Novell Client Trust Heap Overflow Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Novell software which utilize the Novell Client Trust. Authentication is not required to exploit this vulnerability. The specific flaw exists in the Novell Client Trust application, clntrust.exe,...

[SECURITY] [DSA 1320-1] New clamav packages fix several vulnerabilities

-------------------------------------------------------------------------- Debian Security Advisory DSA 1320-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff June 23th, 2007 http://www.debian.org/security/faq -...

DSA-1320-1 clamav

Bulletin has no description...

CVE-2007-3024

libclamav/others.c in ClamAV before 0.90.3 and 0.91 before 0.91rc1 uses insecure permissions for temporary files that are created by the cligentempstream function in clamd/clamdscan, which might allow local users to read sensitive files...

CVE-2007-3024

CVE-2007-3024 affects libclamav components in ClamAV before 0.90.3 and 0.91 before 0.91rc1. The root cause is insecure permissions for temporary files created by cli_gentempstream in clamd/clamdscan, which could allow local users to read sensitive files. Implication: local access to temporary dat...

CVE-2006-3024

CVE-2006-3024 documents multiple XSS vulnerabilities in EvGenius Counter 3.4 and earlier, exploitable via the page parameter in monthly.php and daily.php. The affected software is EvGenius Counter (version 3.4 and earlier); the underlying issue is improper handling of user-supplied input in those...

CVE-2006-3024

Multiple cross-site scripting XSS vulnerabilities in EvGenius Counter 3.4 and earlier allow remote attackers to inject arbitrary web script or HTML via the page parameter in 1 monthly.php and 2 daily.php...

CVE-2005-3024

CVE-2005-3024 affects vBulletin 3.0.7 and older with multiple SQL injection vulnerabilities in various scripts. Remote attackers can inject via numerous parameters (e.g., announcement.php, thread.php, user.php, admincalendar.php, language.php, template.php, etc.), potentially compromising data in...