Ubuntu 6.06 LTS / 6.10 / 7.04 / 7.10 : libxfont, xorg-server vulnerabilities (USN-571-1)

Multiple overflows were discovered in the XFree86-Misc, XInput-Misc, TOG-CUP, EVI, and MIT-SHM extensions which did not correctly validate function arguments. An authenticated attacker could send specially crafted requests and gain root privileges. CVE-2007-5760, CVE-2007-6427, CVE-2007-6428,...

Security fix for the ALT Linux 10 package xorg-server version 2:1.4.0.90-alt5

Jan. 17, 2008 Valery Inozemtsev 2:1.4.0.90-alt5 - fixed CVE-2007-5760, CVE-2007-6427, CVE-2007-6428, CVE-2007-6429, CVE-2008-0006...

Important: xorg-x11-server security update

1.1.1-48.26.4.0.1 - Add Enterprise Linux detection 1.1.1-48.26.4 - cve-2007-5760.patch: XFree86-Misc Extension Invalid Array Index Vulnerability - cve-2007-5958.patch: Xorg / XFree86 file existence disclosure vulnerability - cve-2007-6427.patch: XInput Extension Memory Corruption Vulnerability -...

CVE-2006-5760

CVE-2006-5760 involves multiple PHP remote file inclusion vulnerabilities in phpDynaSite 3.2.2 and earlier . The flaw allows an attacker to cause arbitrary PHP code execution by supplying a crafted URL in the racine parameter to any of the following scripts: function_log.php , function_balise_url...