CVE-2007-6211

Send ICMP Nasty Garbage sing on Debian GNU/Linux allows local users to append to arbitrary files and gain privileges via the -L output log file option. NOTE: this issue is only a vulnerability in limited environments, since sing is not installed setuid, and the administrator would need to overrid...

CVE-2007-6210

zabbixagentd 1.1.4 in ZABBIX before 1.4.3 runs "UserParameter" scripts with gid 0, which might allow local users to gain privileges...

USN-551-1: OpenLDAP vulnerabilities

Thomas Sesselmann discovered that the OpenLDAP slapd server did not properly handle certain modify requests. A remote attacker could send malicious modify requests to the server and cause a denial of service. CVE-2007-5707 Toby Blake discovered that slapd did not properly terminate an array while...

CVE-2007-6210

zabbixagentd 1.1.4 in ZABBIX before 1.4.3 runs "UserParameter" scripts with gid 0, which might allow local users to gain privileges...

CVE-2007-6210

The CVE-2007-6210 issue affects zabbix_agentd 1.1.4 in ZABBIX prior to 1.4.3, where UserParameter scripts may run with gid 0, potentially allowing local users to gain privileges. The Red Hat and Debian/open-source advisories confirm this vulnerability. Remediation is to update zabbix packages (e....

CVE-2007-6211

The CVE-2007-6211 issue affects Debian GNU/Linux’s sing utility. It allows local users to append to arbitrary files and gain privileges via the -L (output log file) option. The vulnerability is noted as limited in scope because sing is not installed setuid by default, so exploitation requires ove...

CVE-2007-6209

Util/difflog.pl in zsh 4.3.4 allows local users to overwrite arbitrary files via a symlink attack on temporary files...

CVE-2007-6208

sylprint.pl in claws mail tools claws-mail-tools allows local users to overwrite arbitrary files via a symlink attack on the sylprint.USER.PID temporary file...

Solaris 10 (sparc) : 128491-01

SunOS 5.10: devfs patch. Date this patch was last updated by Sun : Nov/28/07 %NASLMINLEVEL 70300 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a recommended security fix. Disabled on 2011/10/24. C Tenable Network Security, Inc. if ! definedfunc"bnrandom"...

Unfixed XSS vulnerability at www.zumruthali.com

Security researcher TurKReiS, has submitted on 12/04/2007 a cross-site-scripting XSS vulnerability affecting www.zumruthali.com, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 12/04/2007. It is currentl...

Fedora 8 : kernel-2.6.23.8-63.fc8 (2007-3837)

Update to kernel 2.6.23.9-rc1: http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.23.2 http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.23.3 http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.23.4 http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.23.5...

Unfixed XSS vulnerability at www.franke.be

Security researcher cyber, has submitted on 12/04/2007 a cross-site-scripting XSS vulnerability affecting www.franke.be, which at the time of submission ranked 1358967 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 12/04/2007. It is currently...

Unfixed XSS vulnerability at 39.911-job.ru

Security researcher MaXWeL, has submitted on 12/04/2007 a cross-site-scripting XSS vulnerability affecting 39.911-job.ru, which at the time of submission ranked 1627165 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 12/04/2007. It is currently...

CVE-2007-6209

CVE-2007-6209: In zsh 4.3.4, the Util/difflog.pl component is vulnerable to a local vulnerability where a symlink attack on temporary files allows local users to overwrite arbitrary files. The root cause is a symlink race condition in handling temporary files. Impact details are described as part...

RHEL 4 / 5 : htdig (RHSA-2007:1095)

Updated htdig packages that resolve a security issue are now available for Red Hat Enterprise Linux 4 and 5. This update has been rated as having moderate security impact by the Red Hat Security Response Team. The ht://Dig system is a complete World Wide Web indexing and searching system for a...

Fedora 8 : wesnoth-1.2.8-2.fc8 (2007-3989)

Update to 1.2.8. Fixes 405661 CVE-2007-5742 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues...

Apple Mac OSX xnu 1228.0 - 'mach-o' Local Kernel Denial of Service (PoC)

/ xnu-macho-dos.c Copyright c 2007 by Apple MACOS X xnu include include include include include include define MAXPATHLEN 128 define LCUNIXTHREAD 0x05 define x86THREADSTATE32 0x01 / osfmk/mach-o/loader.h / struct threadcommand unsigned long cmd; / LCTHREAD or LCUNIXTHREAD / unsigned long cmdsize;...

Mortbay Jetty fails to properly handle cookies with quotes

Overview Mortbay Jetty fails to properly handle cookie quotes, which may allow session hijacking. Description Mortbay Jetty is a web server that is written in Java. Jetty fails to properly handle cookies with certain quote sequences. This can cause the Jetty cookie parsing mechanism to improperly...

Mortbay Jetty Dump Servlet vulnerable to cross-site scripting

Overview The Mortbay Jetty Dump Servlet contains a cross-site scripting vulnerability. Description Mortbay Jetty is a web server that is written in Java. The Dump Servlet that is included with Jetty is vulnerable to cross-site scripting. Note that according to the vendor, the Dump Servlet is for...

Solaris 10 (sparc) : 127739-03

SunOS 5.10: rpcmod patch. Date this patch was last updated by Sun : Dec/07/07 %NASLMINLEVEL 70300 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a recommended security fix. Disabled on 2011/09/17. C Tenable Network Security, Inc. if ! definedfunc"bnrandom"...