MS07-069: Cumulative Security Update for Internet Explorer (942615)

The remote host is missing the IE cumulative security update 942615. The remote version of IE is vulnerable to several flaws that could allow an attacker to execute arbitrary code on the remote host. Tenable Network Security, Inc. include"compat.inc"; if description scriptid29313;...

CentOS 3 / 4 / 5 : samba (CESA-2007:1114)

Updated samba packages that fix a security issue and a bug are now available for Red Hat Enterprise Linux. This update has been rated as having critical security impact by the Red Hat Security Response Team. Samba is a suite of programs used by machines to share files, printers, and other...

Fedora 8 : phpMyAdmin-2.11.3-1.fc8 (2007-4334)

Upstream released 2.11.3 - Removed the RPM scriptlets doing httpd restarts 227025 - Patched an information disclosure known as CVE-2007-0095 221694 - Provide virtual phpmyadmin package and a httpd alias 231431 Note that Tenable Network Security has extracted the preceding description block...

serendipity-xss.txt

Source: http://www.int21.de/cve/CVE-2007-6205-s9y.html Cross site scripting XSS in rss feed plugin of Serendipity 1.2 References http://www.s9y.org/ http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-6205 Description The Serendipity blog system contains a plugin to display the content of feed...

Fedora 8 : openoffice.org-2.3.0-6.7.fc8 (2007-4172)

CVE-2007-4575 restrict java instantiation features of hsqldb Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional...

Debian DSA-1428-2 : linux-2.6 - several vulnerabilities

Several local and remote vulnerabilities have been discovered in the Linux kernel that may lead to a denial of service or the execution of arbitrary code. The Common Vulnerabilities and Exposures project identifies the following problems : This is an update to DSA 1428-1 which omitted a reference...

GLSA-200712-03 : GNU Emacs: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-200712-03 GNU Emacs: Multiple vulnerabilities Drake Wilson reported that the hack-local-variables function in GNU Emacs 22 does not properly match assignments of local variables in a file against a list of unsafe or risky variable...

MS07-063: Vulnerability in SMBv2 Could Allow Remote Code Execution (942624)

The remote version of Windows contains a version of SMBv2 Server Message Block protocol that has several vulnerabilities. An attacker may exploit these flaws to elevate his privileges and gain control of the remote host. C Tenable Network Security, Inc. include"compat.inc"; if description...

Fedora 7 : ruby-gnome2-0.16.0-18.fc7 (2007-4229)

Fix CVE-2007-6183, format string vulnerability Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues...

CVE-2007-6303

CVE-2007-6303 affects MySQL 5.0.x before 5.0.51a, 5.1.x before 5.1.23, and 6.0.x before 6.0.4. The vulnerability is that the DEFINER value of a view is not updated when the view is altered, enabling an authenticated remote user to escalate privileges via a sequence including CREATE SQL SECURITY D...

CVE-2007-6304

CVE-2007-6304 affects MySQL federated engine across 5.0.x (pre-5.0.51a), 5.1.x (pre-5.1.23), and 6.0.x (pre-6.0.4). The issue arises when the federated engine processes a SHOW TABLE STATUS query and a malicious remote server returns a response with fewer than the required 14 columns, which can cr...

CVE-2007-6305

Technical details (affected components, root cause, versions, fixes) are not publicly available in the provided documents; monitor for updates.

[SECURITY] [DSA 1427-1] New samba packages fix arbitrary code execution

------------------------------------------------------------------------ Debian Security Advisory DSA-1427-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff December 10, 2007 http://www.debian.org/security/faq -...

Design/Logic Flaw

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2007-6313. Reason: this candidate's description and references were inconsistent and described unrelated, non-security issues. The original intended issue is covered by CVE-2007-6313. Notes: All references and descriptions in this...

CVE-2007-5968

...

CVE-2007-5968

CVE-2007-5968 entry is a placeholder/rejected item; the reliable vulnerability information is in CVE-2007-6313. CVE-2007-6313 affects MySQL Server 5.1.x before 5.1.23 and 6.0.x before 6.0.4, where the server does not enforce rights on the BINLOG operational entity, allowing remote authorized user...

CVE-2007-6302

The vulnerability CVE-2007-6302 affects Novell NetMail 3.5.2 (NetMail with AntiVirus agent) via multiple heap-based overflows in avirus.exe. The root cause is that the avirus.exe service reads a user‑supplied ASCII integer as an argument to a memory allocation, then adds to that value without pro...

CVE-2007-5969

CVE-2007-5969 affects MySQL when a table uses explicit DATA DIRECTORY or INDEX DIRECTORY options. A remote authenticated user can abuse RENAME TABLE to change the symlink to an existing file, overwriting system table information and potentially gaining privileges. Affected releases per descriptio...

CVE-2007-6300

Cross-site request forgery CSRF vulnerability in Fusion News 3.9.0 allows remote attackers to perform unauthorized actions via unspecified vectors...

CVE-2007-6298

Cross-site scripting XSS vulnerability in the Shoutbox module for Drupal 5.x before Shoutbox 5.x-1.1 allows remote authenticated users to inject arbitrary web script or HTML via Shoutbox block messages...