CVE-2007-5381

Cisco IOS Line Printer Daemon (LPD) suffers a stack-based buffer overflow when processing a hostname longer than normal, enabling arbitrary code execution if an attacker connects to 515/tcp and triggers the error message (telnet session). Affected are IOS releases including 12.2(18)SXF11, 12.4(16...

CVE-2007-5384

CVE-2007-5384 involves CSRF flaws in the Thomson/Alcatel SpeedTouch 7G router (used by BT Home Hub 6.2.6.B and earlier). The vulnerabilities allow remote attackers to perform administrator actions via unspecified POST requests, demonstrated by enabling an inbound remote‑assistance HTTPS session o...

CVE-2007-5378

CVE-2007-5378 affects Tk Toolkit GIF handling. A buffer overflow in Tk's animated GIF processing occurs when an initial subimage is smaller than subsequent subimages, triggering the overflow in ReadImage (tkImgGIF.c). Affected: Tk 8.4.12 and earlier, and 8.3.5 and earlier. Consequence: denial of ...

CVE-2007-5377

The 1 tramp-make-temp-file and 2 tramp-make-tramp-temp-file functions in Tramp 2.1.10 extension for Emacs, and possibly earlier 2.1.x versions, allows local users to overwrite arbitrary files via a symlink attack on temporary files...

Solaris 10 (sparc) : 121913-20 (deprecated)

Portal Server 7.0: Miscellaneous Fixes. Date this patch was last updated by Sun : Jun/26/09 This plugin has been deprecated and either replaced with individual 121913 patch-revision plugins, or deemed non-security related. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. @DEPRECATED@ Disabled...

Solaris 9 (x86) : 117122-03

SunOS 5.9x86: ata Driver Patch. Date this patch was last updated by Sun : Aug/20/07 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc'; include'compat.inc'; if description...

Unfixed XSS vulnerability at www.kizilirmakio.com

Security researcher turktegin, has submitted on 10/12/2007 a cross-site-scripting XSS vulnerability affecting www.kizilirmakio.com, which at the time of submission ranked 4664707 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 10/12/2007. It is...

RHEL 2.1 : libvorbis (RHSA-2007:0912)

Updated libvorbis packages to correct several security issues are now available for Red Hat Enterprise Linux 2.1 This update has been rated as having important security impact by the Red Hat Security Response Team. The libvorbis package contains runtime libraries for use in programs that support...

Microsoft SharePoint Server跨站脚本漏洞（MS07-059）

BUGTRAQ ID: 23832 CVECAN ID: CVE-2007-2581 SharePoint Server是一个服务器功能集成套件，提供全面的内容管理和企业搜索，加速共享业务流程并简化跨界限信息共享。 Microsoft Windows SharePoint Services 3.0和Microsoft Office SharePoint Server 2007中存在一个跨站脚本执行漏洞，恶意服务器可能利用此漏洞收集客户端系统的有用信息。...

CVE-2007-5377

The CVE concerns TRAMP (Emacs extension) specifically tramp-make-temp-file and tramp-make-tramp-temp-file in TRAMP 2.1.10 (and possibly earlier 2.1.x). The described flaw is insecure temporary file creation that enables a local attacker to exploit a symlink to overwrite arbitrary files within the...

Microsoft Windows RPC认证远程拒绝服务漏洞（MS07-058）

BUGTRAQ ID: 25974 CVECAN ID: CVE-2007-2228 Microsoft Windows是微软发布的非常流行的操作系统。 Windows系统在处理RPC认证时存在漏洞，远程攻击者可能利用此漏洞导致系统拒绝服务。 漏洞具体存在于RPC运行时库rpcrt4.dll解析RPC级认证消息期间。在解析认证类型为NTLMSSP且认证级别为PACKET的报文时，如果验证尾部签名被初始化为0而不是标准的NTLM签名，就会出现无效的内存引用。成功利用这个漏洞可能导致RPC服务及整个操作系统崩溃。 Microsoft Windows XP SP2 Microsoft...

KLA10387 DoS vulnerability in VMware

An unspecified vulnerability was found in VMware products. By exploiting this vulnerability malicious users can cause denial of service. This vulnerability can be exploited remotely via vectors related to Reconfig.DLL Original advisories VMware advisory Related products VMware-Workstation...

rubygem-rails -- JSON XSS vulnerability

Rails core team reports: All users of Rails 1.2.4 or earlier are advised to upgrade to 1.2.5, though it isn't strictly necessary if you aren't working with JSON. For more information the JSON vulnerability, see CVE-2007-3227...

Unfixed XSS vulnerability at sdpd.univ-lemans.fr

Security researcher SeeD, has submitted on 10/12/2007 a cross-site-scripting XSS vulnerability affecting sdpd.univ-lemans.fr, which at the time of submission ranked 43414 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 10/12/2007. It is current...

Microsoft Windows柯达图像查看器远程代码执行漏洞（MS07-055）

BUGTRAQ ID: 25909 CVECAN ID: CVE-2007-2217 Microsoft Windows是微软发布的非常流行的操作系统。 Windows中的柯达图像查看器处理特制图像文件的方式中存在内存破坏漏洞，远程攻击者可能利用此漏洞通过诱使用户处理畸形数据控制用户系统。 攻击者可以通过构建特制图像来利用此漏洞，如果用户访问网站、查看特制电子邮件或者打开电子邮件附件，该漏洞可能允许远程执行指令。成功利用此漏洞的攻击者可以完全控制受影响的系统。 Microsoft Windows XP SP2 Microsoft Windows Server 2003 SP2...

Unfixed XSS vulnerability at www.hacknmod.com

Security researcher TreX, has submitted on 10/12/2007 a cross-site-scripting XSS vulnerability affecting www.hacknmod.com, which at the time of submission ranked 292533 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 21/12/2007. It is currently...

Unfixed XSS vulnerability at www.babecharts.com

Security researcher Genocide, has submitted on 10/12/2007 a cross-site-scripting XSS vulnerability affecting www.babecharts.com, which at the time of submission ranked 404753 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 10/12/2007. It is...

Solaris 9 (sparc) : 125437-22

Oracle iPlanet Web Server 7.0.12 Solaris: Update Release patch. Date this patch was last updated by Sun : Aug/19/11 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc';...

Solaris 9 (x86) : 125438-22

Oracle iPlanet Web Server 7.0.12 Solarisx86: Update Release patch. Date this patch was last updated by Sun : Aug/26/11 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc';...

Microsoft IE 脚本错误处理内存破坏漏洞（MS07-057）

BUGTRAQ ID: 25916 CVECAN ID: CVE-2007-3893 Internet Explorer是微软的操作系统中所捆绑的WEB浏览器。 IE在处理文件下载队列时存在漏洞，恶意网站可能利用此漏洞控制用户系统。 在处理文件下载队列时，如果Internet Explorer处理了多个并行的启动文件下载尝试，就可能导致内存破坏，使用已经释放的对象。攻击者可以通过构建特制的网页来利用该漏洞。如果用户查看网页，该漏洞可能允许远程执行指令。 Microsoft Internet Explorer 7.0 Microsoft Internet Explorer 6.0 SP1...