CVE-2007-5462

CVE-2007-5462 affects Sun Solaris librpcsvc (RPC services library) on Solaris 8–10, enabling a remote attacker to crash mountd (and locally automountd via requests) through unspecified packets when the server exports many filesystems. Patch information in connected documents shows Solaris patch 1...

CVE-2007-5463

Concrete details: CVE-2007-5463 affects ViArt Shop ViArt Shopping Cart, specifically the iDEAL payment module's payments/ideal_process.php, where a directory traversal in the filename parameter to createCertFingerprint could enable reading certificate and key file paths from the web root. The iss...

[SECURITY] [DSA 1387-1] New librpcsecgss packages fix arbitrary code execution

------------------------------------------------------------------------ Debian Security Advisory DSA-1387 [email protected] http://www.debian.org/security/ Florian Weimer October 15th, 2007 http://www.debian.org/security/faq -...

CVE-2007-5461

Absolute path traversal vulnerability in Apache Tomcat 4.0.0 through 4.0.6, 4.1.0, 5.0.0, 5.5.0 through 5.5.25, and 6.0.0 through 6.0.14, under certain configurations, allows remote authenticated users to read arbitrary files via a WebDAV write request that specifies an entity with a SYSTEM tag...

CVE-2007-5461

CVE-2007-5461 is an absolute path traversal vulnerability in the Apache Tomcat WebDAV servlet. Affected versions span Tomcat 4.x, 5.x (including 5.0.x, 5.5.x up to 5.5.25) and 6.0.x (up to 6.0.14) under certain configurations, enabling remote authenticated users to read arbitrary files via a WebD...

[SECURITY] [DSA 1386-2] New wesnoth packages fix denial of service

-------------------------------------------------------------------------- Debian Security Advisory DSA 1386-2 [email protected] http://www.debian.org/security/ Martin Schulze October 15th, 2007 http://www.debian.org/security/faq -...

[SECURITY] [DSA 1386-1] New wesnoth packages fix denial of service

-------------------------------------------------------------------------- Debian Security Advisory DSA 1386-1 [email protected] http://www.debian.org/security/ Martin Schulze October 15th, 2007 http://www.debian.org/security/faq -...

libvorbis security update

CentOS Errata and Security Advisory CESA-2007:0912-01 Updated libvorbis packages to correct several security issues are now available for Red Hat Enterprise Linux 2.1 This update has been rated as having important security impact by the Red Hat Security Response Team. The libvorbis package contai...

DSA-1387-1 librpcsecgss

Bulletin has no description...

XSS vulnerability

PMASA-2007-5 Announcement-ID: PMASA-2007-5 Date: 2007-10-15 Summary XSS vulnerability Description We received an advisory from Omer Singer, The DigiTrust Group, and we wish to thank him for his work. It was possible to trigger this attack on setup.php. Severity We consider this vulnerability to b...

eXtremail 2.1.1 - Remote Heap Overflow (PoC)

!/usr/bin/perl extremail-v8.pl Copyright c 2007 by eXtremail Connected\n"; sleep16; print"- Sending payload\n"; $buf = "\x00".$NOP x 0x2710-1; sendSOCKET, $buf, 0; sleep$senddelay; $buf = $NOP x 0x2710; while $loop-- print"- Sending payload ".$loop."\n"; sendSOCKET, $buf, 0; sleep$senddelay;...

ex211heap-overflow.txt

!/usr/bin/perl extremail-v8.pl Copyright c 2007 by eXtremail Connected\n"; sleep16; print"- Sending payload\n"; $buf = "\x00".$NOP x 0x2710-1; sendSOCKET, $buf, 0; sleep$senddelay; $buf = $NOP x 0x2710; while $loop-- print"- Sending payload ".$loop."\n"; sendSOCKET, $buf, 0; sleep$senddelay;...

OpenSSL DTLS远程堆溢出漏洞

BUGTRAQ ID: 26055 CVECAN ID: CVE-2007-4995 OpenSSL是一种开放源码的SSL实现，用来实现网络通信的高强度加密，现在被广泛地用于各种网络应用程序中。 OpenSSL的DTLS支持中存在漏洞，攻击者可以创建能够触发堆溢出的恶意客户端或服务器，导致执行任意指令。 请注意这个漏洞仅影响使用DTLS的应用程序。 OpenSSL Project OpenSSL 0.9.8f OpenSSL Project OpenSSL 0.9.8 RedHat Linux 5.0 OpenSSL Project ---------------...

Microsoft Word Malformed String Memory Corruption (MS07-060; CVE-2007-3899)

Microsoft Word is a popular word processing software. A remote code execution vulnerability has been identified in Microsoft Word for MAC. A remote attacker could trigger this flaw by convincing a victim to open a specially crafted Word Mac file with a malformed string. Successful exploitation of...

Kodak Image Viewer TIFF image handling vulnerability

Added: 10/15/2007 CVE: CVE-2007-2217 BID: 25909 OSVDB: 37627 Background The Windows Kodak Image Viewer is a utility for rendering various image formats. It is included in Windows 2000, and may also be present on newer versions of Windows if a computer was upgraded from Windows 2000. Problem A...

apache-disclose.txt

!/usr/bin/perl Apache Tomcat Remote File Disclosure Zeroday Xploit kcdarookie aka eliteb0y / 2007 thanx to the whole team & andi : +++KEEP PRIV8+++ This Bug may reside in different WebDav implementations, Warp your mind! +You will need auth for the exploit to work... use IO::Socket; use...

eXtremail 2.1.1 - Remote Heap Overflow (PoC)

eXtremail 2.1.1 - Remote Heap Overflow PoC !/usr/bin/perl extremail-v8.pl Copyright c 2007 by eXtremail Connected\n"; sleep16; print"- Sending payload\n"; $buf = "\x00".$NOP x 0x2710-1; sendSOCKET, $buf, 0; sleep$senddelay; $buf = $NOP x 0x2710; while $loop-- print"- Sending payload ".$loop."\n";...

Immunity Canvas: JOOMLAFLASHUP_INCLUDE

Name| joomlaflashupinclude ---|--- CVE| CVE-2007-5457 Exploit Pack| CANVAS Description| Joomla FlashUploader Component Remote File Inclusion Notes| CVE Name: CVE-2007-5457 VENDOR: Joomla Repeatability: Infinite References: http://securityreason.com/exploitalert/2886 CVE Url:...

CVE-2007-5458

CVE-2007-5458 describes an SQL injection in index.php of the KwsPHP newsletter module 1.0. The vulnerability occurs when magic_quotes_gpc is disabled, allowing remote attackers to inject arbitrary SQL via the newsletter parameter. This is supported by multiple connected records (NVD/NVD listing, ...

CVE-2007-5457

CVE-2007-5457: Joomla Flash Uploader (com_jfu or com_joomla_flash_uploader) 2.5.1 is affected by multiple PHP remote file inclusion vulnerabilities. The root cause is improper handling of the mosConfig_absolute_path parameter, enabling an attacker to specify a URL to install.joomla_flash_uploader...