DEBIAN-CVE-2007-5585

xscreensaver 5.03 and earlier, when running without xscreensaver-gl-extras GL extras installed, crashes when /usr/bin/xscreensaver-gl-helper does not exist and a user attempts to unlock the screen, which allows attackers with physical access to gain access to the locked session...

CVE-2007-5585

CVE-2007-5585 affects xscreensaver 5.03 and earlier. Root cause: a crash when /usr/bin/xscreensaver-gl-helper is missing while running without xscreensaver-gl-extras, enabling a physically proximate user to access a previously locked session. The SUSE entry and Fedora/OpenVAS notes confirm update...

Critical: Red Hat Security Advisory: seamonkey security update

Updated seamonkey packages that fix several security bugs are now available for Red Hat Enterprise Linux 2.1, 3, and 4. This update has been rated as having critical security impact by the Red Hat Security Response Team. SeaMonkey is an open source Web browser, advanced email and newsgroup client...

[SECURITY] [DSA 1391-1] New icedove packages fix several vulnerabilities

-------------------------------------------------------------------------- Debian Security Advisory DSA 1391-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff October 19th, 2007 http://www.debian.org/security/faq -...

Moderate: Red Hat Security Advisory: thunderbird security update

Updated thunderbird packages that fix several security bugs are now available for Red Hat Enterprise Linux 4 and 5. This update has been rated as having moderate security impact by the Red Hat Security Response Team. Mozilla Thunderbird is a standalone mail and newsgroup client. Several flaws wer...

[SECURITY] [DSA 1390-1] New t1lib packages fix arbitrary code execution

------------------------------------------------------------------------ Debian Security Advisory DSA-1390-1 [email protected] http://www.debian.org/security/ Noah Meyerhans October 18, 2007 http://www.debian.org/security/faq -...

[SECURITY] [DSA 1390-1] New t1lib packages fix arbitrary code execution

------------------------------------------------------------------------ Debian Security Advisory DSA-1390-1 [email protected] http://www.debian.org/security/ Noah Meyerhans October 18, 2007 http://www.debian.org/security/faq -...

Windows IE7 URI Handler command execution through Firefox

Added: 10/19/2007 CVE: CVE-2007-3896 BID: 25945 OSVDB: 41090 Background The shell32.dll library provides functions which handle interaction between Internet Explorer and the Windows shell. Problem The version of the shell32.dll library installed with Internet Explorer 7 does not properly validate...

openSUSE 10 Security Update : festival (festival-4377)

The festival daemon runs as root. The default config doesn't have a password set. A local attacker could therefore connect to the daemon to have commands executed as root CVE-2007-4074. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin wer...

Mozilla products vulnerable to memory corruption in the JavaScript engine

Overview A number of vulnerabilities in the Mozilla JavaScript engine may allow the execution of arbitrary code or denial of service. Description The Mozilla JavaScript engine contains several vulnerabilities that may result in memory corruption. The impact of this memory corruption in specific...

Windows IE7 URI Handler command execution through Firefox

Added: 10/19/2007 CVE: CVE-2007-3896 BID: 25945 OSVDB: 41090 Background The shell32.dll library provides functions which handle interaction between Internet Explorer and the Windows shell. Problem The version of the shell32.dll library installed with Internet Explorer 7 does not properly validate...

Windows IE7 URI Handler command execution through Firefox

Added: 10/19/2007 CVE: CVE-2007-3896 BID: 25945 OSVDB: 41090 Background The shell32.dll library provides functions which handle interaction between Internet Explorer and the Windows shell. Problem The version of the shell32.dll library installed with Internet Explorer 7 does not properly validate...

KLA10257 Vulnerability in Macrovision SafeDisc

A buffer overflow was found in Macrovision SafeDisc. By exploiting this vulnerability malicious users can overwrite arbitrary memory locations and gain privileges. This vulnerability can be exploited locally via a specially designed argument. Original advisories - Exploitation Public exploits exi...

Unfixed XSS vulnerability at www.opelmantaclubitalia.francob.org

Security researcher Langy, has submitted on 19/10/2007 a cross-site-scripting XSS vulnerability affecting www.opelmantaclubitalia.francob.org, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 02/11/2007. ...

Unfixed XSS vulnerability at www.cicloturismopiceno.it

Security researcher Langy, has submitted on 19/10/2007 a cross-site-scripting XSS vulnerability affecting www.cicloturismopiceno.it, which at the time of submission ranked 8635144 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 02/11/2007. It i...

DSA-1391-1 icedove - several vulnerabilities

Bulletin has no description...

CVE-2007-5578

BASE is affected: the Basic Analysis and Security Engine (BASE) before version 1.3.8 fails to exit after issuing a redirect, enabling remote attackers to bypass authentication via multiple scripts (notably base_main.php and base_qry_alert.php). Exploitation details are not provided in the connect...

CVE-2007-5579

Pligg CMS 9.5 is affected by CVE-2007-5579 through login.php, where a guessable confirmation code enables password reset by an attacker knowing a username. The root cause is a predictable confirmationcode parameter used during forgotten-password flow, allowing an unauthorized password reset with ...

CVE-2007-5578

Basic Analysis and Security Engine BASE before 1.3.8 sends a redirect to the web browser but does not exit, which allows remote attackers to bypass authentication via 1 basemain.php, 2 baseqryalert.php, and possibly other vectors...

Immunity Canvas: PHPDJ_INCLUDE

Name| phpdjinclude ---|--- CVE| CVE-2007-5574 Exploit Pack| CANVAS Description| phpDJ remote file include Notes| CVSS: 6.8 Repeatability: Infinite VENDOR: phpdj CVE Url: http://www.cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-5574 CVE Name: CVE-2007-5574...