CVE-2007-5758

CVE-2007-5758 describes a stack-based buffer overflow in the IBM DB2 Universal Database component db2dasrrm (DAS) that can be triggered by a long DASPROF environment variable. Affected are DB2 UDB 9.5 before Fix Pack 1, 9.1 before Fix Pack 4a, and 8 before FixPak 16. Local users could execute arb...

CVE-2007-5664

db2dasrrm in the DB2 Administration Server DAS in IBM DB2 Universal Database 9.5 before Fix Pack 1, 9.1 before Fix Pack 4a, and 8 before FixPak 16 allows local users to overwrite arbitrary files via a symlink attack on files used for initialization...

Moderate Updated Service Console packages pcre, net-snmp, and OpenPegasus

a. Updated pcre Service Console package addresses several security issuesThe pcre package contains the Perl-Compatible Regular Expression library. pcre is used by various Service Console utilities. Several security issues were discovered in the way PCRE handles regular expressions. If an...

Secunia Research: Autonomy Keyview EML Reader Buffer Overflows

====================================================================== Secunia Research 08/04/2008 - Autonomy Keyview EML Reader Buffer Overflows - ====================================================================== Table of Contents Affected...

Secunia Research: activePDF DocConverter Applix Graphics Parsing Vulnerabilities

====================================================================== Secunia Research 08/04/2008 - activePDF DocConverter Applix Graphics Parsing Vulnerabilities - ====================================================================== Table of Contents Affected...

Secunia Research: Lotus Notes EML Reader Buffer Overflows

====================================================================== Secunia Research 08/04/2008 - Lotus Notes EML Reader Buffer Overflows - ====================================================================== Table of Contents Affected...

Secunia Research: Symantec Mail Security Folio Flat File Parsing Buffer Overflows

====================================================================== Secunia Research 08/04/2008 - Symantec Mail Security Folio Flat File Parsing Buffer Overflows - ====================================================================== Table of Contents Affected...

Secunia Research: Adobe Flash Player "Declare Function (V7)" Heap Overflow

====================================================================== Secunia Research 08/04/2008 - Adobe Flash Player "Declare Function V7" Heap Overflow - ====================================================================== Table of Contents Affected...

Borland InterBase 2007 "ibserver.exe" Buffer Overflow Vulnerability POC

Borland InterBase 2007 "ibserver.exe" Buffer Overflow Vulnerability POC Affected Software: Borland InterBase 2007 Service Pack 2. ibserver.exe version 8.0.0.123 Severity: High Summary: There exists a vulnerability in Borland InterBase 2007. The attacker who successfully exploited this vulnerabili...

Secunia Research: Autonomy Keyview Folio Flat File Parsing Buffer Overflows

====================================================================== Secunia Research 08/04/2008 - Autonomy Keyview Folio Flat File Parsing Buffer Overflows - ====================================================================== Table of Contents Affected...

VMSA-2008-0007:MEDIUM Updated Service Console packages pcre, net-snmp, and OpenPegasus

VMSA-2008-0007.2 Moderate Updated Service Console packages pcre, net-snmp, and OpenPegasus VMware Security Advisory VMware Security AdvisoryAdvisory ID: VMSA-2008-0007.2 VMware Security AdvisorySynopsis: Moderate Updated Service Console packages pcre, net-snmp, and OpenPegasus VMware Security...

BELL-CVE-2007-6712 CVE-2007-6712 does not affect BellSoft software

Bulletin has no description...

CVE-2007-6712

CVE-2007-6712 describes a 64-bit Linux kernel 2.6.x hrtimer overflow (hrtimer_forward) that can be triggered by a timer with a large expiry, causing an infinite loop and a local denial-of-service (kernel hang). The connected advisories confirm the issue as a timer-expiry vulnerability in high-res...

Computer Associates Alert Notification Buffer Overflow

This module exploits a buffer overflow in Computer Associates Threat Manager for the Enterprise r8.1 By sending a specially crafted RPC request, an attacker could overflow the buffer and execute arbitrary code. In order to successfully exploit this vulnerability, you will need valid logon...

Borland InterBase 2007 ibserver.exe Buffer Overflow PoC

No description provided by source. POC.pl !/usr/bin/perl -w Author: Liu Zhen Hua alau at 163.com use IO::Socket; use strict; my $host=$ARGV0; sub usage print "usage: perl poc.pl serverip\n"; if $ARGV 0 usage; exit; my $victim = IO::Socket::INET-newProto='tcp', &nbs...

Borland Interbase 2007 - ibserver.exe Buffer Overflow (PoC)

Borland Interbase 2007 - ibserver.exe Buffer Overflow PoC POC.pl !/usr/bin/perl -w Author: Liu Zhen Hua use IO::Socket; use strict; my $host=$ARGV0; sub usage print "usage: perl poc.pl serverip\n"; if $ARGV newProto='tcp', PeerAddr=$host, PeerPort=3050; my $pad0 = "\x41"x1000; "\x00\x00\x03\xE8" ...

Borland InterBase 2007 ibserver.exe Buffer Overflow PoC

Exploit for unknown platform in category dos / poc ======================================================= Borland InterBase 2007 ibserver.exe Buffer Overflow PoC ======================================================= POC.pl !/usr/bin/perl -w Author: Liu Zhen Hua use IO::Socket; use strict; my...

borland2007-overflow.txt

Borland InterBase 2007 "ibserver.exe" Buffer Overflow Vulnerability POC Affected Software: Borland InterBase 2007 Service Pack 2. ibserver.exe version 8.0.0.123 Severity: High Summary: There exists a vulnerability in Borland InterBase 2007. The attacker who successfully exploited this vulnerabili...

Debian DSA-1541-1 : openldap2.3 - several vulnerabilities

Several remote vulnerabilities have been discovered in OpenLDAP, a free implementation of the Lightweight Directory Access Protocol. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2007-5707 Thomas Sesselmann discovered that slapd could be crashed by a...

Borland Interbase 2007 - 'ibserver.exe' Buffer Overflow (PoC)

POC.pl !/usr/bin/perl -w Author: Liu Zhen Hua use IO::Socket; use strict; my $host=$ARGV0; sub usage print "usage: perl poc.pl serverip\n"; if $ARGV newProto='tcp', PeerAddr=$host, PeerPort=3050; my $pad0 = "\x41"x1000; "\x00\x00\x03\xE8" my $pad5 = "\x43"x16; my $exploit =...