CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

seebug.org•added 2007/10/13 12:0 a.m.•21 views

Sun Solaris可信扩展标签服务本地拒绝服务漏洞

Sun Solaris是一款商业性质的操作系统。 Sun Solaris 10可信扩展标签服务存在两个安全问题，本地攻击者可以利用漏洞使服务停止响应，导致拒绝服务攻击。当此问题触发时，所有存在的可信桌面会话会挂起，非特权用户不能登录受影响的可信系统，目前没有详细漏洞细节提供。 Sun Solaris 10x86 Sun Solaris 10sparc 补丁下载： Sun Solaris 10sparc Sun Sun Solaris Patch 126448-04 SPARC...

7.1AI score

Prion•added 2007/09/21 7:17 p.m.•18 views

Design/Logic Flaw

Dibbler 0.6.0 on Linux uses weak world-writable permissions for unspecified files in /var/lib/dibbler, which has unknown impact and local attack vectors...

7.5CVSS7AI score0.01399EPSS

Exploits0References1Affected Software1

UbuntuCve•added 2007/09/21 7:17 p.m.•33 views

CVE-2007-5028

Dibbler 0.6.0 on Linux uses weak world-writable permissions for unspecified files in /var/lib/dibbler, which has unknown impact and local attack vectors...

7.5CVSS5.9AI score0.01399EPSS

OSV•added 2007/09/21 7:17 p.m.•5 views

CVE-2007-5028

Dibbler 0.6.0 on Linux uses weak world-writable permissions for unspecified files in /var/lib/dibbler, which has unknown impact and local attack vectors...

6.3AI score

OSV•added 2007/09/21 7:17 p.m.•4 views

DEBIAN-CVE-2007-5028

Dibbler 0.6.0 on Linux uses weak world-writable permissions for unspecified files in /var/lib/dibbler, which has unknown impact and local attack vectors...

7.5CVSS6.8AI score0.01399EPSS

NVD•added 2007/09/21 7:17 p.m.•20 views

CVE-2007-5028

Dibbler 0.6.0 on Linux uses weak world-writable permissions for unspecified files in /var/lib/dibbler, which has unknown impact and local attack vectors...

7.5CVSS6.5AI score0.01399EPSS

Cvelist•added 2007/09/21 6:0 p.m.•21 views

CVE-2007-5028

Dibbler 0.6.0 on Linux uses weak world-writable permissions for unspecified files in /var/lib/dibbler, which has unknown impact and local attack vectors...

6.5AI score0.01399EPSS

CVE•added 2007/09/21 6:0 p.m.•61 views

CVE-2007-5028

CVE-2007-5028 affects Dibbler 0.6.0 on Linux. The issue is weak world-writable permissions for unspecified files in /var/lib/dibbler, with unknown impact and local attack vectors. Public documents from NVD, Red Hat, Ubuntu, Debian, OSV, and others corroborate the weak-permission description; no c...

7.5CVSS6.5AI score0.01399EPSS

Exploits0References1Affected Software1

Debian CVE•added 2007/09/21 6:0 p.m.•23 views

CVE-2007-5028

Dibbler 0.6.0 on Linux uses weak world-writable permissions for unspecified files in /var/lib/dibbler, which has unknown impact and local attack vectors...

7.5CVSS6.3AI score0.01399EPSS

exploitpack•added 2007/09/21 12:0 a.m.•47 views

Linux Kernel 2.6.x - ALSA snd-page-alloc Local Proc File Information Disclosure

Linux Kernel 2.6.x - ALSA snd-page-alloc Local Proc File Information Disclosure / source: https://www.securityfocus.com/bid/25774/info / The Linux kernel is prone to a local privilege-escalation vulnerability. Exploiting this issue may allow local attackers to gain elevated privileges, facilitati...

2.1CVSS6.1AI score0.00761EPSS

Exploits4

seebug.org•added 2007/09/20 12:0 a.m.•165 views

VMware Workstation 6.0多个安全漏洞

BUGTRAQ ID: 25728,25729,25731,25732 CVECAN ID: CVE-2007-0061,CVE-2007-0062,CVE-2007-0063,CVE-2007-4059,CVE-2007-4155,CVE-2007-4496,CVE-2007-4497 VMWare是一款虚拟PC软件，允许在一台机器上同时运行两个或多个Windows、DOS、LINUX系统。 VMWare的实现上存在多个安全漏洞，可导致多种威胁。具体如下： 1 VMWare的DHCP服务器可被恶意网页用来获取系统权限。 2...

10CVSS6.4AI score0.20413EPSS

Exploits2

seebug.org•added 2007/09/12 12:0 a.m.•35 views

Microsoft Windows Services for UNIX本地权限提升漏洞（MS07-053）

BUGTRAQ ID: 25620 CVECAN ID: CVE-2007-3036 Microsoft Windows是微软发布的非常流行的操作系统。 Windows操作系统所安装的Windows Services for UNIX和基于UNIX的应用程序子系统组件没有正确的处理setuid二进制程序，本地攻击者可以登录到系统并运行特制的setuid二进制程序获得权限提升。 Microsoft Windows Services for UNIX 3.0 - Microsoft Windows XP SP2 - Microsoft Windows Server 2003 SP2 -...

6.9CVSS6.3AI score0.02398EPSS

seebug.org•added 2007/08/29 12:0 a.m.•139 views

Apache HTTP Server Worker进程多个本地拒绝服务漏洞

BUGTRAQ ID: 24215 CVECAN ID: CVE-2007-3304 Apache HTTP Server是一款流行的Web服务器。 Apache HTTP Server Worker进程实现上存在多个漏洞，本地攻击者可能利用这些漏洞导致服务不可用。在发送信号之前Apache HTTP Server没有验证进程为Apache子进程。能够在Apache HTTP Server上运行脚本的本地攻击者可以控制记分板并终止任意进程，导致拒绝服务。如果Apache httpd安装了Prefork...

4.7CVSS9.2AI score0.03298EPSS

Exploits2

Cvelist•added 2007/08/25 12:0 a.m.•14 views

CVE-2007-4536

TorrentTrader 1.07 and earlier sets insecure permissions for files in the root directory, which allows attackers to execute arbitrary PHP code by modifying 1 disclaimer.txt, 2 sponsors.txt, and 3 banners.txt, which are used in an include call. NOTE: there might be local attack vectors that extend...

7.2AI score0.00322EPSS

Exploits0References5

seebug.org•added 2007/08/19 12:0 a.m.•49 views

IBM DB2 Universal Database多个本地安全漏洞

BUGTRAQ ID: 25339 CVECAN ID: CVE-2007-4270,CVE-2007-4271,CVE-2007-4272,CVE-2007-4273,CVE-2007-4275,CVE-2007-4276 IBM DB2是一个大型的商业关系数据库系统，面向电子商务、商业资讯、内容管理、客户关系管理等应用，可运行于AIX、HP-UX、Linux、Solaris、Windows等系统。 IBM DB2的多个工具实现上存在漏洞，本地攻击者可能利用这些漏洞提升自己的权限。 IBM...

6.9CVSS6.4AI score0.00499EPSS

seebug.org•added 2007/08/10 12:0 a.m.•18 views

IBM AIX rmpvc工具本地缓冲区溢出漏洞

BUGTRAQ ID: 25217 IBM AIX是一款商业性质的UNIX操作系统。 IBM AIX的rmpvc工具在处理命令行参数时存在缓冲区溢出漏洞，本地攻击可能利用此漏洞导致系统崩溃。如果执行rmpvc -l port logical name命令时，logical namel参数超过16个字符的话，就可以触发这个溢出，导致系统崩溃。 IBM AIX 4.3 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载：...

6.9AI score

seebug.org•added 2007/08/08 12:0 a.m.•34 views

GNOME显示管理器G_Strsplit函数本地拒绝服务漏洞

BUGTRAQ ID: 25191 CVE ID:CVE-2007-3381 CNCVE ID:CNCVE-20073381 GNOME Display Manager是Gnome的显示管理器。 GNOME Display Manager GStrsplit函数不正确处理GDM套接字命令，本地攻击者可以利用漏洞对应用程序进行拒绝服务攻击。构建特殊的GDM报文命令会引起GDM停止管理显示，导致拒绝服务。目前没有详细漏洞细节提供。 GNOME GDM 2.19.4 GNOME GDM 2.19.3 GNOME GDM 2.19.2 GNOME GDM 2.19.1 GNOME GDM...

1.5CVSS6.3AI score0.00327EPSS

seebug.org•added 2007/08/03 12:0 a.m.•40 views

OpenSSL本地密钥信息泄露漏洞

BUGTRAQ ID: 25163 CVECAN ID: CVE-2007-3108 OpenSSL是一种开放源码的SSL实现，用来实现网络通信的高强度加密，现在被广泛地用于各种网络应用程序中。某些RSA的实现上存在可重建密钥的漏洞，OpenSSL基于SSLeay，提供RSA算法的加密支持，本地攻击者可能利用此漏洞通过RSA算法解密加密信息的内容。多种使用了OpenSSL的产品可能受此漏洞影响。 OpenSSL Project OpenSSL 0.9.8e OpenSSL Project OpenSSL 0.9.8d OpenSSL Project OpenSSL 0.9.8c...

1.2CVSS0.00409EPSS