Solaris 9 (sparc) : 116669-40

SunOS 5.9: md patch. Date this patch was last updated by Sun : Sep/29/11 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc'; include'compat.inc'; if description scriptid28280;...

IBM Director fails to properly time-out connection requests from clients

Overview IBM Director Systems, specifically CIM Server, contains a denial-of-service vulnerability that can allow a remote, unauthenticated attacker to render Director inoperative. Description IBM Director is a suite of system management tools.When a rogue connection request is made to IBM Direct...

Solaris 10 (x86) : 126257-07

SunOS 5.10x86: rpc.metad patch. Date this patch was last updated by Sun : Feb/07/08 %NASLMINLEVEL 70300 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a recommended security fix. Disabled on 2011/09/17. C Tenable Network Security, Inc. if !...

CVE-2007-6026

CVE-2007-6026 covers a stack-based buffer overflow in the Microsoft Jet Database Engine (msjet40.dll, 4.0.8618.0) used by Access 2003 in Office 2003 SP3. The vulnerability arises when parsing MDB files with a crafted column structure, allowing a user-assisted attacker to execute arbitrary code. T...

Ubuntu 6.06 LTS / 6.10 / 7.04 / 7.10 : samba regression (USN-544-2)

USN-544-1 fixed two vulnerabilities in Samba. Fixes for CVE-2007-5398 are unchanged, but the upstream changes for CVE-2007-4572 introduced a regression in all releases which caused Linux smbfs mounts to fail. Additionally, Dapper and Edgy included an incomplete patch which caused configurations...

Fedora 8 : samba-3.0.27-0.fc8 (2007-3403)

Security Fixes : - CVE-2007-4572 - CVE-2007-5398 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues...

GLSA-200711-24 : Mozilla Thunderbird: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-200711-24 Mozilla Thunderbird: Multiple vulnerabilities Multiple vulnerabilities have been reported in Mozilla Thunderbird's HTML browser engine CVE-2007-5339 and JavaScript engine CVE-2007-5340 that can be exploited to cause a...

Debian DSA-1407-1 : cupsys - buffer overflow

Alin Rad Pop discovered that the Common UNIX Printing System is vulnerable to an off-by-one buffer overflow in the code to process IPP packets, which may lead to the execution of arbitrary code. The cupsys version in the old stable distribution sarge is not vulnerable to arbitrary code execution...

Mandrake Linux Security Advisory : samba (MDKSA-2007:224-3)

The samba developers discovered that nmbd could be made to overrun a buffer during the processing of GETDC logon server requests. If samba is configured as a Primary or Backup Domain Controller, this could be used by a remote attacker to send malicious logon requests and possibly cause a denial o...

Unfixed XSS vulnerability at www.ellisislandrecords.org

Security researcher Uber0n, has submitted on 20/11/2007 a cross-site-scripting XSS vulnerability affecting www.ellisislandrecords.org, which at the time of submission ranked 303097 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 23/11/2007. It ...

HP-UX PHSS_37183 : HP OpenView Operations (OVO) Running on HP-UX and Solaris, Remote Unauthorized Access, Denial of Service (DoS) (HPSBMA02288 SSRT071465 rev.1)

s700800 11.X OV OVO8.X PARISC JavaGUI client A.08.27 : Potential security vulnerabilities have been identified in OpenView Operations OVO running on HP-UX and Solaris. These vulnerabilities may be exploited remotely to gain unauthorized access or to create a Denial of Service DoS. References: SUN...

openSUSE 10 Security Update : perl (perl-4675)

This update fixes a buffer overflow in perl's regex engine. CVE-2007-5116 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update perl-4675. The text description of this plugin is C SUSE LLC...

openSUSE 10 Security Update : pcre (pcre-4683)

Specially crafted regular expressions could lead to a buffer overflow in the pcre library. Applications using pcre to process regular expressions from untrusted sources could therefore potentially be exploited by attackers to execute arbitrary code. CVE-2007-1659, CVE-2007-1660, CVE-2007-1661,...

Fedora 8 : tomcat5-5.5.25-1jpp.1.fc8 (2007-3474)

Updated Tomcat5 packages that fix several security bugs are now available for Fedora Core 8. This update includes fixes to the following : - CVE-2007-1355 - CVE-2007-3386 - CVE-2007-3385 - CVE-2007-3382 - CVE-2007-2450 - CVE-2007-2449 - CVE-2007-5461 - CVE-2007-1358 All users of tomcat are advise...

FreeBSD : php -- multiple security vulnerabilities (392b5b1d-9471-11dc-9db7-001c2514716c)

PHP project reports : Security Enhancements and Fixes in PHP 5.2.5 : - Fixed dl to only accept filenames. Reported by Laurent Gaffie. - Fixed dl to limit argument size to MAXPATHLEN CVE-2007-4887. Reported by Laurent Gaffie. - Fixed htmlentities/htmlspecialchars not to accept partial multibyte...

HP-UX PHSS_35457 : HP OpenView Operations (OVO) Agents Running Shared Trace Service, Remote Arbitrary Code Execution (HPSBMA02239 SSRT061260 rev.3)

s700800 11.X OV OVO8.X Core Agt Tru64 A.08.17 : A potential security vulnerability has been identified in HP OpenView Operations OVO Agents running Shared Trace Service. The vulnerability could be remotely exploited to execute arbitrary code. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. T...

CVE-2007-6025

The CVE-2007-6025 entry is substantiated by multiple connected records describing a stack-based buffer overflow in driver_wext.c of wpa_supplicant 0.6.0 and earlier, exploitable by remote attackers via crafted TSF data to cause a denial of service (crash). Affected software is wpa_supplicant up t...

CVE-2007-6013

Wordpress 1.5 through 2.3.1 uses cookie values based on the MD5 hash of a password MD5 hash, which allows attackers to bypass authentication by obtaining the MD5 hash from the user database, then generating the authentication cookie from that hash...

CVE-2007-6013

Wordpress 1.5 through 2.3.1 uses cookie values based on the MD5 hash of a password MD5 hash, which allows attackers to bypass authentication by obtaining the MD5 hash from the user database, then generating the authentication cookie from that hash...

CVE-2007-6013

CVE-2007-6013 affects WordPress 1.5 through 2.3.1. The issue stems from authentication cookies generated from an MD5 hash of a password hash, allowing an attacker who can access the user database to create a valid authentication cookie and bypass login. The connected OpenVAS entries reference Fed...