CVE-2007-6679

CVE-2007-6679 affects IBM WebSphere Application Server 6.1 before Fix Pack 13, with an unspecified vulnerability in the Administrative Console related to monitor role users. Connected sources indicate additional impact on WebSphere 6.0.x before Fix Pack 25 and list multiple vulnerabilities in 6.1...

Design/Logic Flaw

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2007-6167. Reason: This candidate is a duplicate of CVE-2007-6167. Notes: All CVE users should reference CVE-2007-6167 instead of this candidate. All references and descriptions in this candidate have been removed to prevent...

CVE-2007-6678

...

CVE-2007-6678

CVE-2007-6678 is rejected/not used; reference CVE-2007-6167 instead.

[Full-disclosure] ID-Commerce Security Advisory - SLR-2007-001

ID-Commerce Security Advisory - SLR-2007-001 +------------------------------------------------------------------------+ | Product | ID-Commerce | |--------------------+---------------------------------------------------| | Summary | SQL Injection Vulnerabilities |...

CVE-2007-6677

CVE-2007-6677 is an XSS vulnerability in Peter's Random Anti-Spam Image WordPress plugin (versions 0.2.4 and earlier). The issue arises from improper input handling in the comment field of the comment form, allowing remote attackers to inject arbitrary script/HTML. Public references in multiple C...

SuSE 10 Security Update : cups (ZYPP Patch Number 4805)

This update fixes a buffer overflow that can be exploited by users that are allowed to configure CUPS. CVE-2007-5848 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if description...

Microsoft Windows TCP/IP实现ICMP请求远程拒绝服务漏洞（MS08-001）

BUGTRAQ ID: 27139 CVECAN ID: CVE-2007-0066 Microsoft Windows是微软发布的非常流行的操作系统。 Windows内核的TCP/IP实现（tcpip.sys）中处理碎片路由器广播ICMP查询的方式实现上存在漏洞，远程攻击者可能利用此漏洞导致系统崩溃。 匿名攻击者可以通过在网络上向计算机特制的ICMP报文利用此漏洞，导致计算机停止响应和自动重新启动。但利用此漏洞所必须的ICMP路由发现协议（RDP）不是默认启用的。 Microsoft Windows XP SP2 Microsoft Windows Server 2003 SP2...

Microsoft Windows LSASS LPC请求本地权限提升漏洞（MS08-002）

BUGTRAQ ID: 27099 CVECAN ID: CVE-2007-5352 Microsoft Windows是微软发布的非常流行的操作系统。 Windows的LSASS过程没有正确地处理特制LPC请求，当LSASS进程收到特制的LPC请求时，攻击者就可以以提升的权限运行代码，成功利用此漏洞的攻击者可以完全控制受影响的系统。攻击者可随后安装程序；查看、更改或删除数据；或者创建拥有完全用户权限的新帐户。 Microsoft Windows XP SP2 Microsoft Windows Server 2003 SP2 Microsoft Windows Server 2003...

Microsoft Windows TCP/IP实现IGMP及MLD报文远程溢出漏洞（MS08-001）

BUGTRAQ ID: 27100 CVECAN ID: CVE-2007-0069 Microsoft Windows是微软发布的非常流行的操作系统。 Windows内核的TCP/IP实现（tcpip.sys）处理存储IGMPv3和MLDv2查询状态的TCP/IP结构的方式存在缓冲区溢出漏洞，远程攻击者可能利用此漏洞控制服务器。 匿名攻击者可以通过在网络上向计算机发送特制的IGMPv3和MLDv2报文来利用此漏洞。成功利用此漏洞的攻击者可以完全控制受影响的系统。攻击者可随后安装程序；查看、更改或删除数据；或者创建拥有完全用户权限的新帐户。 Microsoft Windows XP SP...

OpenPegasus管理服务器PAM认证模块远程栈溢出漏洞

BUGTRAQ ID: 27188，27172 CVECAN ID: CVE-2008-0003，CVE-2007-5360 OpenPegasus是一个开源项目，用于实现DMTF CIM和WBEM企业管理标准。 OpenPegasus的PAM认证模块实现上存在缓冲区溢出漏洞，远程攻击者可能利用此漏洞控制服务器。 OpenPegasus的PAM认证模块中的PAMBasicAuthenticator::PAMCallback函数存在缓冲区溢出漏洞： // // copy the user password // respi-resp = char mallocPAMMAXMSGSIZE;...

Debian DSA-1456-1 : fail2ban - programming error

Daniel B. Cid discovered that fail2ban, a tool to block IP addresses that cause login failures, is too liberal about parsing SSH log files, allowing an attacker to block any IP address. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin wer...

openSUSE 10 Security Update : MozillaThunderbird (MozillaThunderbird-4874)

This update brings Mozilla Thunderbird to security update version 1.5.0.14 Following security problems were fixed : - MFSA 2007-29: Crashes with evidence of memory corruption As part of the Firefox 2.0.0.8 update releases Mozilla developers fixed many bugs to improve the stability of the product...

iDefense Security Advisory 01.09.08: Novell NetWare Client nicm.sys Local Privilege Escalation Vulnerability

iDefense Security Advisory 01.09.08 http://labs.idefense.com/intelligence/vulnerabilities/ Jan 09, 2008 I. BACKGROUND The Novell Client software provides a workstation with access to Novell NetWare networks as well as Novell Open Enterprise Server OES services. Novell Clients can access the full...

GLSA-200801-05 : Squid: Denial of Service

The remote host is affected by the vulnerability described in GLSA-200801-05 Squid: Denial of Service The Wikimedia Foundation reported a memory leak vulnerability when performing cache updates. Impact : A remote attacker could perform numerous specially crafted requests to the vulnerable server,...

Novell Client nicm.sys Local Privilege Escalation

The file 'NICM.SYS' included with the Novell Client software and installed on the remote host reportedly allows local users to open the device '.\nicm' and execute arbitrary code in kernel mode using specially-constructed input. C Tenable Network Security, Inc. include"compat.inc"; if description...

GLSA-200801-06 : Xfce: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-200801-06 Xfce: Multiple vulnerabilities Gregory Andersen reported that the Xfce4 panel does not correctly calculate memory boundaries, leading to a stack-based buffer overflow in the launcherupdatepanelentry function CVE-2007-653...

CVE-2007-6532

Double free vulnerability in the Widget Library libxfcegui4 in Xfce before 4.4.2 might allow remote attackers to execute arbitrary code via unknown vectors related to the "cliend id, program name and working directory in session management."...

CVE-2007-6531

CVE-2007-6531: Stack-based buffer overflow in the Panel (xfce4-panel) component of Xfce before 4.4.2 may allow remote code execution via Launcher tooltips. A second over-read exists in xfce_mkdirhier but is not necessarily exploitable. Affected: xfce4-panel; libxfcegui4 linked via the Xfce suite....

CVE-2007-0012

CVE-2007-0012 affects Sun JRE 5.0 before update 14. An issue in the jpiexp32.dll can trigger a NULL pointer dereference when an HTML object tag encodes a Java applet without a defined name attribute, potentially crashing Internet Explorer/JRE. Exploitation described as remote and requiring a user...