18185 matches found
CVE-2007-5855
The CVE-2007-5855 entry is supported by connected documents: Apple Mail on Mac OS X 10.4.11 and 10.5.1 can use plaintext SMTP authentication via Account Assistant even when MD5 Challenge-Response is available, enabling potential remote sniffing of account activity. The issue is tied to the SMTP a...
CVE-2007-5863
CVE-2007-5863 concerns Apple OS X Software Update (10.5.1) where a MITM between client and server, using a modified distribution definition file with the “allow-external-scripts” option, allows remote command execution. Public sources in the connected set corroborate an Apple OS X Software Update...
CVE-2007-4708
CVE-2007-4708 is a format-string vulnerability in the Address Book component of Apple Mac OS X 10.4.11 that allows remote code execution via the URL handler. Public sources confirm the flaw affects Mac OS X 10.4.11 (and related Address Book/URL handling paths) and indicate that exploitation could...
CVE-2007-3876
CVE-2007-3876 describes a stack-based SMB buffer overflow in Apple Mac OS X 10.4.11 that allows local users to execute arbitrary code via a long -W workgroup option to mount_smbfs or via an unspecified manipulation of the smbutil command line. iDefense notes the vulnerability could allow code exe...
CVE-2007-5848
CVE-2007-5848 describes a buffer overflow in CUPS on Apple Mac OS X 10.4.11 that allows a local admin to execute arbitrary code via a crafted URI to the CUPS service. The OpenVAS/Nessus entries corroborate cups-related fixes; affected packages include CUPS and related components, with updates iss...
CVE-2007-5857
The CVE-2007-5857 issue affects Apple Mac OS X 10.5.1 and is tied to Quick Look, where a movie file preview or icon may access URLs via HREFTrack, potentially exposing sensitive information. Connected sources corroborate the association with Mac OS X 10.5.1 and the need for remediation through se...
Moderate: Red Hat Security Advisory: libexif security update
Updated libexif packages that fix a security issue are now available for Red Hat Enterprise Linux 4. This update has been rated as having moderate security impact by the Red Hat Security Response Team. The libexif packages contain the Exif library. Exif is an image file format specification that...
Moderate: Red Hat Security Advisory: libexif security update
Updated libexif packages that fix several security issues are now available for Red Hat Enterprise Linux 5. This update has been rated as having moderate security impact by the Red Hat Security Response Team. The libexif packages contain the Exif library. Exif is an image file format specificatio...
MOG-WebShop (index.php group) Remote SQL Injection Exploit
No description provided by source. !/usr/bin/perl Indonesian Newhack Security Advisory ------------------------------------ MOG-WebShop = ? - Multiple Remote SQL Injection Vulnerabilities Waktu : Dec 15 2007 11:45AM Software : MOG-WebShop | http://mog-site.com/index.php?act=product&po=detil&id=3...
KLA10341 ACE vulnerability in St. Bernard Open File Manager
A buffer overflow was found in St. Bernard Open File Manager. By exploiting this vulnerability malicious users can execute arbitrary code. This vulnerability can be exploited remotely via a specially designed request. Original advisories - Related products St-Bernard-Open-File-Manager CVE list...
CentOS 4 / 5 : mysql (CESA-2007:1155)
Updated mysql packages that fix several security issues are now available for Red Hat Enterprise Linux 4 and 5. This update has been rated as having important security impact by the Red Hat Security Response Team. MySQL is a multi-user, multi-threaded SQL database server. MySQL is a client/server...
Flash Player < 7.0.73.0 / 9.0.115.0 Multiple Vulnerabilities (APSB07-20)
According to its version number, the instance of Flash Player on the remote Windows host is affected by multiple issues, including several which could allow for arbitrary code execution by means of a malicious SWF file. %NASLMINLEVEL 70300 C Tenable Network Security, Inc...
Upgraded Thunderbird 1.5.0.13 missing fix for MFSA 2007-23 — Mozilla
Mozilla tester Stephen Donner reported that only users who installed Thunderbird 1.5.0.13 using the install package received the fix for MFSA 2007-23. Users who upgraded to Thunderbird 1.5.0.13 from an earlier version using the automatic update mechanism were not protected. If those users browsed...
Cisco Security Advisory: Application Inspection Vulnerability in Cisco Firewall Services Module
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Cisco Security Advisory: Application Inspection Vulnerability in Cisco Firewall Services Module Advisory ID: cisco-sa-20071219-fwsm ============ Revision 1.0 ============ Last Updated 2007 December 19 1600 UTC GMT For Public Release 2007 December 19...
Apple Mac OSX - mount_smbfs Local Stack Buffer Overflow
Apple Mac OSX - mountsmbfs Local Stack Buffer Overflow / Copyright C 2007-2008 Subreption LLC. All rights reserved. Visit http://blog.subreption.com for exploit development notes. References: CVE-2007-3876 http://docs.info.apple.com/article.html?artnum=307179...
Rosoft Media Player <= 4.1.7 .M3U Stack Overflow Exploit
No description provided by source. / rosoft-player-expl.c: 2007-12-18: Copyright c 2007 devcode ^^ D E V C O D E ^^ Rosoft Media Player = 4.1.7 .M3U Stack Overflow 0-DAY Description: A stack overflow occurs when parsing an .m3u file...
Apple Mac OS X mount_smbfs Stack Based Buffer Overflow Exploit
Exploit for macOS platform in category local exploits ============================================================== Apple Mac OS X mountsmbfs Stack Based Buffer Overflow Exploit ============================================================== / Copyright C 2007-2008 Subreption LLC. All rights...
Moderate:libexif security update
0.6.13-4.0.2.el51.1 - Add patch for CVE-2007-6351. Fixes bug 425681 - Add patch for CVE-2007-6352. Fixes bug 425681...
Unfixed XSS vulnerability at www.sunway.com.my
Security researcher DerickTham, has submitted on 19/12/2007 a cross-site-scripting XSS vulnerability affecting www.sunway.com.my, which at the time of submission ranked 87836 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 08/01/2008. It is...
SYMSA-2007-015
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Symantec Vulnerability Research http://www.symantec.com/research Security Advisory Advisory ID: SYMSA-2007-015 Advisory Title: Perforce P4Web Denial Of Service through resource starvation Author: Oliver Karow / [email protected] Release Date: 1...