CVE-2007-5938

CVE-2007-5938 describes a NULL pointer dereference in the iwl driver (iwlwifi 1.1.21 and earlier) where iwl_set_rate dereferences the value returned by iwl_get_hw_mode without NULL checking. This can trigger a kernel panic during module initialization, constituting a denial of service. The connec...

CVE-2007-5769

CVE-2007-5769 describes a double‑free vulnerability in the getreply function of netkit‑ftp’s ftp.c (netkit‑ftp 0.17 20040614 and later). This can allow a remote FTP server to trigger a denial of service (application crash) and possibly other impact via FTP protocol behavior. The issue is tied to ...

CVE-2007-6263

The CVE-2007-6263 issue affects netkit-ftpd 0.17 where, after modifications to support SSL, fclose is called on an uninitialized file stream in ftpd.c. This can trigger a denial of service (daemon crash) via certain FTP over SSL behaviors, demonstrated by breaking a passive FTP DATA connection th...

CVE-2007-5939

The CVE concerns Heimdal 0.7.2: the gss_userok function in appl/ftp/ftpd/gss_userok.c does not allocate memory for the ticketfile pointer before calling free, allowing remote attackers to influence behavior via an invalid username. Affected component is Heimdal’s GSS-API handling in ftpd-related ...

CVE-2007-5901

Use-after-free vulnerability in the gssindicatemechs function in lib/gssapi/mechglue/ginitialize.c in MIT Kerberos 5 krb5 has unknown impact and attack vectors. NOTE: this might be the result of a typo in the source code...

CVE-2007-5972

Double free vulnerability in the krb5defstoremkey function in lib/kdb/kdbdefault.c in MIT Kerberos 5 krb5 1.5 has unknown impact and remote authenticated attack vectors. NOTE: the free operations occur in code that stores the krb5kdc master key, and so the attacker must have privileges to store...

CVE-2007-4575

HSQLDB before 1.8.0.9, as used in OpenOffice.org OOo 2 before 2.3.1, allows user-assisted remote attackers to execute arbitrary Java code via crafted database documents, related to "exposing static java methods."...

CVE-2007-5894

The reply function in ftpd.c in the gssftp ftpd in MIT Kerberos 5 krb5 does not initialize the length variable when authtype has a certain value, which has unknown impact and remote authenticated attack vectors. NOTE: the original disclosure misidentifies the conditions under which the...

Immunity Canvas: OOO_230

Name| ooo230 ---|--- CVE| CVE-2007-4575 Exploit Pack| CANVAS Description| OpenOffice Database 2.3.0 Static Java Execution Notes| CVE Name: CVE-2007-4575 VENDOR: OpenOffice Repeatability: Infinite client side - no crash CVS URL: http://www.cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-4575 Date...

CVE-2007-5971

Double free vulnerability in the gsskrb5intmakesealtokenv3 function in lib/gssapi/krb5/k5sealv3.c in MIT Kerberos 5 krb5 has unknown impact and attack vectors...

CVE-2007-5971

CVE-2007-5971 : A double-free in MIT Kerberos 5’s GSS-API (lib/gssapi/krb5/k5sealv3.c, function gss_krb5int_make_seal_token_v3) is noted with unknown impact in the initial record. Connected MiracleLinux advisories (AXSA-2008-345:03 and AXSA-2008-153:02) reference backports that backfill fixes in ...

CVE-2007-6262

VideoLAN VLC Vulnerability CVE-2007-6262 affects the ActiveX control axvlc.dll in VLC 0.8.6 before 0.8.6d. The three functions addTarget, getVariable, and setVariable do not validate parameters, leading to a bad initialized pointer and enabling remote code execution via crafted arguments (recursi...

CVE-2007-6260

CVE-2007-6260 affects Oracle 10g and llg installations where accounts are created with default passwords, enabling remote login by connecting to the Listener. The underlying cause is default credentials during setup. In practice, DBCA installations may mitigate this by disabling accounts or chang...

CVE-2007-4575

CVE-2007-4575 is evidenced in connected advisories describing an OpenOffice.org/OpenOffice Base usage of HSQLDB where crafted OpenDocument database files can trigger arbitrary Java-method calls, allowing user-assisted remote code execution. In Red Hat/JBoss contexts, RHSA-2007:1048 and RHSA-2008:...

CVE-2007-5901

CVE-2007-5901 is a use-after-free in MIT Kerberos 5 in the gss_indicate_mechs path (lib/gssapi/mechglue/g_initialize.c). The connected advisories describe backported patches to fix use-after-free in libgssapi_krb5 (and related components), with MiracleLinux AXSA-2008-153/2008-345 noting the backp...

CVE-2007-5902

CVE-2007-5902 is a Krb5 (MIT Kerberos 5) vulnerability: an integer overflow in svcauth_gss_get_principal (lib/rpc/svc_auth_gss.c) can be triggered by a large GSS client name in an RPC request, reported across multiple advisories (e.g., USN-940-1 / SUSE CVE page). Connected sources indicate mitiga...

CVE-2007-6194

HP Select Identity is affected: versions 4.01 prior to 4.01.012 and 4.1x prior to 4.13.003 running on Windows Server 2003, Red Hat AS3, Solaris, and HP-UX are vulnerable to remote unauthorized access. HP released patches to fix the issue (v4.01.012 for 4.01, v4.13.003 for 4.1x). The vulnerability...

CVE-2007-5972

CVE-2007-5972 is described as a double free vulnerability in MIT Kerberos 5 (krb5) where the flaw resides in krb5_def_store_mkey in lib/kdb/kdb_default.c. The advisory data in connected documents confirms affected software (krb5) and that patches are provided via Ubuntu USN-940-1/USN-924-1 and re...

CVE-2007-5894

MIT Kerberos 5 (krb5) is affected by CVE-2007-5894 and related issues (CVE-2007-5902, CVE-2007-5971, CVE-2007-5972) as described in multiple advisories. The core item in CVE-2007-5894 concerns an uninitialized length variable in the gssftp ftpd handling (krb5’s GSSAPI/KDC stack), with vendor note...

CVE-2007-6261

CVE-2007-6261 affects Apple Mac OS X (xnu kernel) 10.4–10.5.1. The vulnerability is an integer overflow in the load_threadstack function of mach_loader.c, enabling a local attacker to trigger a denial of service (infinite loop) through a crafted Mach-O binary. Connected documents do not provide e...