Fedora 7 : pam_ssh-1.92-2.fc7 (2007-1793)

Thu Aug 23 2007 Patrice Dumas 1.92-2 - update to 1.92 - Fix 253959, CVE-2007-0844 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without...

Fedora 7 : GraphicsMagick-1.1.8-2.fc7 (2007-1340)

Maintainance update fixing several security issues and bugs. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional...

Fedora 7 : qt-3.3.8-7.fc7 (2007-2216)

Mon Sep 17 2007 Than Ngo - 1:3.3.8-7 - bz292941, CVE-2007-4137 - Wed Aug 29 2007 Than Ngo - 1:3.3.8-6.fc7.1 - cleanup security patch - Tue Aug 28 2007 Than Ngo - 1:3.3.8-6.fc7 - CVE-2007-3388 qt3 format string flaw - Thu Jun 14 2007 Than Ngo - 1:3.3.8-5.fc7.1 - backport to fix bz243722, bz244148,...

Fedora 7 : thunderbird-2.0.0.4-1.fc7 (2007-0544)

This update fixes two security issues found in the 2.0.0.0 version of Thunderbird. Details at: http://www.mozilla.org/security/announce/2007/mfsa2007-12.html http://www.mozilla.org/security/announce/2007/mfsa2007-15.html Users of Thunderbird are recommended to update to this erratum package which...

[SECURITY] [DSA 1401-1] New iceape packages fix several vulnerabilities

-------------------------------------------------------------------------- Debian Security Advisory DSA 1401-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff November 5th, 2007 http://www.debian.org/security/faq -...

Design/Logic Flaw

Unspecified vulnerability in selectLanguage.do in SSL-Explorer before 0.2.15 allows remote attackers to inject 1 headers or 2 body data in an HTTP transaction, a different vulnerability than CVE-2007-2907. NOTE: some of these details are obtained from third party information...

CVE-2007-5824

webserver.c in mt-dappd in Firefly Media Server 0.2.4 and earlier allows remote attackers to cause a denial of service NULL dereference and daemon crash via a stats method action to /xml-rpc with 1 an empty Authorization header line, which triggers a crash in the wsdecodepassword function; or 2 a...

CVE-2007-5832

CVE-2007-5832 is supported by multiple records (NVD, CVE lists) and connects to SSL-Explorer vulnerabilities. The connected documents provide concrete details: SSL-Explorer prior to 0.2.13 permits remote authenticated users to inject (1) headers or (2) body data into an HTTP transaction, potentia...

CVE-2007-5823

CVE-2007-5823 affects Ben Ng Scribe 0.2 and earlier. The vulnerability is a directory traversal in forum.php, exploitable via the username parameter in a Register action, allowing remote attackers to create or overwrite arbitrary files by using .. (dot dot). The linked sources (NVD/NVD-processed ...

CVE-2007-5834

CVE-2007-5834 is an XSS vulnerability in BosDev BosNews 4 that lets remote attackers inject arbitrary script/HTML via a SCRIPT element in a news post. Supported details from NVD: CVSS2 base score 4.3 (Medium), vector AV:N/AC:M/Au:N/C:N/I:P/A:N; attack requires network access, no authentication, b...

CVE-2007-5836

CVE-2007-5836 documents a SQL injection vulnerability in Amazing Flash AFCommerce Shopping Cart. The affected component/entry points are an unspecified component via the firstname parameter (and related references indicate a similar issue via the search field). The root cause is SQL injection all...

CVE-2007-5830

This CVE (CVE-2007-5830) affects Avaya Messaging Storage Server (MSS) 3.1 before SP1 and Message Networking (MN) 3.1. A vulnerability in the administrative interface allows remote denial-of-service via input validation issues. The NVD entry provides a CVSSv2 base score of 7.8 (HIGH) with network ...

CVE-2007-5827

CVE-2007-5827 affects iscsitarget (iSCSI Enterprise Target) version 0.4.15, where /etc/ietd.conf is created with weak permissions. This allows local users to read passwords stored in that file, resulting in potential credential exposure. The underlying issue is improper access permissions on a cr...

CVE-2007-5828

Cross-site request forgery CSRF vulnerability in the admin panel in Django 0.96 allows remote attackers to change passwords of arbitrary users via a request to admin/auth/user/1/password/. NOTE: this issue has been disputed by Debian, since product documentation includes a recommendation for a CS...

CVE-2007-5824

CVE-2007-5824, CVE-2007-5825 and CVE-2008-1771 affect mt-daapd (Firefly Media Server) and its web/XML-RPC handling. The issues include: (1) insufficient validation and bounds checking of the Authorization HTTP header leading to a heap buffer overflow; (2) format string vulnerabilities in debug lo...

CVE-2007-5837

CVE-2007-5837 affects the yarssr RSS aggregator (version 0.2.2). The root cause is insufficient input sanitising in feed links, allowing remote attackers to trigger execution of arbitrary shell commands via shell metacharacters in a feed link when Gnome default URL handling is disabled. Debian se...

CVE-2007-5822

The CVE-2007-5822 entry affects Ben Ng Scribe 0.2 and earlier, where a flaw in forum.php allows direct static code injection. An attacker can leverage the username parameter in the Register action to cause remote PHP code to be written into a file under regged/. The root cause appears to be impro...

CVE-2007-5828

Cross-site request forgery (CSRF) vulnerability in Django 0.96 is exposed in the admin panel, allowing remote attackers to change passwords via a request to admin/auth/user/1/password/. The issue stems from the default configuration not enabling the CSRF protection module, though Debian notes thi...

CVE-2007-5835

CVE-2007-5835 affects BosDev BosNews 4 and 5, where Install.php does not require authentication for replacing an existing installation or creating a new admin account. The described impact is denial of service via overwritten files and the possibility of obtaining administrative access. No explic...

CVE-2007-5820

CVE-2007-5820 affects Ax Developer CMS (AxDCMS) 0.1.1. It is a directory traversal in index.php that lets remote attackers include and execute arbitrary local files via .. in the module parameter. The provided documents do not specify exploit status or remediation/version fixes; no explicit explo...