CVE-2006-6605

This CVE (CVE-2006-6605) affects MailEnable POP3 service: a stack-based buffer overflow in handling the PASS command allows remote, unauthenticated attackers to execute arbitrary code. A boundary/overflow occurs when processing an overly long PASS argument, potentially enabling code execution wit...

CVE-2006-6106

The CVE-2006-6106 entry describes several buffer overflows in the Bluetooth driver (net/bluetooth/cmtp/capi.c) of the Linux kernel, specifically in the cmtp_recv_interopmsg function. Affected products/versions include Linux kernel 2.4.22 up to 2.4.33.4 and 2.6.2 up to 2.6.18.5, with 2.6.19.x also...

CVE-2006-3896

CVE-2006-3896 affects NeoScale Systems CryptoStor 700 series appliances prior to firmware 2.6. The vulnerability stems from client-side ActiveX-based smartcard authentication; disabling ActiveX bypasses the second-factor, allowing an attacker with valid username/password to gain admin access. Imp...

KLA10160 Multiple vulnerabilities in First Response

Multiple serious vulnerabilities have been found in First Response. Malicious users can exploit these vulnerabilities to cause denial of service or hijack user packets. Below is a complete list of vulnerabilities 1. Non-exclusive socket mode can be exploited locally; 2. Vectors related to FRAgent...

HP Printers FTP Server Denial Of Service

HP FTP Printer Server Denial Of Service --------------------------------------- Author: Joxean Koret Date: 2006 Location: Basque Country Affected Software ----------------- Vendor: Hewlett Packard Description: HP Printers FTP Server Denial Of Service Description ----------- A problem exists in...

Novell NetWare Client for Windows EnumPrinters() function vulnerable to buffer overflow

Overview A vulnerability exists in the Novell NetWare client that could allow a remote attacker to execute arbitrary code on an affected system. Description NetWare is a network operating system produced and maintained by Novell. Novell provides NetWare clients for Microsoft Windows and Linux...

SYMSA-2006-013: Multiple Vulnerabilities in Mandiant First Response

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Symantec Vulnerability Research http://www.symantec.com/research Security Advisory Advisory ID: SYMSA-2006-013 Advisory Title: Multiple Vulnerabilities in Mandiant First Response Author: Brian Reilly / [email protected] Release Date: 18-12-2006...

PHPFanBase 2.x (protection.php) Remote File Include Vulnerability

Exploit for unknown platform in category web applications ================================================================= PHPFanBase 2.x protection.php Remote File Include Vulnerability ================================================================= --------------------------------------|| Vi...

[ MDKSA-2006:233 ] - Updated dbus packages fix vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Mandriva Linux Security Advisory MDKSA-2006:233 http://www.mandriva.com/security/ Package : dbus Date : December 18, 2006 Affected: 2006.0, 2007.0, Corporate 3.0, Corporate 4.0 Problem Description: A vulnerability was discovered in D-Bus that could be...

CVE-2006-6628

Integer overflow in OpenOffice.org OOo 2.1 allows user-assisted remote attackers to cause a denial of service application crash via a crafted DOC file, as demonstrated by the 12122006-djtest.doc file, a variant of CVE-2006-6561 in a separate codebase...

CVE-2006-6627

Integer overflow in the packed PE file parsing implementation in BitDefender products before 20060829, including Antivirus, Antivirus Plus, Internet Security, Mail Protection for Enterprises, and Online Scanner; and BitDefender products for Microsoft ISA Server and Exchange 5.5 through 2003; allo...

CVE-2006-6634

The CVE-2006-6634 entry describes multiple PHP remote file inclusion vulnerabilities in ExtCalThai (com_extcalendar) 0.9.1 and earlier for Mambo. The issue allows an attacker to execute arbitrary PHP code via crafted URLs in three parameters: CONFIG_EXT[LANGUAGES_DIR] to admin_events.php, mosConf...

CVE-2006-6627

CVE-2006-6627 affects BitDefender products prior to 20060829, including Antivirus, Antivirus Plus, Internet Security, Mail Protection for Enterprises, and Online Scanner, plus BitDefender products for Microsoft ISA Server and Exchange 5.5–2003. The issue is an integer overflow in the packed PE fi...

CVE-2006-6620

CVE-2006-6620 affects Comodo Personal Firewall 2.3.6.81, which relies on the Process Environment Block (PEB) to identify a process. This allows local users to bypass the product’s controls on a process by spoofing the PEB fields (ImagePathName, CommandLine, WindowTitle). The provided documents do...

CVE-2006-6623

Sygate Personal Firewall 5.6.2808 is affected. The flaw arises from relying on the Process Environment Block (PEB) to identify a process, allowing local attackers to bypass product controls by spoofing the PEB fields (ImagePathName, CommandLine, and WindowTitle). The connected documents confirm t...

CVE-2006-6621

The CVE-2006-6621 entry concerns Filseclab Personal Firewall 3.0.0.8686, which relies on the Process Environment Block (PEB) to identify a process. The root cause is spoofing of PEB fields (ImagePathName, CommandLine, WindowTitle), enabling local users to bypass the product’s controls on a proces...

CVE-2006-6617

CVE-2006-6617 affects Microsoft Project Server 2003. The vulnerability lies in projectserver/logon/pdsrequest.asp where a GetInitializationData response can expose the UserName and Password fields, allowing remote authenticated users to obtain the MSProjectUser password for the SQL database. The ...

CVE-2006-6627

Integer overflow in the packed PE file parsing implementation in BitDefender products before 20060829, including Antivirus, Antivirus Plus, Internet Security, Mail Protection for Enterprises, and Online Scanner; and BitDefender products for Microsoft ISA Server and Exchange 5.5 through 2003; allo...

CVE-2006-6633

The CVE-2006-6633 issue affects YapBB up to 1.2 Beta2, where a PHP remote file inclusion vulnerability in include/yapbb_session.php allows an attacker to execute arbitrary PHP code via a URL supplied in the GLOBALS[include_Bit] parameter. Root cause is improper handling of the include path/parame...

CVE-2006-6626

CVE-2006-6626 is a documented XSS vulnerability in Moodle, affecting Moodle 1.5 (and related CVEs). The connected sources specify that the issue allows remote attackers to inject arbitrary scripts via a javascript: URI in the SRC attribute of an IMG element, with the vulnerability described acros...