CVE-2006-7038

CVE-2006-7038 refers to multiple buffer overflow flaws in MERCUR Messaging 2005 prior to Service Pack 4. The issues enable remote denial of service (crash) when an attacker sends (1) excessively long command lines to port 32000 and (2) certain SMTP-related name service queries not properly handle...

CVE-2006-7025

CVE-2006-7025 describes an SQL injection in the Bookmark4U app, affecting versions 2.0 and 2.1. The vulnerability is triggered in admin/config.php via the sqlcmd parameter, allowing remote attackers to inject arbitrary SQL. CVSS v2 base score 7.5 (HIGH) indicates potential impact on confidentiali...

CVE-2006-7037

CVE-2006-7037 affects Mathcad 12 through 13.1. Local users can bypass security by directly editing the worksheet’s XML, enabling four outcomes: (1) bypass password protection by replacing the password field with a hash of a known password; (2) modify timestamps to conceal modifications; (3) remov...

CVE-2006-7028

CVE-2006-7028 pertains to single-CPU Sun systems running Solaris 7–9 (e.g., Netra) where a remote attacker can cause a denial-of-service (console hang) by flooding the device with small TCP/IP packets. The underlying cause is unknown; it may relate to the console receiving a large number of inter...

CVE-2006-7029

CVE-2006-7029 affects Microsoft Internet Explorer 6 SP2 and earlier. A frameset with only one frame that calls resizeTo with specific arguments can trigger a remote denial of service (crash). The entry notes a possible relation to CVE-2006-3637, but the provided documents do not specify a patch v...

CVE-2006-7034

CVE-2006-7034 corresponds to an SQL injection in the Super Link Exchange Script 1.0, specifically via the cat parameter in directory.php. The underlying flaw is unsanitized user input in the SQL query construction, enabling remote attackers to execute arbitrary SQL commands. The CVSS v2 base scor...

CVE-2006-7026

CVE-2006-7026 describes a PHP remote file inclusion in Aardvark Topsites PHP 4.2.2 and earlier. The issue occurs in sources/join.php when register_globals is enabled, allowing an attacker to execute arbitrary PHP code via a URL supplied to the CONFIG[path] parameter (a similar vector to CVE-2006-...

CVE-2006-6490

The CVE-2006-6490 issue affects Symantec/Norton consumer products that ship the SupportSoft ActiveX controls SmartIssue tgctlsi.dll and ScriptRunner tgctlsr.dll. The vulnerability is described as multiple stack/heap buffer overflows in these ActiveX controls, which could allow remote code executi...

Samba winbindd Debug Log Server Credentials Local Disclosure

According to its version number, the remote Samba server is affected by a flaw that may allow a local attacker to get access to the passwords sent to the winbindd daemon if the debug level has been set to 5 or higher. C Tenable Network Security, Inc. include"compat.inc"; if description...

Sql injection

SQL injection vulnerability in news.php in webSPELL 4.01.02, when registerglobals is enabled, allows remote attackers to execute arbitrary SQL commands via the showonly parameter to index.php, a different vector than CVE-2006-5388...

RHEL 2.1 : koffice (RHSA-2007:0010)

Updated KOffice packages that fix a security issue are now available for Red Hat Enterprise Linux 2.1. This update has been rated as having moderate security impact by the Red Hat Security Response Team. KOffice is a collection of productivity applications for the K Desktop Environment KDE GUI...

Immunity Canvas: SNORTRPC

Name| snortrpc ---|--- CVE| CVE-2006-5276 Exploit Pack| CANVAS Description| Snort RPC Notes| CVE Name: CVE-2006-5276 VENDOR: SourceFire Notes: This version of the exploit needs to connect to a port 139 Note that it does not need to be an actual Netbios target. Something like a netcat listener wil...

CVE-2006-5276

CVE-2006-5276 describes a stack-based buffer overflow in the DCE/RPC preprocessor of Snort (and Sourcefire IDS) that can be triggered by crafted SMB traffic to remote receivers. Affected versions include Snort before 2.6.1.3 and 2.7 before beta 2, as well as the Sourcefire Intrusion Sensor. The v...

Mozilla Suite/Firefox Navigator Object Code Execution

This module exploits a code execution vulnerability in the Mozilla Suite, Mozilla Firefox, and Mozilla Thunderbird applications. This exploit requires the Java plugin to be installed. This module requires Metasploit: https://metasploit.com/download Current source:...

MDKA-2006:050 : ical

The Ical package in Mandriva Linux 2007 fails to run due to old code that does not work with current versions of TCL. Additionally, the application did not appear in the menu and the URL was obsolete. This updated package fixes these issues. %NASLMINLEVEL 999999 @DEPRECATED@ This script has been...

Solaris 10 (sparc) : 125011-01

SunOS 5.10: sendmail patch. Date this patch was last updated by Sun : Jan/29/07 %NASLMINLEVEL 70300 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a recommended security fix. Disabled on 2011/10/24. C Tenable Network Security, Inc. if ! definedfunc"bnrandom"...

Solaris 10 (x86) : 125012-01

SunOS 5.10x86: sendmail patch. Date this patch was last updated by Sun : Jan/29/07 %NASLMINLEVEL 70300 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a recommended security fix. Disabled on 2011/10/24. C Tenable Network Security, Inc. if !...

MDKA-2005:044 : postgresql

A number of bugs are corrected in PostgreSQL version 8.0.4 so an update for Mandrivalinux 2006 is now available PostgreSQL 8.0.3 was provided. Fixes include various memory leakage fixes, improved checking for partially-written WAL pages, a fix for an error that allowed 'VACUUM' to remove ctid...

Solaris 10 (x86) : 123939-05 (deprecated)

GNOME 2.6.0x86: GNU Transport Layer Security Library Patch. Date this patch was last updated by Sun : Oct/17/16 This plugin has been deprecated and either replaced with individual 123939 patch-revision plugins, or deemed non-security related. %NASLMINLEVEL 70300 C Tenable Network Security, Inc...

Mandrake Linux Security Advisory : pxelinux (MDKSA-2006:211)

PXELINUX is a PXE bootloader. It is built with a private copy of libpng, and as such could be susceptible to some of the same vulnerabilities : Buffer overflow in the pngdecompresschunk function in pngrutil.c in libpng before 1.2.12 allows context-dependent attackers to cause a denial of service...