Security fix for the ALT Linux 9 package openssl1.1 version 0.9.8d-alt4

Oct. 10, 2007 Dmitry V. Levin 0.9.8d-alt4 - Backported upstream fix for off-by-one bug in the SSLgetsharedciphers function CVE-2007-5135...

Security fix for the ALT Linux 9 package openssl10 version 0.9.8d-alt4

Oct. 10, 2007 Dmitry V. Levin 0.9.8d-alt4 - Backported upstream fix for off-by-one bug in the SSLgetsharedciphers function CVE-2007-5135...

nuseo PHP enterprise 1.6 - Remote File Inclusion

nuseo PHP enterprise 1.6 - Remote File Inclusion Vulnerability Type: Remote File Inclusion Vulnerable file: /NuSEO PHP Enterprise.v1.6 Nulled by DGT/NuSEO.PHP.Enterprise.v1.6.PHP.NULL-DGT/nuseo/admin/nuseoadmind.php Exploit URL:...

IBM and Lenovo Access Support acpRunner ActiveX Security Bypass (CVE-2007-2928; CVE-2007-2929; CVE-2007-2940)

The Access Support software package for IBM and Lenovo systems includes several ActiveX controls. A remote attacker could exploit this issue by convincing a user to visit a specially crafted HTML document or open a malicious web page. Successful exploitation could result in remote code execution ...

iDefense Security Advisory 10.09.07: Microsoft Windows Mail and Outlook Express NNTP Protocol Heap Overflow

Microsoft Windows Mail and Outlook Express NNTP Protocol Heap Overflow iDefense Security Advisory 10.09.07 http://labs.idefense.com/intelligence/vulnerabilities/ Oct 09, 2007 I. BACKGROUND Microsoft Windows Mail and Outlook Express are the default mail and news clients for Windows operating...

Unfixed XSS vulnerability at www.logicool.co.jp

Security researcher kusomiso.com, has submitted on 10/10/2007 a cross-site-scripting XSS vulnerability affecting www.logicool.co.jp, which at the time of submission ranked 76626 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 01/11/2007. It is...

Cisco IOS 12.3 - LPD Remote Buffer Overflow

Cisco IOS 12.3 - LPD Remote Buffer Overflow source: https://www.securityfocus.com/bid/26001/info Cisco IOS is prone to a remote buffer-overflow vulnerability in its LPD service because it fails to perform adequate boundary checks on user-supplied data. Attackers can exploit this issue to execute...

Unfixed XSS vulnerability at www.netcomponents.com

Security researcher kusomiso.com, has submitted on 10/10/2007 a cross-site-scripting XSS vulnerability affecting www.netcomponents.com, which at the time of submission ranked 70159 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 01/11/2007. It ...

Microsoft Windows RPC NTLMSSP Authentication Denial of Service (MS07-058; CVE-2007-2228)

Remote Procedure Call RPC is a protocol that a program can use to request a service from another program which is located on another computer in a network. Microsoft Remote Procedure Call MS-RPC is Microsoft's implementation of RPC. MS-RPC uses the NTLM NT LAN Manager authentication protocol...

rPSA-2007-0212-1 util-linux

rPath Security Advisory: 2007-0212-1 Published: 2007-10-08 Products: rPath Linux 1 Rating: Major Exposure Level Classification: Local Root Deterministic Privilege Escalation Updated Versions: util-linux=/conary.rpath.com@rpl:devel//1/2.12r-1.5-1 rPath Issue Tracking System:...

Unfixed XSS vulnerability at www.yangzhi.com

Security researcher z0mb.ie, has submitted on 10/10/2007 a cross-site-scripting XSS vulnerability affecting www.yangzhi.com, which at the time of submission ranked 179169 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 01/11/2007. It is current...

Solaris (SPARC/x86) - fifofs I_PEEK Kernel Memory Disclosure

/ 10/2007: public release SPARC Solaris 8 without 109454-06 Solaris 9 without 117471-04 Solaris 10 without 127737-01 x86 Solaris 8 without 109455-06 Solaris 9 without 117472-04 Solaris 10 without 127738-01 Solaris fifofs IPEEK Kernel Memory Disclosure By qaaz / include include include include...

Unfixed XSS vulnerability at www.politicalbase.com

Security researcher Lars Strojny, has submitted on 10/10/2007 a cross-site-scripting XSS vulnerability affecting www.politicalbase.com, which at the time of submission ranked 119465 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 01/11/2007. It...

Code injection

Microsoft Internet Explorer 5.01 through 7 allows remote attackers to spoof the URL address bar and other "trust UI" components via unspecified vectors, a different issue than CVE-2007-1091 and CVE-2007-3826...

CVE-2007-2228

rpcrt4.dll aka the RPC runtime library in Microsoft Windows XP SP2, XP Professional x64 Edition, Server 2003 SP1 and SP2, Server 2003 x64 Edition and x64 Edition SP2, and Vista and Vista x64 Edition allows remote attackers to cause a denial of service RPCSS service stop and system restart via an...

CVE-2007-2217

Kodak Image Viewer in Microsoft Windows 2000 SP4, and in some cases XP SP2 and Server 2003 SP1 and SP2, allows remote attackers to execute arbitrary code via crafted image files that trigger memory corruption, as demonstrated by a certain .tif TIFF file...

DSquare Exploit Pack: D2SEC_MS07_055

Name| d2secms07055 ---|--- CVE| CVE-2007-2217 Exploit Pack| D2ExploitPack Description| Microsoft Windows Kodak Image Viewer Remote Code Execution Vulnerability Notes|...

CVE-2007-4466

CVE-2007-4466 affects Electronic Arts SnoopyCtrl ActiveX Control (NPSnpy.dll, version 1.1.0.36). The vulnerability is described as multiple stack-based buffer overflows that allow remote attackers to execute arbitrary code via unspecified methods/parameters. Public materials include Metasploit ex...

CVE-2007-5319

CVE-2007-5319 concerns the vuidmice STREAMS modules on Sun Solaris 8, 9, and 10. The vulnerability allows local users with access to the console (/dev/console) to cause a denial of service, rendering the system console unusable via unspecified vectors. The provided description does not specify th...

CVE-2007-5320

Pegasus Imaging ImagXpress 8.0 contains multiple absolute path traversal vulnerabilities. In particular, the ThumbNailXpress1 ActiveX control’s CacheFile attribute and the ImagXpress8 ActiveX control’s CompactFile function can be abused to delete or overwrite arbitrary files on affected systems. ...