18185 matches found
CVE-2007-4576
Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2007-4575. Reason: This candidate is a reservation duplicate of CVE-2007-4575. Notes: All CVE users should reference CVE-2007-4575 instead of this candidate. All references and descriptions in this candidate have been removed to...
Design/Logic Flaw
Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2007-4575. Reason: This candidate is a reservation duplicate of CVE-2007-4575. Notes: All CVE users should reference CVE-2007-4575 instead of this candidate. All references and descriptions in this candidate have been removed to...
CVE-2007-4576
CVE-2007-4576 is a reserved duplicate and is not used.
GLSA-200801-15 : PostgreSQL: Multiple vulnerabilities
The remote host is affected by the vulnerability described in GLSA-200801-15 PostgreSQL: Multiple vulnerabilities If using the 'expression indexes' feature, PostgreSQL executes index functions as the superuser during VACUUM and ANALYZE instead of the table owner, and allows SET ROLE and SET SESSI...
CVE-2007-4770
libicu in International Components for Unicode ICU 3.8.1 and earlier attempts to process backreferences to the nonexistent capture group zero aka \0, which might allow context-dependent attackers to read from, or write to, out-of-bounds memory locations, related to corruption of REStackFrames...
DEBIAN-CVE-2007-4770
libicu in International Components for Unicode ICU 3.8.1 and earlier attempts to process backreferences to the nonexistent capture group zero aka \0, which might allow context-dependent attackers to read from, or write to, out-of-bounds memory locations, related to corruption of REStackFrames...
[SECURITY] [DSA 1477-1] New yarssr packages fix arbitrary shell command execution
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - ------------------------------------------------------------------------ Debian Security Advisory DSA-1477-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff January 27, 2008 http://www.debian.org/security/faq -...
DSA-1479-1 linux-2.6
Bulletin has no description...
CVE-2007-4770
CVE-2007-4770 affects the ICU libicu library. The issue arises when processing backreferences to capture group zero (\0), potentially causing memory corruption in RE stack frames and leading to a denial-of-service crash. The vulnerability is documented with; affected products include ICU in ICU4J...
CVE-2007-4770
libicu in International Components for Unicode ICU 3.8.1 and earlier attempts to process backreferences to the nonexistent capture group zero aka \0, which might allow context-dependent attackers to read from, or write to, out-of-bounds memory locations, related to corruption of REStackFrames...
TrendMicro ServerProtect File Access
This modules exploits a remote file access flaw in the ServerProtect Windows Server RPC service. Please see the action list or the help output for more information. This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework clas...
Firebird Remote Memory Corruption
Advisory Information Title: Firebird Remote Memory Corruption Advisory ID: CORE-2007-1219 Advisory URL: https://www.coresecurity.com/core-labs/advisories/firebird-remote-memory-corruption Date published: 2008-01-28 Date of last update: 2008-01-24 Vendors contacted: Firebird SQL Release mode:...
[SECURITY] [DSA 1477-1] New yarssr packages fix arbitrary shell command execution
------------------------------------------------------------------------ Debian Security Advisory DSA-1477-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff January 27, 2008 http://www.debian.org/security/faq -...
Debian DSA-1475-1 : gforge - missing input sanitising
Jose Ramon Palanco discovered that a cross site scripting vulnerability in GForge, a collaborative development tool, allows remote attackers to inject arbitrary web script or HTML in the context of a logged in user's session. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive te...
openSUSE 10 Security Update : xemacs (xemacs-4944)
This update fixes a buffer overflow in xemacs. CVE-2007-6109 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update xemacs-4944. The text description of this plugin is C SUSE LLC...
Fedora 7 : clamav-0.92-6.fc7 (2008-0170)
Upstream clamav 0.92 fixes multiple security issues : - CVE-2007-6335 426210 - CVE-2007-6336 426343 - CVE-2007-6337 426344 Sendmail-specific parts moved to separate milter subpackage. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora securit...
Fedora 7 : boost-1.33.1-15.fc7 (2008-0880)
Wed Jan 16 2008 Petr Machata - 1.33.1-15 - Fixes for boost.regex. - Mon Nov 19 2007 Petr Machata - 1.33.1-14 - Apply/testsuite ambiguous option patch from James Philbin - Resolves: 369581 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora...
Fedora 8 : xorg-x11-server-1.3.0.0-40.fc8 (2008-0930)
When enabling the 'unredirect fullscreen windows' option, compiz will unredirect fullscreen windows to improve performace. However, unredirecting will as a side effect break any grabs on that window, which compromises most screensavers. This X server update suppresses this unintended side effect...
Fedora 7 : hsqldb-1.8.0.8-1jpp.5.fc7 (2007-4119)
Backporting a fix for CVE-2007-4576. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVEL 703...