Immunity Canvas: TIVOLI_STORAGE

Name| tivolistorage ---|--- CVE| CVE-2007-4880 Exploit Pack| CANVAS Description| IBM Tivoli Storage Manager Express CAD Service Buffer Overflow Notes| CVE Name: CVE-2007-4880 VENDOR: IBM VersionsAffected: Repeatability: One shot References:...

Unfixed XSS vulnerability at www.sweden.se

Security researcher doeza, has submitted on 28/09/2007 a cross-site-scripting XSS vulnerability affecting www.sweden.se, which at the time of submission ranked 82886 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 02/10/2007. It is currently...

iDefense Security Advisory 09.27.07: Computer Associates BrightStor HSM r11.5 Multiple Vulnerabilities

Computer Associates BrightStor HSM r11.5 Multiple Vulnerabilities iDefense Security Advisory 09.27.07 http://labs.idefense.com/intelligence/vulnerabilities/ Sep 27, 2007 I. BACKGROUND Computer Associates BrightStor Hierarchical Storage Manager HSM is an application used to create a tiered storage...

CVE-2007-5137

Buffer overflow in the ReadImage function in generic/tkImgGIF.c in Tcl Tcl/Tk 8.4.13 through 8.4.15 allows remote attackers to execute arbitrary code via multi-frame interlaced GIF files in which later frames are smaller than the first. NOTE: this issue is due to an incorrect patch for...

CVE-2007-4880

Buffer overflow in the Client Acceptor Daemon CAD, dsmcad.exe, in certain IBM Tivoli Storage Manager TSM clients 5.1 before 5.1.8.1, 5.2 before 5.2.5.2, 5.3 before 5.3.5.3, and 5.4 before 5.4.1.2 allows remote attackers to execute arbitrary code via crafted HTTP headers, aka IC52905...

[SECURITY] [DSA 1378-1] New Linux 2.6.18 packages fix several vulnerabilities

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - -------------------------------------------------------------------------- Debian Security Advisory DSA 1378-1 [email protected] http://www.debian.org/security/ Dann Frazier September 27th, 2007 http://www.debian.org/security/faq -...

Unfixed XSS vulnerability at web.njcu.edu

Security researcher Narcoticxs, has submitted on 28/09/2007 a cross-site-scripting XSS vulnerability affecting web.njcu.edu, which at the time of submission ranked 206911 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 02/10/2007. It is current...

CVE-2007-4880

CVE-2007-4880 is a buffer overflow in the IBM Tivoli Storage Manager (TSM) Client CAD Service (dsmcad.exe) that allows remote code execution via crafted HTTP headers. Affected are TSM client versions: 5.1 before 5.1.8.1, 5.2 before 5.2.5.2, 5.3 before 5.3.5.3, and 5.4 before 5.4.1.2. Exploitation...

Unfixed XSS vulnerability at www.saotron.ru

Security researcher iNs, has submitted on 28/09/2007 a cross-site-scripting XSS vulnerability affecting www.saotron.ru, which at the time of submission ranked 981579 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 02/10/2007. It is currently...

kernel security update

CentOS Errata and Security Advisory CESA-2007:0938 Updated kernel packages that fix a security issue in the Red Hat Enterprise Linux 3 kernel are now available. This update has been rated as having important security impact by the Red Hat Security Response Team. The Linux kernel handles the basic...

CVE-2007-3758

CVE-2007-3758 affects Safari on Apple iPhone 1.1.1 and Safari 3 prior to Beta Update 3.0.4, on Windows, and Mac OS X 10.4–10.4.10. Root cause: JavaScript window properties can be set across domain boundaries, enabling cross-site scripting (XSS). Impact as described: remote XSS vector. Remediation...

CVE-2007-3761

CVE-2007-3761 affects Safari on Apple iPhone 1.1.1 and is a Cross-site scripting (XSS) vulnerability. The issue arises from Javascript events being applied to a frame in another domain, enabling remote attackers to inject arbitrary web script or HTML. The public records show a MEDIUM severity (CV...

CVE-2007-3759

CVE-2007-3759 affects Apple iPhone Safari 1.1.1. When instructed to disable JavaScript, Safari does not fully disable it until the browser is restarted, leaving potential exposure to scripts after the user’s action. The issue is tied to the Safari JS disable state not taking effect immediately. P...

CVE-2007-4671

The CVE-2007-4671 issue affects Safari on Mac OS X (10.4–10.4.10) and Windows, plus iPhone 1.1.1. A crafted HTTP page can cause Javascript to affect HTTPS content from the same domain, enabling an attacker to alter or access HTTPS-protected pages. Root cause is a cross-page/script interaction bet...

CVE-2007-3758

Safari in Apple iPhone 1.1.1, and Safari 3 before Beta Update 3.0.4 on Windows and in Mac OS X 10.4 through 10.4.10, allows remote attackers to set Javascript window properties for web pages that are in a different domain, which can be leveraged to conduct cross-site scripting XSS attacks...

CVE-2007-3756

CVE-2007-3756 affects Safari in Apple iPhone 1.1.1 and Safari 3 prior to Beta Update 3.0.4 on Windows and macOS 10.4–10.4.10. A crafted web page can cause cross-domain access to reveal the URL of the parent window, enabling information disclosure. Affected components: Safari web browser on iPhone...

CVE-2007-3757

CVE-2007-3757 describes a vulnerability in Apple iPhone 1.1.1 where the embedded Safari browser mishandles tel: links, allowing a crafted link to cause the user to initiate a call to a different number than the one displayed. The issue affects the iPhone’s handling of tel: hyperlinks; exploitatio...

CVE-2007-3755

The CVE-2007-3755 issue affects the Apple iPhone’s Mail client (around v1.1.1) where embedded tel: links can trigger phone calls without user confirmation. The root cause is processing tel: hyperlinks in the Mail client that allows remote user-assisted attackers to cause the device to dial arbitr...

CVE-2007-3753

CVE-2007-3753 affects Apple iPhone 1.1.1 with Bluetooth enabled. The issue arises in the Bluetooth SDP packet handling, where insufficient input validation allows a physically proximate attacker to terminate the affected application (DoS) and potentially execute arbitrary code. The vulnerability ...

Important: Red Hat Security Advisory: kernel security update

Updated kernel packages that fix a security issue in the Red Hat Enterprise Linux 4 kernel are now available. This update has been rated as having important security impact by the Red Hat Security Response Team. The Linux kernel handles the basic functions of the operating system. A flaw was foun...