CVE-2007-6054

The CVE-2007-6054 entry describes an XSS vulnerability in the login page of Aruba 800 Mobility Controller (versions 2.5.4.18 and earlier; 2.4.8.6-FIPS and earlier). The issue occurs in the management interface via PATH_INFO to the /screens URI, related to the url variable, allowing remote attacke...

CVE-2007-6048

CVE-2007-6048 : IBM DB2 UDB 9.1 before Fixpak 4 allegedly uses incorrect permissions on ACLs for DB2NODES.CFG. The NVD entry notes unknown impact and attack vectors; connected sources also reference this ACL issue among several vulnerabilities in DB2 9.x before Fix Pack 4. No explicit exploitatio...

CVE-2007-6046

CVE-2007-6046 concerns IBM DB2 UDB 9.1 before Fixpak 4, with an unspecified vulnerability in unspecified setuid programs. The issue allows local users to impact the system in an unspecified manner. Documented details indicate the vulnerability is local-exploit, with no explicit vector, scope, or ...

CVE-2007-6060

CVE-2007-6060 affects AhnLab Antivirus 3 Internet Security 2008 Platinum. The ZIP header’s Filename length field can be larger than the actual filename, to which the program appends data, allowing a remote attacker to cause a denial of service (machine crash) and potentially execute arbitrary cod...

CVE-2007-6044

Technical details for CVE-2007-6044 are not publicly available in the provided documents. Monitor for updates; no concrete affected product/version or impact is disclosed here.

CVE-2007-6059

CVE-2007-6059 affects JavaMail/Javamail where processing a sequence of invalid logins using the same e-mail as username and password, with the domain portion triggering a Java UnknownHostException, can cause a denial of service via connection pool exhaustion and a SQLNestedException. SUSE/NVD/PT-...

CVE-2007-6053

CVE-2007-6053 affects IBM DB2 UDB 9.1 before Fixpak 4, where handling of a large number of file descriptors is not robust, potentially leading to memory corruption. The vendor description is vague, and the available documents do not provide a confirmed security impact, exploit details, or a state...

CVE-2007-6057

CVE-2007-6057 affects the datecomm Social Networking Script (also known as the Myspace Clone Script). The vulnerability is a PHP remote file inclusion in the script’s index.php, allowing an attacker to execute arbitrary PHP code by supplying a URL in the pg parameter. This is confirmed across mul...

CVE-2007-6049

IBM DB2 UDB 9.1 before Fixpak 4 is affected by an unspecified vulnerability in the SSL LOAD GSKIT action that involves a call to dlopen when the effective UID is root. The issue is reported in CVE-2007-6049; the impact details are not fully disclosed in the provided documents beyond the initial d...

CVE-2007-6055

CVE-2007-6055 is a cross-site scripting (XSS) vulnerability affecting Liferay Portal 4.1.0 and 4.1.1, exploitable via the login parameter in c/portal/login. The issue arises from a regression after an earlier fix, as noted in the description. Connected documents provide corroborating context (e.g...

CVE-2007-6052

CVE-2007-6052 affects IBM DB2 UDB 9.1 before Fixpak 4. The issue is in vector aggregation, which may allow a remote attacker to cause a denial of service via a divide-by-zero error/crash in the DBMS. The vendor description is noted as vague regarding its security relevance, but multiple connected...

CVE-2007-6047

CVE-2007-6047 affects IBM DB2 UDB 9.1 before Fixpak 4. The vulnerability lies in the DB2DART tool, where invocation of TPUT could allow an attacker to execute arbitrary commands as the DB2 instance owner. Connected sources confirm the issue and reference Fixpak 4 as the remediation point. Practic...

Design/Logic Flaw

The CryptGenRandom function in Microsoft Windows 2000 generates predictable values, which makes it easier for context-dependent attackers to reduce the effectiveness of cryptographic mechanisms, as demonstrated by attacks on 1 forward security and 2 backward security, related to use of eight...

CVE-2007-6043

The CryptGenRandom function in Microsoft Windows 2000 generates predictable values, which makes it easier for context-dependent attackers to reduce the effectiveness of cryptographic mechanisms, as demonstrated by attacks on 1 forward security and 2 backward security, related to use of eight...

CVE-2007-6043

CVE-2007-6043 concerns the CryptGenRandom generator on Windows 2000, which produces predictable values. The description states this can let context-dependent attackers weaken cryptographic mechanisms, demonstrated via attacks on forward and backward security related to the use of eight RC4 instan...

CVE-2007-6042

The CVE-2007-6042 entry concerns SWSoft Confixx Professional 3.2.1, where a PHP remote file inclusion vulnerability exists in fehler.inc.php. An attacker can cause arbitrary PHP code execution by supplying a URL in an unspecified parameter, enabling potential remote control of affected systems. T...

CVE-2007-6039

CVE-2007-6039 affects PHP 5.2.5 and earlier. The vulnerability stems from context-dependent handling in string parameters passed to dgettext, dcgettext/gettext, dngettext/ngettext, and the stream_wrapper_register classname, enabling a local attacker to trigger a denial of service (application cra...

CVE-2007-6039

PHP 5.2.5 and earlier allows context-dependent attackers to cause a denial of service application crash via a long string in 1 the domain parameter to the dgettext function, the message parameter to the 2 dcgettext or 3 gettext function, the msgid1 parameter to the 4 dngettext or 5 ngettext...

CVE-2007-6041

CVE-2007-6041 describes a buffer overflow in the RoR server’s Sequencer::queueMessage (sequencer.cpp) that is triggered by a MSG2_USE_VEHICLE message containing a nickname followed by a vehicle name, where the combined length overflows a buffer. Affected software is Rigs of Rods (RoR) prior to 0....

CVE-2007-5899

CVE-2007-5899 affects PHP before 5.2.5. The vulnerability in output_add_rewrite_var rewrites local forms when the ACTION attribute references a non-local URL, enabling a remote attacker to read requests for that URL and potentially expose the user’s session information (e.g., session IDs) via a r...