CVE-2007-5971

CVE-2007-5971 : A double-free in MIT Kerberos 5’s GSS-API (lib/gssapi/krb5/k5sealv3.c, function gss_krb5int_make_seal_token_v3) is noted with unknown impact in the initial record. Connected MiracleLinux advisories (AXSA-2008-345:03 and AXSA-2008-153:02) reference backports that backfill fixes in ...

CVE-2007-5901

CVE-2007-5901 is a use-after-free in MIT Kerberos 5 in the gss_indicate_mechs path (lib/gssapi/mechglue/g_initialize.c). The connected advisories describe backported patches to fix use-after-free in libgssapi_krb5 (and related components), with MiracleLinux AXSA-2008-153/2008-345 noting the backp...

CVE-2007-6260

CVE-2007-6260 affects Oracle 10g and llg installations where accounts are created with default passwords, enabling remote login by connecting to the Listener. The underlying cause is default credentials during setup. In practice, DBCA installations may mitigate this by disabling accounts or chang...

CVE-2007-4575

CVE-2007-4575 is evidenced in connected advisories describing an OpenOffice.org/OpenOffice Base usage of HSQLDB where crafted OpenDocument database files can trigger arbitrary Java-method calls, allowing user-assisted remote code execution. In Red Hat/JBoss contexts, RHSA-2007:1048 and RHSA-2008:...

CVE-2007-6262

A certain ActiveX control in axvlc.dll in VideoLAN VLC 0.8.6 before 0.8.6d allows remote attackers to execute arbitrary code via crafted arguments to the 1 addTarget, 2 getVariable, or 3 setVariable function, resulting from a "bad initialized pointer," aka a "recursive plugin release vulnerabilit...

Unfixed XSS vulnerability at www.c2kni.org.uk

Security researcher Stuarty, has submitted on 12/06/2007 a cross-site-scripting XSS vulnerability affecting www.c2kni.org.uk, which at the time of submission ranked 3686748 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 13/06/2007. It is...

Unfixed XSS vulnerability at www.cast.org

Security researcher MaXWeL, has submitted on 12/06/2007 a cross-site-scripting XSS vulnerability affecting www.cast.org, which at the time of submission ranked 497638 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 12/06/2007. It is currently...

Unfixed XSS vulnerability at www.fbe.unsw.edu.au

Security researcher By Encore, has submitted on 12/06/2007 a cross-site-scripting XSS vulnerability affecting www.fbe.unsw.edu.au, which at the time of submission ranked 8564 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 12/06/2007. It is...

Unfixed Redirect vulnerability at gnduaa.org

Security researcher APS, has submitted on 12/06/2007 a Redirect vulnerability affecting gnduaa.org, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 12/06/2007. It is currently unfixed. If you believe tha...

Unfixed XSS vulnerability at www.trncpio.org

Security researcher eX0dus, has submitted on 12/06/2007 a cross-site-scripting XSS vulnerability affecting www.trncpio.org, which at the time of submission ranked 9172077 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 12/06/2007. It is current...

Unfixed XSS vulnerability at www.town.caledon.on.ca

Security researcher By Encore, has submitted on 12/06/2007 a cross-site-scripting XSS vulnerability affecting www.town.caledon.on.ca, which at the time of submission ranked 2764709 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 13/06/2007. It ...

SerWeb <= 2.0.0 dev1 2007-02-20 Multiple RFI / LFI Vulnerabilities

Exploit for unknown platform in category web applications ================================================================== SerWeb = 2.0.0 dev1 2007-02-20 Multiple RFI / LFI Vulnerabilities ================================================================== SerWeb = 2.0.0 dev1 2007-02-20 Multiple...

Unfixed XSS vulnerability at www.blockstatus.com

Security researcher THE-SH0CK-B0Y, has submitted on 12/06/2007 a cross-site-scripting XSS vulnerability affecting www.blockstatus.com, which at the time of submission ranked 12654 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 12/06/2007. It i...

SerWeb 2.0.0 dev1 2007-02-20 - Multiple LocalRemote File Inclusion Vulnerabilities

SerWeb 2.0.0 dev1 2007-02-20 - Multiple LocalRemote File Inclusion Vulnerabilities SerWeb = 2.0.0 dev1 2007-02-20 Multiple RFI / LFI Vulnerabilities D.Script : http://ftp.iptel.org/pub/serweb/daily-snapshots/serweb-2.0.0-dev12007-02-20.tar.gz POC: /loadlang.php?SERWEBconfigdir=Shell...

Unfixed XSS vulnerability at cn.posh.com.hk

Security researcher By Encore, has submitted on 12/06/2007 a cross-site-scripting XSS vulnerability affecting cn.posh.com.hk, which at the time of submission ranked 912354 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 12/06/2007. It is...

[Full-disclosure] [SECURITY] [DSA 1421-1] New wesnoth packages fix arbitrary file disclosure

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - -------------------------------------------------------------------------- Debian Security Advisory DSA 1421-1 [email protected] http://www.debian.org/security/ Martin Schulze December 6th, 2007 http://www.debian.org/security/faq -...

Cisco Security Advisory: Cisco Security Agent for Windows System Driver Remote Buffer Overflow Vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Cisco Security Advisory: Cisco Security Agent for Windows System Driver Remote Buffer Overflow Vulnerability Advisory ID: cisco-sa-20071205-csa http://www.cisco.com/warp/public/707/cisco-sa-20071205-csa.shtml Revision 1.0 For Public Release 2007...

HP OpenView Network Node Manager OpenView5.exe CGI Buffer Overflow

This module exploits a stack buffer overflow in HP OpenView Network Node Manager 7.50. By sending a specially crafted CGI request, an attacker may be able to execute arbitrary code. Module Options msf use exploit/windows/http/hp/nnmopenview5 msf undefinednnmopenview5 show actions ...actions... ms...

[security bulletin] HPSBMA02293 SSRT071494 rev.1 - HP Select Identity, Remote Unauthorized Access

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 SUPPORT COMMUNICATION - SECURITY BULLETIN Document ID: c01293337 Version: 1 HPSBMA02293 SSRT071494 rev.1 - HP Select Identity, Remote Unauthorized Access NOTICE: The information in this Security Bulletin should be acted upon as soon as possible. Relea...

adv86-K-159-2007.txt

ECHOADV86$2007 ----------------------------------------------------------------------------------------- ECHOADV86$2007 Mambo/Joomla Component rsgallery = 2.0 beta 5 catid Remote SQL Injection Vulnerability -----------------------------------------------------------------------------------------...