18432 matches found
CVE-2007-4600
The CVE-2007-4600 issue affects Mathcad 12–14 (Mathsoft/PTC Mathcad). The vulnerability arises from the Protect Worksheet feature, which uses a gzipped XML file containing a element; attackers can bypass protections by removing this element, allowing access to protected data. Impact is described...
CVE-2007-3102
OpenSSH 4.3p2 contains an unspecified vulnerability in linux_audit_record_event that allows remote attackers to write arbitrary characters to the audit log via a crafted username. Reported on Fedora Core 6 and possibly other systems (CVE-2007-3102). Public advisories note a fix was released (e.g....
CVE-2007-5557
Technical details about CVE-2007-5557 are not publicly available in the provided documents. Monitor for future updates from official advisories; no product, impact, or remediation details are given here.
CVE-2007-5551
CVE-2007-5551 relates to Cisco IOS, where an off-by-one error can trigger a heap-based buffer overflow. The description notes remote code execution via unspecified vectors, with only a vague pre-advisory disclosure as of 2007-10-16; no concrete vendor/version details or remediation are provided i...
CVE-2007-5473
The CVE-2007-5473 entry concerns Mono before 1.2.5.2. StaticFileHandler.cs in System.Web on Windows fails to properly handle a request trailing with a space or dot in XSP, allowing remote attackers to disclose source code of sensitive files. Affected component: Mono’s System.Web.StaticFileHandler...
CVE-2007-5473
StaticFileHandler.cs in System.Web in Mono before 1.2.5.2, when running on Windows, allows remote attackers to obtain source code of sensitive files via a request containing a trailing 1 space or 2 dot, which is not properly handled by XSP...
[SECURITY] [DSA 1388-1] New dhcp packages fix arbitrary code execution
------------------------------------------------------------------------ Debian Security Advisory DSA 1388-1 [email protected] http://www.debian.org/security/ Steve Kemp October 18th, 2007 http://www.debian.org/security/faq -...
CVE-2007-5541
Affected software: Opera before 9.24. Vulnerabilities (CVE-2007-5541 and CVE-2007-5540): CVE-2007-5541: Unspecified vulnerability when using an external newsgroup or e-mail client; remote attackers could execute arbitrary commands via unknown vectors. This requires an external e-mail/newsgroup cl...
CVE-2007-5538
CVE-2007-5538 describes a buffer overflow in the Centralized TFTP File Locator Service of Cisco Unified Communications Manager (CUCM) (formerly CallManager) 5.1 before 5.1(3) and Unified CallManager 5.0. The vulnerability occurs during processing of filenames, allowing remote attackers to execute...
CVE-2007-5540
The provided documents confirm CVE-2007-5540 affects Opera (pre-9.24) and enables bypassing the same-origin policy when displaying frames from different sites. The root cause is described as an unspecified flaw in how Opera handles cross-domain frames, allowing remote attackers to overwrite funct...
AST-2007-023 - SQL Injection Vulnerabilty in cdr_addon_mysql
Asterisk Project Security Advisory - AST-2007-023 +------------------------------------------------------------------------+ | Product | Asterisk-Addons | |--------------------+---------------------------------------------------| | Summary | SQL Injection Vulnerability in cdraddonmysql |...
URIs with invalid %-encoding mishandled by Windows — Mozilla
On Windows XP with Internet Explorer 7 installed several "web related" URI schemes do not launch the registered protocol-handler if the URI contains an invalid %-encoded sequence. This was initially reported by Billy Rios and Nate McFeters with additional investigation by Secunia. A patch that...
XPCNativeWraper pollution using Script object — Mozilla
Mozilla security researcher mozbugra4 reported that it was possible to use the Script object to modify XPCNativeWrappers in such a way that subsequent access by the browser chrome--such as by right-clicking to open a context menu--can cause attacker-supplied javascript to run with the same...
openSUSE 10 Security Update : java-1_4_2-sun (java-1_4_2-sun-4536)
The Sun JAVA JDK 1.4.2 was upgraded to release 16 to fix various bugs, including the following security bugs : http://sunsolve.sun.com/search/document.do?assetkey=1-26-103 079-1 CVE-2007-5232: Sun Java Runtime Environment JRE in JDK and JRE 6 Update 2 and earlier, JDK and JRE 5.0 Update 12 and...
CVE-2007-5537
CVE-2007-5537 affects Cisco Unified Communications Manager (CUCM, former CallManager) 5.1 before 5.1(2) and Unified CallManager 5.0. The vulnerability allows remote attackers to cause a denial of service (kernel panic) by sending a flood of SIP INVITE messages to UDP port 5060, triggering resourc...
BrightStor ARCserve Message Engine opnum 0x10d buffer overflow
Added: 10/18/2007 CVE: CVE-2007-5327 BID: 26015 OSVDB: 41369 Background CA ARCserve Bac kup formerly BrightStor ARCserve Backup is a backup and recovery solution. It runs a Message Engine RPC service on port 6504/TCP by default. Problem A buffer overflow in BrightStor ARCserve Backup allows remot...
Secunia Research: IrfanView Palette File Importing Buffer Overflow Vulnerability
====================================================================== Secunia Research 16/10/2007 - IrfanView Palette File Importing Buffer Overflow Vulnerability - ====================================================================== Table of Contents Affected...
CVE-2007-5539
Cisco UC/ICM suite components (ICME, ICMH, UCCE, UCCH, SUCCE) version 7.1(5) contain an unspecified vulnerability that allows remote authenticated users to gain privileges, read reports, or alter SUCCE configuration via certain web interfaces. The exact root cause, affected subcomponents, and exp...
BrightStor ARCserve Message Engine opnum 0x10d buffer overflow
Added: 10/18/2007 CVE: CVE-2007-5327 BID: 26015 OSVDB: 41369 Background CA ARCserve Bac kup formerly BrightStor ARCserve Backup is a backup and recovery solution. It runs a Message Engine RPC service on port 6504/TCP by default. Problem A buffer overflow in BrightStor ARCserve Backup allows remot...