CVE-2007-6316

Cross-site scripting XSS vulnerability in BarracudaDrive Web Server before 3.8 allows remote attackers to inject arbitrary web script or HTML via the URI path in an HTTP GET request, which is activated by administrators viewing log files via the Trace page...

CVE-2007-3902

Use-after-free vulnerability in the CRecalcProperty function in mshtml.dll in Microsoft Internet Explorer 5.01 through 7 allows remote attackers to execute arbitrary code by calling the setExpression method and then modifying the outerHTML property of an HTML element, one variant of "Uninitialize...

CVE-2007-0064

Heap-based buffer overflow in Windows Media Format Runtime 7.1, 9, 9.5, 9.5 x64 Edition, 11, and Windows Media Services 9.1 for Microsoft Windows 2000, XP, Server 2003, and Vista allows user-assisted remote attackers to execute arbitrary code via a crafted Advanced Systems Format ASF file...

Important: autofs5 security update

5.0.1-0.rc2.55.el46.1 - Bug 412621: CVE-2007-5964 autofs defaults don't restrict suid in /net - use mount option nosuid for -hosts map unless suid is explicily specified. - Resolves: rhbz412621...

CVE-2007-5344

CVE-2007-5344 affects Microsoft Internet Explorer 5.01–7 via mshtml.dll, where the CRecalcProperty/setExpression sequence enables remote arbitrary code execution through heap corruption of uninitialized/removed objects. Public sources in connected docs confirm a memory-corruption chain tied to se...

CVE-2007-3903

CVE-2007-3903 refers to a memory corruption vulnerability in Microsoft Internet Explorer (mshtml.dll) affecting IE6/IE7, caused by unexpected calls to HTML objects (cloneNode/nodeValue) leading to remote arbitrary code execution. OpenVAS/CP advisories link this family to MS07-069 and describe it ...

[ MDKSA-2007:240 ] - Updated libnfsidmap packages fix username lookup flaw

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Mandriva Linux Security Advisory MDKSA-2007:240 http://www.mandriva.com/security/ Package : libnfsidmap Date : December 7, 2007 Affected: 2007.0, Corporate 4.0 Problem Description: The NFSv4 ID mapper prior to 0.17 did not properly handle return value...

openSUSE 10 Security Update : cifs-mount (cifs-mount-4777)

This update of samba fixes a buffer overflow in function sendmailslot that allows to overwrite the stack with zero-bytes. CVE-2007-6015 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update...

Unfixed XSS vulnerability at www.aspfaq.de

Security researcher Fugitif, has submitted on 12/12/2007 a cross-site-scripting XSS vulnerability affecting www.aspfaq.de, which at the time of submission ranked 2940521 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 23/12/2007. It is currentl...

Unfixed XSS vulnerability at www.tienersvoorgeld.nl

Security researcher TreX, has submitted on 12/12/2007 a cross-site-scripting XSS vulnerability affecting www.tienersvoorgeld.nl, which at the time of submission ranked 125324 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 23/12/2007. It is...

Microsoft Message Queuing queue name buffer overflow

Added: 12/12/2007 CVE: CVE-2007-3039 BID: 26797 OSVDB: 39123 Background Microsoft Message Queuing allows applications which may be running at different times to communicate across a network. Problem A buffer overflow vulnerability in the Microsoft Message Queuing service allows remote attackers t...

CVE-2007-5350

CVE-2007-5350: A local-privilege-escalation flaw in the Windows Vista kernel’s Advanced Local Procedure Call (ALPC) mechanism. The root cause, per the public advisories, is improper validation in legacy reply paths, enabling a local attacker with logon rights to execute code with full privileges....

Debian DSA-1430-1 : libnss-ldap - denial of service

It was reported that a race condition exists in libnss-ldap, an NSS module for using LDAP as a naming service, which could cause denial of service attacks if applications use pthreads. This problem was spotted in the dovecot IMAP/POP server but potentially affects more programs. %NASLMINLEVEL 703...

Apple Mac OSX xnu 1228.0 - super_blob Local kernel Denial of Service (PoC)

Apple Mac OSX xnu 1228.0 - superblob Local kernel Denial of Service PoC / xnu-superblob-dos.c Copyright c 2007 by Apple MACOS X xnu include include include include include include include define MAXPATHLEN 128 / change this value if no panic / define CSLOTSDIFF 0x69696969 define CSSLOTCODEDIRECTO...

ZDI-07-074: Microsoft Internet Explorer Node Manipulation Memory Corruption

ZDI-07-074: Microsoft Internet Explorer Node Manipulation Memory Corruption Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-07-074.html December 11, 2007 -- CVE ID: CVE-2007-3903 -- Affected Vendor: Microsoft -- Affected Products: Internet Explorer 6 Internet Explorer 7 --...

Microsoft Message Queuing queue name buffer overflow

Added: 12/12/2007 CVE: CVE-2007-3039 BID: 26797 OSVDB: 39123 Background Microsoft Message Queuing allows applications which may be running at different times to communicate across a network. Problem A buffer overflow vulnerability in the Microsoft Message Queuing service allows remote attackers t...

CVE-2007-6317

The CVE-2007-6317 entry describes multiple directory traversal vulnerabilities in BarracudaDrive Web Server prior to 3.8. The flaws allow remote attackers to read arbitrary files via certain ..\ sequences in the URL path, and remote authenticated users to delete arbitrary files or create arbitrar...

Samba Send_MailSlot函数远程栈溢出漏洞

BUGTRAQ ID: 26791 CVECAN ID: CVE-2007-6015 Samba是一套实现SMB（Server Messages Block）协议、跨平台进行文件共享和打印共享服务的程序。 Samba的sendmailslot函数中存在安全漏洞，远程攻击者可能利用此漏洞控制服务器。 如果远程攻击者所发送的特制SAMLOGON域登录报文中在奇数偏移包含有用户名字符串，然后跟随有超长GETDC字符串的话，就可能用全0的字节覆盖栈缓冲区。成功攻击允许执行任意代码，但要求打开了domain logons选项。 Samba 3.0.0 - 3.0.27a 临时解决方法：...

CVE-2007-5347

A memory corruption vulnerability exists in Microsoft Internet Explorer (versions 5.01 through 7) due to how the browser handles unexpected method calls to HTML objects , known as the DHTML Object Memory Corruption Vulnerability . Remote attackers can exploit this by persuading users to visit a s...

CVE-2007-3895

CVE-2007-3895 describes a buffer overflow in Microsoft DirectShow (part of DirectX) across Windows DirectX 7.0–10.0. A remote attacker could trigger code execution by convincing a user to open a specially crafted WAV or AVI file. The issue arises from improper parsing within DirectX libraries han...