rPSA-2007-0257-1 rsync

rPath Security Advisory: 2007-0257-1 Published: 2007-12-04 Products: rPath Linux 1 Rating: Minor Exposure Level Classification: Remote Deterministic Unauthorized Access Updated Versions: rsync=conary.rpath.com@rpl:1/2.6.8-1.2-1 rPath Issue Tracking System: https://issues.rpath.com/browse/RPL-1989...

[SECURITY] [DSA 1419-1] New OpenOffice.org packages fix arbitrary Java code execution

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - -------------------------------------------------------------------------- Debian Security Advisory DSA 1419-1 [email protected] http://www.debian.org/security/ Martin Schulze December 5th, 2007 http://www.debian.org/security/faq -...

Sun OpenOffice.org < 2.3.1 Database HSQLDB Database Document Handling Arbitrary Java Code Execution

The remote host is running a version of Sun Microsystems OpenOffice.org that contains an arbitrary code execution vulnerability in its HSQLDB database engine. If a remote attacker can trick a user into opening a specially crafted database, this issue can be leveraged to execute arbitrary static...

CVE-2007-6238

Unspecified vulnerability in Apple QuickTime 7.2 on Windows XP allows remote attackers to execute arbitrary code via unknown attack vectors, probably a different vulnerability than CVE-2007-6166. NOTE: this information is based upon a vague advisory by a vulnerability information sales organizati...

CVE-2007-6231

Multiple PHP remote file inclusion vulnerabilities in tellmatic 1.0.7 allow remote attackers to execute arbitrary PHP code via a URL in the tmincludepath parameter to 1 Classes.inc.php, 2 statistic.inc.php, 3 status.inc.php, 4 statustopx.inc.php, or 5 libchart-1.1/libchart.php in include/. NOTE:...

CVE-2007-6235

A certain ActiveX control in RealNetworks RealPlayer 11 allows remote attackers to cause a denial of service application crash via a malformed .au file that triggers a divide-by-zero error. NOTE: this might be related to CVE-2007-4904...

Information disclosure

Unspecified vulnerability in Apple QuickTime 7.2 on Windows XP allows remote attackers to execute arbitrary code via unknown attack vectors, probably a different vulnerability than CVE-2007-6166. NOTE: this information is based upon a vague advisory by a vulnerability information sales organizati...

Design/Logic Flaw

A certain ActiveX control in RealNetworks RealPlayer 11 allows remote attackers to cause a denial of service application crash via a malformed .au file that triggers a divide-by-zero error. NOTE: this might be related to CVE-2007-4904...

CVE-2007-6235

The CVE-2007-6235 issue concerns RealNetworks RealPlayer 11, specifically an ActiveX control that can be abused by a malformed .au file to trigger a divide-by-zero error, leading to an application crash (DoS). This is a remote-access vulnerability via a crafted multimedia file; the available conn...

CVE-2007-6233

Directory traversal vulnerability in index.php in FTP Admin 0.1.0 allows remote authenticated users to include and execute arbitrary local files via a .. dot dot in the page parameter. NOTE: in some environments, this can be leveraged for remote file inclusion by using a UNC share pathname or an...

CVE-2007-6224

CVE-2007-6224 affects RealNetworks RealAudioObjects.RealAudio ActiveX control (rmoc3260.dll) shipped with RealPlayer 11. A crafted argument to GetSourceTransport can cause a denial of service resulting in a browser crash. The vulnerable component is the RealAudio ActiveX control; impact is a part...

CVE-2007-6232

CVE-2007-6232 describes a cross-site scripting (XSS) vulnerability in the FTP Admin 0.1.0 web interface. The issue is in the file index.php , where an attacker can inject arbitrary web script or HTML by supplying a crafted value to the error parameter of an error page action. This is a remote-exe...

CVE-2007-6233

CVE-2007-6233 affects FTP Admin 0.1.0. The vulnerability is a directory traversal in index.php, where a .. in the page parameter can cause local file inclusion/execution. This could allow an authenticated remote user to include/execute arbitrary local files; in some environments, UNC share paths ...

CVE-2007-6227

CVE-2007-6227 affects QEMU 0.9.0, where a local user in a Windows XP SP2 guest can overwrite the TranslationBlock (code_gen_buffer) due to an overflow, with unspecified additional impacts. The issue is documented across multiple advisories (Mandriva MDVSA-2008:162; Gentoo GLSA 2014-08-17; RH Red ...

CVE-2007-6230

CVE-2007-6230 describes a directory-traversal vulnerability in Rayzz Script 2.0, where an attacker can use ".." in CFG[site][project_path] to cause local file inclusion and execution via common/classes/class_HeaderHandler.lib.php. The CVSS metrics indicate network access with low complexity and n...

CVE-2007-6229

CVE-2007-6229 describes a PHP remote file inclusion in Rayzz Script 2.0. The vulnerability affects the file common/classes/class_HeaderHandler.lib.php and permits remote attackers to execute arbitrary PHP code by supplying a URL in the CFG[site][project_path] parameter. The NVD entry cites a CVSS...

CVE-2007-6226

The CVE-2007-6226 entry concerns the APC AP7932 0u 30A Switched Rack PDU. Affected components are the RPDU firmware 3.5.5 and AOS 3.5.6. The root cause is an authentication bypass that allows remote attackers to gain login access by initiating a login while another client is already logged in, th...

CVE-2007-6228

The CVE-2007-6228 issue is a stack-based buffer overflow in the yt.ythelper.2 ActiveX control used by Yahoo! Toolbar 1.4.1. A long argument to the c() method can remotely trigger a denial of service (browser crash). Public documentation notes no patch from the vendor at the time of reports; users...

CVE-2007-6238

Technical details for CVE-2007-6238 are not publicly provided in the provided documents; the Initial Description is vague. Monitor for updates.

CVE-2007-6231

Vulnerability: CVE-2007-6231 affects tellmatic 1.0.7 with multiple PHP remote file inclusion flaws that allow an attacker to execute arbitrary PHP code via a URL in tm_includepath for files under include/, including Classes.inc.php, statistic.inc.php, status.inc.php, status_top_x.inc.php, and lib...