CVE-2006-6827

The entry concerns Flash8b.ocx in Macromedia Flash 8. The vulnerability allows remote attackers to trigger a denial of service (Internet Explorer 7 crash) by sending a long string to the Flash8b.AllowScriptAccess method. According to the sources, this impacts availability (Partial) with network a...

CVE-2006-6832

This entry documents a Cross-site Scripting (XSS) vulnerability in Joomla! prior to version 1.0.12. The issue allows remote attackers to inject arbitrary web script or HTML, via unspecified vectors (possibly related to poll.php or the module title), leading to script execution in a user’s browser...

CVE-2006-6835

Technical details for CVE-2006-6835 are not publicly available in the provided documents. Monitor for updates.

CVE-2006-6833

CVE-2006-6833 affects Joomla! components public before 1.0.12 (com_categories) where input is not properly validated. Public sources (NVD/NJV/VuXML/OpenVAS) describe a remote attacker able to exploit this to execute arbitrary script or perform actions via crafted input, i.e., cross-site scripting...

Novell NetMail IMAP SUBSCRIBE Buffer Overflow

This module exploits a stack buffer overflow in Novell's NetMail 3.52 IMAP SUBSCRIBE verb. By sending an overly long string, an attacker can overwrite the buffer and control program execution. This module requires Metasploit: https://metasploit.com/download Current source:...

Novell NetMail IMAP APPEND Buffer Overflow

This module exploits a stack buffer overflow in Novell's Netmail 3.52 IMAP APPEND verb. By sending an overly long string, an attacker can overwrite the buffer and control program execution. This module requires Metasploit: https://metasploit.com/download Current source:...

CVE-2006-6144

The "mechglue" abstraction interface of the GSS-API library for Kerberos 5 1.5 through 1.5.1, as used in Kerberos administration daemon kadmind and other products that use this library, allows remote attackers to cause a denial of service crash via unspecified vectors that cause mechglue to free...

CVE-2006-6870

The consumelabels function in avahi-core/dns.c in Avahi before 0.6.16 allows remote attackers to cause a denial of service infinite loop via a crafted compressed DNS response with a label that points to itself...

CVE-2006-5974

fetchmail 6.3.5 and 6.3.6 before 6.3.6-rc4, when refusing a message delivered via the mda option, allows remote attackers to cause a denial of service crash via unknown vectors that trigger a NULL pointer dereference when calling the 1 ferror or 2 fflush functions...

CVE-2006-6829

Efkan Forum 1.0 and earlier store sensitive information under the web root with insufficient access control, which allows remote attackers to download a database via a direct request for forum.mdb. NOTE: The provenance of this information is unknown; the details are obtained solely from third par...

CVE-2006-6851

Multiple cross-site scripting XSS vulnerabilities in contactus.php in ac4p Mobilelib gold 2 allow remote attackers to inject arbitrary web script or HTML via the 1 email or 2 errr parameter...

CVE-2006-6854

The qcamvcvideoinit function in qcamvc.c in De Marchi Daniele QuickCam VC Linux device driver aka quickcam-vc 1.0.9 and earlier does not properly check a boundary, triggering memory corruption, which might allow attackers to execute arbitrary code via a crafted QuickCam object...

CVE-2006-6881

Buffer overflow in the GetWep function in cofvnet.c for ATMEL Linux PCI PCMCIA USB Drivers drivers 3.4.1.1 corruption allows attackers to execute arbitrary code via a long name argument...

CVE-2006-6893

Tor allows remote attackers to discover the IP address of a hidden service by accessing this service at a high rate, thereby changing the server's CPU temperature and consequently changing the pattern of time values visible through 1 ICMP timestamps, 2 TCP sequence numbers, and 3 TCP timestamps, ...

CVE-2006-6915

ftpd in IBM AIX 5.2.0 and 5.3.0 allows remote authenticated users to cause a denial of service port exhaustion via unspecified vectors. NOTE: some details were obtained from third party sources...

CVE-2006-6102

Integer overflow in the ProcDbeGetVisualInfo function in the DBE extension for X.Org 6.8.2, 6.9.0, 7.0, and 7.1, and XFree86 X server, allows local users to execute arbitrary code via a crafted X protocol request that triggers memory corruption during processing of unspecified data structures...

CVE-2006-6103

Integer overflow in the ProcDbeSwapBuffers function in the DBE extension for X.Org 6.8.2, 6.9.0, 7.0, and 7.1, and XFree86 X server, allows local users to execute arbitrary code via a crafted X protocol request that triggers memory corruption during processing of unspecified data structures...

CVE-2006-6827

Flash8b.ocx in Macromedia Flash 8 allows remote attackers to cause a denial of service Internet Explorer 7 crash via a long string in the Flash8b.AllowScriptAccess method...

CVE-2006-6837

Multiple stack-based buffer overflows in the 1 LoadTree, 2 ReadHeader, and 3 LoadXBOXTree functions in the ISO isowincmd plugin 1.7.3.3 and earlier for Total Commander allow user-assisted remote attackers to execute arbitrary code via a long pathname in an ISO image...

CVE-2006-6888

P-News 1.16 and 1.17 store sensitive information under the web root with insufficient access control, which allows remote attackers to obtain the administrative account name and password hash via a direct request for db/user.dat...