Low: Red Hat Security Advisory: wireshark security and bug fix update

New Wireshark packages that fix various security vulnerabilities and functionality bugs are now available for Red Hat Enterprise Linux 4. Wireshark was previously known as Ethereal. This update has been rated as having low security impact by the Red Hat Security Response Team. Wireshark is a...

CVE-2007-4700

CVE-2007-4700 affects Apple Mac OS X 10.4–10.4.10 where WebKit/Safari could be abused to proxy traffic to arbitrary TCP ports. The description does not specify the exact vectors or vulnerable components beyond WebKit/Safari. The public note mentions vendor updates: Mac OS X 10.4.x security update...

CVE-2007-4701

CVE-2007-4701 affects WebKit/Safari on Apple Mac OS X 10.4–10.4.10. When previewing a PDF, temporary files are not created securely, allowing local users to read the contents of the PDF. Mitigation via Mac OS X 10.4.11 Security Update (MacOSXUpdCombo10.4.11 for Intel/PPC) is available from Apple....

CVE-2007-4699

CVE-2007-4699 involves Safari on Apple Mac OS X 10.4–10.4.10 where the default Safari configuration can add a private key to the keychain with permissions that allow other applications to access it without warning. This may bypass intended access restrictions and potentially leak credentials or e...

CVE-2007-4679

CFFTP in CFNetwork for Apple Mac OS X 10.4 through 10.4.10 allows remote FTP servers to force clients to connect to other hosts via crafted responses to FTP PASV commands...

CVE-2007-3749

CVE-2007-3749 affects Apple Mac OS X 10.4–10.4.10. The kernel fails to reset the current Mach Thread Port or Thread Exception Port when executing a setuid binary, permitting a local attacker to write into the memory of a root process by pre-creating a Mach port and then launching the setuid progr...

CVE-2007-4685

CVE-2007-4685 affects Apple Mac OS X 10.4–10.4.10. Local users can gain privileges by executing setuid/setgid programs whose stdio/stderr/stdout descriptors are in an unexpected state. The issue is mitigated by upgrading to Mac OS X 10.4.11 (Security Update 2007-008) as released by Apple; patch d...

CVE-2007-4696

CVE-2007-4696 is a race-condition vulnerability in WebCore/Safari on Apple Mac OS X 10.4–10.4.10. The flaw occurs during page transitions in Safari, allowing remote attackers to obtain information entered into forms on other sites. The affected component is Safari/WebKit’s handling of page transi...

CVE-2007-4681

CVE-2007-4681 affects Apple Mac OS X 10.3.9 and 10.4 up to 10.4.10. The problem is a one‑byte overflow in CoreFoundation when listing directory contents, which can cause an application crash and may allow arbitrary code execution on a local basis if a user is tricked into reading a crafted direct...

CVE-2007-4697

CVE-2007-4697 refers to an unspecified vulnerability in Apple WebCore for Mac OS X 10.4–10.4.10, where remote attackers could trigger memory corruption via the browser history, causing the application to terminate or allowing arbitrary code execution. Connected sources corroborate the Mac OS X 10...

CVE-2007-4678

AppleRAID in Apple Mac OS X 10.3.9 and 10.4 through 10.4.10 allows attackers to cause a denial of service crash via a crafted striped disk image, which triggers a NULL pointer dereference when it is mounted...

CVE-2007-4689

CVE-2007-4689 is a double-free vulnerability in the Networking component of Apple Mac OS X 10.4 up to 10.4.10 . The issue affects how IPv6 packets are processed, potentially allowing remote attackers to cause a denial of service (system shutdown) or execute arbitrary code. The affected product ra...

CVE-2007-4683

Apple Mac OS X 10.4.x kernels are affected by CVE-2007-4683, a local directory traversal vulnerability in the kernel that allows a local user to bypass chroot restrictions by using a relative path when changing the current working directory. The issue affects Mac OS X 10.4 through 10.4.10; impact...

CVE-2007-4694

CVE-2007-4694 affects Apple Mac OS X 10.4–10.4.10. Safari can disclose local files when loading resources from file:// URLs if a user visits a malicious site; the underlying issue is Safari loading resources without blocking file:// URLs. The Seebug entry corroborates this vulnerability as part o...

CVE-2007-4687

Apple Mac OS X 10.4–10.4.10 contains a symbolic link from /private/tftpboot to the root directory, allowing tftpd users to escape the private directory and access arbitrary files. The issue affects the remote_cmds component and was documented across multiple sources (CVE-2007-4687). Exploitation ...

CVE-2007-4680

CVE-2007-4680 affects Apple Mac OS X 10.3.9 and 10.4 up to 10.4.10. The flaw is in CFNetwork certificate validation, enabling a remote attacker to perform a man‑in‑the‑middle attack to spoof trusted SSL certificates and potentially leak credentials or other information. The issue is mitigated by ...

CVE-2007-4688

CVE-2007-4688 affects Apple Mac OS X 10.4–10.4.10. A vulnerability in the Networking component's Node Information Query allows remote attackers to obtain all host addresses, including link-local addresses, exposing information about the host. The issue is an information-disclosure flaw in the Nod...

CVE-2007-4678

CVE-2007-4678 affects Apple Mac OS X 10.3.9 and 10.4 through 10.4.10. The issue is in AppleRAID when loading a stripped disk image, where mounting can trigger a NULL pointer dereference, causing a denial of service (crash). No exploitation details are provided in the documents beyond this descrip...

CVE-2007-4686

The CVE-2007-4686 issue affects Apple Mac OS X xnu kernel (tty.c) on 10.4–10.4.10. A crafted TIOCSETD ioctl can take advantage of a signedness/overflow flaw in ttioctl, allowing a local attacker to cause a system crash or gain kernel privileges by abusing the line-discipline switch in ttioctl. Th...

CVE-2007-4267

Apple Mac OS X 10.4–10.4.10 (and Mac OS X Server 10.4–10.4.10) contain a stack-based kernel overflow in the AppleTalk networking path. The vulnerability arises when an IOCTL adds an AppleTalk zone to a routing table, allowing a local attacker to cause arbitrary code execution with kernel privileg...