BELL-CVE-2007-5500 CVE-2007-5500 does not affect BellSoft software

Bulletin has no description...

CVE-2007-6030

Unspecified vulnerability in Weird Solutions BOOTPTurbo 1.2 has unknown impact and remote attack vectors. NOTE: this information is based upon a vague advisory by a vulnerability information sales organization that does not coordinate with vendors or release actionable advisories. A CVE has been...

CVE-2007-6029

CVE-2007-6029 affects ClamAV 0.91.1 and 0.91.2. The vulnerability allows remote attackers to execute arbitrary code by sending a crafted e-mail message. The description in multiple sources notes that the advisory originated from a vulnerability information seller and that the CVE has been assigne...

CVE-2007-5500

The CVE-2007-5500 issue is described in connected documents as a vulnerability in the Linux kernel (2.6.x) where the wait_task_stopped routine checks a TASK_TRACED bit instead of exit_state. This could allow a local unprivileged user to cause a denial of service (machine crash) via unspecified ve...

CVE-2007-6032

CVE-2007-6032 describes an SQL injection vulnerability in calendar/page.asp of Aleris Web Publishing Server 3.0, exploitable via the mode parameter. The issue enables remote attackers to construct and execute arbitrary SQL commands, impacting confidentiality, integrity, and availability to partia...

CVE-2007-6029

Unspecified vulnerability in ClamAV 0.91.1 and 0.91.2 allows remote attackers to execute arbitrary code via a crafted e-mail message. NOTE: this information is based upon a vague advisory by a vulnerability information sales organization that does not coordinate with vendors or release actionable...

CVE-2007-6030

Technical details for CVE-2007-6030 are not publicly provided in the supplied documents. No concrete affected product versions, root cause, impact, or remediation are disclosed here. Monitor for updates from official advisories and CVE records.

CVE-2007-6031

CVE-2007-6031 affects VanDyke VShell 3.0.1. The vulnerability allows remote denial of service via unspecified vectors. The description notes the information is based on a vague advisory not coordinated with vendors and includes no concrete exploit details, vectors, or remediation in the provided ...

CVE-2007-6033

Invensys Wonderware InTouch 8.0 is affected by an insecure NetDDE share that grants Everyone/Full Control, enabling remote authenticated (and possibly anonymous) attackers to execute arbitrary programs. The root cause is the NetDDE share permissions misconfiguration, allowing remote code executio...

CVE-2007-5500

The waittaskstopped function in the Linux kernel before 2.6.23.8 checks a TASKTRACED bit instead of an exitstate value, which allows local users to cause a denial of service machine crash via unspecified vectors. NOTE: some of these details are obtained from third party information...

CVE-2007-5670

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2007-5956. Reason: This candidate is a duplicate of CVE-2007-5956. Notes: All CVE users should reference CVE-2007-5956 instead of this candidate. All references and descriptions in this candidate have been removed to prevent...

CVE-2007-6027

PHP remote file inclusion vulnerability in admin.jjgallery.php in the Carousel Flash Image Gallery comjjgallery component for Joomla! allows remote attackers to execute arbitrary PHP code via a URL in the mosConfigabsolutepath parameter...

CVE-2007-5670

...

CVE-2007-5670

CVE-2007-5670 corresponds to a directory traversal vulnerability in IBM Informix Dynamic Server (IDS) prior to 10.00.xC7W1. The issue arises from improper handling of the DBLANG environment variable, allowing local users to gain privileges by referencing modified NLS message files through directo...

CVE-2007-6027

CVE-2007-6027 affects the Carousel Flash Image Gallery (com_jjgallery) component for Joomla!, where admin.jjgallery.php is vulnerable to a PHP remote file inclusion via the mosConfig_absolute_path parameter. This allows an attacker to execute arbitrary PHP code on the affected Joomla! site. The v...

CVE-2007-6026

Stack-based buffer overflow in Microsoft msjet40.dll 4.0.8618.0 aka Microsoft Jet Engine, as used by Access 2003 in Microsoft Office 2003 SP3, allows user-assisted attackers to execute arbitrary code via a crafted MDB file database file containing a column structure with a modified column count...

CVE-2007-6026

A stack-based buffer overflow exists in the Microsoft Jet Database Engine (specifically msjet40.dll version 4.0.8618.0), which is utilized by Microsoft Access 2003 in Microsoft Office 2003 SP3 . The vulnerability is triggered by boundary errors when processing MDB database files containing a colu...

Solaris 10 (x86) : 126257-07

SunOS 5.10x86: rpc.metad patch. Date this patch was last updated by Sun : Feb/07/08 %NASLMINLEVEL 70300 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a recommended security fix. Disabled on 2011/09/17. C Tenable Network Security, Inc. if !...

openSUSE 10 Security Update : pcre (pcre-4683)

Specially crafted regular expressions could lead to a buffer overflow in the pcre library. Applications using pcre to process regular expressions from untrusted sources could therefore potentially be exploited by attackers to execute arbitrary code. CVE-2007-1659, CVE-2007-1660, CVE-2007-1661,...

Fedora 8 : samba-3.0.27-0.fc8 (2007-3403)

Security Fixes : - CVE-2007-4572 - CVE-2007-5398 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues...