injection
 10/08/06
Gentoo
Gentoo update for dumb
 10/08/06
Microsoft
Microsoft Security Bulletin Summary for August, 2006
 09/08/06
Joomla
Joomla JD-Wiki Component File Inclusion Vulnerability
 09/08/06
Otago University
NZ Computer Crime & Security Survey
 08/08/06
DConnect
DConnect Daemon Multiple Vulnerabilities
 08/08/06
Secunia
The Address Book Reloaded Login SQL Injection Vulnerabilities
 08/08/06
php
phpAutoMembersArea "installed_config_file" File Inclusion
 08/08/06
Clam AntiVirus
Clam AntiVirus pefromupx() Buffer Overflow Vulnerability
 08/08/06
Gentoo
Gentoo update for pike
 08/08/06
Gentoo
Gentoo update for gnupg
 08/08/06
Gentoo
Gentoo update for tiff
 08/08/06
Gentoo
Gentoo updates for webmin/usermin
 08/08/06
Trustix
Trustix updates for multiple packages
 07/08/06
CA eTrust
CA eTrust Antivirus WebScan ActiveX Control Multiple Vulnerabilities
 07/08/06
vBulletin
vBulletin Cross-Site Scripting and Script Insertion
 07/08/06
Gentoo
Gentoo update for seamonkey
 07/08/06
ME
ME Download System File Inclusion Vulnerabilities
 07/08/06
Gentoo
Gentoo update for libvncserver
 07/08/06
Gentoo
Gentoo update for mozilla-thunderbird
 07/08/06
Gentoo
Gentoo update for mozilla-firefox
 07/08/06
Intel
Multiple Wireless Vulnerabilities
 03/08/06
Secunia
FTP Server "PASS" Buffer Overflow
 02/08/06
Safari
"KHTMLParser::popOneBlock()" Memory Corruption
 02/08/06
Joomla
Colophon Component File Inclusion Vulnerability
 02/08/06
Joomla
Security Images Component File Inclusion
 02/08/06
Secunia
Mambatstaff Component File Inclusion Vulnerability
 02/08/06
Mambo
UHP Component File Inclusion Vulnerabilities
 02/08/06
Mambo
MGM Component File Inclusion Vulnerability
 02/08/06
McAfee
Unspecified Code Execution Vulnerability
 02/08/06
Apple
Security Update 2006-004
 02/08/06
SGI
Advanced Linux Environment Multiple Updates
 02/08/06