18185 matches found
MS07-056: Cumulative Security Update for Outlook Express and Windows Mail (941202)
The remote host is running a version of Microsoft Outlook Express that contains several security flaws that could allow an attacker to execute arbitrary code on the remote host. To exploit this flaw, an attacker would need to send a malformed email to a victim on the remote host and have him open...
Fedora Core 6 : kdebase-3.5.7-1.fc6 / kdelibs-3.5.7-1.fc6 (2007-716)
The remote Fedora Core host is missing one or more security updates : kdebase-3.5.7-1.fc6 : - Tue Oct 2 2007 Than Ngo - 6:3.5.7-1.fc6 - CVE-2007-4224, CVE-2007-4225, CVE-2007-3820 - rh299741, CVE-2007-4569 - Mon Jul 2 2007 Than Ngo - 6:3.5.7-0.fc6.2 - fix 244906 kdelibs-3.5.7-1.fc6 : - Tue Oct 2...
Sun Solaris I_PEEK IOCTL处理器本地信息泄露漏洞
BUGTRAQ ID: 25905 CVECAN ID: CVE-2007-5225 Solaris是一款由Sun开发和维护的商业性质UNIX操作系统。 Solaris内核的FIFO实现上存在漏洞，本地攻击者可能利用此漏洞获取内核的敏感信息。 Solaris中的FIFO内核ioctl处理器存在安全漏洞，该处理器使用IPEEK ioctl读取FIFO中的一些字节，但没有将这些字节从队列中删除。该命令中的一个参数代表所要读取的字节数，而该参数为整型整数值。由于没有正确地验证这个参数，因此负值就可以导致泄露大量的内核内存内容。 Sun Solaris 9.0 Sun Solaris 8.0 S...
CVE-2007-5284
The CVE-2007-5284 entry is a duplicate of CVE-2007-5279. Connected sources describe a PowerArchiver buffer overflow vulnerability in ConeXware PowerArchiver before 10.20.21. If a user opens a specially crafted BlackHole archive filename, an attacker could execute arbitrary code with the user’s pr...
Unfixed Script Insertion vulnerability at www.dominodude.com
Security researcher WhatALegend, has submitted on 10/09/2007 a Script Insertion vulnerability affecting www.dominodude.com, which at the time of submission ranked 4230401 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 12/09/2007. It is current...
Unfixed XSS vulnerability at jimax.tv
Security researcher kusomiso.com, has submitted on 10/09/2007 a cross-site-scripting XSS vulnerability affecting jimax.tv, which at the time of submission ranked 2714111 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 12/09/2007. It is currentl...
Unfixed XSS vulnerability at www.spinxpress.com
Security researcher systemmeltdown, has submitted on 10/09/2007 a cross-site-scripting XSS vulnerability affecting www.spinxpress.com, which at the time of submission ranked 489438 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 12/09/2007. It ...
Mandrake Linux Security Advisory : openssl (MDKSA-2007:193)
A flaw in how OpenSSL performed Montgomery multiplications was discovered %that could allow a local attacker to reconstruct RSA private keys by examining another user's OpenSSL processes CVE-2007-3108. Moritz Jodeit found that OpenSSL's SSLgetsharedciphers function did not correctly check the siz...
RHEL 5 : pwlib (RHSA-2007:0932)
Updated pwlib packages that fix a security issue are now available for Red Hat Enterprise Linux 5. This update has been rated as having moderate security impact by the Red Hat Security Response Team. PWLib is a library used to support cross-platform applications. In Red Hat Enterprise Linux 5, th...
Fedora Core 6 : ruby-1.8.5.113-1.fc6 (2007-718)
Thu Oct 4 2007 Akira TAGOH - 1.8.5.113-1 - New upstream release. - ruby-1.8.5-CVE-2007-5162.patch: security fix for Net::HTTP that is insufficient verification of SSL certificate. 313801 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora...
Fedora Core 6 : kernel-2.6.22.9-61.fc6 (2007-714)
Update to Linux 2.6.22.8 and 2.6.22.9: http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.22.8 http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.22.9 CVE-2007-4571 The sndmemprocread function in sound/core/memalloc.c in the Advanced Linux Sound Architecture ALSA in the Linux kernel...
CVE-2007-5279
PowerArchiver (ConeXware) has a heap-based/buffer overflow vulnerability disclosed as CVE-2007-5279 affecting versions up to 10.20.21. The flaw allows remote code execution when a user opens a specially crafted BlackHole archive with a long filename, resulting in arbitrary code execution with the...
Fixed XSS vulnerability at pay.kingsoft.jp
Security researcher kusomiso.com, has submitted on 10/09/2007 a cross-site-scripting XSS vulnerability affecting pay.kingsoft.jp, which at the time of submission ranked 118081 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 13/09/2007. It is...
Debian DSA-1384-1 : xen-utils - several vulnerabilities
Several local vulnerabilities have been discovered in the Xen hypervisor packages which may lead to the execution of arbitrary code. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2007-4993 By use of a specially crafted grub configuration file a domU us...
MS07-057: Cumulative Security Update for Internet Explorer (939653)
The remote host is missing the IE cumulative security update 939653. The remote version of IE is vulnerable to several flaws that could allow an attacker to execute arbitrary code on the remote host. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid26963;...
MS07-055: Vulnerability in Kodak Image Viewer Could Allow Remote Code Execution (923810)
The remote host is running a version of the Kodak Image Viewer that may allow arbitrary code to be run. An attacker may use this to execute arbitrary code on this host. To succeed, the attacker would have to send a rogue file to a user of the remote computer and have it open it with this...
CVE-2007-5288
CVE-2007-5288 is a duplicate of CVE-2007-5283 for Hitachi TPBroker/ Cosminexus TPBroker Object Transaction Monitor. Affected versions are 01-00 through 03-00, with the vulnerability enabling denial of service (crash) via invalid messages in the TSC Domain Manager. The connected documents confirm ...