CVE-2007-6213

CVE-2007-6213 concerns WebED 0.0.9. Multiple directory traversal flaws in mod/chat/index.php allow remote reading of arbitrary files via a .. in the Root and Path parameters, affecting confidentiality (C:P) with no integrity/availability impact stated. CVSS v2 score is 5.0 (Medium) with network a...

CVE-2007-6215

CVE-2007-6215 involves Web-MeetMe 3.0.3, where the PHP script play.php is vulnerable to directory traversal via user-supplied inputs in the roomNo and possibly bookid parameters. This can allow remote attackers to read arbitrary files on the server, exposing partial confidentiality (per the cited...

CVE-2007-6214

Directory traversal vulnerability in include/filedownload.php in LearnLoop 2.0 beta7 allows remote attackers to read arbitrary files via a .. dot dot in the sFilePath parameter. NOTE: exploitation requires that the product is configured, but has zero files in the database...

CVE-2007-6216

CVE-2007-6216 concerns a race condition in the Fibre Channel protocol (fcp) driver and the Solaris 10 devfs. Connected sources (Tenable Nessus patches 128491-01 for SPARC and 128492-01 for x86) indicate a patch-based remediation: install Solaris patch 128491-01 (SPARC) or 128492-01 (x86) to addre...

[slackware-security] cairo

New cairo packages are available for Slackware 11.0, 12.0, and -current to fix security issues. More details about this issue may be found in the Common Vulnerabilities and Exposures CVE database: https://vulners.com/cve/CVE-2007-5503 Here are the details from the Slackware 12.0 ChangeLog:...

CVE-2007-6210

zabbixagentd 1.1.4 in ZABBIX before 1.4.3 runs "UserParameter" scripts with gid 0, which might allow local users to gain privileges...

CVE-2007-6211

Send ICMP Nasty Garbage sing on Debian GNU/Linux allows local users to append to arbitrary files and gain privileges via the -L output log file option. NOTE: this issue is only a vulnerability in limited environments, since sing is not installed setuid, and the administrator would need to overrid...

USN-551-1: OpenLDAP vulnerabilities

Thomas Sesselmann discovered that the OpenLDAP slapd server did not properly handle certain modify requests. A remote attacker could send malicious modify requests to the server and cause a denial of service. CVE-2007-5707 Toby Blake discovered that slapd did not properly terminate an array while...

CVE-2007-6210

The CVE-2007-6210 issue affects zabbix_agentd 1.1.4 in ZABBIX prior to 1.4.3, where UserParameter scripts may run with gid 0, potentially allowing local users to gain privileges. The Red Hat and Debian/open-source advisories confirm this vulnerability. Remediation is to update zabbix packages (e....

CVE-2007-6210

zabbixagentd 1.1.4 in ZABBIX before 1.4.3 runs "UserParameter" scripts with gid 0, which might allow local users to gain privileges...

CVE-2007-6211

The CVE-2007-6211 issue affects Debian GNU/Linux’s sing utility. It allows local users to append to arbitrary files and gain privileges via the -L (output log file) option. The vulnerability is noted as limited in scope because sing is not installed setuid by default, so exploitation requires ove...

CVE-2007-6208

sylprint.pl in claws mail tools claws-mail-tools allows local users to overwrite arbitrary files via a symlink attack on the sylprint.USER.PID temporary file...

CVE-2007-6209

Util/difflog.pl in zsh 4.3.4 allows local users to overwrite arbitrary files via a symlink attack on temporary files...

CVE-2007-6208

The CVE-2007-6208 issue affects Claws Mail (claws-mail-tools) via the sylprint.pl temporary-file creation in the Sylprint component. A local attacker can exploit a symlink vulnerability to overwrite arbitrary files with the privileges of the user running Claws Mail. The root cause is insecure han...

Solaris 10 (x86) : 127740-03

SunOS 5.10x86: rpcmod patch. Date this patch was last updated by Sun : Dec/18/07 %NASLMINLEVEL 70300 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a recommended security fix. Disabled on 2011/09/17. C Tenable Network Security, Inc. if ! definedfunc"bnrandom...

Unfixed XSS vulnerability at www.freestreet.it

Security researcher Scr34M, has submitted on 12/04/2007 a cross-site-scripting XSS vulnerability affecting www.freestreet.it, which at the time of submission ranked 236866 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 12/04/2007. It is...

Unfixed XSS vulnerability at 39.911-job.ru

Security researcher MaXWeL, has submitted on 12/04/2007 a cross-site-scripting XSS vulnerability affecting 39.911-job.ru, which at the time of submission ranked 1627165 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 12/04/2007. It is currently...

Unfixed XSS vulnerability at www.zumruthali.com

Security researcher TurKReiS, has submitted on 12/04/2007 a cross-site-scripting XSS vulnerability affecting www.zumruthali.com, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 12/04/2007. It is currentl...

Unfixed XSS vulnerability at www.iltuosito.it

Security researcher Scr34M, has submitted on 12/04/2007 a cross-site-scripting XSS vulnerability affecting www.iltuosito.it, which at the time of submission ranked 1016780 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 12/04/2007. It is...

Unfixed XSS vulnerability at www.franke.be

Security researcher cyber, has submitted on 12/04/2007 a cross-site-scripting XSS vulnerability affecting www.franke.be, which at the time of submission ranked 1358967 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 12/04/2007. It is currently...