CVE-2007-5350

CVE-2007-5350: A local-privilege-escalation flaw in the Windows Vista kernel’s Advanced Local Procedure Call (ALPC) mechanism. The root cause, per the public advisories, is improper validation in legacy reply paths, enabling a local attacker with logon rights to execute code with full privileges....

CVE-2007-3902

CVE-2007-3902 is a use-after-free/ memory corruption vulnerability in Microsoft Internet Explorer 5.01–7, caused by the CRecalcProperty function in mshtml.dll. Attackers could trigger arbitrary code execution by calling the setExpression method and then modifying an element’s outerHTML, leading t...

Microsoft Message Queuing queue name buffer overflow

Added: 12/12/2007 CVE: CVE-2007-3039 BID: 26797 OSVDB: 39123 Background Microsoft Message Queuing allows applications which may be running at different times to communicate across a network. Problem A buffer overflow vulnerability in the Microsoft Message Queuing service allows remote attackers t...

ZDI-07-074: Microsoft Internet Explorer Node Manipulation Memory Corruption

ZDI-07-074: Microsoft Internet Explorer Node Manipulation Memory Corruption Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-07-074.html December 11, 2007 -- CVE ID: CVE-2007-3903 -- Affected Vendor: Microsoft -- Affected Products: Internet Explorer 6 Internet Explorer 7 --...

CVE-2007-3903

CVE-2007-3903 refers to a memory corruption vulnerability in Microsoft Internet Explorer (mshtml.dll) affecting IE6/IE7, caused by unexpected calls to HTML objects (cloneNode/nodeValue) leading to remote arbitrary code execution. OpenVAS/CP advisories link this family to MS07-069 and describe it ...

ZDI-07-076: Microsoft Windows Message Queuing Service Stack Overflow Vulnerability

ZDI-07-076: Microsoft Windows Message Queuing Service Stack Overflow Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-07-076.html December 11, 2007 -- CVE ID: CVE-2007-3039 -- Affected Vendor: Microsoft -- Affected Products: Windows 2000 SP4 Windows XP SP2 -- TippingPointTM IPS...

CVE-2007-6316

CVE-2007-6316 affects BarracudaDrive Web Server prior to 3.8. The vulnerability is an XSS in the URI path of an HTTP GET request, triggered when administrators view log files on the Trace page. Exploitation details indicate remote attackers could inject arbitrary web script/HTML via the request p...

CVE-2007-6316

Cross-site scripting XSS vulnerability in BarracudaDrive Web Server before 3.8 allows remote attackers to inject arbitrary web script or HTML via the URI path in an HTTP GET request, which is activated by administrators viewing log files via the Trace page...

Important: autofs5 security update

5.0.1-0.rc2.55.el46.1 - Bug 412621: CVE-2007-5964 autofs defaults don't restrict suid in /net - use mount option nosuid for -hosts map unless suid is explicily specified. - Resolves: rhbz412621...

CVE-2007-3039

CVE-2007-3039 describes a stack-based buffer overflow in the Microsoft Message Queuing (MSMQ) service RPC interface. A long string in an opnum 0x06 RPC call to port 2103 can allow remote code execution on affected systems. The vulnerable products and versions include Windows 2000 Server SP4, Wind...

CVE-2007-6317

The CVE-2007-6317 entry describes multiple directory traversal vulnerabilities in BarracudaDrive Web Server prior to 3.8. The flaws allow remote attackers to read arbitrary files via certain ..\ sequences in the URL path, and remote authenticated users to delete arbitrary files or create arbitrar...

openSUSE 10 Security Update : cifs-mount (cifs-mount-4777)

This update of samba fixes a buffer overflow in function sendmailslot that allows to overwrite the stack with zero-bytes. CVE-2007-6015 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update...

Debian DSA-1430-1 : libnss-ldap - denial of service

It was reported that a race condition exists in libnss-ldap, an NSS module for using LDAP as a naming service, which could cause denial of service attacks if applications use pthreads. This problem was spotted in the dovecot IMAP/POP server but potentially affects more programs. %NASLMINLEVEL 703...

[SECURITY] [DSA 1431-1] New ruby-gnome2 packages fix execution of arbitrary code

------------------------------------------------------------------------ Debian Security Advisory DSA-1431-1 [email protected] http://www.debian.org/security/ Steve Kemp December 11, 2007 http://www.debian.org/security/faq -...

[SECURITY] [DSA 1430-1] New libnss-ldap packages fix denial of service

------------------------------------------------------------------------ Debian Security Advisory DSA-1430-1 [email protected] http://www.debian.org/security/ Steve Kemp December 11, 2007 http://www.debian.org/security/faq -...

[SECURITY] [DSA 1429-1] New htdig packages fix cross site scripting

------------------------------------------------------------------------ Debian Security Advisory DSA-1429-1 [email protected] http://www.debian.org/security/ Steve Kemp December 11, 2007 http://www.debian.org/security/faq -...

CVE-2007-6311

The CVE-2007-6311 entry describes an SQL injection in Falt4Extreme RC4 (version around 10.9.2007) exploitable via the nav_ID parameter in index.php (and possibly admin/index.php). The vulnerability allows remote attackers to execute arbitrary SQL commands and may impact data confidentiality, inte...

CVE-2007-6307

Multiple cross-site scripting XSS vulnerabilities in clickstats.php in wwwstats 3.21 allow remote attackers to inject arbitrary web script or HTML via 1 the link parameter or 2 the User-Agent HTTP header...

CVE-2007-6307

CVE-2007-6307 affects wwwstats 3.21, specifically the clickstats.php component. It describes cross-site scripting (XSS) via user-supplied input in the link parameter or the User-Agent header, enabling remote attackers to inject arbitrary script/HTML. The CVSS base score is 4.3 (Medium) with impac...

CVE-2007-6308

CVE-2007-6308 affects Klab HttpLogger 0.8.1, described as a cross-site scripting (XSS) vulnerability. The issue allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, enabling arbitrary script execution in the user’s browser. The associated documents identify Http...