CVE-2007-3386.txt

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 CVE-2007-3386: XSS in Host Manager Severity: Low Cross-site scripting Vendor: The Apache Software Foundation Versions Affected: 6.0.0 to 6.0.13 5.5.0 to 5.5.24 Description: The Host Manager Servlet does not filter user supplied data before display. Th...

Microsoft Outlook高级查找功能远程代码执行漏洞（MS07-003）

Microsoft Outlook是Office套件所捆绑的邮件客户端。 Microsoft Outlook在处理畸形的.oss（Office Saved Searches）文件时存在漏洞，远程攻击者可能利用此漏洞控制用户机器。 攻击者可能通过诱骗用户打开畸形.oss文件利用此漏洞。如果用户使用管理用户权限登录，成功利用此漏洞的攻击者便可完全控制受影响的系统。攻击者可随后安装程序；查看、更改或删除数据；或者创建拥有完全用户权限的新帐户。那些帐户被配置为拥有较少系统用户权限的用户比具有管理用户权限的用户受到的影响要小。 Microsoft Outlook 2003 Microsoft...

Multiple Microsoft Outlook security vulnerabilities

DoS. Buffer overflow on .iCal and .oss files parsing...

Buffer overflow

Buffer overflow in the Advanced Search Finder.exe feature of Microsoft Outlook 2000, 2002, and 2003 allows user-assisted remote attackers to execute arbitrary code via a crafted Outlook Saved Searches OSS file that triggers memory corruption, aka "Microsoft Outlook Advanced Find Vulnerability."...

CVE-2007-0034

Buffer overflow in the Advanced Search Finder.exe feature of Microsoft Outlook 2000, 2002, and 2003 allows user-assisted remote attackers to execute arbitrary code via a crafted Outlook Saved Searches OSS file that triggers memory corruption, aka "Microsoft Outlook Advanced Find Vulnerability."...

CVE-2007-0034

CVE-2007-0034 is a buffer overflow in Microsoft Outlook’s Advanced Find (Office Saved Searches .oss) parsing for Outlook 2000/2002/2003. The vulnerability arises when Outlook processes a specially crafted .oss file, potentially allowing remote code execution with the permissions of the logged-on ...

CVE-2006-5704

HP NonStop Server G06.29, when running Standard Security T6533G06 before T6533G06^ABK, does not properly evaluate access permissions to OSS directories when no optional ACL entry exists, which allows local users to read arbitrary files...

Multiple OSs, routers and firewalls IPSec ISAKMP IKE DoS

Multiple vulnerabilities detected with PROTOS IPSec security scanner...

Mandrake Linux Security Advisory : kernel (MDKSA-2004:029)

A vulnerability was found in the R128 DRI driver by Alan Cox. This could allow local privilege escalation. The previous fix, in MDKSA-2004:015 only partially corrected the problem; the full fix is included CVE-2004-0003. A local root vulnerability was discovered in the isofs component of the Linu...

CVE-2004-0178

The vulnerability lies in the Linux 2.4.x sb16 Sound Blaster driver (OSS) in 16-bit mode; under odd-sized samples it can crash local users. Affects Linux 2.4.x before 2.4.26. Remediation: upgrade to Linux 2.4.26 or newer.

oss-sound-tmp.txt

Date: Thu, 17 Dec 1998 02:12:38 +0200 From: Stefan Laudat Reply-To: Bugtraq List To: [email protected] Subject: OSS nice tmp race Hello all, While digging in the "soundon" script delivered with the OSS package the commercial one, of course, I have discovered something very unusual on line 26...