Five new vulnerabilities have been found in Berkeley Sendmail and 'procmail'. The images can be viewed from anywhere on the network with a web browser. Exploit program included. It will listen to simple commands from anyone on a tcp port. If VDO Live Player is installed on the system and the browser is configured default, .vdo file is downloaded and executed without confirmation.
Many ftp daemons are vulnerable to a DoS when muiltiple data connections are opened.
Perl exploit included. Mobileunit Security Advisory 001 - Privacy hole in Go Express Search. Disney's Go Express Search operates an http server at port 1234 without authentication. Remote users can submit search queries, and view queries and personal links left by other users. It's possible to access the configuration interface, which can reveal the e-mail address of the user who registered it.