18432 matches found
CVE-2007-5208
hpssd in Hewlett-Packard Linux Imaging and Printing Project hplip 1.x and 2.x before 2.7.10 allows context-dependent attackers to execute arbitrary commands via shell metacharacters in a from address, which is not properly handled when invoking sendmail...
Unfixed XSS vulnerability at search.couponcabin.com
Security researcher tenest, has submitted on 13/10/2007 a cross-site-scripting XSS vulnerability affecting search.couponcabin.com, which at the time of submission ranked 23318 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 01/11/2007. It is...
CVE-2007-5329
CVE-2007-5329 describes a memory corruption vulnerability in CA BrightStor ARCserve Backup components (notably dbasvr.exe and related RPC/server processes) across multiple versions (v9.01 through R11.5, and Enterprise Backup r10.5). The root cause is memory corruption during processing of RPC/arg...
CVE-2007-5326
CA BrightStor ARCserve Backup contains multiple remote vulnerabilities (CVE-2007-5326 among others) due to RPC string/buffer overflows in components such as RPC and rpcx.dll. A remote attacker could potentially execute arbitrary code on affected systems (Windows platforms) by manipulating RPC inp...
CVE-2007-5327
The CVE-2007-5327 issue is a stack-based overflow in the CA BrightStor ARCserve Backup Message Engine RPC interface (mediasvr.exe) that can allow remote code execution via opnum 0x10d. Affected products include BrightStor ARCserve Backup from v9.01 to R11.5 and BrightStor Enterprise Backup r10.5,...
CVE-2007-5331
CVE-2007-5331 affects CA BrightStor ARCserve Backup and BrightStor Enterprise Backup. The vulnerability lies in queue.dll used by the message queuing service (LQserver.exe), where a malformed ONRPC request for operation 0x76 can cause memory corruption in lqserver/media services, enabling remote ...
CVE-2007-5208
CVE-2007-5208 affects the HP Linux Imaging and Printing Project (HPLIP) hpssd daemon. Affected: hplip 1.x and 2.x before 2.7.10. Description from multiple sources indicates that input handling of the From address during sendmail invocation allows context-dependent attackers to execute arbitrary c...
CVE-2007-5325
CVE-2007-5325 and related CVEs describe multiple remote vulnerabilities in CA BrightStor ARCserve Backup and BrightStor Enterprise Backup (v9.01–R11.5, Enterprise Backup r10.5, and related Windows components). The core issues include: (1) buffer overflows in the Message Engine and AScore.dll, and...
iDefense Security Advisory 10.11.07: Multiple Vendor FLAC Library Multiple Integer Overflow Vulnerabilities
Multiple Vendor FLAC Library Multiple Integer Overflow Vulnerabilities iDefense Security Advisory 10.11.07 http://labs.idefense.com/intelligence/vulnerabilities/ Oct 11, 2007 I. BACKGROUND Free Lossless Audio Codec FLAC is a popular file format for audio data compression. AOL Corp.'s Winamp media...
Unfixed XSS vulnerability at www.openlab.cn
Security researcher kusomiso.com, has submitted on 13/10/2007 a cross-site-scripting XSS vulnerability affecting www.openlab.cn, which at the time of submission ranked 901831 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 01/11/2007. It is...
CVE-2007-5436: Improper Restriction of Operations within the Bounds of a Memory Buffer
Buffer overflow in a certain ActiveX control in ScanObjectBrowser.DLL in G DATA Antivirus 2007 might allow remote attackers to execute arbitrary code via unspecified parameters to the SelectPath function. NOTE: this issue might not cross privilege boundaries in most environments, since it is not...
Unfixed XSS vulnerability at www.sehitlerolmez.com
Security researcher st@rext, has submitted on 13/10/2007 a cross-site-scripting XSS vulnerability affecting www.sehitlerolmez.com, which at the time of submission ranked 610148 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 13/10/2007. It is...
[email protected], [email protected]
=========================================================== Ubuntu Security Notice USN-528-1 October 11, 2007 mysql-dfsg-5.0 vulnerabilities CVE-2007-2583, CVE-2007-2691, CVE-2007-3780, CVE-2007-3782 =========================================================== A security issue affects the followin...
Unfixed XSS vulnerability at www.infusionconnections.com
Security researcher BackDoor, has submitted on 13/10/2007 a cross-site-scripting XSS vulnerability affecting www.infusionconnections.com, which at the time of submission ranked 1920040 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 01/11/2007...
ZDI-07-057: Firebird process_packet() Remote Stack Overflow Vulnerability
ZDI-07-057: Firebird processpacket Remote Stack Overflow Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-07-057.html October 10, 2007 -- CVE ID: CVE-2007-4992 -- Affected Vendor: Firebird -- Affected Products: Firebird SQL 2.0.2 -- TippingPointTM IPS Customer Protection: TippingPoin...
CVE-2007-5328
CA BrightStor ARCserve Backup (Message Engine RPC) contains CVE-2007-5328: insecure privileged function exposure through RPC calls in the Message Engine service. A remote attacker can modify the file system and registry and potentially take full control of affected systems. Affected products incl...
CVE-2007-5324
Mode C: Affected software is IBM DB2 (DB2JDS) with service listening on TCP/6789. CVE-2007-2582 (and thus CVE-2007-5324) describe multiple buffer overflows in the DB2JDS (DB2 JDBC Applet Server) allowing remote code execution and DoS via crafted packets or invalid LANG parameter/packet length >...
CVE-2007-5332
CA BrightStor ARCserve Backup contains multiple remote vulnerabilities (including CVE-2007-5332) affecting mediasvr and caloggerd across versions 9.01–11.5 and Enterprise Backup r10.5. The issues stem from memory corruption in RPC argument processing, enabling a remote attacker to cause denial of...
CVE-2007-5208
hpssd in Hewlett-Packard Linux Imaging and Printing Project hplip 1.x and 2.x before 2.7.10 allows context-dependent attackers to execute arbitrary commands via shell metacharacters in a from address, which is not properly handled when invoking sendmail...