CVE-2007-5789

The CVE-2007-5789 entry describes the Grandstream HT-488 0.1 as vulnerable to a denial-of-service via a flood of fragmented packets sent to UDP/TCP port 5060. The underlying fault is not elaborated in the provided materials beyond the consumer-facing impact (device crash) and remote exploitabilit...

CVE-2007-5785

CVE-2007-5785 describes an SQL injection in JobSite Professional 2.0, affecting the vulnerable component: file.php. The flaw allows remote attackers to execute arbitrary SQL commands via the id parameter, with a CVSS v2 base score of 7.5 (HIGH) and impacts to confidentiality, integrity, and avail...

CVE-2007-5787

CVE-2007-5787 affects Micro Login System 1.0. The vulnerability is due to insufficient access control that allows files containing passwords to be accessed from the web root. Specifically, an attacker can download a password file (userpwd.txt) by directly requesting it, enabling unauthorized disc...

CVE-2007-5781

CVE-2007-5781 is a PHP remote file inclusion vulnerability in inc/sige_init.php of Sige 0.1 that allows remote attackers to execute arbitrary PHP code via a URL in the SYS_PATH parameter. Affected component: sige_init.php (Sige 0.1). The vulnerability enables arbitrary code execution with network...

CVE-2007-5788

CVE-2007-5788 affects Grandstream HT-488 (firmware 0.1) with a buffer overflow in the SIP parser. A crafted SIP INVITE message can cause a remote denial of service (device crash). Connected records confirm the same vulnerability across multiple sources, but do not provide additional technical det...

CVE-2007-5777

CVE-2007-5777 affects Blue-Collar Productions i-Gallery 3.4. The vendor’s application stores sensitive information under the web root with insufficient access control, permitting remote attackers to download a file (igallery.mdb) containing a base64-encoded password via a direct request. The NVD ...

CVE-2007-5772

CVE-2007-5772 describes a direct static code injection in the Flatnuke 3 download module. The vulnerability allows remote authenticated administrators to inject arbitrary PHP code into a file named description.it.php under a subdirectory of Download/ by saving a description and setting fneditmode...

CVE-2007-5786

CVE-2007-5786 documents multiple PHP remote file inclusion (RFI) vulnerabilities in GoSamba 1.0.1. The affected component is GoSamba’s PHP code, where the include_path parameter can be controlled to influence file inclusion in a set of files located under include/ (and including: HTML_oben.php, i...

CVE-2007-5775

CVE-2007-5775 affects BitDefender Online Scanner ActiveX controls (OScan.ocx / OScan8.ocx). The vulnerability is a buffer overflow in the ActiveX control’s InitX/InitX-like handling and related Unicode processing, caused by improper validation and a double Unicode decoding, enabling a remote atta...

openSUSE 10 Security Update : cups (cups-4598)

A missing length check in the IPP implementation of cups could lead to a buffer overflow. Attackers could exploit that to potentially execute arbitrary code with root privileges CVE-2007-4351. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this...

openSUSE 10 Security Update : libvorbis (libvorbis-4583)

Specially crafted OGG files could crash libvorbis or make it run into an endless loop CVE-2007-4029, CVE-2007-4065, CVE-2007-4066. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update libvorbis-458...

openSUSE 10 Security Update : t1lib (t1lib-4592)

A buffer overflow in t1lib could potentially be exploited to execute arbitrary code via specially crafted files CVE-2007-4033. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update t1lib-4592. The...

RHEL 5 : cups (RHSA-2007:1020)

The remote Redhat Enterprise Linux 5 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2007:1020 advisory. - cups boundary error CVE-2007-4351 Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported...

BrightStor ARCserve Backup LGServer rxrLogin buffer overflow

Added: 11/01/2007 CVE: CVE-2007-5003 BID: 24348 OSVDB: 41353 Background BrightStor ARCserve Backup for Laptops and Desktops is an automated backup solution optimized for low-bandwidth, intermittent network connections. Problem A buffer overflow vulnerability in the rxrLogin function allows remote...

CVE-2007-5768

The CVE-2007-5768 entry affects the Globe7 soft phone client version 7.3, which transmits username and password in cleartext over HTTP. This exposes credentials to network eavesdropping, enabling potential disclosure of sensitive information. The vulnerability is a information disclosure issue ca...

CVE-2007-4351

CVE-2007-4351 concerns the Common UNIX Printing System (CUPS) before patch era, in which an off-by-one/IPP tag handling flaw in the ippReadIO path could be exploited by remote attackers to crash cupsd via crafted IPP requests. The issue affects CUPS 1.3.3 and is documented across multiple advisor...

CVE-2007-2957

CVE-2007-2957 affects McAfee E-Business Server: integer overflow in authentication packet handling leads to a heap-based buffer overflow. Impact: remote code execution. Affected: Solaris < 8.5.3; Linux/HP-UX/AIX

CVE-2007-5751

Liferea before 1.4.6 uses weak permissions 0644 for the feedlist.opml backup file, which allows local users to obtain credentials...

CVE-2007-4345

CVE-2007-4345 : A buffer overflow in IMail Client 9.22 (shipped with IPSwitch IMail Server 2006.22) can be triggered by a long boundary parameter in multipart MIME data. This remote vulnerability allows an attacker to execute arbitrary code on the affected system with the user’s privileges.

CVE-2007-2264

The CVE-2007-2264 issue is a heap overflow in RealNetworks RealPlayer/RealOne/HelixPlayer when processing RA/RAM headers with an overly large size field. Affected products include RealPlayer 8, 10, 10.1 (and possibly 10.5), RealOne Player 1 and 2, and RealPlayer Enterprise. The underlying cause i...