JVN#64851600 Apache Tomcat sample web application cross-site scripting vulnerability

Apache Tomcat from the Apache Software Foundation is an implementation of the Java Servlet and JavaServer Page JSP technologies. jsp-examples, a sample web application included in Apache Tomcat, contains a cross-site scripting vulnerability. Impact An arbitrary script may be executed on the user'...

CVE-2007-2449.txt

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 CVE-2007-2449: Apache Tomcat XSS vulnerabilities in the JSP examples Severity: low cross-site scripting Vendor: The Apache Software Foundation Versions Affected: Tomcat 4.0.0 to 4.0.6 Tomcat 4.1.0 to 4.1.36 Tomcat 5.0.0 to 5.0.30 Tomcat 5.5.0 to 5.5.2...

iDefense Security Advisory 06.14.07: Apache MyFaces Tomahawk JSF Framework Cross-Site Scripting (XSS) Vulnerability

Apache MyFaces Tomahawk JSF Framework Cross-Site Scripting XSS Vulnerability iDefense Security Advisory 06.14.07 http://labs.idefense.com/intelligence/vulnerabilities/ Jun 14, 2007 I. BACKGROUND Java Server Faces, JSF, is a framework used to create server side GUI Web applications. It is comparab...

[Full-disclosure] [CVE-2007-2449] Apache Tomcat XSS vulnerabilities in the JSP examples

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 CVE-2007-2449: Apache Tomcat XSS vulnerabilities in the JSP examples Severity: low cross-site scripting Vendor: The Apache Software Foundation Versions Affected: Tomcat 4.0.0 to 4.0.6 Tomcat 4.1.0 to 4.1.36 Tomcat 5.0.0 to 5.0.30 Tomcat 5.5.0 to 5.5.2...

Microsoft Windows Animated Cursor Stack Overflow Exploit

No description provided by source. !/usr/bin/env python $Id: win32-loadaniicon.py 4 2007-06-02 00:47:59Z ramon $ Windows Animated Cursor Stack Overflow Exploit Copyright 2007 Ramon de Carvalho Valle [email protected], RISE Security [email protected] This program is free software; you...

Symantec VERITAS Storage Foundation multiple security vulnerabilities

DoS via resource consumption against TCP/8199 administrative service. VxSchedService.exe TCP/4888 scheduler service authentication bypass and code execution...

CVE-2007-2279

The Scheduler Service VxSchedService.exe in Symantec Storage Foundation for Windows 5.0 allows remote attackers to bypass authentication and execute arbitrary code via certain requests to the service socket that create 1 PreScript or 2 PostScript registry values under...

Authentication flaw

The Scheduler Service VxSchedService.exe in Symantec Storage Foundation for Windows 5.0 allows remote attackers to bypass authentication and execute arbitrary code via certain requests to the service socket that create 1 PreScript or 2 PostScript registry values under...

CVE-2007-2279

The Scheduler Service VxSchedService.exe in Symantec Storage Foundation for Windows 5.0 allows remote attackers to bypass authentication and execute arbitrary code via certain requests to the service socket that create 1 PreScript or 2 PostScript registry values under...

CVE-2007-2279

The CVE-2007-2279 issue affects Symantec Veritas Storage Foundation for Windows Volume Manager Scheduler Service (VxSchedService.exe) in v5.0 (including 5.0 RP1a and 5.1). The vulnerability enables an unauthenticated remote attacker to bypass authentication and execute arbitrary code by sending c...

Symantec Storage Foundation VxSchedService.EXE调度服务验证绕过漏洞

Symantec Storage Foundation是一款应用广泛的存储管理平台。 Symantec Storage Foundation包含的调度服务存在验证绕过和任意代码执行问题，远程攻击者可以利用漏洞以进程权限执行任意指令，控制目标系统。 攻击者可以直接连接调度服务套接字绕过管理控制台的内置验证程序，以应用程序进程权限执行任意指令。目前没有详细漏洞细节提供。 Symantec Foundation for Windows 5.0 可参考安全公告获得补丁信息：...

Symantec Veritas Storage Foundation Scheduler Service (VxSchedService.exe) Remote Code Execution

The remote host is running a version of Symantec Storage Foundation for Windows that is vulnerable to a remote scheduler service access. An attacker may exploit this flaw to modify or create scheduled commands and gain a full access to the system. To exploit this flaw, an attacker would need to...

iDefense Security Advisory 06.01.07: Symantec VERITAS Storage Foundation Administration Service DoS Vulnerability

Symantec VERITAS Storage Foundation Administration Service DoS Vulnerability iDefense Security Advisory 06.01.07 http://labs.idefense.com/intelligence/vulnerabilities/ June 01, 2007 I. BACKGROUND The VERITAS Storage Foundation is made up of the Veritas File System, Veritas Volume Replicator VVR...

GNU Findutils release 4.2.31 fixes CVE-2007-2452 (GNU locate heap buffer overrun)

$Revision: 1.4 $; $Date: 2007/05/30 22:04:52 $ I. BACKGROUND ============= GNU findutils is a set of programs which search for files on Unix-like systems. It is maintained by the GNU Project of the Free Software Foundation. For more information, see http://www.gnu.org/software/findutils. II...

Mozilla Foundation Security Advisory 2007-11

Mozilla Foundation Security Advisory 2007-11 Title: FTP PASV port-scanning Impact: Low Announced: March 20, 2007 Reporter: [email protected] Products: Firefox, SeaMonkey Fixed in: Firefox 2.0.0.3 Firefox 1.5.0.11 Description The FTP protocol includes the PASV passive command which is used by...

Mozilla Foundation Security Advisory 2007-15

Title: Security Vulnerability in APOP Authentication Impact: Moderate Announced: May 30, 2007 Reporter: Gatan Leurent Products: Thunderbird, SeaMonkey Fixed in: Thunderbird 1.5.0.12 Thunderbird 2.0.0.4 SeaMonkey 1.0.9 SeaMonkey 1.1.2 Description Gatan Leurent informed us of a weakness in APOP...

CVE-2007-1355.txt

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 CVE-2007-1355: Tomcat documentation XSS vulnerabilities Severity: Moderate Cross-site scripting Vendor: The Apache Software Foundation Versions Affected: Tomcat 4.0.0 to 4.0.6 Tomcat 4.1.0 to 4.1.36 Tomcat 5.0.0 to 5.0.30 Tomcat 5.5.0 to 5.5.23 Tomcat...

[CVE-2007-1355] Tomcat documentation XSS vulnerabilities

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 CVE-2007-1355: Tomcat documentation XSS vulnerabilities Severity: Moderate Cross-site scripting Vendor: The Apache Software Foundation Versions Affected: Tomcat 4.0.0 to 4.0.6 Tomcat 4.1.0 to 4.1.36 Tomcat 5.0.0 to 5.0.30 Tomcat 5.5.0 to 5.5.23 Tomcat...

Mozilla Foundation Security Advisory 2007-10

Mozilla Foundation Security Advisory 2007-10 Title: Potential integer overflow with text/enhanced mail Impact: Critical Fix released: March 1, 2007 Reporter: Georgi Guninski Products: Thunderbird, SeaMonkey Fixed in: Thunderbird 1.5.0.10 SeaMonkey 1.0.8 Description Georgi Guninski discovered a...

Mozilla Foundation Security Advisory 2007-09

Mozilla Foundation Security Advisory 2007-09 Title: Privilege escalation by setting img.src to javascript: URI Impact: Critical Announced: March 5, 2007 Reporter: mozbugra4 Products: Firefox 1.5.0.9/2.0.0.1, SeaMonkey 1.0.7 Fixed in: Firefox 2.0.0.2 Firefox 1.5.0.10 SeaMonkey 1.1.1 SeaMonkey 1.0....