CVE-2007-6053

CVE-2007-6053 affects IBM DB2 UDB 9.1 before Fixpak 4, where handling of a large number of file descriptors is not robust, potentially leading to memory corruption. The vendor description is vague, and the available documents do not provide a confirmed security impact, exploit details, or a state...

CVE-2007-6052

CVE-2007-6052 affects IBM DB2 UDB 9.1 before Fixpak 4. The issue is in vector aggregation, which may allow a remote attacker to cause a denial of service via a divide-by-zero error/crash in the DBMS. The vendor description is noted as vague regarding its security relevance, but multiple connected...

CVE-2007-6060

CVE-2007-6060 affects AhnLab Antivirus 3 Internet Security 2008 Platinum. The ZIP header’s Filename length field can be larger than the actual filename, to which the program appends data, allowing a remote attacker to cause a denial of service (machine crash) and potentially execute arbitrary cod...

CVE-2007-6057

CVE-2007-6057 affects the datecomm Social Networking Script (also known as the Myspace Clone Script). The vulnerability is a PHP remote file inclusion in the script’s index.php, allowing an attacker to execute arbitrary PHP code by supplying a URL in the pg parameter. This is confirmed across mul...

CVE-2007-6044

Technical details for CVE-2007-6044 are not publicly available in the provided documents. Monitor for updates; no concrete affected product/version or impact is disclosed here.

CVE-2007-6058

ProfileCMS 1.0 and earlier contains multiple SQL injection flaws in index.php. The id parameter in three actions (profile-codes, video-codes, arcade-games) is exploitable, enabling remote attackers to execute arbitrary SQL via normal requests. The vulnerability is documented across multiple sourc...

CVE-2007-6049

IBM DB2 UDB 9.1 before Fixpak 4 is affected by an unspecified vulnerability in the SSL LOAD GSKIT action that involves a call to dlopen when the effective UID is root. The issue is reported in CVE-2007-6049; the impact details are not fully disclosed in the provided documents beyond the initial d...

CVE-2007-6055

CVE-2007-6055 is a cross-site scripting (XSS) vulnerability affecting Liferay Portal 4.1.0 and 4.1.1, exploitable via the login parameter in c/portal/login. The issue arises from a regression after an earlier fix, as noted in the description. Connected documents provide corroborating context (e.g...

CVE-2007-6055

Cross-site scripting XSS vulnerability in c/portal/login in Liferay Portal 4.1.0 and 4.1.1 allows remote attackers to inject arbitrary web script or HTML via the login parameter. NOTE: this issue reportedly exists because of a regression that followed a fix at an unspecified earlier date...

CVE-2007-6045

CVE-2007-6045 affects IBM DB2 UDB 9.1 before Fixpak 4, specifically the DB2WATCH and DB2FREEZE components. The description states an unspecified vulnerability with unknown impact and attack vectors; no explicit exploitation details, affected versions beyond the mentioned FixPak, or remediation ar...

CVE-2007-6046

CVE-2007-6046 concerns IBM DB2 UDB 9.1 before Fixpak 4, with an unspecified vulnerability in unspecified setuid programs. The issue allows local users to impact the system in an unspecified manner. Documented details indicate the vulnerability is local-exploit, with no explicit vector, scope, or ...

CVE-2007-6047

CVE-2007-6047 affects IBM DB2 UDB 9.1 before Fixpak 4. The vulnerability lies in the DB2DART tool, where invocation of TPUT could allow an attacker to execute arbitrary commands as the DB2 instance owner. Connected sources confirm the issue and reference Fixpak 4 as the remediation point. Practic...

CVE-2007-6048

CVE-2007-6048 : IBM DB2 UDB 9.1 before Fixpak 4 allegedly uses incorrect permissions on ACLs for DB2NODES.CFG. The NVD entry notes unknown impact and attack vectors; connected sources also reference this ACL issue among several vulnerabilities in DB2 9.x before Fix Pack 4. No explicit exploitatio...

CVE-2007-6044

Multiple unspecified vulnerabilities in IBM WebSphere MQ 6.0 have unknown impact and remote attack vectors involving "memory corruption." NOTE: as of 20071116, the only disclosure is a vague pre-advisory with no actionable information. However, since it is from a well-known researcher, it is bein...

CVE-2007-6050

CVE-2007-6050 affects IBM DB2 UDB 9.1 prior to Fixpak 4, specifically the DB2LICD component. The vulnerability is described as unspecified and related to the creation of an ‘insecure directory’ . The NVD metrics indicate a local attack vector with potential complete confidentiality, integrity, an...

CVE-2007-6054

The CVE-2007-6054 entry describes an XSS vulnerability in the login page of Aruba 800 Mobility Controller (versions 2.5.4.18 and earlier; 2.4.8.6-FIPS and earlier). The issue occurs in the management interface via PATH_INFO to the /screens URI, related to the url variable, allowing remote attacke...

Design/Logic Flaw

The CryptGenRandom function in Microsoft Windows 2000 generates predictable values, which makes it easier for context-dependent attackers to reduce the effectiveness of cryptographic mechanisms, as demonstrated by attacks on 1 forward security and 2 backward security, related to use of eight...

CVE-2007-6043

The CryptGenRandom function in Microsoft Windows 2000 generates predictable values, which makes it easier for context-dependent attackers to reduce the effectiveness of cryptographic mechanisms, as demonstrated by attacks on 1 forward security and 2 backward security, related to use of eight...

CVE-2007-6041

CVE-2007-6041 describes a buffer overflow in the RoR server’s Sequencer::queueMessage (sequencer.cpp) that is triggered by a MSG2_USE_VEHICLE message containing a nickname followed by a vehicle name, where the combined length overflows a buffer. Affected software is Rigs of Rods (RoR) prior to 0....

CVE-2007-5361

The CVE-2007-5361 issue affects Alcatel-Lucent OmniPCX Enterprise (7.1 and earlier). The Communication Server caches a phone IP during a TFTP request from an IP Touch device and then uses that IP as the destination for all subsequent VoIP packets to that phone. This enables remote attackers to ca...