18185 matches found
CVE-2007-5495
The CVE-2007-5495 issue affects setroubleshoot’s sealert (notably version 2.0.5) where a local unprivileged user can cause arbitrary file writes by exploiting a symlink to sealert.log. Multiple connected advisories/documentation confirm the flaw: a local symlink attack to the temporary sealert.lo...
CVE-2007-5961
CVE-2007-5961 is a cross-site scripting (XSS) vulnerability in the Red Hat Network channel search feature used by Red Hat Network Satellite Server (and RHN) prior to version 5.0.2. The underlying issue allowed remote attackers to inject arbitrary web script or HTML via unknown vectors. The connec...
Fedora 7 : vsftpd-2.0.5-17.fc7 (2008-4373)
Wed May 21 2008 Martin Nagy - 2.0.5-17 - fix a small memory leak 397011 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing...
VideoLAN VLC Media Player 0.8.6d SSA Parsing Double Sh311 - Universal
VideoLAN VLC Media Player 0.8.6d SSA Parsing Double Sh311 - Universal !/usr/bin/python VLC 0.8.6d Double Sh311 Universal Exploit CVE-2007-6681 Vulnerability Discovered by Michal Luczaj Coded by Muris Kurgas aka j0rgan http://www.jorgan.users.cg.yu/ and Matteo Memelli aka ryujin...
vlc-doubleshell.txt
!/usr/bin/python VLC 0.8.6d Double Sh311 Universal Exploit CVE-2007-6681 Vulnerability Discovered by Michal Luczaj Coded by Muris Kurgas aka j0rgan http://www.jorgan.users.cg.yu/ and Matteo Memelli aka ryujin http://www.be4mind.com - http://www.gray-world.net WE CODED IT JUST FOR FUN ; Cheers to...
VideoLAN VLC Media Player 0.8.6d SSA Parsing Double Sh311 - Universal
!/usr/bin/python VLC 0.8.6d Double Sh311 Universal Exploit CVE-2007-6681 Vulnerability Discovered by Michal Luczaj Coded by Muris Kurgas aka j0rgan http://www.jorgan.users.cg.yu/ and Matteo Memelli aka ryujin http://www.be4mind.com - http://www.gray-world.net WE CODED IT JUST FOR FUN ; Cheers to...
Fedora 9 : vsftpd-2.0.6-4.fc9 (2008-4362)
Wed May 21 2008 Martin Nagy - 2.0.6-4 - fix a small memory leak 397011 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing...
CVE-2007-5962
CVE-2007-5962 describes a memory-leak vulnerability in vsftpd triggered by a large number of CWD commands when the deny_file option is set. The issue affects vsftpd 2.0.5 on Red Hat Enterprise Linux 5 and Fedora 6–8, as well as Foresight Linux and rPath appliances. Remote attackers could cause de...
CVE-2008-2007
CVE-2008-2007 is rejected/not used; this ID does not represent an active vulnerability entry.
CORE-2008-0415: Borland Interbase 2007 Integer Overflow
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Core Security Technologies - CoreLabs Advisory http://www.coresecurity.com/corelabs/ Borland Interbase 2007 Integer Overflow Advisory Information Title: Borland Interbase 2007 Integer Overflow Advisory ID: CORE-2008-0415 Advisory URL:...
RHEL 5 : setroubleshoot (RHSA-2008:0061)
Updated setroubleshoot packages that fix two security issues and several bugs are now available for Red Hat Enterprise Linux 5. This update has been rated as having moderate security impact by the Red Hat Security Response Team. The setroubleshoot packages provide tools to help diagnose SELinux...
CORE-2008-0126: Multiple vulnerabilities in iCal
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Core Security Technologies - CoreLabs Advisory http://www.coresecurity.com/corelabs/ Multiple vulnerabilities in iCal Advisory Information Title: Multiple vulnerabilities in iCal Advisory ID: CORE-2008-0126 Advisory URL:...
Fedora 7 : Django-0.96.2-1.fc7 (2008-4191)
Mon May 19 2008 Michel Salim - 0.96.2-1 - XSS security update: CVE-2008-2302 bz 442757-60 - Sat Apr 5 2008 Michel Salim - 0.96.1-2 - Package .egg-info file on Fedora = 9 - Thu Nov 1 2007 Michel Salim 0.96.1-1 - i18n security update: CVE-2007-5712, bz357051 Note that Tenable Network Security has...
CVE-2007-5962
creationtimestamp| type| source ---|---|--- 2008-05-21 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/31818 2008-05-21 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/31819 2008-06-14 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/5814...
[SECURITY] [DSA 1583-1] New gnome-peercast packages fix several vulnerabilities
------------------------------------------------------------------------ Debian Security Advisory DSA-1583-1 [email protected] http://www.debian.org/security/ Thijs Kinkhorst May 20, 2008 http://www.debian.org/security/faq -...
Apache Tomcat fails to properly handle cookie value
Overview Apache Tomcat from the Apache Software Foundation contains a vulnerability that could allow a remote attacker to coerce a crafted cookie to a user's web browser. Apache Tomcat from the Apache Software Foundation is a web container that implements both Java Servlets and JavaServer Pages...
Moderate: Red Hat Security Advisory: bind security, bug fix, and enhancement update
Updated bind packages that fix two security issues, several bugs, and add enhancements are now available for Red Hat Enterprise Linux 5. This update has been rated as having moderate security impact by the Red Hat Security Response Team. The Berkeley Internet Name Domain BIND is an implementation...
Low: Red Hat Security Advisory: nss_ldap security and bug fix update
An updated nssldap package that fixes a security issue and several bugs is now available. This update has been rated as having low security impact by the Red Hat Security Response Team. The nssldap package contains the nssldap and pamldap modules. The nssldap module is a plug-in which allows...
Moderate: Red Hat Security Advisory: Red Hat Network Satellite Server security update
Red Hat Network Satellite Server version 5.0.2 is now available. This update includes fixes for a number of security issues in Red Hat Network Satellite Server components. This update has been rated as having moderate security impact by the Red Hat Security Response Team. During an internal...