18185 matches found
Unfixed Redirect vulnerability at www.freewebtemplates.com
Security researcher St@rExT, has submitted on 12/07/2007 a Redirect vulnerability affecting www.freewebtemplates.com, which at the time of submission ranked 10593 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 26/07/2007. It is currently...
HP OpenView Network Node Manager Multiple CGI Remote Overflows
The remote version of HP OpenView Network Node Manager fails to sanitize user-supplied input to various parameters used in the 'Openview5', 'snmpview', 'ovlogin' scripts before using it. By sending long parameters, an attacker would be able to produce a stack-based overflow and exploit it to...
Ubuntu 6.06 LTS / 6.10 / 7.04 / 7.10 : tetex-bin, texlive-bin vulnerabilities (USN-554-1)
Bastien Roucaries discovered that dvips as included in tetex-bin and texlive-bin did not properly perform bounds checking. If a user or automated system were tricked into processing a specially crafted dvi file, dvips could be made to crash and execute code as the user invoking the program...
Ubuntu 6.10 / 7.04 / 7.10 : firefox regression (USN-546-2)
USN-546-1 fixed vulnerabilities in Firefox. The upstream update included a faulty patch which caused the drawImage method of the canvas element to fail. This update fixes the problem. We apologize for the inconvenience. It was discovered that Firefox incorrectly associated redirected sites as the...
Unfixed XSS vulnerability at www.findsolar.com
Security researcher nightsshadow, has submitted on 12/07/2007 a cross-site-scripting XSS vulnerability affecting www.findsolar.com, which at the time of submission ranked 456919 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 26/07/2007. It is...
Lotus Notes Lotus 1-2-3 file viewer buffer overflow
Added: 12/07/2007 CVE: CVE-2007-6593 BID: 26604 OSVDB: 40796 Background Lotus Notes is the client for Lotus Domino servers. Lotus Notes uses the Autonomy KeyView library to process files in the Lotus Worksheet File format WKS used by Lotus 1-2-3. Problem A buffer overflow vulnerability in the...
MacroVision InstallShield Update Service isusweb.dll unsafe method
Added: 12/07/2007 CVE: CVE-2007-5660 BID: 26280 OSVDB: 38347 Background MacroVision InstallShield is software for creating installers or software packages. Problem Several unsafe methods in the Update Service ActiveX control allow command execution when a user loads a specially crafted web page...
openSUSE 10 Security Update : kernel (kernel-4749)
This kernel update fixes the following security problems : ++ CVE-2007-5500: A buggy condition in the ptrace attach logic can be used by local attackers to hang the machine. ++ CVE-2007-5501: The tcpsacktagwritequeue function in net/ipv4/tcpinput.c allows remote attackers to cause a denial of...
openSUSE 10 Security Update : gnump3d (gnump3d-4774)
This update fixes a restriction bypass in gnump3d's plugins. CVE-2007-6130 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update gnump3d-4774. The text description of this plugin is C SUSE LLC...
Debian DSA-1420-1 : zabbix - programming error
Bas van Schaik discovered that the agentd process of Zabbix, a network monitor system, may run user-supplied commands as group id root, not zabbix, which may lead to a privilege escalation. zabbix is not included in the oldstable distribution sarge. %NASLMINLEVEL 70300 C Tenable Network Security,...
openSUSE 10 Security Update : OpenOffice_org (OpenOffice_org-4769)
This update of OpenOfficeorg adds restrictions to SQL statements of Java-based databases to avoid the execution of native Jave code by creating procedures. CVE-2007-4575 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from...
KLA10335 ACE vulnerability in SonicWall Global VPN client
Format string vulnerabilities were found in the SonicWall Global VPN client. By exploiting these vulnerabilities malicious users can execute arbitrary code. These vulnerabilities can be exploited remotely via specially designed format strings. Original advisories - Related products...
Unfixed XSS vulnerability at hackerdegree.com
Security researcher nightsshadow, has submitted on 12/07/2007 a cross-site-scripting XSS vulnerability affecting hackerdegree.com, which at the time of submission ranked 940699 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 26/07/2007. It is...
NSFOCUS SA2007-02 : Cisco Security Agent Remote Buffer Overflow Vulnerability
NSFOCUS Security Advisory SA2007-02 Cisco Security Agent Remote Buffer Overflow Vulnerability Release Date: 2007-12-06 CVE ID: CVE-2007-5580 http://www.nsfocus.com/english/homepage/research/0702.htm Affected systems & software =================== Cisco Security Agent for Windows 4.5.1.672 Cisco...
openSUSE 10 Security Update : e2fsprogs (e2fsprogs-4739)
This update of e2fsprogs fixes several integer overflows in memory allocating code. Programs that use libext2fs are therefore vulnerable to memory corruptions that can lead to arbitrary code execution while loading a specially crafted image. CVE-2007-5497 %NASLMINLEVEL 70300 C Tenable Network...
MacroVision InstallShield Update Service isusweb.dll unsafe method
Added: 12/07/2007 CVE: CVE-2007-5660 BID: 26280 OSVDB: 38347 Background MacroVision InstallShield is software for creating installers or software packages. Problem Several unsafe methods in the Update Service ActiveX control allow command execution when a user loads a specially crafted web page...
CVE-2007-6263
The dataconn function in ftpd.c in netkit ftpd netkit-ftpd 0.17, when certain modifications to support SSL have been introduced, calls fclose on an uninitialized file stream, which allows remote attackers to cause a denial of service daemon crash and possibly have unspecified other impact via som...
Double free
Double free vulnerability in the getreply function in ftp.c in netkit ftp netkit-ftp 0.17 20040614 and later allows remote FTP servers to cause a denial of service application crash and possibly have unspecified other impact via some types of FTP protocol behavior. NOTE: the netkit-ftpd issue is...
CVE-2007-5769
Double free vulnerability in the getreply function in ftp.c in netkit ftp netkit-ftp 0.17 20040614 and later allows remote FTP servers to cause a denial of service application crash and possibly have unspecified other impact via some types of FTP protocol behavior. NOTE: the netkit-ftpd issue is...