CVE-2007-5654

LiteSpeed Web Server prior to 3.2.4 is affected by CVE-2007-5654 (Mime Type Injection). An attacker can trigger use of an arbitrary MIME type for a file by sending a request containing a null-byte sequence (%00.) followed by a new extension, which can lead to viewing sensitive content (e.g., read...

CVE-2007-5642

CVE-2007-5642 affects PHP Project Management 0.8.10 and earlier. The issue is multiple directory traversal vulnerabilities that allow remote attackers to include and execute arbitrary local files by supplying a .. (dot dot) sequence in various parameters across modules (def_lang in modules/files/...

CVE-2007-5649

CVE-2007-5649 is a Cross-site Scripting (XSS) vulnerability in SocketMail 2.2.1 from Creative Digital Resources, exposed via lostpwd.php and the lost_id parameter. The NVD entry lists CVSS v2.0 base score 4.3 (Medium) with network access, required medium attack complexity, no authentication, and ...

CVE-2007-5650

CVE-2007-5650 is a directory traversal vulnerability in ReloadCMS 1.2.7 (system.php). An attacker can cause index.php?module=... to include and execute arbitrary local files by supplying a .. (dot dot) in the module parameter. The affected component is the system.php module of ReloadCMS 1.2.7; th...

CVE-2007-5644

Lussumo Vanilla 1.1.3 and earlier allows remote unauthenticated users to perform unauthorized operations through two AJAX endpoints (ajax/sortcategories.php and ajax/sortroles.php) due to missing admin-privilege checks. Affected component: Vanilla CMS PHP backend; root cause: no authorization on ...

CVE-2007-5648

CVE-2007-5648 describes multiple cross-site scripting (XSS) vulnerabilities in rnote.php of rNote 0.9.7.5, enabling remote attackers to inject arbitrary script or HTML via the d or u parameters. The NVD entry assigns a medium base score (4.3) with network access and no authentication required, pa...

USN-536-1: Thunderbird vulnerabilities

Various flaws were discovered in the layout and JavaScript engines. By tricking a user into opening a malicious web page, an attacker could execute arbitrary code with the user's privileges. CVE-2007-5339, CVE-2007-5340 Flaws were discovered in the file upload form control. By tricking a user int...

[SECURITY] [DSA 1372-2] New ktorrent packages fix directory traversal

------------------------------------------------------------------------ Debian Security Advisory DSA 1373-2 [email protected] http://www.debian.org/security/ Steve Kemp October 23th, 2007 http://www.debian.org/security/faq -...

CVE-2007-5636

Buffer overflow in the Nortel UNIStim IP Softphone 2050 allows remote attackers to cause a denial of service application abort and possibly execute arbitrary code via a flood of invalid characters to the RTCP port 5678/udp that triggers a Windows error message, aka "extraneous messaging."...

Immunity Canvas: PEOPLEAGGREGATOR_INCLUDE

Name| peopleaggregatorinclude ---|--- CVE| CVE-2007-5631 Exploit Pack| CANVAS Description| peopleaggregator 1.2pre6 remote file include Notes| CVSS: 6.8 Repeatability: Infinite VENDOR: peopleaggregator.org CVE Url: http://www.cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-5631 CVE Name:...

CVE-2007-5633

The SpeedFan.sys driver in Alfredo Milani Comparetti SpeedFan 4.33 is vulnerable to local privilege escalation when used on Microsoft Windows Vista x64 . The root cause is the ability of local users to read or write arbitrary Model Specific Registers (MSRs) via the IOCTL_RDMSR (0x9C402438) and IO...

CVE-2007-5634

The CVE-2007-5634 entry concerns SpeedFan 4.33 (SpeedFan.sys) on Windows Vista x64 . The vulnerability arises from an improper buffer check during IOCTL 0x9c402420, allowing local users to cause a denial of service (machine crash) and potentially gain privileges via unspecified vectors. Affected ...

CVE-2007-5632

CVE-2007-5632 concerns multiple unspecified vulnerabilities in the Sun Solaris kernel (versions 8–10) that allow local users to cause a denial of service (panic). The description ties the issue to the kernel statistics retrieval mechanism and potentially to the sfmmu_mlspl_enter / sfmmu_mlist_ent...

CVE-2007-5633

Speedfan.sys in Alfredo Milani Comparetti SpeedFan 4.33, when used on Microsoft Windows Vista x64, allows local users to read or write arbitrary MSRs, and gain privileges and load unsigned drivers, via the 1 IOCTLRDMSR 0x9C402438 and 2 IOCTLWRMSR 0x9C40243C IOCTLs to \Device\speedfan, as...

CVE-2007-5636

The CVE-2007-5636 entry concerns a buffer overflow in Nortel UNIStim IP Softphone 2050. A remote attacker can trigger the overflow by sending a flood of invalid characters to the RTCP port (5678/udp), potentially causing the application to abort and possibly allowing arbitrary code execution. The...

CVE-2007-5638

The CVE-2007-5638 entry concerns Nortel UNIStim family devices (e.g., IP Softphone 2050, IP Phone 1140E and related BCM/IP phone lines). The underlying issue is that the 32-bit RUDP datagram ID field uses only 65,536 possible values, making it easier for remote attackers to guess the RUDP ID and ...

CVE-2007-5639

The CVE-2007-5639 entry concerns Nortel UNIStim family devices (Nortel UNIStim IP Softphone 2050, IP Phone 1140E, plus other Nortel IP Phone, Mobile Voice Client, and WLAN Handsets). The vulnerability allows remote attackers to cause a denial of service (device hang) by sending a flood of Mute/Un...

CVE-2007-5640

The CVE-2007-5640 issue affects Nortel UNIStim products (e.g., UNIStim IP Softphone 2050, IP Phone 1140E and related lines such as BCM and Mobile Voice Client). A resume message to the Signaling Server with a spoofed source IP can allow remote attackers to block calls and force re-registration; t...

CVE-2007-5635

Technical details for CVE-2007-5635 are not publicly available in the provided documents. The materials list multiple unspecified vulnerabilities with unknown impact and vectors; no concrete affected products, versions, or fixes are disclosed here. Monitor for updates.

CVE-2007-5631

Vulnerability summary (CVE-2007-5631) : In PeopleAggregator 1.2pre6, multiple PHP remote file inclusion flaws exist when PHP register_globals is enabled. An attacker can abuse the current_blockmodule_path parameter (and related path_prefix usage) to cause arbitrary PHP code execution via modules ...