[SECURITY] [DSA 1486-1] New gnatsweb packages fix cross-site scripting

------------------------------------------------------------------------ Debian Security Advisory DSA-1486-1 [email protected] http://www.debian.org/security/ Steve Kemp February 04, 2008 http://www.debian.org/security/faq -...

CVE-2007-6340

The connected advisory confirms CVE-2007-6340 affects LSrunasE 1.0 and Supercrypt 1.0 and explains the root cause: RC4 is used without a unique initialization vector, deriving a constant keystream across all passwords. This insecure design allows an attacker with local access to break encryption ...

CVE-2007-6700

The CVE-2007-6700 entry describes a Cross-site Scripting (XSS) vulnerability in the cgi-bin/bgplg component of the OpenBSD 4.1 BGPD web interface. Remote attackers could inject arbitrary web script or HTML through the cmd parameter. Affected software is OpenBSD 4.1’s BGPD with the web interface c...

Debian Security Advisory DSA 1480-1 (poppler)

The remote host is missing an update to poppler announced via advisory DSA 1480-1. OpenVAS Vulnerability Test $Id: deb14801.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 1480-1 poppler Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc...

Fixed in Apache Tomcat 5.5.26

Low: Session hi-jacking CVE-2007-5333 The previous fix for CVE-2007-3385 was incomplete. It did not consider the use of quotes or %5C within a cookie value. Affects: 5.5.0-5.5.25 Low: Elevated privileges CVE-2007-5342 The JULI logging component allows web applications to provide their own logging...

Security fix for the ALT Linux 6 package scponly version 4.8-alt1

Feb. 5, 2008 Ilya Evseev 4.8-alt1 - Updated to new version 4.8, fixes CVE-2007-6415 problem - Change source URL to SourceForge...

SuSE 10 Security Update : MySQL (ZYPP Patch Number 4879)

This update fixes several security vulnerabilities note: not all versions are affected by every bug : - CVE-2007-2583 - CVE-2007-2691 - CVE-2007-2692 - CVE-2007-5925 - CVE-2007-5969 - CVE-2007-6303 - CVE-2007-6304 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this...

openSUSE 10 Security Update : libmysqlclient-devel (libmysqlclient-devel-4873)

This update fixes several security vulnerabilities note: not all versions are affected by every bug : - CVE-2007-2583 - CVE-2007-2691 - CVE-2007-2692 - CVE-2007-5925 - CVE-2007-5969 - CVE-2007-6303 - CVE-2007-6304 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and packa...

CVE-2007-4130

CVE-2007-4130 affects Red Hat Enterprise Linux 4 on Itanium (ia64): the Linux kernel (2.6.x) fails to handle page faults during NUMA memory access, allowing a local unprivileged user to trigger a denial of service (system panic) via invalid arguments to set_mempolicy in MPOL_BIND. Connected advis...

USN-575-1: Apache vulnerabilities

It was discovered that Apache did not sanitize the Expect header from an HTTP request when it is reflected back in an error message, which could result in browsers becoming vulnerable to cross-site scripting attacks when processing the output. With cross-site scripting vulnerabilities, if a user...

Linux Kernel PowerPC chrp/setup.c文件空指针引用漏洞

BUGTRAQ ID: 27555 CVECAN ID: CVE-2007-6694 Linux Kernel是开放源码操作系统Linux所使用的内核。 Linux Kernel在PowerPC平台上执行里存在漏洞，本地攻击者可能利用此漏洞导致拒绝服务。 当运行在PowerPC时，Linux Kernel的chrp/setup.c文件中的chrpshowcpuinfo函数可能会出现崩溃。如果本地攻击者导致ofgetproperty函数失败的话，就会触发空指针引用，导致拒绝服务的情况。 Linux kernel 2.4.21 - 2.6.18-53 厂商补丁： RedHat ------...

BookmarkX script 2007 (topicid) Remote SQL Injection Vulnerability

Exploit for unknown platform in category web applications ================================================================== BookmarkX script 2007 topicid Remote SQL Injection Vulnerability ================================================================== BookmarkX scriptPowered by...

BookmarkX script 2007 - 'topicid' SQL Injection

BookmarkX scriptPowered by GengoliaWebStudioSQL Injection AUTHOR : S@BUN HOME : http://www.hackturkiye.com/ DorKs 1 : "2007 BookmarkX script" DORKS 2 : Powered by GengoliaWebStudio DORK 3 : allinurl :"index.php?menu=showtopic" EXPLOIT :...

CVE-2007-6698

OpenLDAP slapd with a Berkeley DB (BDB) backend is affected by CVE-2007-6698. A remote, authenticated user who can perform modify or modrdn operations can cause slapd to crash by sending a NOOP control marked as critical during those operations. The issue is tied to the handling of NOOP in modify...

CVE-2007-6697

Buffer overflow in the LWZReadByte function in IMGgif.c in SDLimage before 1.2.7 allows remote attackers to cause a denial of service application crash or possibly execute arbitrary code via a crafted GIF file, a similar issue to CVE-2006-4484. NOTE: some of these details are obtained from third...

CVE-2007-6697

The CVE-2007-6697 entry concerns a buffer overflow in SDL_image prior to 1.2.7, specifically in the LWZReadByte function of IMG_gif.c. A crafted GIF could crash the application or potentially execute arbitrary code, aligning with the related CVE-2006-4484 class of GIF handling vulnerabilities in ...

CVE-2007-6695

CVE-2007-6695: Drake CMS 0.4.9 has an XSS in index.php via the option parameter. Root cause is insufficient input sanitization, allowing arbitrary script/HTML injection in victim browsers. Exploitation details are present (Exploit-DB entry with example payload); no remediation or patch informatio...

CVE-2007-6697

Buffer overflow in the LWZReadByte function in IMGgif.c in SDLimage before 1.2.7 allows remote attackers to cause a denial of service application crash or possibly execute arbitrary code via a crafted GIF file, a similar issue to CVE-2006-4484. NOTE: some of these details are obtained from third...

Moderate: Red Hat Security Advisory: postgresql security update

Updated postgresql packages that fix several security issues are now available for Red Hat Application Stack v1 and v2. This update has been rated as having moderate security impact by the Red Hat Security Response Team. PostgreSQL is an advanced Object-Relational database management system DBMS...

openSUSE 10 Security Update : kernel (kernel-4941)

This kernel update fixes the following security problems : CVE-2008-0007: Insufficient range checks in certain fault handlers could be used by local attackers to potentially read or write kernel memory. CVE-2008-0001: Incorrect access mode checks could be used by local attackers to corrupt...