DSA-1391-1 icedove - several vulnerabilities

Bulletin has no description...

CVE-2007-5579

Pligg CMS 9.5 is affected by CVE-2007-5579 through login.php, where a guessable confirmation code enables password reset by an attacker knowing a username. The root cause is a predictable confirmationcode parameter used during forgotten-password flow, allowing an unauthorized password reset with ...

CVE-2007-5578

BASE is affected: the Basic Analysis and Security Engine (BASE) before version 1.3.8 fails to exit after issuing a redirect, enabling remote attackers to bypass authentication via multiple scripts (notably base_main.php and base_qry_alert.php). Exploitation details are not provided in the connect...

CVE-2007-5578

Basic Analysis and Security Engine BASE before 1.3.8 sends a redirect to the web browser but does not exit, which allows remote attackers to bypass authentication via 1 basemain.php, 2 baseqryalert.php, and possibly other vectors...

Immunity Canvas: PHPDJ_INCLUDE

Name| phpdjinclude ---|--- CVE| CVE-2007-5574 Exploit Pack| CANVAS Description| phpDJ remote file include Notes| CVSS: 6.8 Repeatability: Infinite VENDOR: phpdj CVE Url: http://www.cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-5574 CVE Name: CVE-2007-5574...

CVE-2007-5570

CVE-2007-5570 concerns Cisco Firewall Services Module (FWSM) versions 3.2(1), and 3.1(5) and earlier. The vulnerability allows remote attackers to cause a denial-of-service (device reload) by sending a crafted HTTPS request (aka CSCsi77844). The available connected documents confirm the affected ...

CVE-2007-5576

BEA Tuxedo 8.0 prior to RP392 and 8.1 prior to RP293, and WebLogic Enterprise 5.1 prior to RP174, disclose passwords in cleartext via local commands (cnsbind, cnsunbind, cnsls), enabling physically proximate attackers to obtain sensitive information. Affected components: password handling in the ...

CVE-2007-5567

CVE-2007-5567 describes a PHP remote file inclusion vulnerability in _lib/fckeditor/upload_config.php in Galmeta Post 0.11, allowing remote code execution via a URL in the DDS parameter. Affected: Galmeta Post 0.11; vulnerability caused by RFI in upload_config.php. Exploitation and remediation de...

CVE-2007-5565

CVE-2007-5565 affects phpSCMS 0.0.1-Alpha1 via a PHP remote file inclusion in includes/functions.php, exploitable by supplying a URL in the dir parameter. The issue is disputed by CVE because the code is in a function not accessible by direct request. Impact, per sources: remote code execution. R...

CVE-2007-5572

The provided records identify CVE-2007-5572 as CSRF vulnerabilities in Simple PHP Blog (SPHPBlog) 0.4.9. The affected component is the blog’s admin-facing functionality, where remote attackers could trigger delete actions by supplying (1) block_id to add_block.php or (2) link_id to add_link.php. ...

CVE-2007-5577

CVE-2007-5577 affects Joomla! (pre-1.0.13, aka Sunglow). The vulnerability allows remote XSS via the Section Manager’s Title/Section Name fields and multiple fields in New Menu Item, enabling injection of arbitrary script/HTML. Affected component/versions are stated; impact is client-side script ...

CVE-2007-5568

Cisco PIX/ASA appliances running 7.0–8.0 and Cisco FWSM 3.1(5) and earlier are affected by CVE-2007-5568, where remote attackers can cause a denial of service (device reload) through crafted MGCP packets. The root cause is improper handling of MGCP traffic (and related TLS/traffic handling per PT...

CVE-2007-5573

CVE-2007-5573 affects LimeSurvey versions 1.5.2 and earlier, where a PHP remote file inclusion vulnerability exists in classes/core/language.php . The rootdir parameter can be supplied via the URL to remotely execute arbitrary PHP code, representing a remote code execution via an RFI flaw. The pr...

CVE-2007-5574

CVE-2007-5574 affects PHPDJ 0.5. A vulnerability in the djpage.php script allows remote attackers to execute arbitrary PHP code via a URL in the page parameter (remote file inclusion). CVSS base score 6.8 (Medium) per NVD; exploitation details beyond a reference exist in linked sources, but no re...

CVE-2007-5566

CVE-2007-5566 concerns PHPBlog 0.1 Alpha with multiple PHP remote file inclusion vulnerabilities: a URL in the blog_localpath parameter to includes/functions.php or includes/email.php can allow remote code execution. The CVE note explicitly says the issue is disputed because the code is in functi...

CVE-2007-5569

Cisco PIX/ASA appliances running 7.1–7.2 are affected by a denial-of-service that can cause a device reload when processing MGCP or TLS traffic. The issue manifests when handling crafted packets to the appliance, with the root cause described as a flaw in processing certain MGCP/TLS data sequence...

CVE-2007-5575

The CVE-2007-5575 entry concerns CSRF in 1024 CMS 1.2.5 that lets remote attackers perform administrator actions. The available details illustrate two examples: an action that creates a file containing PHP code and an action involving the forum component. The documents do not provide concrete exp...

CVE-2007-5548

Multiple stack-based buffer overflows in Command EXEC in Cisco IOS allow local users to gain privileges via unspecified vectors, aka 1 PSIRT-0474975756 and 2 PSIRT-0388256465. NOTE: as of 20071016, the only disclosure is a vague pre-advisory with no actionable information. However, since it is fr...

CVE-2007-5551

Off-by-one error in Cisco IOS allows remote attackers to execute arbitrary code via unspecified vectors that trigger a heap-based buffer overflow. NOTE: as of 20071016, the only disclosure is a vague pre-advisory with no actionable information. However, since it is from a well-known researcher, i...

CVE-2007-5561

Format string vulnerability in the logging function in the Oracle OPMN daemon, as used on Oracle Enterprise Grid Console server 10.2.0.1, allows remote attackers to execute arbitrary code via format string specifiers in the URI in an HTTP request to port 6003, aka Oracle reference number 6296175...