CVE-2007-6436

Stack-based buffer overflow in JSGCI.DLL in JustSystems Ichitaro 2005, 2006, and 2007 allows user-assisted remote attackers to execute arbitrary code via a crafted document, as actively exploited in December 2007 by the Tarodrop.F trojan. NOTE: some of these details are obtained from third party...

CVE-2007-6433

The getRenderedEjbql method in the org.jboss.seam.framework.Query class in JBoss Seam 2.x before 2.0.0.CR3 allows remote attackers to inject and execute arbitrary EJBQL commands via the order parameter...

CVE-2007-5862

The CVE-2007-5862 issue affects Mac OS X 10.4.x (up to 10.4.11) and Java for Mac OS X 10.4 Release 6. A crafted Java applet could bypass Keychain access controls and add or delete arbitrary Keychain items, enabling remote privilege escalation. The problem stems from improper verification of user ...

CVE-2007-6354

CVE-2007-6354 affects exiftags prior to 1.01, due to a field offset overflow that can cause an illegal memory access. The issue is described as potentially enabling heap corruption and arbitrary code execution, with Debian/OpenVAS advisories listing fixes in older exiftags packages (e.g., 0.98-re...

CVE-2007-6434

CVE-2007-6434 affects Linux kernel 2.6.23. A local attacker can create low pages in virtual userspace memory and bypass mmap_min_addr protection by supplying a crafted executable that calls do_brk. This is a local-attack scenario with partial impact on availability as per CVSS 2.0 (low base score...

CVE-2007-6424

CVE-2007-6424 affects Fonality Trixbox 2.0 PBX; the registry.pl script reads commands from a remote site without proper origin validation, enabling a DNS spoofing vector that lets remote attackers disable Trixbox and execute arbitrary commands. Affected component: registry.pl; root cause: insuffi...

Important: Red Hat Security Advisory: mysql security update

Updated mysql packages that fix several security issues are now available for Red Hat Enterprise Linux 4 and 5. This update has been rated as having important security impact by the Red Hat Security Response Team. MySQL is a multi-user, multi-threaded SQL database server. MySQL is a client/server...

CVE-2007-5583

Cisco IP Phone 7940 with firmware P0S3-08-7-00 allows remote attackers to cause a denial of service "486 Busy" responses or device reboot via a sequence of SIP INVITE transactions in which the Request-URI lacks a user name, a different vulnerability than CVE-2007-4459...

CVE-2007-6283

Red Hat Enterprise Linux 5 and Fedora install the Bind /etc/rndc.key file with world-readable permissions, which allows local users to perform unauthorized named commands, such as causing a denial of service by stopping named...

CVE-2007-6283

Red Hat Enterprise Linux 5 and Fedora install the Bind /etc/rndc.key file with world-readable permissions, which allows local users to perform unauthorized named commands, such as causing a denial of service by stopping named...

CVE-2007-5583

Cisco IP Phone 7940 with firmware P0S3-08-7-00 is affected by CVE-2007-5583, a denial-of-service vulnerability caused by a sequence of SIP INVITE transactions where the Request-URI lacks a user name. Remote attackers can trigger 486 Busy responses or a device reboot. The vulnerability is document...

Moderate: squid security update

2.5.STABLE3-8.3E - fix for 410181 - CVE-2007-6239 Squid DoS in cache updates 2.5.STABLE3-7 - resolves: 238103: 'forwardedfor off' in squid.conf does not work...

appleupdate-exec.txt

--------------------------------------------------------------------- Apple Mac OS X Software Update Remote Command Execution Vulnerability Copyright c 2007 Moritz Jodeit 2007/12/17 --------------------------------------------------------------------- I. Vulnerability Description The OS X Softwar...

Unfixed Redirect vulnerability at www.ottawa.edu

Security researcher www.r3t.n3t.nl, has submitted on 18/12/2007 a Redirect vulnerability affecting www.ottawa.edu, which at the time of submission ranked 503702 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 12/01/2008. It is currently unfixed...

rPSA-2007-0268-1 kdebase

rPath Security Advisory: 2007-0268-1 Published: 2007-12-17 Products: rPath Linux 1 Rating: Major Exposure Level Classification: Local Deterministic Denial of Service Updated Versions: kdebase=conary.rpath.com@rpl:1/3.4.2-3.15-1 rPath Issue Tracking System: https://issues.rpath.com/browse/RPL-1992...

ZDI-07-079: Hewlett-Packard HP-UX swagentd Buffer Overflow Vulnerability

ZDI-07-079: Hewlett-Packard HP-UX swagentd Buffer Overflow Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-07-079.html December 17, 2007 -- CVE ID: CVE-2007-6195 -- Affected Vendor: Hewlett-Packard -- Affected Products: HP-UX 11.11 -- TippingPointTM IPS Customer Protection:...

ZDI-07-078: St. Bernard Open File Manager Heap Overflow Vulnerability

ZDI-07-078: St. Bernard Open File Manager Heap Overflow Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-07-078.html December 17, 2007 -- CVE ID: CVE-2007-6281 -- Affected Vendor: St. Bernard -- Affected Products: Open File Manager 9.5 -- TippingPointTM IPS Customer Protection:...

Mac OS X Multiple Vulnerabilities (Security Update 2007-009)

The remote host is running a version of Mac OS X 10.5 or 10.4 that does not have Security Update 2007-009 applied. This update contains several security fixes for a large number of programs. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid29723; scriptversion"1.28";...

VulnCheck KEV: CVE-2007-6436

Stack-based buffer overflow in JSGCI.DLL in JustSystems Ichitaro 2005, 2006, and 2007 allows user-assisted remote attackers to execute arbitrary code via a crafted document, as actively exploited in December 2007 by the Tarodrop.F trojan. NOTE: some of these details are obtained from third party...

Microsoft Windows Media Format ASF Parsing Code Execution (MS07-068; CVE-2007-0064)

The Microsoft Windows Media Format Runtime provides information and tools for applications that use Windows Media content. The core component of Windows Media Format is the Advanced Systems Format ASF. ASF is a file format that stores audio and video information and is specially designed to run...