CVE-2007-4686

The CVE-2007-4686 issue affects Apple Mac OS X xnu kernel (tty.c) on 10.4–10.4.10. A crafted TIOCSETD ioctl can take advantage of a signedness/overflow flaw in ttioctl, allowing a local attacker to cause a system crash or gain kernel privileges by abusing the line-discipline switch in ttioctl. Th...

CVE-2007-4691

Apple Mac OS X 10.4–10.4.10 is affected by CVE-2007-4691, where NSURL’s case-sensitive local-file URL checks allow bypassing intended restrictions on local file system URLs. Consequence: potential access to local or mounted volumes without proper warnings. Mitigation: upgrade to Mac OS X 10.4.11 ...

CVE-2007-5977

Cross-site scripting XSS vulnerability in dbcreate.php in phpMyAdmin before 2.11.2.1 allows remote authenticated users with CREATE DATABASE privileges to inject arbitrary web script or HTML via a hex-encoded IMG element in the db parameter in a POST request, a different vulnerability than...

CVE-2007-5981

Lantronix SCS3200 does not properly handle public-key requests, which allows remote attackers to cause a denial of service unresponsive device via unspecified keyscan requests. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

CVE-2007-5977

Cross-site scripting XSS vulnerability in dbcreate.php in phpMyAdmin before 2.11.2.1 allows remote authenticated users with CREATE DATABASE privileges to inject arbitrary web script or HTML via a hex-encoded IMG element in the db parameter in a POST request, a different vulnerability than...

CVE-2007-5983

The CVE affects the Justin Hagstrom AutoIndex PHP Script prior to 2.2.3, where the vulnerable component is index.php. The root cause is a Cross-site Scripting (XSS) vulnerability that allows remote attackers to inject arbitrary web script or HTML through the PATH_INFO (PHP_SELF). The exploitation...

CVE-2007-5979

The CVE-2007-5979 entry describes a Cross-site scripting (XSS) vulnerability in F5 Firepass 4100 SSL VPN, specifically in the download_plugin.php3 component. The root cause is untrusted input in the backurl parameter, allowing remote attackers to inject arbitrary web script or HTML. Affected soft...

[Full-disclosure] iDefense Security Advisory 11.14.07: Apple Mac OS X Mach Port Inheritance Privilege Escalation Vulnerability

iDefense Security Advisory 11.14.07 http://labs.idefense.com/intelligence/vulnerabilities/ Nov 14, 2007 I. BACKGROUND Mach ports are used to provide inter-process communication IPC facilities on Mac OS X. More information can be found on the vendor's site at the following URL...

Unfixed XSS vulnerability at www.elephant.se

Security researcher Uber0n, has submitted on 15/11/2007 a cross-site-scripting XSS vulnerability affecting www.elephant.se, which at the time of submission ranked 898939 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 23/11/2007. It is currentl...

CVE-2007-5976

CVE-2007-5976 affects phpMyAdmin prior to 2.11.2.1. The vulnerability is an SQL injection in db_create.php that allows remote authenticated users with CREATE DATABASE privileges to execute arbitrary SQL commands via the db parameter. This can enable database modification or creation under the att...

CVE-2007-5974

CVE-2007-5974 is an SQL injection vulnerability in the mailer.php component of JPortal 2, enabling remote attackers to manipulate the database via the to parameter. The NVD/NVD-derived entries confirm the affected software (JPortal 2) and the vulnerable parameter, with base severity HIGH (CVSS 2....

openSUSE 10 Security Update : rubygem-activesupport (rubygem-activesupport-4568)

A cross site scripting XSS bug allowed attackers to execute JavaScript code in the context of other websites CVE-2007-3227. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update...

CVE-2007-5985

CVE-2007-5985: Multiple XSS vulnerabilities in BtiTracker prior to 1.4.5 allow remote attackers to inject arbitrary script/HTML via unspecified vectors to account.php, moresmiles.php, recover.php, or via the to parameter in usercp.php. The NVD entry confirms the same description, with a base scor...

CVE-2007-5975

CVE-2007-5975 affects TBSource’s index.php as used in TBDev and TorrentStrike 0.4. The vulnerability is a SQL injection in the choice parameter, exploitable by remote authenticated users to execute arbitrary SQL commands. The NVD entry lists a CVSS v2 base score of 6.5 (Medium) with network acces...

CVE-2007-5977

CVE-2007-5977 is an XSS vulnerability in phpMyAdmin (db_create.php) affecting versions before 2.11.2.1, where remote authenticated users with CREATE DATABASE privileges can inject script via a hex-encoded IMG in the db parameter of a POST request. Connected advisories note related issues in phpMy...

Unfixed XSS vulnerability at www.cec.org

Security researcher Uber0n, has submitted on 15/11/2007 a cross-site-scripting XSS vulnerability affecting www.cec.org, which at the time of submission ranked 242614 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 23/11/2007. It is currently...

CVE-2007-5987

The CVE-2007-5987 issue affects BtiTracker prior to 1.4.5. It allows remote attackers to bypass access protections via direct requests to details.php when guest torrent viewing is disabled, enabling reading torrent details and potentially modifying a torrent owned by a guest. Root cause is improp...

CVE-2007-4692

The CVE-2007-4692 issue affects Apple Safari 3 (pre-Beta Update 3.0.4) on Windows and Mac OS X 10.4–10.4.10. The vulnerability arises in the tabbed browsing feature, allowing remote attackers to spoof HTTP authentication for other sites by displaying an authentication sheet for a non-active tab, ...

Fedora 7 : php-pear-MDB2-2.4.1-2.fc7 / php-pear-MDB2-Driver-mysql-1.4.1-3.fc7 / etc (2007-3369)

This update fixes a security flaw CVE-2007-5934 with critical impact. All users of php-pear-MDB2 are strongly advised to upgrade to these updated packages. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has...

Fedora 8 : php-pear-MDB2-2.4.1-2.fc8 / php-pear-MDB2-Driver-mysql-1.4.1-3.fc8.1 / etc (2007-3376)

This update fixes a security flaw CVE-2007-5934 with critical impact. All users of php-pear-MDB2 are strongly advised to upgrade to these updated packages. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has...