Security fix for the ALT Linux 5 package samba version 3.0.28-alt1

Dec. 10, 2007 Alexander Bokovoy 3.0.28-alt1 - Fixed: + CVE-2007-6015: == Specifically crafted GETDC mailslot requests == can trigger a boundary error in the domain == controller GETDC mail slot support which == can be remotely exploited to execute arbitrary == code. + fix error path in local...

MySQL Community Server 5.0 < 5.0.51 RENAME TABLE Symlink System Table Overwrite

The version of MySQL Community Server installed on the remote host reportedly fails to check whether a file to which a symlink points exists when using RENAME TABLE against a table with explicit DATA DIRECTORY and INDEX DIRECTORY options. A local attacker may be able to leverage this issue to...

DSA-1428-1 fai-kernels linux-2.6 user-mode-linux - several vulnerabilities

Bulletin has no description...

Unfixed XSS vulnerability at www4.airnet.ne.jp

Security researcher iNs uNkn0wn.eu CreW, has submitted on 12/10/2007 a cross-site-scripting XSS vulnerability affecting www4.airnet.ne.jp, which at the time of submission ranked 19762 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 01/11/2007. ...

Critical: samba security and bug fix update

3.0.9-1.3E.14.3 - Security fix for CVE-2007-6015 - Fix for regression introduced with CVE-2007-4572 - resolves: 407321 - resolves: 389021...

[SECURITY] [DSA 1422-1] New e2fsprogs packages fix arbitrary code execution

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - ------------------------------------------------------------------------ Debian Security Advisory DSA-1422 [email protected] http://www.debian.org/security/ Steve Kemp December 07, 2007 http://www.debian.org/security/faq -...

Unfixed XSS vulnerability at www.winchellswebworks.com

Security researcher Narcoticxs, has submitted on 12/09/2007 a cross-site-scripting XSS vulnerability affecting www.winchellswebworks.com, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 13/09/2007. It is...

Unfixed XSS vulnerability at www.centromodaonline.com

Security researcher Narcoticxs, has submitted on 12/09/2007 a cross-site-scripting XSS vulnerability affecting www.centromodaonline.com, which at the time of submission ranked 190543 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 13/09/2007. I...

Unfixed XSS vulnerability at www.datavis.com

Security researcher tenest, has submitted on 12/09/2007 a cross-site-scripting XSS vulnerability affecting www.datavis.com, which at the time of submission ranked 150039 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 13/09/2007. It is currentl...

Unfixed XSS vulnerability at bbs.security.ccidnet.com

Security researcher BackDoor, has submitted on 12/09/2007 a cross-site-scripting XSS vulnerability affecting bbs.security.ccidnet.com, which at the time of submission ranked 4980 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 13/09/2007. It is...

Unfixed XSS vulnerability at www.dod.com

Security researcher tenest, has submitted on 12/09/2007 a cross-site-scripting XSS vulnerability affecting www.dod.com, which at the time of submission ranked 559387 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 13/09/2007. It is currently...

Unfixed XSS vulnerability at www.eastdevoncats.com

Security researcher Narcoticxs, has submitted on 12/09/2007 a cross-site-scripting XSS vulnerability affecting www.eastdevoncats.com, which at the time of submission ranked 6004717 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 13/09/2007. It ...

Unfixed XSS vulnerability at www.jalecogames.co.jp

Security researcher kusomiso.com, has submitted on 12/09/2007 a cross-site-scripting XSS vulnerability affecting www.jalecogames.co.jp, which at the time of submission ranked 569376 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 12/09/2007. It...

Unfixed XSS vulnerability at www.director.it

Security researcher Narcoticxs, has submitted on 12/09/2007 a cross-site-scripting XSS vulnerability affecting www.director.it, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 13/09/2007. It is currently...

Unfixed XSS vulnerability at www.pearldistrict.org

Security researcher Narcoticxs, has submitted on 12/09/2007 a cross-site-scripting XSS vulnerability affecting www.pearldistrict.org, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 13/09/2007. It is...

Unfixed XSS vulnerability at www.otoburada.com

Security researcher Narcoticxs, has submitted on 12/08/2007 a cross-site-scripting XSS vulnerability affecting www.otoburada.com, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 21/08/2007. It is current...

Unfixed XSS vulnerability at www.ufukhalisaha.com

Security researcher Narcoticxs, has submitted on 12/08/2007 a cross-site-scripting XSS vulnerability affecting www.ufukhalisaha.com, which at the time of submission ranked 3256534 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 21/08/2007. It i...

[SECURITY] [DSA 1422-1] New e2fsprogs packages fix arbitrary code execution

------------------------------------------------------------------------ Debian Security Advisory DSA-1422 [email protected] http://www.debian.org/security/ Steve Kemp December 07, 2007 http://www.debian.org/security/faq - ------------------------------------------------------------------------...

CVE-2007-6279

Multiple double free vulnerabilities in Free Lossless Audio Codec FLAC libFLAC before 1.2.1 allow user-assisted remote attackers to execute arbitrary code via malformed 1 Seektable values or 2 Seektable Data Offsets in a .FLAC file...

Sql injection

Multiple SQL injection vulnerabilities in bcoos 1.0.10 and earlier allow remote attackers to execute arbitrary SQL commands via 1 the gid parameter to modules/arcade/index.php in a showstats action, or the lid parameter to 2 modules/myalbum/ratephoto.php or 3 modules/mylinks/ratelink.php, differe...