FreeBSD : perl -- regular expressions unicode data buffer overflow (5b47c279-8cb5-11dc-8878-0016179b2dd5)

Red Hat reports : A flaw was found in Perl's regular expression engine. Specially crafted input to a regular expression can cause Perl to improperly allocate memory, possibly resulting in arbitrary code running with the permissions of the user running Perl. %NASLMINLEVEL 70300 C Tenable Network...

Important: gpdf security update

2.8.2-7.7.1 - Bump release. 2.8.2-7.4.3 - Fix a couple of typos in the patch for 356641. 2.8.2-7.4.2 - Add patch to fix CVE-2007-4352, CVE-2007-5392, and CVE-2007-5393 356641. 2.8.2-7.4.1 - Add patch to fix CVE-2007-3387 248203. - Add patch to fix CVE-2006-0301 179053...

Important: cups security update

1.1.17-13.3.46 - Applied patch to fix CVE-2007-4045 bug 356541. - Applied patch to fix CVE-2007-4351 STR 2561, bug 356541. - Applied patch to fix CVE-2007-5393 bug 356541...

Fedora 8 : ruby-1.8.6.111-1.fc8 (2007-2812)

This release contains another fixes of CVE-2007-5162 for Net::FTPTLS, Net::Telnet and Net::IMAP. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as...

Fedora 8 : tar-1.17-4.fc8 (2007-2800)

Wed Oct 24 2007 Radek Brich 2:1.17-4 - upstream patch for CVE-2007-4476 tar stack crashing in safernamesuffix Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as...

Fedora 8 : hugin-0.6.1-11.fc8 (2007-2807)

Mon Nov 5 2007 Bruno Postle 0.6.1-11 - fix for CVE-2007-5200 hugin unsafe temporary file usage - bug 332401; bug 362851; bug 362861; bug 362871 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to...

Important: tetex security update

1.0.7-67.11 - xpdf buffer overflow in CCITTFaxStream::lookChar CVE-2007-5393 356761 Resolves: 356761 1.0.7-67.10 - backport upstream fix for xpdf integer overflow CVE-2007-3387 248206 Resolves: 248206...

iDefense Security Advisory 11.06.07: Microsoft DebugView Privilege Escalation Vulnerability

iDefense Security Advisory 11.06.07 http://labs.idefense.com/intelligence/vulnerabilities/ Nov 06, 2007 I. BACKGROUND DebugView is a system analysis tool designed to display debug messages being generated on the system. More information is available on the vendor's site at the following URL...

Immunity Canvas: SCWIKI_INCLUDE

Name| scwikiinclude ---|--- CVE| CVE-2007-5843 Exploit Pack| CANVAS Description| scWiki remote file include Notes| CVSS: 6.8 Repeatability: Infinite VENDOR: scWiki CVE Url: http://www.cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-5843 CVE Name: CVE-2007-5843...

Immunity Canvas: VPORTAL_INCLUDE

Name| vportalinclude ---|--- CVE| CVE-2007-5842 Exploit Pack| CANVAS Description| Vortex Portal remote file include Notes| CVSS: 6.8 Repeatability: Infinite VENDOR: igamingcms.com CVE Url: http://www.cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-5842 CVE Name: CVE-2007-5842...

Immunity Canvas: NUBOARD_INCLUDE

Name| nuboardinclude ---|--- CVE| CVE-2007-5841 Exploit Pack| CANVAS Description| nuBoard remote file include Notes| CVSS: 6.8 Repeatability: Infinite VENDOR: nuboard CVE Url: http://www.cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-5841 CVE Name: CVE-2007-5841...

CVE-2007-5845

Directory traversal vulnerability in error.php in GuppY 4.6.3, 4.5.16, and earlier allows remote attackers to include and execute arbitrary local files via a .. dot dot in the id parameter. NOTE: this can be leveraged to bypass authentication and upload arbitrary files by including...

CVE-2007-5841

PHP remote file inclusion vulnerability in admin/index.php in nuBoard 0.5 allows remote attackers to execute arbitrary PHP code via a URL in the site parameter...

CVE-2007-5843

CVE-2007-5843 affects scWiki 1.0 Beta 2 with a PHP remote file inclusion in includes/common.php via the pathdot parameter, enabling remote code execution. Public exploit references exist (e.g., Exploit-DB), and Immunity CANVAS contains a scwiki_include module; no vendor patch details are provided...

CVE-2007-5840

The CVE-2007-5840 entry concerns SyndeoCMS 2.5.01 (Fred Stuurman) with a PHP remote file inclusion flaw in starnet/themes/c-sky/main.inc.php. The underlying issue is an insecure cmsdir parameter that allows including a URL, enabling remote attackers to execute arbitrary PHP code. This vector is d...

CVE-2007-5844

CVE-2007-5844 affects GuppY 4.6.3. A directory traversal flaw in inc/includes.inc allows remote attackers to include and execute arbitrary local files via .. in the selskin parameter to index.php. The issue can be leveraged for remote file inclusion by including inc/boxleft.inc and supplying a UR...

CVE-2007-4994

CVE-2007-4994 affects Red Hat Certificate System (RHCS) where new revocations generated during CRL creation could cause revoked certificates to be omitted from the CRL, enabling a bypass of revocation for some certificates. Supported by Red Hat advisories (RHSA-2007:0934; RHSA-2008:0566) and rela...

CVE-2007-5846

Vulnerability summary (CVE-2007-5846) The net-snmp SNMP agent (snmp_agent.c) in versions before 5.4.1 is vulnerable to a remote denial-of-service when processing GETBULK requests with a large max-repeaters value, leading to CPU and memory exhaustion. Multiple trusted advisories confirm the issue ...

CVE-2007-5845

CVE-2007-5845 affects GuppyY up to 4.6.3 and 4.5.16 and earlier; a directory traversal in error.php allows remote local file inclusion via .. in the id parameter. This can be leveraged to bypass authentication and upload arbitrary files by including admin/inc/upload.inc with specific multipart/fo...

CVE-2007-3874

The CVE-2007-3874 issue affects Symantec Altiris Deployment Solution 6.x PXE server’s tftp/mtftp daemon (pxemtftp.exe). A directory traversal vulnerability in the PXE server component could allow unauthenticated remote attackers to read arbitrary files on the Altiris server. Impact is read access...