4399 matches found
MDKA-2007:090 : bind
A number of bugs in the BIND9 packages are fixed in this update: Threading was disabled in the ISC BIND package shipped with Mandriva Linux 2007 and Corporate Server 4, because the host command did not work properly with threading enabled. This update only builds the host command without threadin...
Design/Logic Flaw
JFFS2, as used on One Laptop Per Child OLPC build 542 and possibly other Linux systems, when POSIX ACL support is enabled, does not properly store permissions during 1 inode creation or 2 ACL setting, which might allow local users to access restricted files or directories after a remount of a...
CVE-2007-4849
JFFS2, as used on One Laptop Per Child OLPC build 542 and possibly other Linux systems, when POSIX ACL support is enabled, does not properly store permissions during 1 inode creation or 2 ACL setting, which might allow local users to access restricted files or directories after a remount of a...
CVE-2007-4849
JFFS2, as used on One Laptop Per Child OLPC build 542 and possibly other Linux systems, when POSIX ACL support is enabled, does not properly store permissions during 1 inode creation or 2 ACL setting, which might allow local users to access restricted files or directories after a remount of a...
CVE-2007-4849
JFFS2, as used on One Laptop Per Child OLPC build 542 and possibly other Linux systems, when POSIX ACL support is enabled, does not properly store permissions during 1 inode creation or 2 ACL setting, which might allow local users to access restricted files or directories after a remount of a...
CVE-2007-4849
The CVE-2007-4849 entry concerns JFFS2 on OLPC build 542 (and possibly other Linux systems) when POSIX ACL support is enabled. It describes a flaw where permissions may not be stored correctly during inode creation or ACL setting, caused by an inconsistency between dentry permissions and inode pe...
RHEL 3 / 4 / 5 : star (RHSA-2007:0873)
An updated star package that fixes a path traversal flaw is now available. This update has been rated as having moderate security impact by the Red Hat Security Response Team. Star is a tar-like archiver. It saves multiple files into a single tape or disk archive, and can restore individual files...
CentOS 3 / 4 / 5 : star (CESA-2007:0873)
An updated star package that fixes a path traversal flaw is now available. This update has been rated as having moderate security impact by the Red Hat Security Response Team. Star is a tar-like archiver. It saves multiple files into a single tape or disk archive, and can restore individual files...
[SECURITY] Fedora 7 Update: star-1.5a84-2.fc7
Star saves many files together into a single tape or disk archive, and can restore individual files from the archive. Star supports ACL...
ZoneAlarm产品多个本地权限提升漏洞
BUGTRAQ ID: 25365 CVECAN ID: CVE-2007-4216,CVE-2005-2932 ZoneAlarm是一款个人电脑防火墙，能保护个人数据和隐私安全。 ZoneAlarm的实现和安装上存在多个安全漏洞，本地攻击者可能利用此漏洞提升自己的权限。 ZoneAlarm产品vsdatant.sys设备驱动的IOCTL处理代码没有验证传送给IOCTL 0x8400000F和IOCTL...
iDefense Security Advisory 08.20.07: Check Point Zone Labs Multiple Products Privilege Escalation Vulnerability
Check Point Zone Labs Multiple Products Privilege Escalation Vulnerability iDefense Security Advisory 08.20.07 http://labs.idefense.com/intelligence/vulnerabilities/ Aug 20, 2007 I. BACKGROUND Zone Alarm products provide security solutions such as anti-virus, firewall, spy-ware, and ad-ware...
Microsoft Vista侧栏RSS源小工具跨站脚本漏洞（MS07-048）
BUGTRAQ ID: 25287 CVECAN ID: CVE-2007-3033 Vista是微软发布的最新的操作系统。 Vista侧栏中的RSS源小工具中存在漏洞，远程攻击者可能利用此漏洞导致跨站脚本执行。 在解析RSS源中的某些单元时，可能会渲染单元中特制的HTML标签，导致注入JavaScript脚本。由于RSS源小工具是在本地区域中运行的，因此所注入的脚本可以获得对系统的完全访问。 Microsoft Windows Vista 临时解决方法： 卸载或禁用源标题小工具 在“组策略”或注册表中禁用侧栏 修改gadget.xml上的访问控制列表以增加限制： 1...
rPSA-2007-0161-1 dovecot
rPath Security Advisory: 2007-0161-1 Published: 2007-08-14 Products: rPath Linux 1 Rating: Minor Exposure Level Classification: Remote User Deterministic Privilege Escalation Updated Versions: dovecot=/conary.rpath.com@rpl:devel//1/1.0.3-0.1-1 References: https://vulners.com/cve/CVE-2007-4211...
Command injection
The ACL plugin in Dovecot before 1.0.3 allows remote authenticated users with the insert right to save certain flags via a 1 COPY or 2 APPEND command...
CVE-2007-4211
The ACL plugin in Dovecot before 1.0.3 allows remote authenticated users with the insert right to save certain flags via a 1 COPY or 2 APPEND command...
DEBIAN-CVE-2007-4211
The ACL plugin in Dovecot before 1.0.3 allows remote authenticated users with the insert right to save certain flags via a 1 COPY or 2 APPEND command...
CVE-2007-4211
The ACL plugin in Dovecot before 1.0.3 allows remote authenticated users with the insert right to save certain flags via a 1 COPY or 2 APPEND command...
CVE-2007-4211
The ACL plugin in Dovecot before 1.0.3 allows remote authenticated users with the insert right to save certain flags via a 1 COPY or 2 APPEND command...
CVE-2007-4211
The ACL plugin in Dovecot before 1.0.3 allows remote authenticated users with the insert right to save certain flags via a 1 COPY or 2 APPEND command...
CVE-2007-4211
CVE-2007-4211 affects Dovecot’s ACL plugin prior to version 1.0.3, where remote authenticated users with insert rights could use COPY or APPEND to set additional flags. The connected advisories indicate remediation by upgrading Dovecot (e.g., to 1.0.7 in various Linux distributions such as Miracl...