Debian DSA-1474-1 : exiv2 - integer overflow

Meder Kydyraliev discovered an integer overflow in the thumbnail handling of libexif, the EXIF/IPTC metadata manipulation library, which could result in the execution of arbitrary code. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin wer...

Fedora 8 : bind-9.5.0-23.b1.fc8 (2008-0903)

CVE-2008-0122, libbind.so off-by-one buffer overflow, very low severity Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing...

Fedora 7 : hsqldb-1.8.0.8-1jpp.5.fc7 (2007-4119)

Backporting a fix for CVE-2007-4576. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVEL 703...

Fedora 7 : icu-3.6-20.fc7 (2008-1076)

CVE-2007-4770 & CVE-2007-4771 Flaws in icu regexp handling. Technical details can be found at http://sourceforge.net/mailarchive/message.php?msgname= d03a2ffb0801221538x68825e42xb4a4aaf0fcccecbd%2540mail.gmail.com Note that Tenable Network Security has extracted the preceding description block...

Fedora 8 : icu-3.8-5.fc8 (2008-1036)

CVE-2007-4770 & CVE-2007-4771 Flaws in icu regexp handling. Technical details can be found at http://sourceforge.net/mailarchive/message.php?msgname= d03a2ffb0801221538x68825e42xb4a4aaf0fcccecbd%2540mail.gmail.com Note that Tenable Network Security has extracted the preceding description block...

openSUSE 10 Security Update : apache2-mod_php5 (apache2-mod_php5-4909)

This update fixes multiple bugs in php by upgrading it to version 5.2.5. - Flaws in processing multi byte sequences in htmlentities/htmlspecialchars CVE-2007-5898 - overly long arguments to the dl function could crash php CVE-2007-4825 - overy long arguments to the glob function could crash php...

SuSE 10 Security Update : libxml2 (ZYPP Patch Number 4840)

libxml2 contained a DoS condition in xmlCurrentChar's UTF-8 processing. CVE-2007-6284 has been assigned to this problem. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if description...

Fedora 7 : xorg-x11-server-1.3.0.0-16.fc7 (2008-0956)

When enabling the 'unredirect fullscreen windows' option, compiz will unredirect fullscreen windows to improve performace. However, unredirecting will as a side effect break any grabs on that window, which compromises most screensavers. This X server update suppresses this unintended side effect...

Fedora 8 : clamav-0.92-6.fc8 (2008-0115)

Upstream clamav 0.92 fixes multiple security issues : - CVE-2007-6335 426210 - CVE-2007-6336 426343 - CVE-2007-6337 426344 Sendmail-specific parts moved to separate milter subpackage. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora securit...

Debian DSA-1473-1 : scponly - design flaw

Joachim Breitner discovered that Subversion support in scponly is inherently insecure, allowing execution of arbitrary commands. Further investigation showed that rsync and Unison support suffer from similar issues. This set of issues has been assigned CVE-2007-6350. In addition, it was discovere...

[SECURITY] [DSA 1475-1] new gforge packages fix cross site scripting

------------------------------------------------------------------------ Debian Security Advisory DSA-1475-1 [email protected] http://www.debian.org/security/ Thijs Kinkhorst January 26, 2008 http://www.debian.org/security/faq -...

Directory traversal

Directory traversal vulnerability in archiv.cgi in absofort aconon Mail 2007 Enterprise SQL 11.7.0 and Mail 2004 Enterprise SQL 11.5.1 allows remote attackers to read arbitrary files via a .. dot dot in the template parameter...

PHP cURL 'safe mode'安全绕过漏洞

BUGTRAQ ID: 27413 CVE ID:CVE-2007-4850 CNCVE ID:CNCVE-20074850 PHP是一款流行的网络编程语言。 PHP cURL存在'safe mode'安全绕过问题，远程攻击者可以利用漏洞访问受限制文件，获得敏感信息。 vardumpcurlexeccurlinit"file://safemodebypass\x00&qu ot;.FILE; is caused by error in curl/interface.c - --- define PHPCURLCHECKOPENBASEDIRstr, len, ret if...

Important: icu security update

3.6-5.11.1 - Resolves: rhbz429706 CVE-2007-4770 CVE-2007-4771...

CVE-2007-4850

CVE-2007-4850 affects PHP with libcurl (curl/interface.c) in PHP 5.2.4 and 5.2.5, where a file:// request containing a NULL sequence can bypass safe_mode and open_basedir and read arbitrary files. The vulnerability is linked to PHP’s libcurl handling and is reflected in OpenVAS entries for PHP

phpbb2022-xsrf.txt

phpBB 2.0.22 Remote PM Delete XSRF Vulnerability by NBBN Type: Cross-Site Request Forgery Founded: December 2007 An attacker can send a link via pm to a site with the follow html code to a victim and all victim's pm's are going to be deleted when he click the link. Code Vuln Versions: I've tested...

CVE-2007-6415

scponly 4.6 and earlier allows remote authenticated users to bypass intended restrictions and execute arbitrary code by invoking scp, as implemented by OpenSSH, with the -F and -o options...

CVE-2007-6415

CVE-2007-6415 affects scponly 4.6 and earlier, enabling remote authenticated users to bypass restrictions and execute arbitrary code via scp as implemented by OpenSSH with the -F and -o options. The vulnerability stems from how these options interact with scponly, allowing code execution under ce...

SDL_Image 1.2.6 and prior GIF handling buffer overflow

Name : SDLImage 1.2.6 and prior GIF handling buffer overflow Type : Remote DoS / Code Execution ? Impact : Low / Medium ? Credits : Gynvael Coldwind / Team Vexillium Discovered: 2007-12-17 Published : 2008-01-23 Brief SDLImage is an open source library providing image file handling functionality...

PHP 5.2.5 cURL safe_mode bypass

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 PHP 5.2.5 cURL safemode bypass Author: Maksymilian Arciemowicz cXIb8O3 SecurityReason Date: - - Written: 21.08.2007 - - Public: 22.01.2008 SecurityReason Research SecurityAlert Id: 51 CVE: CVE-2007-4850 SecurityRisk: Medium Affected Software: PHP 5.2....