CVE-2007-2041: Undefined Security Weakness

Cisco Wireless LAN Controller WLC before 4.0.206.0 saves the WLAN ACL configuration with an invalid checksum, which prevents WLAN ACLs from being loaded at boot time, and might allow remote attackers to bypass intended access restrictions, aka Bug ID CSCse58195...

CVE-2007-1893

CVE-2007-1893 affects WordPress 2.1.2 and earlier: remote authenticated users with the contributor role can bypass access restrictions to invoke publish_posts and publish a previously saved post. Connected advisories indicate this issue was addressed in Debian security updates (DSA-1285-1) with f...

Design/Logic Flaw

CruiseWorks 1.09e and earlier does not properly restrict user access to certain privileged actions, which allows local users to change the configuration or have other unspecified impact. NOTE: some of these details are obtained from third party information...

CVE-2007-1782

CruiseWorks 1.09e and earlier does not properly restrict user access to certain privileged actions, which allows local users to change the configuration or have other unspecified impact. NOTE: some of these details are obtained from third party information...

CVE-2007-1781

CVE-2007-1781 affects Minna De Office 1.x and 2.x, where user access restrictions are not properly enforced for certain privileged actions. A local user can potentially change configurations or cause other unspecified impacts due to inadequate privilege separation. The vulnerability is described ...

JVN#73258608 CruiseWorks and Minna De Office vulnerable in access restrictions

Impact An user with a standard privilege who logs into CruiseWorks or Minna De Office could possibly change the system configurations or information registered. Solution Products Affected CruiseWorks 1.09e and earlier Minna De Office version 1.xx and 2.xx For more information, refer to the vendor...

PT-2007-2871 · Oscommerce · Php Point Of Sale For Oscommerce

Name of the Vulnerable Software and Affected Versions: PHP Point Of Sale for osCommerce version 1.1 Description: The issue allows remote attackers to include and execute arbitrary local files via a .. dot dot in the cfg language parameter in index.php. However, it's noted that this issue has been...

CVE-2007-1338: Undefined Security Weakness

The default configuration of the AirPort utility in Apple AirPort Extreme creates an IPv6 tunnel but does not enable the "Block incoming IPv6 connections" setting, which might allow remote attackers to bypass intended access restrictions by establishing IPv6 sessions that would have been rejected...

Secure site - Access bypass

Secure site allows one to protect a website with a browser-based password. These usernames and passwords are tied directly to the Drupal user database. The site will be invisible to search engines and other crawlers, but still allows access to certain users. A serious design flaw allows the acces...

Aruba Mobility Controller vulnerable to privilege escalation

Overview The Aruba Mobility Controller Management Interface contains a privilege escalation vulnerability. This vulnerability may allow a remote attacker to execute arbitrary code on a vulnerable system. Description The Aruba Mobility Controllers are used to process and control network traffic in...

PT-2007-1273 · Ozzywork · Ozzywork Gallery

Name of the Vulnerable Software and Affected Versions: OzzyWork Gallery versions 2.0 and earlier Description: The issue concerns an unrestricted file upload vulnerability. This allows remote attackers to upload and execute arbitrary ASP files by bypassing client-side security checks...

Cisco IOS fails to properly process TCP packets

Overview The Cisco IOS Transmission Control Protocol listener contains a memory leak. Description Cisco IOS is an operating system that is used on Cisco network devices. The Cisco IOS software can run Transmission Control Protocol TCP servers that allow administrators to connect to the devices fo...

PT-2007-1854 · Alt N · Wdaemon +1

Name of the Vulnerable Software and Affected Versions: WDaemon version 9.5.4 Description: The issue allows remote attackers to access the "/WorldClient.dll" URI on TCP port 3000, which has unknown impact. The vendor has responded by stating that this is not considered a security bug...

PT-2007-1569 · Microsoft · Windows Nt Message Compiler

Name of the Vulnerable Software and Affected Versions: Windows NT Message Compiler version 1.00.5239 Description: A buffer overflow issue in the Windows NT Message Compiler allows local users to potentially gain privileges via a long MC-filename. However, this issue has been disputed by a reliabl...

Cahier de texte 2.2 - Bypass General Access Protection

Cahier de texte 2.2 - Bypass General Access Protection 'Administrateur' header"Location: ../index.php"; ; else header"Location: ../index.php";? ... / if!isset$GET'host' || empty$GET'host' headers; if!isset$GET'wanted' $wanted = 'index.php'; $host = $GET'host'; $prox = $GET'prox'; $path =...

Cahier de texte 2.2 - Bypass General Access Protection

'Administrateur' header"Location: ../index.php"; ; else header"Location: ../index.php";? ... / if!isset$GET'host' || empty$GET'host' headers; if!isset$GET'wanted' $wanted = 'index.php'; $host = $GET'host'; $prox = $GET'prox'; $path = $GET'path'; echo...

Symantec Veritas NetBackup bpcd.exe CONNECT_OPTIONS buffer overflow

Overview Symantec Veritas NetBackup contains a buffer overflow vulnerability, which may allow a remote, unauthenticated attacker to execute arbitrary code on a vulnerable system. Description Symantec VERITAS NetBackup is a client/server based backup software solution. The NetBackup bpcd daemon is...

CVE-2006-6467

CVE-2006-6467 affects Xerox WorkCentre and WorkCentre Pro before 12.050.03.000, 13.x before 13.050.03.000, and 14.x before 14.050.03.000. The issue is improper restriction of access to SMB file resources, allowing remote attackers to gain unspecified file or directory access through the SMB Homes...

CVE-2006-5778: Undefined Security Weakness

ftpd in linux-ftpd 0.17, and possibly other versions, performs a chdir before setting the UID, which allows local users to bypass intended access restrictions by redirecting their home directory to a restricted directory...

Apache mod_tcl module contains a format string error

Overview A format string vulnerability exists in the modtcl Apache module. This vulnerability may allow a remote attacker to execute arbitrary code. Description The Apache HTTP Server, also known as httpd, is an open-source HTTP server that runs on Microsoft Windows, Linux, Unix, and Apple OS X...