RHEL 2.1 : pcre (RHSA-2007:1065)

Updated pcre packages that resolve several security issues are now available for Red Hat Enterprise Linux 2.1. This update has been rated as having moderate security impact by the Red Hat Security Response Team. PCRE is a Perl-compatible regular expression library. Flaws were discovered in the wa...

RHEL 4 : pcre (RHSA-2007:1068)

Updated pcre packages that resolve several security issues are now available for Red Hat Enterprise Linux 4. This update has been rated as having important security impact by the Red Hat Security Response Team. PCRE is a Perl-compatible regular expression library. Flaws were discovered in the way...

CVE-2007-6175

CVE-2007-6175 affects Lhaplus 1.55 and earlier. A buffer overflow in LZH archive handling could allow remote attackers to execute arbitrary code when decompressing a crafted LZH file. Connected documents corroborate a vulnerable Lhaplus prior to 1.55 and note this is a separate issue from CVE-200...

Important: pcre security update

3.9-10.4 - Fix CVE-2007-1660, bug 381991...

openSUSE 10 Security Update : rubygem-actionpack (rubygem-actionpack-4754)

Malicious users could specify their session-ID in the URL and could gain access to an authenticated session that way CVE-2007-5380. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update...

QuickTime RTSP Content-Type header buffer overflow

Added: 11/30/2007 CVE: CVE-2007-6166 BID: 26549 OSVDB: 40876 Background QuickTime is a media player for Windows and Mac OS platforms. Problem A buffer overflow vulnerability in QuickTime allows command execution when a user opens an RTSP stream containing a specially crafted Content-Type header...

CVE-2007-4346

CVE-2007-4346 affects Symantec Backup Exec for Windows Servers BEWS (Job Engine, bengine.exe) on 11d builds 11.0.7170 and 11.0.6.6235. A NULL pointer dereference (and related DoS via integer overflows) can be triggered by specially crafted packets sent to port 5633/TCP, causing the listening serv...

CVE-2007-4347

Symantec Backup Exec for Windows Servers BEWS 11d (11.0.7170 and 11.0.6.6235) is affected by two integer overflow DoS issues and a NULL pointer dereference in the Job Engine (bengine.exe). A crafted 5633/tcp packet can trigger an infinite loop, causing high CPU/memory usage or service crash. Patc...

Important: Red Hat Security Advisory: pcre security update

Updated pcre packages that resolve several security issues are now available for Red Hat Enterprise Linux 4. This update has been rated as having important security impact by the Red Hat Security Response Team. PCRE is a Perl-compatible regular expression library. Flaws were discovered in the way...

Important: Red Hat Security Advisory: pcre security update

Updated pcre packages that resolve several security issues are now available for Red Hat Enterprise Linux 3. This update has been rated as having important security impact by the Red Hat Security Response Team. PCRE is a Perl-compatible regular expression library. Flaws were discovered in the way...

Important: Red Hat Security Advisory: pcre security update

Updated pcre packages that resolve several security issues are now available for Red Hat Enterprise Linux 5. This update has been rated as having important security impact by the Red Hat Security Response Team. PCRE is a Perl-compatible regular expression library. Flaws were discovered in the way...

[SECURITY] [DSA 1409-3] New samba packages fix several vulnerabilities

------------------------------------------------------------------------ Debian Security Advisory DSA-1409-3 [email protected] http://www.debian.org/security/ Steve Kemp November 29, 2007 http://www.debian.org/security/faq -...

Immunity Canvas: QT73_RTSP

Name| qt73rtsp ---|--- CVE| CVE-2007-6166 Exploit Pack| CANVAS Description| QuickTime 7.3 RTSP Buffer Overflow Notes| CVE Name: CVE-2007-6166 VENDOR: Apple Repeatability: Infinite client side - no crash CVE Url: http://www.cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-6166 Date public: 11/23/20...

CVE-2007-6168

SQL injection vulnerability in default.asp in VU Case Manager allows remote attackers to execute arbitrary SQL commands via the username parameter, a different vector than CVE-2007-6143. NOTE: the provenance of this information is unknown; the details are obtained solely from third party...

Sql injection

SQL injection vulnerability in admin/index2.asp in GOUAE DWD Realty allows remote attackers to execute arbitrary SQL commands via the uname parameter, a different vector than CVE-2007-6163. NOTE: the provenance of this information is unknown; the details are obtained solely from third party...

CVE-2007-6158

Proverbs Web Calendar 1.1 and earlier have multiple SQL injection vulnerabilities in caladmin.inc.php that allow remote attackers to execute arbitrary SQL commands via loginname (Username) and loginpass (Password) parameters to caladmin.php. Affected component is caladmin.inc.php; vulnerability d...

CVE-2007-6163

CVE-2007-6163: Concrete details across connected sources show a SQL injection vulnerability in admin/index2.asp of GOUAE DWD Realty. The pword (Password) parameter is exploitable to execute arbitrary SQL commands, enabling remote attackers to interact with the database. Related entries also note ...

CVE-2007-6167

CVE-2007-6167 concerns an untrusted search path vulnerability in the SUSE Linux component yast2-core . An attacker could cause local code execution by placing a malicious yast2 module in the current working directory, taking advantage of a search path weakness. The issue impacts local users who c...

CVE-2007-6165

CVE-2007-6165 affects Mac OS X Mail.app on Leopard (10.5.1). The vulnerability allows user-assisted remote code execution via an AppleDouble attachment whose file type appears safe but contains a script in the resource fork, without warning that a separate program will run. This is a regression r...

CVE-2007-6156

BASE/Base Analysis and Security Engine (BASE) before 1.3.9 contains cross-site scripting in base_qry_main.php, exploitable via sig[0] and sig[1] parameters. This affects BASE 1.3.8 and earlier releases per CVE-2007-6156. Impact: remote attackers can inject arbitrary web script/HTML. Mitigation: u...