VMware vielib.dll StartProcess command execution

Added: 09/25/2007 CVE: CVE-2007-4058 BID: 25118 OSVDB: 42078 Background VMware is a suite of products supporting the creation and operation of virtual machines , which are self-contained, independent guest operating systems running within a host operating system. Problem The StartProcess function...

Remote code execution

PHP before 5.2.3 allows context-dependent attackers to cause a denial of service application crash via 1 a long string in the pattern parameter to the glob function; or 2 a long string in the string parameter to the fnmatch function, accompanied by a pattern parameter value with undefined...

CVE-2007-4784

The setlocale function in PHP before 5.2.4 allows context-dependent attackers to cause a denial of service application crash via a long string in the locale parameter. NOTE: this might not be a vulnerability in most web server environments that support multiple threads, unless this issue can be...

Low: gdb security and bug fix update

6.3.0.0-1.143 - Fix unhandled race cases of exec from threaded program BZ 202689. - Add testcase for exec from threaded program BZ 202689. 6.3.0.0-1.142 - Fixed zombie threads regression from the stale threads crash fix BZ 195429. 6.3.0.0-1.141 - Fix bogus 0x0 unwind of the thread's topmost...

Moderate: gcc security and bug fix update

3.4.6-8.0.1 - add gcc34-pr23591-tls-model-fix.patch - this patch fixes a bug with exception handlers and threads 3.4.6-8 - add gnu.java.util.ZoneInfo class, use tzdata files for libgcj timezone stuff instead of builtin simple and outdated rules 227884 - add missing @GCC4.0.0 and @GCC4.2.0 libgcc...

PHP 45 - Executor Deep Recursion Remote Denial of Service

PHP 45 - Executor Deep Recursion Remote Denial of Service source: https://www.securityfocus.com/bid/22766/info PHP is prone to a denial-of-service vulnerability because it fails to properly sanitize user-supplied input. An attacker with permissions to execute PHP code on an affected computer may...

VERITAS NetBackup bpcd daemon command chaining vulnerability

Added: 02/16/2007 CVE: CVE-2006-4902 BID: 21565 OSVDB: 31334 Background VERITAS NetBackup is a backup and recovery solution for multiple platforms. Problem The NetBackup bpcd daemon fails to properly validate chained commands. A remote attacker could execute arbitrary commands by appending the...

Code injection

BEA WebLogic Server 6.1 through 6.1 SP7, 7.0 through 7.0 SP6, 8.1 through 8.1 SP5, and 9.0 allows remote attackers to cause a denial of service server hang via certain requests that cause muxer threads to block when processing error pages...

CVE-2007-0414: Undefined Security Weakness

BEA WebLogic Server 6.1 through 6.1 SP7, 7.0 through 7.0 SP6, 8.1 through 8.1 SP5, and 9.0 allows remote attackers to cause a denial of service server hang via certain requests that cause muxer threads to block when processing error pages...

MS Windows NtRaiseHardError Csrss.exe Memory Disclosure Exploit

No description provided by source. ///////////////////////////////////////// ///////////////////////////////////////// ///// Microsoft Windows NtRaiseHardError ///// Csrss.exe memory disclosure ///////////////////////////////////////// ///// Ruben Santamarta ///// ruben at reversemode dot com ///...

CVE-2006-6418

Buffer overflow in the POSIX Threads library libpthread on HP Tru64 UNIX 4.0F PK8, 4.0G PK4, and 5.1A PK6 allows local users to gain root privileges via a long PTHREADCONFIG environment variable...

CVE-2006-6418

Buffer overflow in the POSIX Threads library libpthread on HP Tru64 UNIX 4.0F PK8, 4.0G PK4, and 5.1A PK6 allows local users to gain root privileges via a long PTHREADCONFIG environment variable...

CVE-2006-6418

CVE-2006-6418 refers to a buffer overflow in the POSIX Threads library (libpthread) on HP Tru64 UNIX, affecting 4.0F PK8, 4.0G PK4, and 5.1A PK6. The vulnerability arises from a long PTHREAD_CONFIG environment variable and allows local users to gain root privileges. This is a local-privilege-esca...

CVE-2006-6418: Improper Restriction of Operations within the Bounds of a Memory Buffer

Buffer overflow in the POSIX Threads library libpthread on HP Tru64 UNIX 4.0F PK8, 4.0G PK4, and 5.1A PK6 allows local users to gain root privileges via a long PTHREADCONFIG environment variable...

HP Tru64 4.0/5.1 - POSIX Threads Library Privilege Escalation

source: https://www.securityfocus.com/bid/21035/info HP Tru64 is prone to a local privilege-escalation vulnerability. Exploiting this issue allows local attackers to execute arbitrary code with superuser privileges. Successful exploits will result in a complete compromise of vulnerable computers...

HP Tru64 4.05.1 - POSIX Threads Library Privilege Escalation

HP Tru64 4.05.1 - POSIX Threads Library Privilege Escalation source: https://www.securityfocus.com/bid/21035/info HP Tru64 is prone to a local privilege-escalation vulnerability. Exploiting this issue allows local attackers to execute arbitrary code with superuser privileges. Successful exploits...

CVE-2006-4105

Cross-site scripting XSS vulnerability in Fill Threads Database FTD 3.7.3 allows remote attackers to inject arbitrary web script or HTML via the 1 search field or 2 an e-mail message...

CVE-2006-4105

Cross-site scripting XSS vulnerability in Fill Threads Database FTD 3.7.3 allows remote attackers to inject arbitrary web script or HTML via the 1 search field or 2 an e-mail message...

CVE-2006-4105

CVE-2006-4105 concerns a Cross-site Scripting (XSS) vulnerability in Fill Threads Database (FTD) version 3.7.3. The issue allows remote attackers to inject arbitrary web script or HTML through two vectors: the search field and an e-mail message. The provided documents confirm the affected product...

CVE-2006-4105: Undefined Security Weakness

Cross-site scripting XSS vulnerability in Fill Threads Database FTD 3.7.3 allows remote attackers to inject arbitrary web script or HTML via the 1 search field or 2 an e-mail message...