Ubuntu 6.06 LTS / 6.10 / 7.04 / 7.10 : krb5 vulnerabilities (USN-587-1)

It was discovered that krb5 did not correctly handle certain krb4 requests. An unauthenticated remote attacker could exploit this flaw by sending a specially crafted traffic, which could expose sensitive information, cause a crash, or execute arbitrary code. CVE-2008-0062, CVE-2008-0063 A flaw wa...

[SECURITY] [DSA 1524-1] New krb5 packages fix multiple vulnerabilities

------------------------------------------------------------------------ Debian Security Advisory DSA-1524-1 [email protected] http://www.debian.org/security/ Noah Meyerhans March 18, 2008 http://www.debian.org/security/faq -...

[SECURITY] [DSA 1524-1] New krb5 packages fix multiple vulnerabilities

------------------------------------------------------------------------ Debian Security Advisory DSA-1524-1 [email protected] http://www.debian.org/security/ Noah Meyerhans March 18, 2008 http://www.debian.org/security/faq -...

[Full-disclosure] Secunia Research: Internet Explorer HTML Objects Memory Corruption Vulnerability

====================================================================== Secunia Research 09/05/2007 - Internet Explorer HTML Objects Memory Corruption Vulnerability - ====================================================================== Table of Contents Affected...

Memory corruption

Unspecified vulnerability in Microsoft Internet Explorer 7 on Windows XP SP2, Windows Server 2003 SP1 or SP2, or Windows Vista allows remote attackers to execute arbitrary code via crafted HTML objects, which results in memory corruption, aka the first of two "HTML Objects Memory Corruption...

CVE-2007-0947

Use-after-free vulnerability in Microsoft Internet Explorer 7 on Windows XP SP2, Windows Server 2003 SP1 or SP2, or Windows Vista allows remote attackers to execute arbitrary code via crafted HTML objects, resulting in accessing deallocated memory of CMarkup objects, aka the second of two "HTML...

CVE-2007-0946

Unspecified vulnerability in Microsoft Internet Explorer 7 on Windows XP SP2, Windows Server 2003 SP1 or SP2, or Windows Vista allows remote attackers to execute arbitrary code via crafted HTML objects, which results in memory corruption, aka the first of two "HTML Objects Memory Corruption...

CVE-2007-0947

Microsoft Internet Explorer 7 on Windows XP SP2, Windows Server 2003 SP1/SP2, and Windows Vista contains a use-after-free vulnerability in the handling of HTML objects (CMarkup), allowing remote code execution via a specially crafted HTML page. This is identified as CVE-2007-0947 and is noted as ...

MS07-027: Cumulative Security Update for Internet Explorer (931768)

The remote host is missing the IE cumulative security update 931768. The remote version of IE is vulnerable to several flaws that could allow an attacker to execute arbitrary code on the remote host. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc';...

CVE-2006-0947

CVE-2006-0947 affects Thomson SpeedTouch modem firmware 5.3.2.6.0. Affected component is the NewUser function where the 31 parameter can create accounts that the administrator cannot delete, due to filtering/cleansing in the admin interface. The issue allows remote attackers to create non-deletab...

CVE-2005-0947

Vulnerability summary (CVE-2005-0947) : The phpCOIN product (versions 1.2.1b and earlier) contains a directory traversal flaw in the auxiliary script auxpage.php. An attacker can supply a path in the page parameter that includes “..” to read or potentially execute arbitrary files on the server. T...

CVE-2004-0947

Buffer overflow in unarj before 2.63a-r2 allows remote attackers to execute arbitrary code via an arj archive that contains long filenames...

CVE-2004-0947

CVE-2004-0947 is confirmed across connected docs as a vulnerability in the unarj utility. The issue is a buffer overflow when handling long filenames in arj archives, enabling remote code execution. Related advisories additionally describe a directory-traversal weakness in the -x extract option t...

CVE-2004-0947

Buffer overflow in unarj before 2.63a-r2 allows remote attackers to execute arbitrary code via an arj archive that contains long filenames...

CVE-2003-0947

Buffer overflow in iwconfig, when installed setuid, allows local users to execute arbitrary code via a long OUT environment variable...

CVE-2003-0947

The CVE-2003-0947 entry concerns the wireless config tool iwconfig . A vulnerability exists where, if iwconfig is installed with setuid , a buffer overflow can occur via a long OUT environment variable, allowing local arbitrary code execution . The NVD metrics describe a HIGH base score with a LO...

CVE-2003-0947

Buffer overflow in iwconfig, when installed setuid, allows local users to execute arbitrary code via a long OUT environment variable...

CVE-2003-0947

Buffer overflow in iwconfig, when installed setuid, allows local users to execute arbitrary code via a long OUT environment variable...

CVE-2002-0947

CVE-2002-0947 describes a buffer overflow in the rwcgi60 CGI program used by Oracle Reports Server 6.0.8.18.0 and earlier (Oracle9iAS and other products). The vulnerability allows a remote attacker to execute arbitrary code via a long database name parameter. The Oracle RWCGI60 component handles ...

CVE-2002-0947

Buffer overflow in rwcgi60 CGI program for Oracle Reports Server 6.0.8.18.0 and earlier, as used in Oracle9iAS and other products, allows remote attackers to execute arbitrary code via a long database name parameter...