18185 matches found
[SECURITY] [DSA 1406-1] New horde3 packages fix several vulnerabilities
-------------------------------------------------------------------------- Debian Security Advisory DSA 1406-1 [email protected] http://www.debian.org/security/ Thijs Kinkhorst November 9th, 2007 http://www.debian.org/security/faq -...
CVE-2007-5907
CVE-2007-5907 affects Xen (notably Xen 3.1.1 in the initial description) where guests could modify the CR4 TSC from within the guest environment, enabling a local denial of service. The connected documents corroborate that this issue is tied to the Xen feature allowing guests to hide or manipulat...
CVE-2007-5908
CVE-2007-5908 concerns a buffer overflow in the Linux kernel up to 2.6.23, affecting the sysfs_show_available_clocksources and sysfs_show_current_clocksources functions. The vulnerability could allow local users to cause a denial of service or potentially execute arbitrary code via crafted clock ...
xpdf security update
CentOS Errata and Security Advisory CESA-2007:1031-01 Updated xpdf packages that fix several security issues are now available for Red Hat Enterprise Linux 2.1. This update has been rated as having important security impact by the Red Hat Security Response Team. Xpdf is an X Window System-based...
Unfixed XSS vulnerability at isicad.ru
Security researcher Narcoticxs, has submitted on 11/09/2007 a cross-site-scripting XSS vulnerability affecting isicad.ru, which at the time of submission ranked 8686319 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 13/09/2007. It is currently...
Unfixed XSS vulnerability at www.telkarim.com
Security researcher BackDoor, has submitted on 11/09/2007 a cross-site-scripting XSS vulnerability affecting www.telkarim.com, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 13/09/2007. It is currently...
Fixed XSS vulnerability at www.pc-koubou.jp
Security researcher kusomiso.com, has submitted on 11/09/2007 a cross-site-scripting XSS vulnerability affecting www.pc-koubou.jp, which at the time of submission ranked 71871 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 13/09/2007. It is...
Fixed XSS vulnerability at member.twotop.ne.jp
Security researcher kusomiso.com, has submitted on 11/09/2007 a cross-site-scripting XSS vulnerability affecting member.twotop.ne.jp, which at the time of submission ranked 4983365 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 13/09/2007. It ...
Unfixed XSS vulnerability at www.exbilgimarket.com
Security researcher BackDoor, has submitted on 11/09/2007 a cross-site-scripting XSS vulnerability affecting www.exbilgimarket.com, which at the time of submission ranked 878332 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 13/09/2007. It is...
Net-SNMP GETBULK远程拒绝服务漏洞
BUGTRAQ ID: 26378 CVECAN ID: CVE-2007-5846 Net-SNMP是一个免费的、开放源码的SNMP实现，以前称为UCD-SNMP。 Net-SNMP在处理畸形的SNMP GETBULK请求时存在漏洞，远程攻击者可能利用此漏洞导致服务器不可用。 Net-SNMP没有正确地处理SNMP GETBULK请求，如果远程攻击者发送了包含有超长max-repetitions字段的畸形SNMP GETBULK请求的话，就可能导致耗尽大量CPU和内存资源。 0 Net-SNMP net-snmp 5.4.1...
Debian DSA-1404-1 : gallery2 - programming error
Nicklous Roberts discovered that the Reupload module of Gallery 2, a web-based photo management application, allowed unauthorized users to edit Gallery's data file. The oldstable distribution sarge does not contain a gallery2 package. The previous gallery package is not affected by this...
EMC NetWorker Remote Exec service subcmd buffer overflow
Added: 11/09/2007 CVE: CVE-2007-3618 BID: 25375 OSVDB: 39744 Background EMC NetWorker is a centralized data backup solution. Problem A buffer overflow vulnerability in the Remote Exec service nsrexecd.exe allows remote attackers to execute arbitrary commands by sending a long, invalid subcmd to a...
Guidance EnCase fails to detect more than 25 partitions
Overview Guidance Software's EnCase Forensic can only detect the first 25 partitions on a volume. Description Guidance Software's EnCase Forensic is a tool that allows an investigator to acquire and analyze a disk image. EnCase names partitions either c: through z:, with an additional partition...
RHEL 5 : openldap (RHSA-2007:1037)
The remote Redhat Enterprise Linux 5 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2007:1037 advisory. OpenLDAP is an open source suite of LDAP Lightweight Directory Access Protocol applications and development tools. A flaw was found in the way...
EMC NetWorker Remote Exec service subcmd buffer overflow
Added: 11/09/2007 CVE: CVE-2007-3618 BID: 25375 OSVDB: 39744 Background EMC NetWorker is a centralized data backup solution. Problem A buffer overflow vulnerability in the Remote Exec service nsrexecd.exe allows remote attackers to execute arbitrary commands by sending a long, invalid subcmd to a...
RHEL 4 / 5 : tetex (RHSA-2007:1027)
Updated tetex packages that fix several security issues are now available for Red Hat Enterprise Linux 4 and 5. This update has been rated as having important security impact by the Red Hat Security Response Team. TeTeX is an implementation of TeX. TeX takes a text file and a set of formatting...
[SECURITY] [DSA 1404-1] New gallery2 packages fix privilege escalation
-------------------------------------------------------------------------- Debian Security Advisory DSA 1404-1 [email protected] http://www.debian.org/security/ Thijs Kinkhorst November 8th, 2007 http://www.debian.org/security/faq -...
[SECURITY] [DSA 1403-1] New phpmyadmin packages fix cross-site scripting
-------------------------------------------------------------------------- Debian Security Advisory DSA 1403-1 [email protected] http://www.debian.org/security/ Thijs Kinkhorst November 8th, 2007 http://www.debian.org/security/faq -...
Buffer overflow
Buffer overflow in MDSYS.SDOCS in Oracle Database Server 8iR3, 9iR1, 9iR2 up to 9.2.0.6, and 10gR1 up to 10.1.0.4 allows remote authenticated users to cause a denial of service crash and execute arbitrary code via the TRANSFORM function. NOTE: this issue might already be covered by CVE-2007-5515,...