Ubuntu 6.06 LTS / 6.10 / 7.04 : firefox vulnerabilities (USN-493-1)

A flaw was discovered in handling of 'about:blank' windows used by addons. A malicious website could exploit this to modify the contents, or steal confidential data such as passwords, of other web pages. CVE-2007-3844 Jesper Johansson discovered that spaces and double-quotes were not correctly...

Ubuntu 6.06 LTS / 6.10 / 7.04 : krb5 vulnerabilities (USN-477-1)

Wei Wang discovered that the krb5 RPC library did not correctly handle certain error conditions. A remote attacker could cause kadmind to free an uninitialized pointer, leading to a denial of service or possibly execution of arbitrary code with root privileges. CVE-2007-2442 Wei Wang discovered...

Ubuntu 7.04 : samba regression (USN-460-2)

USN-460-1 fixed several vulnerabilities in Samba. The upstream changes for CVE-2007-2444 had an unexpected side-effect in Feisty. Shares configured with the 'force group' option no longer behaved correctly. This update corrects the problem. We apologize for the inconvenience. Paul Griffith and...

Ubuntu 5.10 / 6.06 LTS / 6.10 : mozilla-thunderbird vulnerabilities (USN-431-1)

The SSLv2 protocol support in the NSS library did not sufficiently check the validity of public keys presented with a SSL certificate. A malicious SSL website using SSLv2 could potentially exploit this to execute arbitrary code with the user's privileges. CVE-2007-0008 The SSLv2 protocol support ...

Ubuntu 6.06 LTS / 6.10 / 7.04 / 7.10 : dhcp vulnerability (USN-531-1)

Nahuel Riva and Gerardo Richarte discovered that the DHCP server did not correctly handle certain client options. A remote attacker could send malicious DHCP replies to the server and execute arbitrary code. Note that Tenable Network Security has extracted the preceding description block directly...

Ubuntu 6.06 LTS / 6.10 / 7.04 : firefox vulnerabilities (USN-490-1)

Various flaws were discovered in the layout and JavaScript engines. By tricking a user into opening a malicious web page, an attacker could execute arbitrary code with the user's privileges. CVE-2007-3734, CVE-2007-3735 Flaws were discovered in the JavaScript methods addEventListener and setTimeo...

Ubuntu 6.06 LTS / 6.10 / 7.04 : samba vulnerabilities (USN-460-1)

Paul Griffith and Andrew Hogue discovered that Samba did not fully drop root privileges while translating SIDs. A remote authenticated user could issue SMB operations during a small window of opportunity and gain root privileges. CVE-2007-2444 Brian Schafer discovered that Samba did not handle ND...

[SECURITY] [DSA 1406-1] New horde3 packages fix several vulnerabilities

-------------------------------------------------------------------------- Debian Security Advisory DSA 1406-1 [email protected] http://www.debian.org/security/ Thijs Kinkhorst November 9th, 2007 http://www.debian.org/security/faq -...

CVE-2007-5908

...

CVE-2007-5908

CVE-2007-5908 concerns a buffer overflow in the Linux kernel up to 2.6.23, affecting the sysfs_show_available_clocksources and sysfs_show_current_clocksources functions. The vulnerability could allow local users to cause a denial of service or potentially execute arbitrary code via crafted clock ...

CVE-2007-5907

CVE-2007-5907 affects Xen (notably Xen 3.1.1 in the initial description) where guests could modify the CR4 TSC from within the guest environment, enabling a local denial of service. The connected documents corroborate that this issue is tied to the Xen feature allowing guests to hide or manipulat...

xpdf security update

CentOS Errata and Security Advisory CESA-2007:1031-01 Updated xpdf packages that fix several security issues are now available for Red Hat Enterprise Linux 2.1. This update has been rated as having important security impact by the Red Hat Security Response Team. Xpdf is an X Window System-based...

EMC NetWorker Remote Exec service subcmd buffer overflow

Added: 11/09/2007 CVE: CVE-2007-3618 BID: 25375 OSVDB: 39744 Background EMC NetWorker is a centralized data backup solution. Problem A buffer overflow vulnerability in the Remote Exec service nsrexecd.exe allows remote attackers to execute arbitrary commands by sending a long, invalid subcmd to a...

Fixed XSS vulnerability at www.pc-koubou.jp

Security researcher kusomiso.com, has submitted on 11/09/2007 a cross-site-scripting XSS vulnerability affecting www.pc-koubou.jp, which at the time of submission ranked 71871 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 13/09/2007. It is...

Fixed XSS vulnerability at member.twotop.ne.jp

Security researcher kusomiso.com, has submitted on 11/09/2007 a cross-site-scripting XSS vulnerability affecting member.twotop.ne.jp, which at the time of submission ranked 4983365 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 13/09/2007. It ...

Unfixed XSS vulnerability at www.exbilgimarket.com

Security researcher BackDoor, has submitted on 11/09/2007 a cross-site-scripting XSS vulnerability affecting www.exbilgimarket.com, which at the time of submission ranked 878332 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 13/09/2007. It is...

Unfixed XSS vulnerability at isicad.ru

Security researcher Narcoticxs, has submitted on 11/09/2007 a cross-site-scripting XSS vulnerability affecting isicad.ru, which at the time of submission ranked 8686319 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 13/09/2007. It is currently...

EMC NetWorker Remote Exec service subcmd buffer overflow

Added: 11/09/2007 CVE: CVE-2007-3618 BID: 25375 OSVDB: 39744 Background EMC NetWorker is a centralized data backup solution. Problem A buffer overflow vulnerability in the Remote Exec service nsrexecd.exe allows remote attackers to execute arbitrary commands by sending a long, invalid subcmd to a...

RHEL 4 / 5 : tetex (RHSA-2007:1027)

Updated tetex packages that fix several security issues are now available for Red Hat Enterprise Linux 4 and 5. This update has been rated as having important security impact by the Red Hat Security Response Team. TeTeX is an implementation of TeX. TeX takes a text file and a set of formatting...

Net-SNMP GETBULK远程拒绝服务漏洞

BUGTRAQ ID: 26378 CVECAN ID: CVE-2007-5846 Net-SNMP是一个免费的、开放源码的SNMP实现，以前称为UCD-SNMP。 Net-SNMP在处理畸形的SNMP GETBULK请求时存在漏洞，远程攻击者可能利用此漏洞导致服务器不可用。 Net-SNMP没有正确地处理SNMP GETBULK请求，如果远程攻击者发送了包含有超长max-repetitions字段的畸形SNMP GETBULK请求的话，就可能导致耗尽大量CPU和内存资源。 0 Net-SNMP net-snmp 5.4.1...