DSA-2170-1 mailman - several vulnerabilities

Bulletin has no description...

CVE-2010-0707

CVE-2010-0707: CSRF in Employee Timeclock Software 0.99 (add_user.php) allows remote attackers to hijack an administrator’s session and create new administrative users. Root cause is CSRF vulnerability on admin-account creation requests; impact is unauthorized admin account creation as described....

CVE-2010-0707

creationtimestamp| type| source ---|---|--- 2010-02-20 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/11516...

CVE-2009-0707

CVE-2009-0707 is a SQL injection vulnerability in PowerClan 1.14a, specifically in admin/index.php where the loginemail parameter (login field) can be used to execute arbitrary SQL commands. The available connected documents confirm the affected component (admin/index.php), the software/version (...

CVE-2009-0707

creationtimestamp| type| source ---|---|--- 2009-01-01 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/7642...

HPSBST02321 SSRT080029 rev.1 - HP StorageWorks Library and Tape Tools (LTT) Running on HP-UX, Local Unauthorized Access

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 SUPPORT COMMUNICATION - SECURITY BULLETIN Document ID: c01399648 Version: 1 HPSBST02321 SSRT080029 rev.1 - HP StorageWorks Library and Tape Tools LTT Running on HP-UX, Local Unauthorized Access NOTICE: The information in this Security Bulletin should ...

CVE-2008-0707

CVE-2008-0707 affects HP StorageWorks Library and Tape Tools (LTT) prior to v4.5 SR1 on HP-UX B.11.11 and B.11.23, enabling local privilege escalation via unspecified vectors. The vulnerability is documented in HP security bulletin HPSBST02321 (SSRT080029 rev.1) and in the NVD entry; HP states th...

CVE-2007-0707

GOM Player is affected by a stack-based buffer overflow in handling .ASX files, where a long URI in the ref href tag can be used to execute arbitrary code. Affected versions include 2.0.12.3375 (CVE-2007-0707) and the regression to 2.1.33.5071 (CVE-2011-5162). The issue is user-assisted and allow...

CVE-2006-0707

PyBlosxom before 1.3.2, when running on certain webservers, allows remote attackers to read arbitrary files via an HTTP request with multiple leading / slash characters, which is accessed using the PATHINFO variable...

CVE-2006-0707

CVE-2006-0707 affects PyBlosxom before 1.3.2. On certain web servers, a crafted HTTP request with multiple leading slashes (PATH_INFO) allows remote attackers to read arbitrary files. The vulnerability stems from how PATH_INFO is interpreted by the application, enabling a path traversal-like acce...

CVE-2005-0707

Ipswitch Collaboration Suite's IMAP server (IMAP4d32.exe) is affected by a buffer overflow in the IMAP EXAMINE handler, allowing remote authenticated attackers to execute arbitrary code. The issue exists in ICS before 8.15 Hotfix 1; iDEFENSE describes a 259-byte malformed mailbox name causing sta...

CVE-2004-0707

SQL injection vulnerability in editusers.cgi in Bugzilla 2.16.x before 2.16.6, and 2.18 before 2.18rc1, allows remote attackers with privileges to grant membership to any group to execute arbitrary SQL...

CVE-2004-0707

CVE-2004-0707 describes an SQL injection in Bugzilla’s editusers.cgi. The issue affects Bugzilla 2.16.x before 2.16.6 and 2.18 before 2.18rc1, allowing remote attackers with privileges to grant membership to any group to execute arbitrary SQL. The connected information confirms the vulnerable com...

CVE-2002-0707

The Web Reports Server for SurfControl SuperScout WebFilter allows remote attackers to cause a denial of service CPU consumption via large GET requests, possibly due to a buffer overflow...

CVE-2002-0707

The CVE-2002-0707 issue affects SurfControl SuperScout WebFilter’s Web Reports Server. The vulnerability allows remote attackers to trigger a denial of service by sending large GET requests, potentially due to a buffer overflow. Documented impact is CPU consumption leading to service unavailabili...

CVE-2001-0707

Denicomp RSHD 2.18 and earlier allows a remote attacker to cause a denial of service crash via a long string to port 514...

CVE-2001-0707

CVE-2001-0707 applies to Denicomp RSHD 2.18 and earlier. A remote attacker can trigger a denial of service (crash) by sending a long string to port 514. The provided sources confirm the affected product and the impact but do not document a precise root cause, vulnerable component, or available fi...

CVE-2000-0707

PCCS MySQLDatabase Admin Tool Manager 1.2.4 and earlier installs the file dbconnect.inc within the web root, which allows remote attackers to obtain sensitive information such as the administrative password...

CVE-2000-0707

CVE-2000-0707 affects PCCS MySQLDatabase Admin Tool Manager, versions 1.2.4 and earlier. The vulnerability stems from installing the file dbconnect.inc inside the web root, which permits remote attackers to read it and obtain sensitive credentials such as the database administrative password. Ope...

CVE-1999-0707

The CVE concerns HP Visualize Conference: the default FTP configuration permits conference participants to send a file to other participants without authorization. Documented impact corresponds to a CVSS v2 base score of 7.5 (HIGH) with network attack vector and no authentication required. No exp...