CVE-2007-5928

OpenBase 10.0.5 and earlier is affected. Remote authenticated users can trigger a free of an arbitrary memory location by supplying long strings in a SELECT statement. The root cause is unclear, with indications it may be a buffer overflow. Affected product/version: OpenBase

CVE-2007-5924

The CVE-2007-5924 entry describes a cross-site scripting (XSS) vulnerability in the Web Server (HTTP) task of IBM Lotus Domino. Affected products are IBM Lotus Domino versions prior to 6.5.6 FP2 and 7.x prior to 7.0.2 FP2. The vulnerability allows remote authenticated users to inject arbitrary we...

CVE-2007-5929

CVE-2007-5929 describes a buffer overflow in OpenBase

CVE-2007-5914

CVE-2007-5914 | Affects JBC Explorer 7.20 RC1 and earlier. Vulnerability in dirsys/modules/config/post.php allows direct static code injection if the DEBUG parameter is manipulated, enabling arbitrary PHP code execution via config.inc.php. The issue is tied to an upstream condition where an authe...

CVE-2007-5917

CVE-2007-5917 is a CSRF vulnerability in Skalinks 1.5 and earlier, affecting admin/admin_account.php. The issue allows remote attackers to add arbitrary privileged administrator accounts via the admin_name, admin_password, admin_type, and Add_admin parameters. No remediation steps or patch versio...

CVE-2007-5927

Directory traversal vulnerability in OpenBase 10.0.5 and earlier allows remote authenticated users to create files with arbitrary contents via a .. dot dot in the first argument to the GlobalLog stored procedure. NOTE: this can be leveraged to execute arbitrary code using CVE-2007-5926...

CVE-2007-5910

CVE-2007-5910 is a stack-based buffer overflow in Autonomy/Verity KeyView Viewer, Filter, and Export SDK prior to 9.2.0.12, exploited via crafted WordPerfect (WPD) attachments. It impacts Lotus Notes (wp6sr.dll) and other products (ActivePDF DocConverter, etc.), enabling remote code execution. Mi...

CVE-2007-5926

CVE-2007-5926 and CVE-2007-5927 describe vulnerabilities in OpenBase 10.0.5 and earlier. The issues allow remote authenticated users to (1) execute arbitrary commands by passing shell metacharacters to stored procedures such as AsciiBackup and OEMLicenseInstall, and (2) perform directory traversa...

CVE-2007-5916

The CVE-2007-5916 entry describes an SQL injection in the login page of phphelpdesk 0.6.16, exploitable via unspecified login-related parameters and allowing remote execution of arbitrary SQL commands. The connected documents reiterate the same description; no remediation, exploit specifics, or a...

CVE-2007-5911

Multiple stack-based buffer overflows in the AxMetaStream ActiveX control in AxMetaStream.dll 3.3.2.26 in Viewpoint Media Player 3.2 allow remote attackers to execute arbitrary code via a long string argument to the 1 BroadcastKey, 2 BroadcastKeyFileURL, 3 Component, 4 ComponentClassID, 5...

Unfixed XSS vulnerability at www.romania.org

Security researcher BeyazKurt, has submitted on 11/10/2007 a cross-site-scripting XSS vulnerability affecting www.romania.org, which at the time of submission ranked 213204 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 01/11/2007. It is...

Ubuntu 6.06 LTS / 6.10 / 7.04 : linux-source-2.6.15/2.6.17/2.6.20 vulnerabilities (USN-464-1)

Philipp Richter discovered that the AppleTalk protocol handler did not sufficiently verify the length of packets. By sending a crafted AppleTalk packet, a remote attacker could exploit this to crash the kernel. CVE-2007-1357 Gabriel Campana discovered that the doipv6setsockopt function did not...

Ubuntu 6.06 LTS / 6.10 / 7.04 : mozilla-thunderbird vulnerabilities (USN-469-1)

Gaetan Leurent showed a weakness in APOP authentication. An attacker posing as a trusted server could recover portions of the user's password via multiple authentication attempts. CVE-2007-1558 Various flaws were discovered in the layout and JavaScript engines. By tricking a user into opening a...

Ubuntu 5.10 / 6.06 LTS / 6.10 : postgresql-7.4/-8.0/-8.1 vulnerabilities (USN-417-1)

Jeff Trout discovered that the PostgreSQL server did not sufficiently check data types of SQL function arguments in some cases. An authenticated attacker could exploit this to crash the database server or read out arbitrary locations in the server's memory, which could allow retrieving database...

Ubuntu 5.10 / 6.06 LTS / 6.10 : samba vulnerabilities (USN-419-1)

A flaw was discovered in Samba's file opening code, which in certain situations could lead to an endless loop, resulting in a denial of service. CVE-2007-0452 A format string overflow was discovered in Samba's ACL handling on AFS shares. Remote users with access to an AFS share could create craft...

Ubuntu 5.10 / 6.06 LTS / 6.10 : xmms vulnerabilities (USN-445-1)

Sven Krewitt of Secunia Research discovered that XMMS did not correctly handle BMP images when loading GUI skins. If a user were tricked into loading a specially crafted skin, a remote attacker could execute arbitrary code with user privileges. Note that Tenable Network Security has extracted the...

Ubuntu 7.04 : samba regression (USN-460-2)

USN-460-1 fixed several vulnerabilities in Samba. The upstream changes for CVE-2007-2444 had an unexpected side-effect in Feisty. Shares configured with the 'force group' option no longer behaved correctly. This update corrects the problem. We apologize for the inconvenience. Paul Griffith and...

Ubuntu 5.10 / 6.06 LTS / 6.10 : mozilla-thunderbird vulnerabilities (USN-431-1)

The SSLv2 protocol support in the NSS library did not sufficiently check the validity of public keys presented with a SSL certificate. A malicious SSL website using SSLv2 could potentially exploit this to execute arbitrary code with the user's privileges. CVE-2007-0008 The SSLv2 protocol support ...

CVE-2007-4570

CVE-2007-4570 concerns an algorithmic complexity vulnerability in the MCS translation daemon (mcstrans) version 0.2.3 that allows a local attacker to cause a denial of service by targeting a large range of compartments in sensitivity labels. Public documents from various advisories (ELSA-2007-054...

Ubuntu 7.04 : linux-source-2.6.20 vulnerabilities (USN-510-1)

A flaw was discovered in the PPP over Ethernet implementation. Local attackers could manipulate ioctls and cause kernel memory consumption leading to a denial of service. CVE-2007-2525 An integer underflow was discovered in the cpuset filesystem. If mounted, local attackers could obtain kernel...