rPSA-2007-0212-1 util-linux

rPath Security Advisory: 2007-0212-1 Published: 2007-10-08 Products: rPath Linux 1 Rating: Major Exposure Level Classification: Local Root Deterministic Privilege Escalation Updated Versions: util-linux=/conary.rpath.com@rpl:devel//1/2.12r-1.5-1 rPath Issue Tracking System:...

Cisco IOS 12.3 - LPD Remote Buffer Overflow

Cisco IOS 12.3 - LPD Remote Buffer Overflow source: https://www.securityfocus.com/bid/26001/info Cisco IOS is prone to a remote buffer-overflow vulnerability in its LPD service because it fails to perform adequate boundary checks on user-supplied data. Attackers can exploit this issue to execute...

iDefense Security Advisory 10.09.07: Microsoft Windows Mail and Outlook Express NNTP Protocol Heap Overflow

Microsoft Windows Mail and Outlook Express NNTP Protocol Heap Overflow iDefense Security Advisory 10.09.07 http://labs.idefense.com/intelligence/vulnerabilities/ Oct 09, 2007 I. BACKGROUND Microsoft Windows Mail and Outlook Express are the default mail and news clients for Windows operating...

Security fix for the ALT Linux 9 package openssl10 version 0.9.8d-alt4

Oct. 10, 2007 Dmitry V. Levin 0.9.8d-alt4 - Backported upstream fix for off-by-one bug in the SSLgetsharedciphers function CVE-2007-5135...

Solaris (SPARC/x86) - fifofs I_PEEK Kernel Memory Disclosure

/ 10/2007: public release SPARC Solaris 8 without 109454-06 Solaris 9 without 117471-04 Solaris 10 without 127737-01 x86 Solaris 8 without 109455-06 Solaris 9 without 117472-04 Solaris 10 without 127738-01 Solaris fifofs IPEEK Kernel Memory Disclosure By qaaz / include include include include...

Microsoft Windows RPC NTLMSSP Authentication Denial of Service (MS07-058; CVE-2007-2228)

Remote Procedure Call RPC is a protocol that a program can use to request a service from another program which is located on another computer in a network. Microsoft Remote Procedure Call MS-RPC is Microsoft's implementation of RPC. MS-RPC uses the NTLM NT LAN Manager authentication protocol...

nuseo PHP enterprise 1.6 - Remote File Inclusion

nuseo PHP enterprise 1.6 - Remote File Inclusion Vulnerability Type: Remote File Inclusion Vulnerable file: /NuSEO PHP Enterprise.v1.6 Nulled by DGT/NuSEO.PHP.Enterprise.v1.6.PHP.NULL-DGT/nuseo/admin/nuseoadmind.php Exploit URL:...

IBM and Lenovo Access Support acpRunner ActiveX Security Bypass (CVE-2007-2928; CVE-2007-2929; CVE-2007-2940)

The Access Support software package for IBM and Lenovo systems includes several ActiveX controls. A remote attacker could exploit this issue by convincing a user to visit a specially crafted HTML document or open a malicious web page. Successful exploitation could result in remote code execution ...

Unfixed XSS vulnerability at www.logicool.co.jp

Security researcher kusomiso.com, has submitted on 10/10/2007 a cross-site-scripting XSS vulnerability affecting www.logicool.co.jp, which at the time of submission ranked 76626 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 01/11/2007. It is...

Unfixed XSS vulnerability at www.politicalbase.com

Security researcher Lars Strojny, has submitted on 10/10/2007 a cross-site-scripting XSS vulnerability affecting www.politicalbase.com, which at the time of submission ranked 119465 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 01/11/2007. It...

Unfixed XSS vulnerability at www.netcomponents.com

Security researcher kusomiso.com, has submitted on 10/10/2007 a cross-site-scripting XSS vulnerability affecting www.netcomponents.com, which at the time of submission ranked 70159 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 01/11/2007. It ...

VMware Workstation ActiveX Control vielib.dll Command Execution (CVE-2007-4058)

VMware Workstation is a virtualization technology that allows running multiple instances of virtual computers simultaneously with the hosting operating system. A remote attacker could exploit this issue by convincing a user to visit a specially crafted HTML document or open a malicious web page...

Security fix for the ALT Linux 9 package openssl1.1 version 0.9.8d-alt4

Oct. 10, 2007 Dmitry V. Levin 0.9.8d-alt4 - Backported upstream fix for off-by-one bug in the SSLgetsharedciphers function CVE-2007-5135...

Symantec Products ActiveX Control NavComUI.dll Code Execution (CVE-2007-2955)

Symantec products include various software applications that deal with security and information management. A remote attacker could exploit this issue by convincing a user to visit a specially crafted HTML document or open a malicious web page. Successful exploitation could result in remote code...

Code injection

Microsoft Internet Explorer 5.01 through 7 allows remote attackers to spoof the URL address bar and other "trust UI" components via unspecified vectors, a different issue than CVE-2007-1091 and CVE-2007-3826...

CVE-2007-2217

Kodak Image Viewer in Microsoft Windows 2000 SP4, and in some cases XP SP2 and Server 2003 SP1 and SP2, allows remote attackers to execute arbitrary code via crafted image files that trigger memory corruption, as demonstrated by a certain .tif TIFF file...

DSquare Exploit Pack: D2SEC_MS07_055

Name| d2secms07055 ---|--- CVE| CVE-2007-2217 Exploit Pack| D2ExploitPack Description| Microsoft Windows Kodak Image Viewer Remote Code Execution Vulnerability Notes|...

CVE-2007-2228

rpcrt4.dll aka the RPC runtime library in Microsoft Windows XP SP2, XP Professional x64 Edition, Server 2003 SP1 and SP2, Server 2003 x64 Edition and x64 Edition SP2, and Vista and Vista x64 Edition allows remote attackers to cause a denial of service RPCSS service stop and system restart via an...

CVE-2007-4466

CVE-2007-4466 affects Electronic Arts SnoopyCtrl ActiveX Control (NPSnpy.dll, version 1.1.0.36). The vulnerability is described as multiple stack-based buffer overflows that allow remote attackers to execute arbitrary code via unspecified methods/parameters. Public materials include Metasploit ex...

CVE-2007-5322

CVE-2007-5322 affects Microsoft Visual FoxPro 6.0 via the FPOLE.OCX 6.0.8450.0 ActiveX control. The vulnerability is an insecure method flaw that lets remote attackers run arbitrary programs by passing a command to the FoxDoCmd function. Public references indicate exploit availability (e.g., Expl...