CVE-2007-1187

WebAPP before 0.9.9.5 allows remote authenticated users, without admin privileges, to obtain sensitive information via 1 the Forum Archive feature and 2 Recent Searches...

CVE-2007-1187

WebAPP before 0.9.9.5 allows remote authenticated users, without admin privileges, to obtain sensitive information via 1 the Forum Archive feature and 2 Recent Searches...

CVE-2007-1187

WebAPP prior to 0.9.9.5 is affected by an information disclosure vulnerability: remote authenticated users without admin privileges can access sensitive information via the Forum Archive feature and Recent Searches. The issue is documented in CVE-2007-1187 with a base impact on confidentiality (P...

Nortel SSL VPN Linux Client 6.0.3 - Local Privilege Escalation

Nortel SSL VPN Linux Client 6.0.3 - Local Privilege Escalation !/bin/sh Nortel SSL VPN Linux Client race condition Jon Hart The Linux client that is utilized by versions priot to 6.05 of the Nortel SSL VPN appliance suffers from a number of problems that, in combination, allow an unprivileged loc...

MDKA-2007:002 : kdeutils

A bug in the kdeutils-ark package prevented the creation of a zip format archive using Konqueror, or from ark directly. Updated packages have been patched to correct this issue. %NASLMINLEVEL 999999 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a security...

Stack overflow

Stack-based buffer overflow in RARLabs Unrar, as packaged in WinRAR and possibly other products, allows user-assisted remote attackers to execute arbitrary code via a crafted, password-protected archive...

CVE-2007-0855

Stack-based buffer overflow in RARLabs Unrar, as packaged in WinRAR and possibly other products, allows user-assisted remote attackers to execute arbitrary code via a crafted, password-protected archive...

CVE-2007-0855

Stack-based buffer overflow in RARLabs Unrar, as packaged in WinRAR and possibly other products, allows user-assisted remote attackers to execute arbitrary code via a crafted, password-protected archive...

CVE-2007-0855

Stack-based buffer overflow in RARLabs Unrar, as packaged in WinRAR and possibly other products, allows user-assisted remote attackers to execute arbitrary code via a crafted, password-protected archive...

CVE-2007-0855

Stack-based buffer overflow in RARLabs Unrar, as packaged in WinRAR and possibly other products, allows user-assisted remote attackers to execute arbitrary code via a crafted, password-protected archive...

CVE-2007-0855

Stack-based buffer overflow in RARLabs Unrar, as packaged in WinRAR and possibly other products, allows user-assisted remote attackers to execute arbitrary code via a crafted, password-protected archive...

avast! Server Edition LHA Archive Extended-header Field Processing Overflow

The remote host is running avast! Server Edition. The installed version of avast! Server Edition is reportedly prone to a heap overflow when processing LHA archives with long filename and directory-name extended-header fields. An attacker may be able to exploit this issue to execute arbitrary cod...

WebRoot SpySweeper protection bypass

Content is blocked only by filename. Multiple archive formats are not supported...

Microsoft Help Workshop .CNT file buffer overflow

Added: 01/31/2007 CVE: CVE-2007-0352 BID: 22100 OSVDB: 31898 Background Microsoft Help Workshop is a standard component of Microsoft Visual Studio and is also available as a standalone product. Problem A buffer overflow vulnerability in Microsoft Help Workshop allows command execution when a user...

WWWBoard 2.0 - passwd.txt Remote Password Disclosure

WWWBoard 2.0 - passwd.txt Remote Password Disclosure WWWBoard 2.0 Alpha 2 passwd.txt Password Disclosure Vulnerability Affected Software: WWWBoard 2.0 Alpha Download: http://www.scriptarchive.com/wwwboard.html Bugfounder: bd0rk Contact: bd0rkathackermail.com Greetz: str0ke, Döner, TheJT, x0r32...

tar security update

CentOS Errata and Security Advisory CESA-2006:0749 Updated tar packages that fix a path traversal flaw are now available. This update has been rated as having moderate security impact by the Red Hat Security Response Team. The GNU tar program saves many files together in one archive and can resto...

ZDI-06-045: Sophos Anti-Virus CPIO Archive Parsing Buffer Overflow Vulnerability

ZDI-06-045: Sophos Anti-Virus CPIO Archive Parsing Buffer Overflow Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-06-045.html December 12, 2006 -- CVE ID: CVE-2006-6335 -- Affected Vendor: Sophos -- Affected Products: All versions of Sophos Anti-Virus v2.40 scanning engine --...

ZDI-06-046: Sophos Anti-Virus SIT Archive Parsing Buffer Overflow Vulnerability

ZDI-06-046: Sophos Anti-Virus SIT Archive Parsing Buffer Overflow Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-06-046.html December 12, 2006 -- CVE ID: CVE-2006-6335 -- Affected Vendor: Sophos -- Affected Products: All versions of Sophos Anti-Virus v2.40 scanning engine --...

CVE-2006-6458

The CVE-2006-6458 entry affects the Trend Micro scan engine before 8.320 on Windows and before 8.150 on HP-UX/AIX, used in Trend Micro PC Cillin Internet Security 2006, Office Scan 7.3, and Server Protect 5.58. Root cause: processing a malformed RAR archive where the Archive Header head_size and ...

Novell Client nwspool.dll buffer overflow

Added: 12/01/2006 CVE: CVE-2006-5854 BID: 21220 OSVDB: 30547 Background Novell Client software provides NetWare connectivity to Windows platforms. Problem The nwspool.dll library in Novell Client is affected by buffer overflows in the EnumPrinters and OpenPrinter functions, allowing remote...