Fedora 8 : zaptel-1.4.6-1.fc8 (2007-2860)

Update to 1.4.6 Apply patch to fix CVE-2007-5690 / AST-2007-024. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing addition...

openSUSE 10 Security Update : openldap2 (openldap2-4677)

This update fixes multiple flaws that could cause slapd to crash CVE-2007-5707, CVE-2007-5708. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update openldap2-4677. The text description of this plug...

[SECURITY] [DSA 1412-1] New ruby1.9 packages fix insecure SSL certificate validation

------------------------------------------------------------------------ Debian Security Advisory DSA-1412-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff November 24, 2007 http://www.debian.org/security/faq -...

[SECURITY] [DSA 1411-1] New libopenssl-ruby packages fix insecure SSL certificate validation

------------------------------------------------------------------------ Debian Security Advisory DSA-1411-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff November 24, 2007 http://www.debian.org/security/faq -...

[SECURITY] [DSA 1410-1] New ruby1.8 packages fix insecure SSL certificate validation

------------------------------------------------------------------------ Debian Security Advisory DSA-1410-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff November 24, 2007 http://www.debian.org/security/faq -...

Unfixed XSS vulnerability at www.haberdiyarbakir.com

Security researcher CCC, has submitted on 25/11/2007 a cross-site-scripting XSS vulnerability affecting www.haberdiyarbakir.com, which at the time of submission ranked 517648 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 29/11/2007. It is...

DSA-1412-1 ruby1.9 - possible man-in-the-middle attacks

Bulletin has no description...

rubygem-rails -- session-fixation vulnerability

Rails core team reports: The rails core team has released ruby on rails 1.2.6 to address a bug in the fix for session fixation attacks CVE-2007-5380. The CVE Identifier for this new issue is CVE-2007-6077...

CVE-2007-6118

The MEGACO dissector in Wireshark formerly Ethereal 0.9.14 to 0.99.6 allows remote attackers to cause a denial of service long loop and resource consumption via unknown vectors...

CVE-2007-6115

Buffer overflow in the ANSI MAP dissector for Wireshark formerly Ethereal 0.99.5 to 0.99.6, when running on unspecified platforms, allows remote attackers to cause a denial of service and possibly execute arbitrary code via unknown vectors...

CVE-2007-6100

Cross-site scripting XSS vulnerability in libraries/auth/cookie.auth.lib.php in phpMyAdmin before 2.11.2.2, when logins are authenticated with the cookie authtype, allows remote attackers to inject arbitrary web script or HTML via the convcharset parameter to index.php, a different vulnerability...

CVE-2007-6110

Cross-site scripting XSS vulnerability in htsearch in htdig 3.2.0b6 allows remote attackers to inject arbitrary web script or HTML via the sort parameter...

CVE-2007-6102

Cross-site scripting XSS vulnerability in Feed to JavaScript Feed2JS 1.91 allows remote attackers to inject arbitrary web script or HTML via a URL in a feed...

DEBIAN-CVE-2007-6121

Wireshark formerly Ethereal 0.8.16 to 0.99.6 allows remote attackers to cause a denial of service crash via a malformed RPC Portmap packet...

CVE-2007-6116

The Firebird/Interbase dissector in Wireshark formerly Ethereal 0.99.6 allows remote attackers to cause a denial of service infinite loop or crash via unknown vectors...

CVE-2007-6121

Wireshark formerly Ethereal 0.8.16 to 0.99.6 allows remote attackers to cause a denial of service crash via a malformed RPC Portmap packet...

CVE-2007-6113

Integer signedness error in the DNP3 dissector in Wireshark formerly Ethereal 0.10.12 to 0.99.6 allows remote attackers to cause a denial of service long loop via a malformed DNP3 packet...

CVE-2007-6106

SQL injection vulnerability in index.php in AlstraSoft E-Friends 4.98 and earlier allows remote attackers to execute arbitrary SQL commands via the seid parameter in a viewevent action...

CVE-2007-6103

CVE-2007-6103 affects I Hear U (IHU) 0.5.6 and earlier. The vulnerability allows remote attackers to cause denial of service: (1) an infinite loop by sending a packet with zero in the size field, handled by Receiver::processPacket; and (2) a daemon crash by IHU_INFO_INIT or IHU_INFO_RING packets ...

CVE-2007-6104

The CVE-2007-6104 issue affects FileMaker Pro 7/8, Server 7/8, and Developer 7, with a cross-site scripting vulnerability in the Instant Web Publishing function. The root cause is an XSS flaw allowing injected scripts/HTML via unspecified vectors. Documented impact: arbitrary script execution in ...