PeerCast servhs.cpp handshakeHTTP Function SOURCE Request Remote Overflow

The version of PeerCast installed on the remote host fails to check the length of user-supplied data in its 'handshakeHTTP' function in 'servhs.cpp' before copying it to the 'loginPassword' and 'loginMount' heap-based buffers. An unauthenticated attacker can leverage this issue to crash the...

CVE-2007-6417

The shmemgetpage function mm/shmem.c in Linux kernel 2.6.11 through 2.6.23 does not properly clear allocated memory in some rare circumstances related to tmpfs, which might allow local users to read sensitive kernel data or cause a denial of service crash...

Easylon OPC Server任意代码执行漏洞

BUGTRAQ ID: 26876 CVE ID:CVE-2007-4473 CNCVE ID:CNCVE-20074473 OLE for Process Control OPC是一款用于进程控制和制造业使用的标准OLE COM对象集规 格。OPC servers是OPC实现的服务程序。 Easylon OPC Server不正确验证服务处理，远程攻击者可以利用漏洞未授权访问服务器OPC 接口。 攻击者可以借此访问Easylon OPC Server执行任意代码或进行拒绝服务攻击，目前没有详细 漏洞细节提供。 Gesytec GmbH Easylon OPC Server 2.30.3...

Mac OS X Multiple Vulnerabilities (Security Update 2007-009)

The remote host is running a version of Mac OS X 10.5 or 10.4 that does not have Security Update 2007-009 applied. This update contains several security fixes for a large number of programs. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid29723; scriptversion"1.28";...

CVE-2007-6417

The connected Nessus entry links CVE-2007-6417 to the Linux kernel, affecting 2.6.11–2.6.23. The root cause is in shmem_getpage (mm/shmem.c) where allocated memory is not properly cleared in rare tmpfs-related paths, potentially allowing local users to read sensitive kernel data or crash the syst...

Apple Safari code execution vulnerability

Overview The Apple Safari web browser contains a vulnerability that may allow an attacker to execute arbitrary code. Description Per Apple Security Update 2007-009:A memory corruption issue exists in Safari's handling of feed: URLs. By enticing a user to access a maliciously crafted URL, an...

CVE-2007-6413

CVE-2007-6413 affects Sun Solaris 10. The vulnerability allows a remote attacker to bypass netgroup restrictions and gain root access to a filesystem via NFS requests from a client root user, on systems patched with 120011-04/120012-04 and later 120011-* / 120012-*. The issue is tied to Sun Solar...

CVE-2007-6414

The CVE-2007-6414 issue affects Adult Script (admin/administrator.php) versions 1.6 and earlier, where redirecting to the browser without an exit allows remote attackers to bypass authentication and obtain administrative credentials via a direct request. The flaw can further be leveraged to execu...

CVE-2007-6416

CVE-2007-6416 affects Xen 3.1.2 and earlier on ia64, where the copy_to_user routine in the PAL emulation can let a local HVM guest read arbitrary host memory. Exploitation details are not provided in the initial document, but this is listed as a host memory exposure issue (NVD CVSSv2 base 4.6, ME...

CVE-2007-4473

Gesytec Easylon OPC Server before 2.3.44 does not properly validate server handles, enabling remote code execution or denial of service via the OPC interface. Likely related to free operations on arbitrary memory addresses through Remove, and read/write operations on arbitrary memory addresses vi...

Stack overflow

Stack-based buffer overflow in mplayerc.exe in Media Player Classic MPC 6.4.9, when used with the 3ivx 4.5.1 or 5.0.1 codec, allows remote attackers to execute arbitrary code via a certain .mp4 file, possibly a related issue to CVE-2007-6401...

CVE-2007-6389

The notify feature in GNOME screensaver gnome-screensaver 2.20.0 might allow local users to read the clipboard contents and X selection data for a locked session by using ctrl-V...

Stack overflow

Stack-based buffer overflow in mplayer2.exe in Microsoft Windows Media Player WMP 6.4, when used with the 3ivx 4.5.1 or 5.0.1 codec, allows remote attackers to execute arbitrary code via a certain .mp4 file, possibly a related issue to CVE-2007-6402...

Stack overflow

Stack-based buffer overflow in Nullsoft Winamp 5.32 allows user-assisted remote attackers to execute arbitrary code via crafted unicode in a .mp4 file, with crafted tags, contained in a certain .rar archive, a related issue to CVE-2007-2498. NOTE: for exploitation, the victim must select a certai...

CVE-2007-6390

Cross-site request forgery CSRF vulnerability in the mycalendar plugin before 0.13 for Serendipity allows remote attackers to perform actions as blog administrators, which can be leveraged to conduct cross-site scripting XSS attacks on the blog page...

CVE-2007-6402

Stack-based buffer overflow in mplayerc.exe in Media Player Classic MPC 6.4.9, when used with the 3ivx 4.5.1 or 5.0.1 codec, allows remote attackers to execute arbitrary code via a certain .mp4 file, possibly a related issue to CVE-2007-6401...

CVE-2007-6403

Stack-based buffer overflow in Nullsoft Winamp 5.32 allows user-assisted remote attackers to execute arbitrary code via crafted unicode in a .mp4 file, with crafted tags, contained in a certain .rar archive, a related issue to CVE-2007-2498. NOTE: for exploitation, the victim must select a certai...

CVE-2007-6398

CVE-2007-6398 affects Flat PHP Board 1.2 and earlier. The issue allows remote attackers to bypass authentication and obtain limited access to an arbitrary user account by manipulating the fpb_username cookie. The description, as reported in multiple sources (NVD/NVT CVE entry and related database...

CVE-2007-6390

CVE-2007-6390 affects the Serendipity mycalendar plugin (pre-0.13). The vulnerability is a CSRF flaw that could allow an attacker to perform actions as a blog administrator, which could be leveraged to enable or facilitate XSS on the blog page. Affected component: mycalendar plugin for Serendipit...

CVE-2007-6395

Flat PHP Board 1.2 and earlier stores credentials under the web root with insufficient access control. The vulnerability allows remote attackers to obtain credentials by directly requesting the username.php file for any user account in users/. The CVE is documented with an access-control bypass i...