Security Bulletin: Multiple Security Vulnerabilities in Apache Geronimo Affect IBM Sterling B2B Integrator

Summary Multiple Security Vulnerabilities in Apache Geronimo Affect IBM Sterling B2B Integrator Vulnerability Details CVEID: CVE-2008-0732 DESCRIPTION: Apache Geronimo could allow a local attacker to obtain sensitive information, caused by the init script following symlinks during a chown...

CVE-2007-6758

Server-side request forgery SSRF vulnerability in feed-proxy.php in extjs 5.0.0...

CVE-2007-6758

CVE-2007-6758 describes a Server-Side Request Forgery (SSRF) in feed-proxy.php of ExtJS 5.0.0. Affected component/file: feed-proxy.php; root cause not detailed in available documents beyond SSRF. Impact semantics: CVSS v2 base score 5.0 (MEDIUM) and CVSS v3.1 base score 7.5 (HIGH) with Network ac...

CVE-2007-6070

...

CVE-2007-6070

This CVE ID is rejected and not an active vulnerability entry.

CVE-2007-4773

Systrace before 1.6.0 has insufficient escape policy enforcement...

CVE-2007-4774

CVE-2007-4774 concerns the Linux kernel prior to 2.4.36-rc1, where a race condition can bypass systrace policies by flooding a ptraced process with SIGCONT signals, potentially waking a PTRACED process. The documentation consistently describes this as a policy bypass rather than a broader impact ...

Solaris 10 (x86) : 125280-07

CDE 1.6x86: dtsession patch. Date this patch was last updated by Sun : Jan/13/20 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include"compat.inc"; if description scriptid132898; scriptversion"1.2"; scriptcvsdate"Date:...

Solaris 10 (sparc) : 125279-07

CDE 1.6: dtsession patch. Date this patch was last updated by Sun : Jan/13/20 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include"compat.inc"; if description scriptid132891; scriptversion"1.2"; scriptcvsdate"Date:...

CVE-2007-0158

thttpd 2007 has buffer underflow...

CVE-2007-0158

CVE-2007-0158 affects thttpd 2007. Multiple connected entries describe a buffer-related issue in thttpd (description consistently states a buffer underflow/overflow in 2007). NVD CVSS metrics indicate a network-accessible vulnerability with high impact to confidentiality, integrity, and availabil...

CVE-2007-5743

creationtimestamp| type| source ---|---|--- 2019-11-08 00:28:07+00:00| seen| https://t.me/cibsecurity/7985 2024-02-05 13:17:23+00:00| seen| https://t.me/ctinow/179180...

CVE-2007-6745

clamav 0.91.2 suffers from a floating point exception when using ScanOLE2...

CVE-2007-6745

The connected records confirm CVE-2007-6745 affects ClamAV v0.91.2 and is triggered by ScanOLE2, causing a floating point exception. The sources consistently describe the issue as a crash condition in this specific version when using the OLE2 scanning path. No concrete root-cause analysis or patc...

CVE-2007-5743

CVE-2007-5743 affects viewvc 1.0.3 and allows improper access control to files in a repository when using the "forbidden" configuration option. NVD lists CVSS‑2 base 4.3 (Network, Medium) and CVSS‑3.1 base 7.5 (Network, Low‑Impact? actually C:H I:N A:N) with confidentiality impact High; other imp...

CVE-2007-3915

CVE-2007-3915 affects Mondo 2.24, with an insecure handling of temporary files identified as the underlying issue. The connected documents corroborate this vulnerability description across multiple sources (NVD, Red Hat, Ubuntu, Debian, etc.). The available details do not specify affected file pa...

CVE-2007-3732

The CVE-2007-3732 issue affects Linux 2.6 up to before 2.6.23, involving the TRACE_IRQS_ON function in iret_exc. The root cause is calling a C function without ensuring that processor segments are correctly set, specifically failing to restore the kernel %fs before the call and before enabling in...

Design/Logic Flaw

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2007-3947. Reason: This candidate is a reservation duplicate of CVE-2007-3947. Notes: All CVE users should reference CVE-2007-3947 instead of this candidate. All references and descriptions in this candidate have been removed to...

CVE-2007-2841

CVE-2007-2841 is rejected and not an active vulnerability entry; reference CVE-2007-3947 instead.

CVE-2007-0899

This CVE concerns a heap overflow in libclamav/fsg.c and is associated with ClamAV prior to version 0.100.0. The vulnerability affects the fsg.c component in the ClamAV codebase and is described as a possible heap overflow before 0.100.0. The available connected documents do not provide explicit ...