18185 matches found
Design/Logic Flaw
Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2007-2582. Reason: This candidate is a duplicate of CVE-2007-2582. Notes: All CVE users should reference CVE-2007-2582 instead of this candidate. All references and descriptions in this candidate have been removed to prevent...
CVE-2007-5324
Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2007-2582. Reason: This candidate is a duplicate of CVE-2007-2582. Notes: All CVE users should reference CVE-2007-2582 instead of this candidate. All references and descriptions in this candidate have been removed to prevent...
DEBIAN-CVE-2007-5208
hpssd in Hewlett-Packard Linux Imaging and Printing Project hplip 1.x and 2.x before 2.7.10 allows context-dependent attackers to execute arbitrary commands via shell metacharacters in a from address, which is not properly handled when invoking sendmail...
CVE-2007-5208
CVE-2007-5208 affects the HP Linux Imaging and Printing Project (HPLIP) hpssd daemon. Affected: hplip 1.x and 2.x before 2.7.10. Description from multiple sources indicates that input handling of the From address during sendmail invocation allows context-dependent attackers to execute arbitrary c...
CVE-2007-5324
Mode C: Affected software is IBM DB2 (DB2JDS) with service listening on TCP/6789. CVE-2007-2582 (and thus CVE-2007-5324) describe multiple buffer overflows in the DB2JDS (DB2 JDBC Applet Server) allowing remote code execution and DoS via crafted packets or invalid LANG parameter/packet length >...
CVE-2007-5326
CA BrightStor ARCserve Backup contains multiple remote vulnerabilities (CVE-2007-5326 among others) due to RPC string/buffer overflows in components such as RPC and rpcx.dll. A remote attacker could potentially execute arbitrary code on affected systems (Windows platforms) by manipulating RPC inp...
CVE-2007-5332
CA BrightStor ARCserve Backup contains multiple remote vulnerabilities (including CVE-2007-5332) affecting mediasvr and caloggerd across versions 9.01–11.5 and Enterprise Backup r10.5. The issues stem from memory corruption in RPC argument processing, enabling a remote attacker to cause denial of...
CVE-2007-5325
CVE-2007-5325 and related CVEs describe multiple remote vulnerabilities in CA BrightStor ARCserve Backup and BrightStor Enterprise Backup (v9.01–R11.5, Enterprise Backup r10.5, and related Windows components). The core issues include: (1) buffer overflows in the Message Engine and AScore.dll, and...
Unfixed XSS vulnerability at www.sehitlerolmez.com
Security researcher st@rext, has submitted on 13/10/2007 a cross-site-scripting XSS vulnerability affecting www.sehitlerolmez.com, which at the time of submission ranked 610148 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 13/10/2007. It is...
iDefense Security Advisory 10.11.07: Multiple Vendor FLAC Library Multiple Integer Overflow Vulnerabilities
Multiple Vendor FLAC Library Multiple Integer Overflow Vulnerabilities iDefense Security Advisory 10.11.07 http://labs.idefense.com/intelligence/vulnerabilities/ Oct 11, 2007 I. BACKGROUND Free Lossless Audio Codec FLAC is a popular file format for audio data compression. AOL Corp.'s Winamp media...
Unfixed XSS vulnerability at search.couponcabin.com
Security researcher tenest, has submitted on 13/10/2007 a cross-site-scripting XSS vulnerability affecting search.couponcabin.com, which at the time of submission ranked 23318 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 01/11/2007. It is...
CVE-2007-5327
The CVE-2007-5327 issue is a stack-based overflow in the CA BrightStor ARCserve Backup Message Engine RPC interface (mediasvr.exe) that can allow remote code execution via opnum 0x10d. Affected products include BrightStor ARCserve Backup from v9.01 to R11.5 and BrightStor Enterprise Backup r10.5,...
CVE-2007-5330
CVE-2007-5330 affects CA BrightStor ARCserve Backup and BrightStor Enterprise Backup on Windows. The cadbd RPC service is vulnerable to remote code execution via stack-based buffer overflows in unspecified RPC procedures, and to memory corruption from handling of RPC arguments as pointers. Exploi...
CVE-2007-5328
CA BrightStor ARCserve Backup (Message Engine RPC) contains CVE-2007-5328: insecure privileged function exposure through RPC calls in the Message Engine service. A remote attacker can modify the file system and registry and potentially take full control of affected systems. Affected products incl...
ZDI-07-057: Firebird process_packet() Remote Stack Overflow Vulnerability
ZDI-07-057: Firebird processpacket Remote Stack Overflow Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-07-057.html October 10, 2007 -- CVE ID: CVE-2007-4992 -- Affected Vendor: Firebird -- Affected Products: Firebird SQL 2.0.2 -- TippingPointTM IPS Customer Protection: TippingPoin...
CVE-2007-5329
CVE-2007-5329 describes a memory corruption vulnerability in CA BrightStor ARCserve Backup components (notably dbasvr.exe and related RPC/server processes) across multiple versions (v9.01 through R11.5, and Enterprise Backup r10.5). The root cause is memory corruption during processing of RPC/arg...
Unfixed XSS vulnerability at www.openlab.cn
Security researcher kusomiso.com, has submitted on 13/10/2007 a cross-site-scripting XSS vulnerability affecting www.openlab.cn, which at the time of submission ranked 901831 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 01/11/2007. It is...
Unfixed XSS vulnerability at www.infusionconnections.com
Security researcher BackDoor, has submitted on 13/10/2007 a cross-site-scripting XSS vulnerability affecting www.infusionconnections.com, which at the time of submission ranked 1920040 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 01/11/2007...
CVE-2007-5331
CVE-2007-5331 affects CA BrightStor ARCserve Backup and BrightStor Enterprise Backup. The vulnerability lies in queue.dll used by the message queuing service (LQserver.exe), where a malformed ONRPC request for operation 0x76 can cause memory corruption in lqserver/media services, enabling remote ...