CVE-2007-5605

CVE-2007-5605 is a buffer overflow in HPISDataManager.dll's GetFileTime() function within the HP Instant Support ActiveX control. A remote attacker could cause arbitrary code execution by passing a long argument to the function. Affected product: HP Instant Support / HPISDataManager.dll ActiveX c...

CVE-2007-5606

HP Instant Support’s HPISDataManager.dll ActiveX control contains MoveFile() in the HPISDataManager, a buffer overflow that can be exploited by a remote attacker to execute arbitrary code. Public details indicate exploitation requires convincing a user to visit a malicious page to trigger the vul...

CVE-2007-5608

HP Instant Support HPISDataManager.dll ActiveX control contains the DownloadFile() function vulnerability (CVE-2007-5608). An unauthenticated remote attacker could force the ActiveX to download arbitrary files to a location on the victim’s system via a crafted URL and destination filename. Affect...

CVE-2007-5607

creationtimestamp| type| source ---|---|--- 2008-06-04 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/31877...

CVE-2007-5610

creationtimestamp| type| source ---|---|--- 2008-06-03 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/31879...

CVE-2007-5604

creationtimestamp| type| source ---|---|--- 2008-06-03 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/31873...

Design/Logic Flaw

CFNetwork in Safari in Apple Mac OS X before 10.5.3 automatically sends an SSL client certificate in response to a web server's certificate request, which allows remote web sites to obtain sensitive information Subject data from personally identifiable certificates, and use arbitrary certificates...

VMSA-2008-0009:Updates to VMware Workstation, VMware Player, VMware ACE, VMware Fusion, VMware Server, VMware VIX API, VMware ESX, VMware ESXi resolve CRITICAL security issues

VMSA-2008-0009.2 Updates to VMware Workstation, VMware Player, VMware ACE, VMware Fusion, VMware Server, VMware VIX API, VMware ESX, VMware ESXi resolve critical security issues VMware Security Advisory VMware Security AdvisoryAdvisory ID: VMSA-2008-0009.2 VMware Security AdvisorySynopsis: Update...

[SECURITY] [DSA 1588-2] New Linux 2.6.18 packages fix several vulnerabilities

---------------------------------------------------------------------- Debian Security Advisory DSA-1588-2 [email protected] http://www.debian.org/security/ dann frazier May 30, 2008 http://www.debian.org/security/faq - ----------------------------------------------------------------------...

vsftpd security and bug fix update

2.0.5-12 - fix CVE-2007-5962: vsftpd memory leak when denyfile option is set - Resolves: 423001 2.0.5-11 - add new option to log login failures based on user list - Resolves: 345791 - fix userconfigdir option - Resolves: 400921 - allow usernames starting with '' or '.' - Resolves: 386561 - fix th...

dovecot security and bug fix update

1.0.7-2 - LDAP+auth cache user login mixup CVE-2007-6598, 427575 - insecure mailextragroups option CVE-2008-1199, 436927 1.0.7-1 - update to latest upstream, fixes a few bugs 331441, 245249, plus two security vulnerabilities CVE-2007-2231, CVE-2007-4211 - increased default loginprocesssize to 64...

mysql security and bug fix update

5.0.45-7 - Adjust thread stack requests to allow for platform-specific guard page size; necessary to prevent stack overrun on PPC with RHEL5's 64K page size. Resolves: 435391 - Remove calendar-dependent queries from 'view' test; necessary to get regression tests to pass after 2007. 5.0.45-6 -...

[SECURITY] [DSA 1588-1] New Linux 2.6.18 packages fix several vulnerabilities

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - ---------------------------------------------------------------------- Debian Security Advisory DSA-1588-1 [email protected] http://www.debian.org/security/ dann frazier May 27, 2008 http://www.debian.org/security/faq -...

Mac OS X 10.5.x < 10.5.3 Multiple Vulnerabilities

The remote host is running a version of Mac OS X 10.5.x that is prior to 10.5.3. Mac OS X 10.5.3 contains security fixes for a number of programs. C Tenable Network Security, Inc. if !definedfunc"bnrandom" exit0; if NASLLEVEL 3004 exit0; include"compat.inc"; if description scriptid32477;...

Mac OS X Multiple Vulnerabilities (Security Update 2008-003)

The remote host is running a version of Mac OS X 10.4 that does not have the security update 2008-003 applied. This update contains security fixes for a number of programs. C Tenable Network Security, Inc. if !definedfunc"bnrandom" exit0; if NASLLEVEL 3004 exit0; include"compat.inc"; if descripti...

Microsoft Windows Speech Components sapi.dll Code Execution (MS08-032; CVE-2007-0675)

The ActiveX Speech Components sapi.dll is part of the Microsoft Speech Application Programming Interface SAPI that allows the use of speech recognition and speech synthesis within Windows applications. A remote code execution vulnerability has been reported in the ActiveX Speech Components...

Debian DSA-1588-1 : linux-2.6 - denial of service

Several vulnerabilities have been discovered in the Linux kernel that may lead to a denial of service. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2007-6712 Johannes Bauer discovered an integer overflow condition in the hrtimer subsystem on 64-bit...

[SECURITY] [DSA 1588-1] New Linux 2.6.18 packages fix several vulnerabilities

---------------------------------------------------------------------- Debian Security Advisory DSA-1588-1 [email protected] http://www.debian.org/security/ dann frazier May 27, 2008 http://www.debian.org/security/faq - ----------------------------------------------------------------------...

Debian Security Advisory DSA 1578-1 (php4)

The remote host is missing an update to php4 announced via advisory DSA 1578-1. OpenVAS Vulnerability Test $Id: deb15781.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 1578-1 php4 Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc...

Debian: Security Advisory (DSA-1576-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...