CVE-2007-5212

CVE-2007-5212: AXIS 2100 Network Camera 2.02 has multiple XSS vulnerabilities in firmware prior to 2.43. Attackers can inject arbitrary web script/HTML via (1) parameters tied to saved settings (e.g., conf_SMTP_MailServer1 in ServerManager.srv) and (2) the subpage parameter to wizard/first/wizard...

CVE-2007-5215

CVE-2007-5215 affects GodSend 0.6 (Jacob Hinkle) with multiple PHP remote file inclusion flaws. The vulnerability allows an attacker to supply a URL via the SCRIPT_DIR parameter to gtk/main.inc.php (and allegedly to cmdline.inc.php) to execute arbitrary PHP code. Note: the second vector is disput...

CVE-2007-4133

CVE-2007-4133 affects the Linux kernel prior to 2.6.19-rc4. The vulnerability lies in the hugetlbfs code: the functions hugetlb_vmtruncate_list and hugetlb_vmtruncate in fs/hugetlbfs/inode.c perform prio_tree calculations using HPAGE_SIZE instead of PAGE_SIZE units, enabling a local user to trigg...

CVE-2007-5213

The CVE-2007-5213 entry describes CSRF vulnerabilities in the AXIS 2100 Network Camera 2.02 with firmware 2.43 and earlier. The affected component is the web management interface, where cross-site requests can perform administrator actions. Demonstrated vectors include (1) changing the SMTP serve...

CVE-2007-4673

CVE-2007-4673 is an argument-injection vulnerability in Apple QuickTime 7.2 for Windows XP SP2 and Vista. The issue allows remote attackers to execute arbitrary commands via a URL contained in the qtnext field of a crafted QuickTime QTL file. The description notes potential relation to CVE-2006-4...

CVE-2007-5209

CVE-2007-5209 affects CenterTools DriveLock 5.0, specifically DriveLock.exe. The issue is a stack-based buffer overflow triggered by processing a long HTTP request to TCP port 6061, enabling remote code execution. The vulnerability exists in the DriveLock Agent/web server component and is exploit...

CVE-2007-5211

CVE-2007-5211 involves multiple cross-site scripting (XSS) vulnerabilities in Arbor Networks Peakflow SP 3.5.1 before patch 14, and 3.6.1 before patch 5, when scope accounts are enabled. The flaw allows remote attackers to inject arbitrary web script/HTML via unspecified GET/POST vectors. The und...

CVE-2007-5214

The CVE describes multiple cross-site scripting (XSS) vulnerabilities in the AXIS 2100 Network Camera 2.02 with firmware 2.43 and earlier. The issues allow remote attackers to inject arbitrary web script or HTML via (1) PATH_INFO to the default URI (e.g., root or view/), (2) settings parameters s...

[SECURITY] [DSA 1383-1] New gforge packages fix cross-site scripting

-------------------------------------------------------------------------- Debian Security Advisory DSA 1383-1 [email protected] http://www.debian.org/security/ Thijs Kinkhorst October 4th, 2007 http://www.debian.org/security/faq -...

CVE-2007-5207

guilt 0.27 allows local users to overwrite arbitrary files via a symlink attack on a guilt.log.PID temporary file...

CVE-2007-5207

CVE-2007-5207: guilt 0.27 allows local users to overwrite arbitrary files via a symlink attack on a guilt.log.[PID] temporary file. Exploitation is local; impact is partial integrity/availability as described; no remediation details are provided in the connected documents.

CVE-2007-5201

The FTP backend for Duplicity before 0.4.9 sends the password as a command line argument when calling ncftp, which might allow local users to read the password by listing the process and its arguments...

CVE-2007-5194

The Chroot server in rMake 1.0.11 creates a /dev/zero device file with read/write permissions for the rMake user and the same minor device number as /dev/port, which might allow local users to gain root privileges...

CVE-2007-5194

The CVE-2007-5194 entry concerns the Chroot server in rMake 1.0.11. A local-priority issue arises because it creates a /dev/zero device file with read/write permissions for the rMake user and shares the minor device number with /dev/port, enabling potential local privilege escalation to root. The...

CVE-2007-5198

The CVE-2007-5198 issue affects the Nagios plugins, specifically the check_http function’s handling of Location headers. The root cause is a buffer overflow triggered by a large number of leading 'L' characters in redirects when using -f (follow). This can allow remote code execution on the host ...

CVE-2007-5201

The FTP backend for Duplicity before 0.4.9 sends the password as a command line argument when calling ncftp, which might allow local users to read the password by listing the process and its arguments...

BELL-CVE-2007-5191 CVE-2007-5191 does not affect BellSoft software

Bulletin has no description...

CVE-2007-5191

mount and umount in util-linux and loop-aes-utils call the setuid and setgid functions in the wrong order and do not check the return values, which might allow attackers to gain privileges via helpers such as mount.nfs...

CVE-2007-5193

Twiki 4.1.2 on Debian GNU/Linux (and possibly other OS) has a default configuration that places the work area directory (cfg{RCS}{WorkAreaDir}) under the web document root. This may allow remote attackers to obtain sensitive information if .htaccess restrictions are not applied. Public details co...

CVE-2007-5191

mount and umount in util-linux and loop-aes-utils call the setuid and setgid functions in the wrong order and do not check the return values, which might allow attackers to gain privileges via helpers such as mount.nfs...