CVE-2007-5848

CVE-2007-5848 describes a buffer overflow in CUPS on Apple Mac OS X 10.4.11 that allows a local admin to execute arbitrary code via a crafted URI to the CUPS service. The OpenVAS/Nessus entries corroborate cups-related fixes; affected packages include CUPS and related components, with updates iss...

CVE-2007-5849

CVE-2007-5849 affects CUPS 1.2–1.3.4 with an integer underflow in the asn1_get_string function of the SNMP back end (backend/snmp.c). A crafted SNMP response can trigger a stack-based buffer overflow, enabling remote code execution. Public advisories (Mandriva MDVSA-2008:036, Ubuntu USN-563-1) do...

CVE-2007-4708

CVE-2007-4708 is a format-string vulnerability in the Address Book component of Apple Mac OS X 10.4.11 that allows remote code execution via the URL handler. Public sources confirm the flaw affects Mac OS X 10.4.11 (and related Address Book/URL handling paths) and indicate that exploitation could...

CVE-2007-5855

The CVE-2007-5855 entry is supported by connected documents: Apple Mail on Mac OS X 10.4.11 and 10.5.1 can use plaintext SMTP authentication via Account Assistant even when MD5 Challenge-Response is available, enabling potential remote sniffing of account activity. The issue is tied to the SMTP a...

CVE-2007-5857

The CVE-2007-5857 issue affects Apple Mac OS X 10.5.1 and is tied to Quick Look, where a movie file preview or icon may access URLs via HREFTrack, potentially exposing sensitive information. Connected sources corroborate the association with Mac OS X 10.5.1 and the need for remediation through se...

CVE-2007-5854

CVE-2007-5854 affects Apple Mac OS X 10.4.11 and 10.5.1 where Launch Services does not treat HTML files as unsafe content, enabling cross-site scripting (XSS) or information disclosure via a crafted HTML file. Public sources in the connected documents reference the same vulnerability and point to...

CVE-2007-3876

CVE-2007-3876 describes a stack-based SMB buffer overflow in Apple Mac OS X 10.4.11 that allows local users to execute arbitrary code via a long -W workgroup option to mount_smbfs or via an unspecified manipulation of the smbutil command line. iDefense notes the vulnerability could allow code exe...

Moderate: Red Hat Security Advisory: libexif security update

Updated libexif packages that fix a security issue are now available for Red Hat Enterprise Linux 4. This update has been rated as having moderate security impact by the Red Hat Security Response Team. The libexif packages contain the Exif library. Exif is an image file format specification that...

Moderate: Red Hat Security Advisory: libexif security update

Updated libexif packages that fix several security issues are now available for Red Hat Enterprise Linux 5. This update has been rated as having moderate security impact by the Red Hat Security Response Team. The libexif packages contain the Exif library. Exif is an image file format specificatio...

AST-2007-027 - Database matching order permits host-based authentication to be ignored

Asterisk Project Security Advisory - AST-2007-027 +------------------------------------------------------------------------+ | Product | Asterisk | |--------------------+---------------------------------------------------| | Summary | Database matching order permits host-based | | | authenticatio...

Apple Mac OSX - mount_smbfs Local Stack Buffer Overflow

Apple Mac OSX - mountsmbfs Local Stack Buffer Overflow / Copyright C 2007-2008 Subreption LLC. All rights reserved. Visit http://blog.subreption.com for exploit development notes. References: CVE-2007-3876 http://docs.info.apple.com/article.html?artnum=307179...

Moderate: libexif security update

0.5.12-5.1.0.2.el46.1 - Add patch for CVE-2007-6352. Fixes bug 425651...

MDKA-2007:133 : timezone

Updated timezone packages are being provided for older Mandriva Linux systems that do not contain the new Daylight Savings Time information for 2007 and later for certain time zones. These updated packages contain the new information. %NASLMINLEVEL 999999 @DEPRECATED@ This script has been...

Rosoft Media Player <= 4.1.7 .M3U Stack Overflow Exploit

No description provided by source. / rosoft-player-expl.c: 2007-12-18: Copyright c 2007 devcode ^^ D E V C O D E ^^ Rosoft Media Player = 4.1.7 .M3U Stack Overflow 0-DAY Description: A stack overflow occurs when parsing an .m3u file...

Unfixed XSS vulnerability at www.sunway.com.my

Security researcher DerickTham, has submitted on 19/12/2007 a cross-site-scripting XSS vulnerability affecting www.sunway.com.my, which at the time of submission ranked 87836 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 08/01/2008. It is...

iDefense Security Advisory 12.18.07: ClamAV libclamav MEW PE File Integer Overflow Vulnerability

iDefense Security Advisory 12.18.07 http://labs.idefense.com/intelligence/vulnerabilities/ Dec 18, 2007 I. BACKGROUND Clam AntiVirus is a multi-platform anti-virus toolkit released under the GNU Public License. ClamAV is often integrated into e-mail gateways and used to scan e-mail messages for...

RHEL 4 / 5 : mysql (RHSA-2007:1155)

Updated mysql packages that fix several security issues are now available for Red Hat Enterprise Linux 4 and 5. This update has been rated as having important security impact by the Red Hat Security Response Team. MySQL is a multi-user, multi-threaded SQL database server. MySQL is a client/server...

Moderate:libexif security update

0.6.13-4.0.2.el51.1 - Add patch for CVE-2007-6351. Fixes bug 425681 - Add patch for CVE-2007-6352. Fixes bug 425681...

SYMSA-2007-015

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Symantec Vulnerability Research http://www.symantec.com/research Security Advisory Advisory ID: SYMSA-2007-015 Advisory Title: Perforce P4Web Denial Of Service through resource starvation Author: Oliver Karow / [email protected] Release Date: 1...

Cisco Security Advisory: Application Inspection Vulnerability in Cisco Firewall Services Module

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Cisco Security Advisory: Application Inspection Vulnerability in Cisco Firewall Services Module Advisory ID: cisco-sa-20071219-fwsm ============ Revision 1.0 ============ Last Updated 2007 December 19 1600 UTC GMT For Public Release 2007 December 19...