openSUSE 10 Security Update : foomatic-filters (foomatic-filters-1436)

A Bug in cupsomatic/foomatic-filters that allowed remote printer users to execute arbitrary commands as the uid of the printer daemon has been fixed CAN-2004-0801. While the same problem was fixed in earlier products, the fix got lost during package upgrade of foomatic-filters. %NASLMINLEVEL 7030...

Microsoft Word工作区内存破坏远程代码执行漏洞（MS07-060）

BUGTRAQ ID: 25906 CVECAN ID: CVE-2007-3899 Word是Office办公套件中的文字处理软件。 Word处理特制Word文件的方式中存在一个远程执行代码漏洞，远程攻击者可能利用此漏洞通过诱使用户处理恶意文件控制用户系统。 如果用户打开带有畸形字符串的特制Word文件，该漏洞就可能允许远程执行指令。那些帐户被配置为拥有较少系统用户权限的用户比具有管理用户权限的用户受到的影响要小。 Microsoft Office 2004 for Mac Microsoft Word 2002 SP3 Microsoft Word 2000 SP3 临时解决方法：...

Memory corruption

Unspecified vulnerability in Microsoft Word 2000 SP3, Word 2002 SP3, and Office 2004 for Mac allows user-assisted remote attackers to execute arbitrary code via a malformed string in a Word file, aka "Word Memory Corruption Vulnerability."...

CVE-2007-3899

Unspecified vulnerability in Microsoft Word 2000 SP3, Word 2002 SP3, and Office 2004 for Mac allows user-assisted remote attackers to execute arbitrary code via a malformed string in a Word file, aka "Word Memory Corruption Vulnerability."...

CVE-2007-3899

CVE-2007-3899 concerns memory corruption in Word affecting Word 2000 SP3, Word 2002 SP3, and Office 2004 for Mac. The root cause is a malformed string in a Word file that can be processed by Word, enabling user-assisted remote code execution on vulnerable hosts. The Mac variant is reported in the...

CVE-2004-2727

MailEnable Professional (MEHTTPS/HTTPMail) versions 1.5–1.7 are affected by a heap/overflow issue triggered by an oversized HTTP GET request to the HTTPMail service, causing a denial of service (service crash). OpenVAS notes potential for arbitrary code execution, and some sources indicate a vend...

CVE-2004-2726

Technical details for CVE-2004-2726 are not publicly provided in the connected documents. Monitor for updates from vendors and advisories.

CVE-2004-2743

CVE-2004-2743 concerns upload.cgi in Mega Upload Progress Bar before 1.45. It allows remote attackers to copy or overwrite arbitrary files via parameters related to uploaded file names. The NVD entry lists a CVSSv2 base score of 6.4 (Medium), with Network attack vector, Low complexity, and no aut...

CVE-2004-2737

Affected software: NetSupport DNA HelpDesk 1.01. ** vulnerability:** SQL injection in problist.asp via the where parameter. Impact as described: remote attackers can execute arbitrary SQL commands through the vulnerable parameter. The available documents do not detail exploitation vectors beyond ...

CVE-2004-2728

CVE-2004-2728 describes a buffer overflow in the FTP server component of Hummingbird Connectivity 7.1 and 9.0 triggered by a long argument to the XCWD command. The vulnerability allows remote, authenticated users to cause an application crash and a denial of service. No specific remediation or pa...

CVE-2004-2733

The CVE-2004-2733 vulnerability concerns Web Wiz Forums 7.7a, where flawed privilege logic allows remote attackers to perform two actions: (1) block arbitrary IP addresses via pop_up_ip_blocking.asp and (2) modify topics via pop_up_topic_admin.asp. The NVD entry notes a network attack vector, no ...

CVE-2004-2740

PHProjekt ≤ 4.2.3 contains a PHP remote file inclusion in lib/authform.inc.php via the path_pre parameter. The issue arises because user input is used in an include_once() without proper sanitization, enabling a remote attacker to include arbitrary PHP code from a URL. OpenVAS/Nessus entries corr...

CVE-2004-2735

CVE-2004-2735 describes a Cross-site scripting (XSS) vulnerability affecting P4DB 2.01 and earlier. The issue allows remote attackers to inject arbitrary web script or HTML by supplying crafted input through a long list of parameters across multiple CGI scripts (e.g., SetPreferences.cgi, branchVi...

CVE-2004-2739

PHProjekt v4.2.1 and earlier is affected by a vulnerability in the setup.php routine that allows remote attackers to modify system configuration. The root cause is described as via unknown attack vectors, and the issue is associated with the setup process rather than a specific module. Affected c...

CVE-2004-2732

The vulnerability CVE-2004-2732 affects nbmember.cgi in Netbilling 2.0, where a remote attacker can disclose sensitive information via the cmd=test option to determine the access key. Documents confirm the flaw is an information-disclosure issue with network access and no authentication requireme...

CVE-2004-2729

Technical details about CVE-2004-2729 are not publicly available in the provided documents. Monitor for updates from official advisories for affected versions and impact.

CVE-2004-2731

CVE-2004-2731 concerns the Linux kernel Sbus PROM driver (drivers/sbus/char/openprom.c) allowing local code execution via integer overflows when a small buffer is passed to copyin_string or a negative size to copyin. It affects 2.4.x (up to 2.4.27) and 2.6.x (up to 2.6.7) and possibly later versi...

CVE-2004-2741

The CVE covers a Cross-site scripting (XSS) vulnerability in Horde Application Framework 2.2.6, specifically in the Help Window (help.php) of the Horde Help subsystem. The issue arises from improper sanitization of three parameters (module, topic, and module) that can be exploited remotely to inj...

CVE-2004-2744

PHPlist by Tincan Limited is affected up to version 2.8.11 (before 2.8.12) per CVE-2004-2744. The initial entry specifies an unspecified vulnerability with unknown impact and attack vectors tied to a "security update release." The connected records do not provide root cause, concrete impact, or e...

CVE-2004-2736

Polar HelpDesk 3.0 is affected by an authentication bypass vulnerability where an attacker can bypass login by manipulating the UserId and UserType cookie. The issue allows remote access without valid credentials and, per the Nessus entry, may enable administrative rights on the remote system. Th...