DEBIAN-CVE-2007-5940

feynmf.pl in feynmf 1.08, as used in TeXLive 2007, allows local users to overwrite arbitrary files and execute arbitrary code via a symlink attack on the feynmf$$.pl temporary file...

Design/Logic Flaw

feynmf.pl in feynmf 1.08, as used in TeXLive 2007, allows local users to overwrite arbitrary files and execute arbitrary code via a symlink attack on the feynmf$$.pl temporary file...

DEBIAN-CVE-2007-5794

Race condition in nssldap, when used in applications that are linked against the pthread library and fork after a call to nssldap, might send user data to the wrong process because of improper handling of the LDAP connection. NOTE: this issue was originally reported for Dovecot with the wrong...

CVE-2007-5794

CVE-2007-5794 describes a race condition in the nss_ldap component (nss_ldap and pam_ldap) that can occur when applications are linked against pthreads and fork after an LDAP call, potentially causing user data to be returned to the wrong process. The issue originates with improper handling of LD...

CVE-2007-5940

feynmf.pl in feynmf 1.08, as used in TeXLive 2007, allows local users to overwrite arbitrary files and execute arbitrary code via a symlink attack on the feynmf$$.pl temporary file...

CVE-2007-5940

CVE-2007-5940 affects feynmf 1.08 (as used in TeXLive 2007). A local attacker can exploit a symlink-related race in the temporary file feynmf$PID.pl created by feynmf.pl, allowing overwriting arbitrary files and potential code execution. The documented impact includes partial confidentiality, int...

CVE-2007-5940

feynmf.pl in feynmf 1.08, as used in TeXLive 2007, allows local users to overwrite arbitrary files and execute arbitrary code via a symlink attack on the feynmf$$.pl temporary file...

CVE-2007-5937

Multiple buffer overflows in dvi2xx.c in dviljk in teTeX and TeXlive 2007 and earlier might allow user-assisted attackers to execute arbitrary code via a crafted DVI input file...

CVE-2007-5936

dvips in teTeX and TeXlive 2007 and earlier allows local users to obtain sensitive information and modify certain data by creating certain temporary files before they are processed by dviljk, which can then be read or modified in place...

CVE-2007-5937

Multiple buffer overflows in dvi2xx.c in dviljk in teTeX and TeXlive 2007 and earlier might allow user-assisted attackers to execute arbitrary code via a crafted DVI input file...

Buffer overflow

Multiple buffer overflows in dvi2xx.c in dviljk in teTeX and TeXlive 2007 and earlier might allow user-assisted attackers to execute arbitrary code via a crafted DVI input file...

Code injection

dvips in teTeX and TeXlive 2007 and earlier allows local users to obtain sensitive information and modify certain data by creating certain temporary files before they are processed by dviljk, which can then be read or modified in place...

CVE-2007-5934

The LOB functionality in PEAR MDB2 before 2.5.0a1 interprets a request to store a URL string as a request to retrieve and store the contents of the URL, which might allow remote attackers to use MDB2 as an indirect proxy or obtain sensitive information via a URL into a form field in an MDB2...

CVE-2007-5935

CVE-2007-5935 is a stack-based buffer overflow in dvips (teTeX/dvips) that affects teTeX/TeXlive 2007 and earlier. The overflow occurs in hpc.c when processing DVI files containing long href tags, allowing a user-assisted attacker to potentially execute arbitrary code. Connected advisories (RHSA-...

CVE-2007-5936

dvips in teTeX and TeXlive 2007 and earlier allows local users to obtain sensitive information and modify certain data by creating certain temporary files before they are processed by dviljk, which can then be read or modified in place...

CVE-2007-5937

CVE-2007-5937 affects the teTeX/TeX Live family (2007 and earlier) via multiple buffer overflows in dvi2xx.c of dviljk. The flaw allows a user‑assisted attacker to achieve arbitrary code execution by supplying a crafted DVI file. References in OpenVAS and Linux advisories corroborate involvement ...

CVE-2007-5934

The CVE-2007-5934 issue affects the PHP MDB2 project (MDB2 and its mysqli/ mysql drivers) where the LOB functionality incorrectly interprets a request to store a URL string as a request to fetch and store the contents of that URL. This can allow an MDB2-based application to act as an indirect pro...

CVE-2007-5933

Pioneers formerly gnocatan before 0.11.3 allows remote attackers to cause a denial of service crash by triggering a delete operation while the Session object is still being used, as demonstrated by causing a "Broken pipe" error...

CVE-2007-5933

CVE-2007-5933 affects Pioneers (formerly gnocatan) up to version 0.11.3. The issue occurs when a delete operation is triggered while a Session object is still in use, allowing remote attackers to cause a denial-of-service (crash) as evidenced by a Broken pipe error. The available data indicate up...

Moderate: Red Hat Security Advisory: ruby security update

Updated ruby packages that fix several security issues are now available for Red Hat Enterprise Linux 5. This update has been rated as having moderate security impact by the Red Hat Security Response Team. Ruby is an interpreted scripting language for object-oriented programming. An SSL certifica...