CVE-2007-6737

CVE-2007-6737 affects pyftpdlib’s FTP server (FTPServer.py) prior to 0.2.0. The root cause is that attempted_logins is not incremented for a USER command with an invalid username, making brute-force access more feasible. Exploitation details are not provided in the documents; remediation/fix deta...

CVE-2007-6740

CVE-2007-6740 affects pyftpdlib: FTPServer.py ftp_STOU does not limit attempts to find a unique filename, enabling remote authenticated users to cause a denial of service via STOU. Impact and fix: DoS via STOU as described; version before 0.2.0 is affected; upgrade to 0.2.0+ to remediate (exact p...

CVE-2007-6741

CVE-2007-6741 affects the pyftpdlib FTP server: the FTPServer.py ftp_PORT function before version 0.2.0 does not block TCP connections to privileged ports when the destination IP matches the connection’s source IP, enabling potential FTP bounce attacks against NATs by remote authenticated users. ...

CVE-2007-6736

CVE-2007-6736 affects pyftpdlib’s FTPServer.py prior to version 0.2.0, enabling multiple directory traversal vulnerabilities where remote authenticated users can access arbitrary files/directories through a .. in LIST, STOR, or RETR commands. All provided sources describe the same issue with this...

CVE-2007-6738

CVE-2007-6738 affects pyftpdlib prior to 0.1.1. The PASV command uses a non-random port value, enabling remote attackers to infer the number of in‑progress data connections by reading the response. Impact is information disclosure. Mitigation: upgrade to 0.1.1 or later (per the cited descriptions...

CVE-2007-1036

creationtimestamp| type| source ---|---|--- 2010-10-19 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/16318 2012-09-05 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/21080 2018-05-29 15:50:33+00:00| seen|...

Core Security Technologies Advisory 2010.0517

Core Security Technologies - CoreLabs Advisory http://corelabs.coresecurity.com Microsoft Office HtmlDlgHelper class memory corruption 1. Advisory Information Title: Microsoft Office HtmlDlgHelper class memory corruption Advisory Id: CORE-2010-0517 Advisory URL:...

Microsoft Office Word Remote Code Execution Vulnerabilities (2293194)

This host is missing a critical security update according to Microsoft Bulletin MS10-079. OpenVAS Vulnerability Test $Id: secpodms10-079.nasl 6533 2017-07-05 08:41:34Z santu $ Microsoft Office Word Remote Code Execution Vulnerabilities 2293194 Authors: Antu Sanadi Copyright: Copyright c 2010...

Microsoft Office Excel Remote Code Execution Vulnerabilities (2293211)

This host is missing a critical security update according to Microsoft Bulletin MS10-080. OpenVAS Vulnerability Test $Id: secpodms10-080.nasl 5361 2017-02-20 11:57:13Z cfi $ Microsoft Office Excel Remote Code Execution Vulnerabilities 2293211 Authors: Antu Sanadi Copyright: Copyright c 2010 SecPo...

Microsoft Office Word Remote Code Execution Vulnerabilities (2293194)

This host is missing a critical security update according to Microsoft Bulletin MS10-079. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

Security Update for Microsoft Office Excel 2007 (KB2345035)

A security vulnerability exists in Microsoft Office Excel 2007 that could allow arbitrary code to run when a maliciously modified file is opened. This update resolves that vulnerability...

Security Update for the 2007 Microsoft Office System (KB2344875)

A security vulnerability exists in the 2007 Microsoft Office System and the Microsoft Office Compatibility Pack that could allow arbitrary code to run when a maliciously modified file is opened. This update resolves that vulnerability...

Microsoft Office HtmlDlgHelper class memory corruption

Core Security - CoreLabs Microsoft Office HtmlDlgHelper class memory corruption 1. Advisory Information Title: Microsoft Office HtmlDlgHelper class memory corruption Advisory Id: CORE-2010-0517 Advisory URL: http://www.coresecurity.com/content/MS-Office-HtmlDlgHelper-memory-corruption Date...

Microsoft Visio 2007 DLL Hijacking Exploit (mfc80esn.dll)

Exploit for windows platform in category local exploits / ========================================================= Microsoft Visio 2007 DLL Hijacking Exploit mfc80esn.dll ========================================================= $ Program: MS Visio $ Version: 2007 $ Download:...

hplip - 'hpssd.py' From Address Arbitrary Command Execution (Metasploit)

$Id: hpliphpssdexec.rb 10617 2010-10-09 06:55:52Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framewor...

CVE-2007-4560

creationtimestamp| type| source ---|---|--- 2010-10-09 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/16924 2018-05-29 15:50:33+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/unix/smtp/clamavmilterblackhole.rb 2025-02-06 03:13:38+00:00|...

CVE-2007-5208

creationtimestamp| type| source ---|---|--- 2010-10-09 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/16837 2018-05-29 15:50:33+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/misc/hpliphpssdexec.rb 2025-02-06 03:13:38+00:00| seen|...

CentOS 3 / 4 / 5 : mikmod (CESA-2010:0720)

Updated mikmod packages that fix multiple security issues are now available for Red Hat Enterprise Linux 3, 4, and 5. The Red Hat Security Response Team has rated this update as having moderate security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity...

RHEL 3 / 4 / 5 : mikmod (RHSA-2010:0720)

Updated mikmod packages that fix multiple security issues are now available for Red Hat Enterprise Linux 3, 4, and 5. The Red Hat Security Response Team has rated this update as having moderate security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity...

CVE-2007-3901

creationtimestamp| type| source ---|---|--- 2010-10-05 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/16442 2018-05-29 15:50:33+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/misc/ms07064sami.rb 2025-02-06 03:13:38+00:00| seen|...