CVE-2007-0919

creationtimestamp| type| source ---|---|--- 2008-03-03 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/5212...

activePDF服务器报文处理远程堆溢出漏洞

BUGTRAQ ID: 28013 CVECAN ID: CVE-2007-5397 activePDF服务器用于为企业或Web应用提供集成的PDF生成和动态PDF转换功能。 activePDF Server服务（APServer.exe）在处理畸形客户端数据时存在堆溢出漏洞，远程攻击者可能利用此漏洞控制服务器。 如果用户连接到了该服务（默认端口53535/TCP）并在发送的报文中指定的大小小于之后数据的实际大小的话，就可能触发这个溢出，导致执行任意指令。 activePDF activePDF 3.8.5.14 activePDF activePDF 3.8.4 厂商补丁：...

VMSA-2008-0004:Updated e2fsprogs service console package

VMSA-2008-0004.1 Updated e2fsprogs service console package VMware Security Advisory VMware Security AdvisoryAdvisory ID: VMSA-2008-0004.1 VMware Security AdvisorySynopsis: Updated e2fsprogs service console package VMware Security AdvisoryIssue date: 2008-03-03 VMware Security AdvisoryUpdated on:...

CVE-2007-6016

CVE-2007-6016 affects the PVATLCalendar.PVCalendar.1 ActiveX control (pvcalendar.ocx) in the Symantec Backup Exec for Windows Server BEWS, specifically the Media Server’s scheduler component. The vulnerability arises from stack-based buffer overflows when long values are written to the properties...

CVE-2007-6017

The PVATLCalendar.PVCalendar.1 ActiveX control (pvcalendar.ocx) in the Media Server component of Symantec Backup Exec for Windows Server (BEWS) 11d/12.0 exposes an unsafe Save method. The vulnerability allows a remote attacker to cause a denial of service (browser crash) or to create/overwrite ar...

Fedora 8 : horde-3.1.6-1.fc8 / imp-4.1.6-1.fc8 / turba-2.1.7-1.fc8 (2008-2087)

Bug 428625 - CVE-2007-6018 horde: input validation vulnerabilities - Bug 432027 - CVE-2008-0807 turba: insufficient access checks Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically...

CentOS 4 / 5 : gd (CESA-2008:0146)

Updated gd packages that fix multiple security issues are now available for Red Hat Enterprise Linux 4 and 5. This update has been rated as having moderate security impact by the Red Hat Security Response Team. The gd package contains a graphics library used for the dynamic creation of images suc...

openSUSE 10 Security Update : apache2-mod_jk (apache2-mod_jk-4992)

Fixed various issues in tomcat : - CVE-2006-7196: Cross-site scripting XSS vulnerability in example JSP applications - CVE-2007-3382: Handling of cookies containing a ' character - CVE-2007-3385: Handling of ' in cookies - CVE-2007-5641: tomcat path traversal / information leak - CVE-2007-1860:...

ClamAV < 0.93.1 Multiple Vulnerabilities

ClamAV is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:clamav:clamav"; ifdescription...

CVE-2007-6016

creationtimestamp| type| source ---|---|--- 2008-02-29 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/5205 2010-05-09 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/16582 2018-05-29 15:50:33+00:00| seen|...

Security fix for the ALT Linux 9 package apache2 version 2.2.8-alt1

Feb. 29, 2008 Aleksey Avdeev 2.2.8-alt1 - 2.2.8: security fixes CVE-2007-6421, CVE-2007-6421, CVE-2007-6422, CVE-2007-6388, CVE-2007-5000, CVE-2008-0005 - Fix 14601: less-than-optimal examples in conf/sites-available. Thanks Mikhail Gusarov &LTdottedmag altlinux org...

CVE-2007-5397

Heap-based buffer overflow in the activePDF Server service aka APServer.exe in activePDF Server 3.8.4 and 3.8.5.14, and possibly other versions before 3.8.6.16, allows remote attackers to execute arbitrary code via a packet with a size field that is less than the actual size of the data...

CVE-2007-5397

CVE-2007-5397 describes a heap-based buffer overflow in the activePDF Server (APServer.exe) used by activePDF Server products. Vulnerable versions include 3.8.4 and 3.8.5.14, and possibly other versions before 3.8.6.16. The flaw allows a remote attacker to execute arbitrary code by sending a craf...

gd security update

CentOS Errata and Security Advisory CESA-2008:0146 Updated gd packages that fix multiple security issues are now available for Red Hat Enterprise Linux 4 and 5. This update has been rated as having moderate security impact by the Red Hat Security Response Team. The gd package contains a graphics...

Moderate: Red Hat Security Advisory: gd security update

Updated gd packages that fix multiple security issues are now available for Red Hat Enterprise Linux 4 and 5. This update has been rated as having moderate security impact by the Red Hat Security Response Team. The gd package contains a graphics library used for the dynamic creation of images suc...

Debian: Security Advisory (DSA-1506-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian Security Advisory DSA 1495-2 (nagios-plugins)

The remote host is missing an update to nagios-plugins announced via advisory DSA 1495-2. OpenVAS Vulnerability Test $Id: deb14952.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 1495-2 nagios-plugins Authors: Thomas Reinke Copyright: Copyright c 2008 E-Sof...

Debian: Security Advisory (DSA-1497-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian Security Advisory DSA 1497-1 (clamav)

The remote host is missing an update to clamav announced via advisory DSA 1497-1. OpenVAS Vulnerability Test $Id: deb14971.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 1497-1 clamav Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc...

Debian Security Advisory DSA 1505-1 (alsa-driver)

The remote host is missing an update to alsa-driver announced via advisory DSA 1505-1. OpenVAS Vulnerability Test $Id: deb15051.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 1505-1 alsa-driver Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc...