[SECURITY] [DSA 1436-1] New Linux 2.6.18 packages fix several vulnerabilities

-------------------------------------------------------------------------- Debian Security Advisory DSA 1436-1 [email protected] http://www.debian.org/security/ dann frazier December 20th, 2007 http://www.debian.org/security/faq -...

CVE-2007-6285

CVE-2007-6285 concerns autofs5 in some Linux distros (notably RHEL4/5) where the default -hosts map lacked the nodev mount option. This allowed a local user who controls a remote NFS server to create device files on that server and potentially access important devices on the client via the defaul...

CVE-2007-6485

Multiple PHP remote file inclusion vulnerabilities in Centreon 1.4.1 aka Oreon 1.4 allow remote attackers to execute arbitrary PHP code via a URL in the fileOreonConf parameter to 1 MakeXML.php or 2 MakeXML4statusCounter.php in include/monitoring/engine/...

CVE-2007-6496

Hosting Controller 6.1 Hot fix 3.3 and earlier allows remote attackers to register arbitrary users via a request to hosting/addsubsite.asp with the loginname and password parameters set, when preceded by certain requests to hosting/default.asp and hosting/selectdomain.asp, a related issue to...

CVE-2007-6501

Unspecified vulnerability in Hosting Controller 6.1 Hot fix 3.3 and earlier allows remote authenticated users to enable or disable "pay type" via a request to adminsettings/choosetranstype.asp...

CVE-2007-6476

GF-3XPLORER 2.4 allows remote attackers to obtain configuration information via a direct request to explorer/phpinfo.php, which calls the phpinfo function...

CVE-2007-6484

SQL injection vulnerability in index.php in phpRPG 0.8 allows remote attackers to execute arbitrary SQL commands via the password parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

CVE-2007-6496

Hosting Controller 6.1 Hot fix 3.3 and earlier allows remote attackers to register arbitrary users via a request to hosting/addsubsite.asp with the loginname and password parameters set, when preceded by certain requests to hosting/default.asp and hosting/selectdomain.asp, a related issue to...

autofs5 security update

CentOS Errata and Security Advisory CESA-2007:1177 Updated autofs5 technology preview packages that fix a security issue are now available for Red Hat Enterprise Linux 4. This update has been rated as having important security impact by the Red Hat Security Response Team. The autofs utility...

CVE-2007-6474

GF-3XPLORER 2.4 contains multiple XSS vulnerabilities exploitable via the newdir parameter to index_3x.php (and other vectors). Remote attackers can inject arbitrary web script/HTML. The exact root cause details, affected versions beyond 2.4, exploit status, and remediation steps are not specifie...

CVE-2007-6476

GF-3XPLORER 2.4 is affected by CVE-2007-6476 via an information-disclosure in explorer/phpinfo.php that calls phpinfo. This allows remote attackers to obtain configuration information. The CVSS data indicates network access, low attack complexity, and no authentication required, with partial conf...

CVE-2007-6479

In Dokeos 1.8.4, the component My productions (main/auth/profile.php) has an unrestricted file upload flaw. Remote authenticated users can upload and execute arbitrary PHP files by using a filename with a double extension, accessible under main/upload/users/ .

CVE-2007-6481

Technical details are not publicly available in the provided documents; no affected products/versions or vectors are specified. Monitor for updates.

CVE-2007-6483

CVE-2007-6483 covers a directory traversal flaw affecting SafeNet Sentinel Protection Server (7.0.0–7.4.0) and Sentinel Keys Server (1.0.3–1.0.4). The issue allows remote attackers to read arbitrary files via a .. in the URI/query, potentially impacting ICONICS GENESIS32/64 deployments that use S...

CVE-2007-6488

Falcon Series One CMS 1.4.3 is affected by multiple PHP remote file inclusion vulnerabilities. An attacker can cause arbitrary PHP code execution by providing a URL in (1) dir[classes] to sitemap.xml.php or (2) error to errors.php. The underlying issue is insecure handling of user-supplied URLs l...

CVE-2007-6492

CVE-2007-6492 affects iMesh versions 7.1.0.x and earlier. The IMWeb.IMWebControl.1 ActiveX control in IMWeb.dll (7.0.0.x) and possibly IMWebControl.dll in iMesh enables remote DoS by sending an empty string to the ProcessRequestEx method, causing Internet Explorer 7 to crash. Root cause: improper...

CVE-2007-6492

The IMWeb.IMWebControl.1 ActiveX control in IMWeb.dll 7.0.0.x, and possibly IMWebControl.dll, in iMesh 7.1.0.x and earlier allows remote attackers to cause a denial of service Internet Explorer 7 crash via an empty string in the argument to the ProcessRequestEx method...

CVE-2007-6477

Technical details for CVE-2007-6477 are not publicly available in the provided documents. No concrete information on affected products, root cause, or remediation is provided here. Monitor for updates.

CVE-2007-6491

Kvaliitti WebDoc 3.0 CMS is affected by multiple SQL injection vulnerabilities. The issues allow remote attackers to execute arbitrary SQL commands via (1) cat_id in categories.asp, (2) document_id in categories.asp, and (3)/(4) cat_id and document_id in subcategory.asp. Root cause is unsafely ha...

CVE-2007-6495

CVE-2007-6495 affects Hosting Controller 6.1 Hot fix 3.3 and earlier. A remote authenticated user can modify Dirroot via AddUser (accounts/AccountActions.asp) to change permissions on web root folders (db, www, Special, log). This can enable remote code execution by making Forum\db executable as ...