18185 matches found
CVE-2007-4996
libpurple in Pidgin before 2.2.1 does not properly handle MSN nudge messages from users who are not on the receiver's buddy list, which allows remote attackers to cause a denial of service crash via a nudge message that triggers an access of "an invalid memory location."...
DEBIAN-CVE-2007-4996
libpurple in Pidgin before 2.2.1 does not properly handle MSN nudge messages from users who are not on the receiver's buddy list, which allows remote attackers to cause a denial of service crash via a nudge message that triggers an access of "an invalid memory location."...
DSquare Exploit Pack: D2SEC_CABLD
Name| d2seccabld ---|--- CVE| CVE-2007-5006 Exploit Pack| D2ExploitPack Description| CA BrightStor ARCserve Backup for Laptops & Desktops r11.5 LGServer Stack Overflow Notes|...
CVE-2007-5171
Technical details about CVE-2007-5171 are not publicly provided in the supplied documents. Monitor for updates.
CVE-2007-5082
CVE-2007-5082 describes multiple stack-based buffer overflows in Computer Associates’ BrightStor HSM prior to r11.6, affecting the CsAgent service over TCP. A remote attacker can cause arbitrary code execution by sending crafted CsAgent commands with certain opcodes, due to missing validation of ...
CVE-2007-5003
CVE-2007-5003 concerns multiple stack-based buffer overflows in CA BrightStor ARCserve Backup for Laptops and Desktops, affecting r11.0 through r11.5. The vulnerability arises in the rxRPC.dll routines rxrLogin (long username and long password) and GetUserInfo (long username), allowing remote att...
CVE-2007-5084
CA BrightStor Hierarchical Storage Manager (HSM) before r11.6 is affected by multiple SQL injection vulnerabilities in the CsAgent service. The flaws reside in the CsAgent opcode handling, where certain commands (notably opcodes 0x07, 0x08, 0x09, 0x1E, 0x32, 0x36, 0x40 and possibly others) fail t...
CVE-2007-5006
CA ARCserve Backup for Laptops and Desktops (L&D) versions r11.0–r11.5 are affected by CVE-2007-5006, an authentication-bypass flaw in the LGServer/rxRPC interface over TCP/1900. The vulnerability arises from command handlers that do not verify peer authentication, enabling remote attackers to ad...
CVE-2007-5170
Sun Fire X2100 M2 and X2200 M2 Embedded Lights Out Manager (ELOM) before firmware 3.09 contain an unspecified vulnerability that allows remote attackers to send arbitrary network traffic and use ELOM as a spam proxy. The description is explicit but does not provide exploit vectors, affected compo...
CVE-2007-5083
BrightStor HSM CsAgent contains multiple remote vulnerabilities (CVE-2007-5082/5083/5084) in r11.5 that allow an unauthenticated attacker to execute arbitrary code via CsAgent commands over TCP port 2000 due to stack/heap buffer and integer overflow issues. iDefense/CVEs describe several buffer o...
CVE-2007-4996
CVE-2007-4996 affects libpurple in Pidgin prior to 2.2.1. It arises from how MSN nudge messages are processed when the sender is not on the receiver’s buddy list, allowing a remote attacker to trigger a denial of service by causing an access to an invalid memory location (crash). The description ...
CVE-2007-5172
Quicksilver Forums prior to version 1.4.1 is affected by CVE-2007-5172. The issue allows remote attackers to obtain sensitive information by triggering unspecified connection errors, which disclose the database password within the resulting error message. This vulnerability impacts confidentialit...
CVE-2007-5004
CVE-2007-5004 affects CA BrightStor ARCserve Backup for Laptops and Desktops (LGServer) r11.0–r11.5. An integer overflow in processing the authentication password (long username and crafted password) could allow a remote attacker to execute arbitrary code. Connected advisories/SAINT notes indicat...
Design/Logic Flaw
Multiple PHP remote file inclusion vulnerabilities in FrontAccounting FA 1.12 allow remote attackers to execute arbitrary PHP code via a URL in the pathtoroot parameter to 1 access/logout.php or certain PHP scripts under 2 admin/, 3 dimensions/, 4 gl/, 5 inventory/, 6 manufacturing/, 7 purchasing...
CVE-2007-5150
SQL injection vulnerability in the isgod function in includes/nukesentinel.php in NukeSentinel 2.5.11 allows remote attackers to execute arbitrary SQL commands via base64-encoded data in an admin cookie, a different vector than CVE-2007-5125...
Design/Logic Flaw
The focus handling for the onkeydown event in Microsoft Internet Explorer 6.0 allows remote attackers to change field focus and copy keystrokes via a certain use of a JavaScript htmlFor attribute, as demonstrated by changing focus from a textarea to a file upload field, a related issue to...
Sql injection
SQL injection vulnerability in the isgod function in includes/nukesentinel.php in NukeSentinel 2.5.11 allows remote attackers to execute arbitrary SQL commands via base64-encoded data in an admin cookie, a different vector than CVE-2007-5125...
CVE-2007-5151
SQL injection vulnerability in the abgetadmin function in includes/nukesentinel.php in NukeSentinel 2.5.12 allows remote attackers to execute arbitrary SQL commands via base64-encoded data in an admin cookie...
CVE-2007-5158
The focus handling for the onkeydown event in Microsoft Internet Explorer 6.0 allows remote attackers to change field focus and copy keystrokes via a certain use of a JavaScript htmlFor attribute, as demonstrated by changing focus from a textarea to a file upload field, a related issue to...