GLSA-200712-03 : GNU Emacs: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-200712-03 GNU Emacs: Multiple vulnerabilities Drake Wilson reported that the hack-local-variables function in GNU Emacs 22 does not properly match assignments of local variables in a file against a list of unsafe or risky variable...

Fedora Core 6 : openoffice.org-2.0.4-5.5.25 (2007-762)

CVE-2007-4575 restrict java instantiation features of hsqldb Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional...

Microsoft Windows Vista privilege escalation vulnerability

Overview Microsoft Windows Vista contains a local privilege escalation vulnerability. Description The Windows Advanced Local Procedure Call ALPC does not properly evaluate certain conditions in legacy reply paths.Per Microsoft Security Bulletin MS07-066: An elevation of privilege vulnerability...

MS07-065: Vulnerability in Message Queuing Could Allow Remote Code Execution (937894)

The remote version of Windows is affected by a vulnerability in Microsoft Message Queuing Service MSMQ. An attacker may exploit this flaw to execute arbitrary code on the remote host with the SYSTEM privileges. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid29309;...

Fedora 8 : eggdrop-1.6.18-12.fc8 (2007-4305)

Added a patch to fix some stack based overflows CVE-2007-2807 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional...

Debian DSA-1428-2 : linux-2.6 - several vulnerabilities

Several local and remote vulnerabilities have been discovered in the Linux kernel that may lead to a denial of service or the execution of arbitrary code. The Common Vulnerabilities and Exposures project identifies the following problems : This is an update to DSA 1428-1 which omitted a reference...

MS07-068: Vulnerability in Windows Media File Format Could Allow Remote Code Execution (941569 / 944275)

The remote host is running Windows Media Player/Service. There is a vulnerability in the remote version of this software that could allow an attacker to execute arbitrary code on the remote host. To exploit this flaw, one attacker would need to set up a rogue ASF file and send it to a victim on t...

Fedora 7 : seamonkey-1.1.7-1.fc7 (2007-4106)

Sun Dec 2 2007 Kai Engert - 1.1.7-1 - SeaMonkey 1.1.7 - Mon Nov 5 2007 Kai Engert - 1.1.6-1 - SeaMonkey 1.1.6 - Fri Oct 19 2007 Kai Engert - 1.1.5-1 - SeaMonkey 1.1.5 - Fri Jul 27 2007 Martin Stransky - 1.1.3-2 - added pango patches - Fri Jul 20 2007 Kai Engert - 1.1.3-1 - SeaMonkey 1.1.3 - Thu...

Fedora 7 : eggdrop-1.6.18-12.fc7 (2007-4325)

Added a patch to fix some stack based overflows CVE-2007-2807 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional...

Fedora 8 : samba-3.0.28-0.fc8 (2007-4275)

Security release, fixes vulnerability reported as CVE-2007-6015 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additiona...

MS07-063: Vulnerability in SMBv2 Could Allow Remote Code Execution (942624)

The remote version of Windows contains a version of SMBv2 Server Message Block protocol that has several vulnerabilities. An attacker may exploit these flaws to elevate his privileges and gain control of the remote host. C Tenable Network Security, Inc. include"compat.inc"; if description...

Fedora 7 : xorg-x11-xfs-1.0.5-1.fc7 (2007-4263)

Bug 373261 - CVE-2007-4568 xfs integer overflow in the buildrange function f7 - Bug 373331 - CVE-2007-4990 xfs heap overflow in the swapchar2b function f7 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has...

CVE-2007-6305

Technical details (affected components, root cause, versions, fixes) are not publicly available in the provided documents; monitor for updates.

CVE-2007-6304

CVE-2007-6304 affects MySQL federated engine across 5.0.x (pre-5.0.51a), 5.1.x (pre-5.1.23), and 6.0.x (pre-6.0.4). The issue arises when the federated engine processes a SHOW TABLE STATUS query and a malicious remote server returns a response with fewer than the required 14 columns, which can cr...

CVE-2007-6303

CVE-2007-6303 affects MySQL 5.0.x before 5.0.51a, 5.1.x before 5.1.23, and 6.0.x before 6.0.4. The vulnerability is that the DEFINER value of a view is not updated when the view is altered, enabling an authenticated remote user to escalate privileges via a sequence including CREATE SQL SECURITY D...

[SECURITY] [DSA 1427-1] New samba packages fix arbitrary code execution

------------------------------------------------------------------------ Debian Security Advisory DSA-1427-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff December 10, 2007 http://www.debian.org/security/faq -...

Design/Logic Flaw

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2007-6313. Reason: this candidate's description and references were inconsistent and described unrelated, non-security issues. The original intended issue is covered by CVE-2007-6313. Notes: All references and descriptions in this...

CVE-2007-5968

...

CVE-2007-5969

CVE-2007-5969 affects MySQL when a table uses explicit DATA DIRECTORY or INDEX DIRECTORY options. A remote authenticated user can abuse RENAME TABLE to change the symlink to an existing file, overwriting system table information and potentially gaining privileges. Affected releases per descriptio...

CVE-2007-5968

CVE-2007-5968 entry is a placeholder/rejected item; the reliable vulnerability information is in CVE-2007-6313. CVE-2007-6313 affects MySQL Server 5.1.x before 5.1.23 and 6.0.x before 6.0.4, where the server does not enforce rights on the BINLOG operational entity, allowing remote authorized user...