CVE-2014-2607

HP Operations Manager i (OMi) versions 9.1 and 9.2 are affected by a code-execution vulnerability exploitable by an authenticated OMi operator. The HP security bulletin (HPSBMU03042) lists Linux and Windows as impacted and provides patches/patch levels: OMi v9.2 service pack 9.2x (Linux/Windows) ...

Debian DSA-2607-1 : qemu-kvm - buffer overflow

It was discovered that the e1000 emulation code in QEMU does not enforce frame size limits in the same way as the real hardware does. This could trigger buffer overflows in the guest operating system driver for that network card, assuming that the host system does not discard such frames which it...

Code injection

The Johnson Controls Pegasys P2000 server with software before 3.11 allows remote attackers to trigger false alerts via crafted packets to TCP port 41013 aka the upload port, a different vulnerability than CVE-2012-2607...

CVE-2012-2607

CVE-2012-2607 affects the Johnson Controls CK721-A controller (firmware before SSM4388_03.1.0.14_BB). It allows remote attackers to perform arbitrary actions by sending crafted packets to TCP port 41014 (the download port). CERT/NVD entries describe remote command execution potential. Remediation...

CVE-2011-2607

CVE-2011-2607 is described across multiple sources as a Cross-site Scripting (XSS) vulnerability in IBM Rational Team Concert (RTC) 3.0, allowing remote attackers to inject arbitrary script or HTML via an unspecified parameter (Work Item 165513). The connected documents confirm the affected produ...

CVE-2009-2607

SQL injection vulnerability in the compinboard component for Joomla! allows remote attackers to execute arbitrary SQL commands via the task parameter in a showpic action to index.php...

CVE-2009-2607

CVE-2009-2607 : Affected Joomla! component is com_pinboard. The vulnerability is a SQL injection in the showpic action of index.php, exploitable via the task parameter, allowing remote attackers to execute arbitrary SQL commands. CVSS v2 base score 7.5 (HIGH). No remediation details are provided ...

CVE-2009-2607

creationtimestamp| type| source ---|---|--- 2009-06-25 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/9017...

Ubuntu: Security Advisory (USN-778-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2008-2607

CVE-2008-2607 concerns Oracle Database Advanced Queuing (SYS.DBMS_AQELM). The CVE entry notes an unspecified vulnerability in Oracle Database versions 9.2.0.8, 9.2.0.8DV, 10.1.0.5, 10.2.0.4, and 11.1.0.6 with remote authenticated attack vectors related to SYS.DBMS_AQELM. The public material refer...

Debian Security Advisory DSA 1018-1 (kernel-source-2.4.27)

The remote host is missing an update to kernel-source-2.4.27 announced via advisory DSA 1018-1. For details on the issues addressed with this update, please visit the referenced security advisories. OpenVAS Vulnerability Test $Id: deb10181.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description:...

Debian: Security Advisory (DSA-1018-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

openSUSE 10 Security Update : cron (cron-1440)

A missing check on the return value of setuid in vixie-cron could be used by a local user to gain root privileges by exhausting resource limits and waiting for a cronjob to trigger. This is tracked by the Mitre CVE ID CVE-2006-2607. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The...

CVE-2007-2607

LaVague 0.3 and earlier suffers a PHP remote file inclusion in views/print/printbar.php, exploitable via a URL in the views_path parameter. Connected sources confirm this vulnerability type (RFI) and cite an impact consistent with arbitrary code execution on affected installations. The issue is t...

Important: Red Hat Security Advisory: vixie-cron security update

Updated vixie-cron packages that fix a privilege escalation issue are now available. This update has been rated as having important security impact by the Red Hat Security Response Team. The vixie-cron package contains the Vixie version of cron. Cron is a standard UNIX daemon that runs specified...

CVE-2006-2607

docommand.c in Vixie cron vixie-cron 4.1 does not check the return code of a setuid call, which might allow local users to gain root privileges if setuid fails in cases such as PAM failures or resource limits, as originally demonstrated by a program that exceeds the process limits as defined in...

CVE-2006-2607

CVE-2006-2607 refers to a local privilege escalation in vixie-cron 4.1 where do_command.c does not check the return value of setuid(), potentially allowing a root gain if setuid() fails (e.g., PAM limits or resource limits). Connected advisories confirm this vulnerability and document patches/ups...

[SECURITY] [DSA 1018-2] New Linux kernel 2.4.27 packages fix several vulnerabilities

-------------------------------------------------------------------------- Debian Security Advisory DSA 1018-2 [email protected] http://www.debian.org/security/ Dann Frazier, Simon Horman April 5th, 2006 http://www.debian.org/security/faq -...

[SECURITY] [DSA 1018-1] New Linux kernel 2.4.27 packages fix several vulnerabilities

-------------------------------------------------------------------------- Debian Security Advisory DSA 1018-1 [email protected] http://www.debian.org/security/ Dann Frazier, Simon Horman March 26th, 2006 http://www.debian.org/security/faq -...

CVE-2005-3965

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2004-2607. Reason: This candidate is a duplicate of CVE-2004-2607. Notes: All CVE users should reference CVE-2004-2607 instead of this candidate. All references and descriptions in this candidate have been removed to prevent...