Solaris 8 (sparc) : 125437-22

Oracle iPlanet Web Server 7.0.12 Solaris: Update Release patch. Date this patch was last updated by Sun : Aug/19/11 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc';...

Solaris 9 (sparc) : 126105-42

Sun Cluster 3.2: CORE patch for Solaris 9. Date this patch was last updated by Sun : Apr/27/10 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc'; include'compat.inc'; if...

Solaris 9 (sparc) : 125437-22

Oracle iPlanet Web Server 7.0.12 Solaris: Update Release patch. Date this patch was last updated by Sun : Aug/19/11 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc';...

Debian DSA-1382-1 : quagga - NULL pointer dereference

It was discovered that BGP peers can trigger a NULL pointer dereference in the BGP daemon if debug logging is enabled, causing the BGP daemon to crash. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Debian Security...

Solaris 9 (x86) : 125438-22

Oracle iPlanet Web Server 7.0.12 Solarisx86: Update Release patch. Date this patch was last updated by Sun : Aug/26/11 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc';...

Important: Red Hat Security Advisory: libvorbis security update

Updated libvorbis packages to correct several security issues are now available for Red Hat Enterprise Linux 2.1 This update has been rated as having important security impact by the Red Hat Security Response Team. The libvorbis package contains runtime libraries for use in programs that support...

CVE-2007-5169

Summary (CVE-2007-5169 family) : Adobe PageMaker 7.0.1/7.0.2 on Windows contains a stack-based buffer overflow in the PMD parsing path (MAIPM6.dll) when processing font-related data. The overflow is triggered by a long/crafted font name in a PMD file, leading to potential remote code execution wi...

CVE-2007-5368

CVE-2007-5368 affects Sun Solaris 10 with Trusted Extensions labeld, causing local denial of service (multiple application hangs). Concrete details in connected documents show affected architectures and patches: Solaris 10 x86 (patch 126449-05) and Solaris 10 SPARC (patch 126448-05). No explicit ...

CVE-2007-5367

The CVE-2007-5367 entry concerns an unspecified vulnerability in the Virtual File System (VFS) of Sun Solaris 10. The initial description states local users can cause a denial of service by consuming kernel memory via unspecified vectors. The connected documents do not supply concrete technical d...

CVE-2007-5366

The CVE concerns Fujitsu Interstage components (Interstage Application Server/Tomcat 4.1-based Servlet Service) and Interstage Apworks/Studio from 7.0 to 9.0.0. Affected: the Tomcat 4.1-based Servlet Service; vulnerability allows remote attackers to obtain the web root path via unspecified vector...

CVE-2007-5369

The CVE concerns Massive Entertainment’s World in Conflict (version 1.000 and earlier). The vulnerability stems from the GetMagicNumberString function, where processing a crafted string sent to the VoIP port 52999/tcp can trigger a NULL dereference and cause a daemon crash, resulting in a denial ...

CVE-2007-5365

CVE-2007-5365 : OpenBSD 4.0–4.2 dhcpd and similar ISC dhcp-2 based implementations suffer a stack-based buffer overflow in cons_options (options.c) that can allow remote attackers to execute code or cause daemon crashes by sending a DHCP request with a max message size smaller than the minimum IP...

CVE-2007-3917

CVE-2007-3917 affects the Wesnoth multiplayer engine. The vulnerability allows a remote server to trigger a denial of service (crash) by sending a long message containing multibyte characters that, when truncated, yields an invalid UTF-8 string and causes an uncaught exception in server.cpp:trunc...

CVE-2007-5371

CVE-2007-5371 involves multiple SQL injection vulnerabilities in mutate_content.dynamic.php of MODx 0.9.6. The affected component is mutate_content.dynamic.php, enabling remote attackers to craft inputs via the documentDirty or modVariables parameters to execute arbitrary SQL commands on the data...

CVE-2007-5375

CVE-2007-5375 describes an interpretation conflict in the Sun Java Virtual Machine (JVM) that can allow user-assisted remote attackers to perform a multi-pin DNS rebinding attack and execute arbitrary JavaScript within an intranet context. The issue arises when an intranet web server serves an HT...

CVE-2007-5372

The CVE-2007-5372 entry documents multiple SQL injection vulnerabilities in LedgerSMB (1.0.0–1.2.7) and DWS Systems SQL-Ledger (2.x), allowing remote attackers to execute arbitrary SQL commands via (1) the invoice quantity field or (2) the sort field. Affected components and exact root cause are ...

CVE-2007-5370

Multiple cross-site scripting XSS vulnerabilities in cgi-bin/dnewsweb.exe in NetWin DNewsWeb DNews News Server 57e1 allow remote attackers to inject arbitrary web script or HTML via the 1 group or 2 utag parameter...

CVE-2007-5366

The Tomcat 4.1-based Servlet Service in Fujitsu Interstage Application Server 7.0 through 9.0.0 and Interstage Apworks/Studio 7.0 through 9.0.0 allows remote attackers to obtain sensitive information web root path via unspecified vectors that trigger an error message, probably related to enabling...

CVE-2007-5373

CVE-2007-5373 affects ldapscripts (notably versions 1.4 and 1.7). The issue arises because the password is passed as a command-line argument when invoking LDAP programs (e.g., ldappasswd), which may allow a local attacker to read the password by listing the process and its arguments. The vulnerab...

Immunity Canvas: JOOMLAMOSMEDIA_INCLUDE

Name| joomlamosmediainclude ---|--- CVE| CVE-2007-5362 Exploit Pack| CANVAS Description| Joomla mosMedia Component Remote File Inclusion Notes| CVE Name: CVE-2007-5362 VENDOR: Joomla Repeatability: Infinite References: http://nvd.nist.gov/nvd.cfm?cvename=CVE-2007-5362 CVE Url:...