HP Compaq Notebooks - ActiveX Remote Code Execution

HP Compaq Notebooks - ActiveX Remote Code Execution !- Advisory: Multiple Hewlett-Packard notebook series are prone to a remote code execution attack. The manufacturer's preinstalled software contains a critical flaw within the software built to support one-touch button quick feature access...

DEBIAN-CVE-2007-5901

Use-after-free vulnerability in the gssindicatemechs function in lib/gssapi/mechglue/ginitialize.c in MIT Kerberos 5 krb5 has unknown impact and attack vectors. NOTE: this might be the result of a typo in the source code...

Double free

Double free vulnerability in the krb5defstoremkey function in lib/kdb/kdbdefault.c in MIT Kerberos 5 krb5 1.5 has unknown impact and remote authenticated attack vectors. NOTE: the free operations occur in code that stores the krb5kdc master key, and so the attacker must have privileges to store...

Design/Logic Flaw

Use-after-free vulnerability in the gssindicatemechs function in lib/gssapi/mechglue/ginitialize.c in MIT Kerberos 5 krb5 has unknown impact and attack vectors. NOTE: this might be the result of a typo in the source code...

Double free

Double free vulnerability in the gsskrb5intmakesealtokenv3 function in lib/gssapi/krb5/k5sealv3.c in MIT Kerberos 5 krb5 has unknown impact and attack vectors...

CVE-2007-5971

Double free vulnerability in the gsskrb5intmakesealtokenv3 function in lib/gssapi/krb5/k5sealv3.c in MIT Kerberos 5 krb5 has unknown impact and attack vectors...

CVE-2007-5972

CVE-2007-5972 is described as a double free vulnerability in MIT Kerberos 5 (krb5) where the flaw resides in krb5_def_store_mkey in lib/kdb/kdb_default.c. The advisory data in connected documents confirms affected software (krb5) and that patches are provided via Ubuntu USN-940-1/USN-924-1 and re...

Code injection

Multiple unspecified vulnerabilities in Beehive Forum 0.7.1 have unknown "critical" impact and attack vectors, different issues than CVE-2007-6014...

CVE-2007-6241

Multiple unspecified vulnerabilities in Beehive Forum 0.7.1 have unknown "critical" impact and attack vectors, different issues than CVE-2007-6014...

CVE-2007-6186

Unspecified vulnerability in PHPDevShell before 0.7.0 has unknown impact and attack vectors, involving a "minor security bug in repair & optimize database."...

CVE-2007-6123

Unspecified vulnerability in IRC Services 5.1.8 has unknown impact and attack vectors...

Code injection

Unspecified vulnerability in IRC Services 5.1.8 has unknown impact and attack vectors...

CVE-2007-6123

CVE-2007-6123 is linked to IRC Services 5.1.8. Connected data cites “Code injection” as the vulnerability type, but the public records here do not provide explicit root-cause details, vectors, affected components beyond the product/version, or concrete impact. No remediation or exploitation statu...

CVE-2007-6123

Unspecified vulnerability in IRC Services 5.1.8 has unknown impact and attack vectors...

Design/Logic Flaw

Unspecified vulnerability in the ICMP implementation in Ingate Firewall before 4.6.0 and SIParator before 4.6.0 has unknown impact and remote attack vectors, related to ICMP packets that are "incorrectly accepted."...

Design/Logic Flaw

Ingate Firewall before 4.6.0 and SIParator before 4.6.0 do not log truncated 1 ICMP, 2 UDP, and 3 TCP packets, which has unknown impact and remote attack vectors; and do not log 4 serial-console login attempts with nonexistent usernames, which might make it easier for attackers with physical acce...

CVE-2007-6097

Affected products: Ingate Firewall (before 4.6.0) and SIParator (before 4.6.0). The vulnerability lies in their ICMP implementation, with the issue described as ICMP packets being “incorrectly accepted.” The impact is not explicitly quantified in the provided documents, but the CVE notes unknown ...

CVE-2007-6097

Unspecified vulnerability in the ICMP implementation in Ingate Firewall before 4.6.0 and SIParator before 4.6.0 has unknown impact and remote attack vectors, related to ICMP packets that are "incorrectly accepted."...

CVE-2007-6045

Unspecified vulnerability in 1 DB2WATCH and 2 DB2FREEZE in IBM DB2 UDB 9.1 before Fixpak 4 has unknown impact and attack vectors...

CVE-2007-6044

Multiple unspecified vulnerabilities in IBM WebSphere MQ 6.0 have unknown impact and remote attack vectors involving "memory corruption." NOTE: as of 20071116, the only disclosure is a vague pre-advisory with no actionable information. However, since it is from a well-known researcher, it is bein...