CVE-2007-5288

CVE-2007-5288 is a duplicate of CVE-2007-5283 for Hitachi TPBroker/ Cosminexus TPBroker Object Transaction Monitor. Affected versions are 01-00 through 03-00, with the vulnerability enabling denial of service (crash) via invalid messages in the TSC Domain Manager. The connected documents confirm ...

MS07-055: Vulnerability in Kodak Image Viewer Could Allow Remote Code Execution (923810)

The remote host is running a version of the Kodak Image Viewer that may allow arbitrary code to be run. An attacker may use this to execute arbitrary code on this host. To succeed, the attacker would have to send a rogue file to a user of the remote computer and have it open it with this...

MS07-056: Cumulative Security Update for Outlook Express and Windows Mail (941202)

The remote host is running a version of Microsoft Outlook Express that contains several security flaws that could allow an attacker to execute arbitrary code on the remote host. To exploit this flaw, an attacker would need to send a malformed email to a victim on the remote host and have him open...

Mandrake Linux Security Advisory : openssl (MDKSA-2007:193)

A flaw in how OpenSSL performed Montgomery multiplications was discovered %that could allow a local attacker to reconstruct RSA private keys by examining another user's OpenSSL processes CVE-2007-3108. Moritz Jodeit found that OpenSSL's SSLgetsharedciphers function did not correctly check the siz...

RHEL 5 : pwlib (RHSA-2007:0932)

Updated pwlib packages that fix a security issue are now available for Red Hat Enterprise Linux 5. This update has been rated as having moderate security impact by the Red Hat Security Response Team. PWLib is a library used to support cross-platform applications. In Red Hat Enterprise Linux 5, th...

Fedora Core 6 : ruby-1.8.5.113-1.fc6 (2007-718)

Thu Oct 4 2007 Akira TAGOH - 1.8.5.113-1 - New upstream release. - ruby-1.8.5-CVE-2007-5162.patch: security fix for Net::HTTP that is insufficient verification of SSL certificate. 313801 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora...

Fedora Core 6 : kernel-2.6.22.9-61.fc6 (2007-714)

Update to Linux 2.6.22.8 and 2.6.22.9: http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.22.8 http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.22.9 CVE-2007-4571 The sndmemprocread function in sound/core/memalloc.c in the Advanced Linux Sound Architecture ALSA in the Linux kernel...

CVE-2007-5283

The connected documents confirm a DoS vulnerability in the Hitachi TPBroker Object Transaction Monitor and Cosminexus TPBroker Object Transaction Monitor (TSC Domain Manager component) affecting versions 01-00 through 03-00. The issue arises when the TSC Domain Manager processes invalid messages,...

CVE-2007-5273

Sun Java Runtime Environment JRE in JDK and JRE 6 Update 2 and earlier, JDK and JRE 5.0 Update 12 and earlier, SDK and JRE 1.4.215 and earlier, and SDK and JRE 1.3.120 and earlier, when an HTTP proxy server is used, allows remote attackers to violate the security model for an applet's outbound...

CVE-2007-5274

Sun Java Runtime Environment JRE in JDK and JRE 6 Update 2 and earlier, JDK and JRE 5.0 Update 12 and earlier, SDK and JRE 1.4.215 and earlier, and SDK and JRE 1.3.120 and earlier, when Firefox or Opera is used, allows remote attackers to violate the security model for JavaScript outbound...

Design/Logic Flaw

Sun Java Runtime Environment JRE in JDK and JRE 6 Update 2 and earlier, JDK and JRE 5.0 Update 12 and earlier, SDK and JRE 1.4.215 and earlier, and SDK and JRE 1.3.120 and earlier, when Firefox or Opera is used, allows remote attackers to violate the security model for JavaScript outbound...

Immunity Canvas: TRIONIC_INCLUDE

Name| trionicinclude ---|--- CVE| CVE-2007-5271 Exploit Pack| CANVAS Description| Trionic Cite remote file include Notes| CVSS: 6.8 Repeatability: Infinite VENDOR: Trionic Cite CVE Url: http://www.cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-5271 CVE Name: CVE-2007-5271...

CVE-2007-5275

CVE-2007-5275 is an Adobe Flash Player plug-in issue affecting Flash 9 where a Flash movie can remotely induce the victim to establish TCP sessions to arbitrary hosts due to DNS rebinding-like behavior and insufficient hostname-IP pinning after processing cross-domain policy (allow-access-from). ...

CVE-2007-5270

CVE-2007-5270 affects Drupal via the Boost module prior to 4.7.x-1.0 and 5.x prior to 5.x-1.0. The vulnerability allows remote attackers to create or overwrite arbitrary files and perform cross-site scripting (XSS) through unspecified vectors. The available connected documents confirm the affecte...

CVE-2007-5278

CVE-2007-5278 affects Zomplog 3.8.1 and earlier, where sensitive information may be stored under the web root due to insufficient access control. The vulnerability allows remote attackers to download user-uploaded files by enumerating the /upload directory and then retrieving individual files. In...

CVE-2007-5273

CVE-2007-5273 affects Sun JRE/JDK across multiple versions (JDK/JRE 6 Update 2 and earlier; 5.0 Update 12 and earlier; 1.4.2_15 and earlier; 1.3.1_20 and earlier). Root cause described as a multi-pin DNS rebinding issue when using an HTTP proxy: the applet download relies on DNS on the proxy whil...

CVE-2007-5277

CVE-2007-5277 concerns Microsoft Internet Explorer 6 on Windows XP where DNS pins can be dropped after failed connections to irrelevant TCP ports, making DNS rebinding attacks more feasible. The provided description demonstrates a scenario using a port 81 URL in an IMG SRC, where the DNS pin was ...

CVE-2007-5274

The CVE-2007-5274 entry concerns Sun JRE/JDK/J2SE (various 4.x/5.x/6.x releases) where, when a user runs Firefox or Opera, JavaScript outbound connections could be violated due to a multi-pin DNS rebinding flaw tied to the LiveConnect API. The vulnerability arises because JavaScript code relies o...

CVE-2007-5272

CVE-2007-5272 is a SQL injection in kategori.asp of Furkan Tastan Blog, exploitable remotely via the id parameter in a goster kat action. Root cause is unsanitized/unsafe input leading to arbitrary SQL execution; impact includes partial disclosure, modification, and potential disruption. Exploita...

CVE-2007-5271

CVE-2007-5271 affects Trionic Cite CMS (1.2 rev9 and earlier). The issue is multiple PHP remote file inclusion vulnerabilities that allow an attacker to execute arbitrary PHP code by providing a URL in the bField[bf_data] parameter to either interface/editors/-custom.php or interface/editors/cust...