Authentication flaw

The Scheduler Service VxSchedService.exe in Symantec Storage Foundation for Windows 5.0 allows remote attackers to bypass authentication and execute arbitrary code via certain requests to the service socket that create 1 PreScript or 2 PostScript registry values under...

CVE-2007-2279

The Scheduler Service VxSchedService.exe in Symantec Storage Foundation for Windows 5.0 allows remote attackers to bypass authentication and execute arbitrary code via certain requests to the service socket that create 1 PreScript or 2 PostScript registry values under...

CVE-2007-2279

The CVE-2007-2279 issue affects Symantec Veritas Storage Foundation for Windows Volume Manager Scheduler Service (VxSchedService.exe) in v5.0 (including 5.0 RP1a and 5.1). The vulnerability enables an unauthenticated remote attacker to bypass authentication and execute arbitrary code by sending c...

Symantec Storage Foundation VxSchedService.EXE调度服务验证绕过漏洞

Symantec Storage Foundation是一款应用广泛的存储管理平台。 Symantec Storage Foundation包含的调度服务存在验证绕过和任意代码执行问题，远程攻击者可以利用漏洞以进程权限执行任意指令，控制目标系统。 攻击者可以直接连接调度服务套接字绕过管理控制台的内置验证程序，以应用程序进程权限执行任意指令。目前没有详细漏洞细节提供。 Symantec Foundation for Windows 5.0 可参考安全公告获得补丁信息：...

Symantec Veritas Storage Foundation Scheduler Service (VxSchedService.exe) Remote Code Execution

The remote host is running a version of Symantec Storage Foundation for Windows that is vulnerable to a remote scheduler service access. An attacker may exploit this flaw to modify or create scheduled commands and gain a full access to the system. To exploit this flaw, an attacker would need to...

iDefense Security Advisory 06.01.07: Symantec VERITAS Storage Foundation Administration Service DoS Vulnerability

Symantec VERITAS Storage Foundation Administration Service DoS Vulnerability iDefense Security Advisory 06.01.07 http://labs.idefense.com/intelligence/vulnerabilities/ June 01, 2007 I. BACKGROUND The VERITAS Storage Foundation is made up of the Veritas File System, Veritas Volume Replicator VVR...

GNU Findutils release 4.2.31 fixes CVE-2007-2452 (GNU locate heap buffer overrun)

$Revision: 1.4 $; $Date: 2007/05/30 22:04:52 $ I. BACKGROUND ============= GNU findutils is a set of programs which search for files on Unix-like systems. It is maintained by the GNU Project of the Free Software Foundation. For more information, see http://www.gnu.org/software/findutils. II...

Mozilla Foundation Security Advisory 2007-11

Mozilla Foundation Security Advisory 2007-11 Title: FTP PASV port-scanning Impact: Low Announced: March 20, 2007 Reporter: [email protected] Products: Firefox, SeaMonkey Fixed in: Firefox 2.0.0.3 Firefox 1.5.0.11 Description The FTP protocol includes the PASV passive command which is used by...

Mozilla Foundation Security Advisory 2007-15

Title: Security Vulnerability in APOP Authentication Impact: Moderate Announced: May 30, 2007 Reporter: Gatan Leurent Products: Thunderbird, SeaMonkey Fixed in: Thunderbird 1.5.0.12 Thunderbird 2.0.0.4 SeaMonkey 1.0.9 SeaMonkey 1.1.2 Description Gatan Leurent informed us of a weakness in APOP...

CVE-2007-1355.txt

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 CVE-2007-1355: Tomcat documentation XSS vulnerabilities Severity: Moderate Cross-site scripting Vendor: The Apache Software Foundation Versions Affected: Tomcat 4.0.0 to 4.0.6 Tomcat 4.1.0 to 4.1.36 Tomcat 5.0.0 to 5.0.30 Tomcat 5.5.0 to 5.5.23 Tomcat...

[CVE-2007-1355] Tomcat documentation XSS vulnerabilities

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 CVE-2007-1355: Tomcat documentation XSS vulnerabilities Severity: Moderate Cross-site scripting Vendor: The Apache Software Foundation Versions Affected: Tomcat 4.0.0 to 4.0.6 Tomcat 4.1.0 to 4.1.36 Tomcat 5.0.0 to 5.0.30 Tomcat 5.5.0 to 5.5.23 Tomcat...

Mozilla Foundation Security Advisory 2007-10

Mozilla Foundation Security Advisory 2007-10 Title: Potential integer overflow with text/enhanced mail Impact: Critical Fix released: March 1, 2007 Reporter: Georgi Guninski Products: Thunderbird, SeaMonkey Fixed in: Thunderbird 1.5.0.10 SeaMonkey 1.0.8 Description Georgi Guninski discovered a...

Mozilla Foundation Security Advisory 2007-09

Mozilla Foundation Security Advisory 2007-09 Title: Privilege escalation by setting img.src to javascript: URI Impact: Critical Announced: March 5, 2007 Reporter: mozbugra4 Products: Firefox 1.5.0.9/2.0.0.1, SeaMonkey 1.0.7 Fixed in: Firefox 2.0.0.2 Firefox 1.5.0.10 SeaMonkey 1.1.1 SeaMonkey 1.0....

Mozilla Foundation Security Advisory 2007-05

Mozilla Foundation Security Advisory 2007-05 Title: XSS and local file access by opening blocked popups Impact: Moderate Announced: February 23, 2007 Reporter: shutdown, Michal Zalewski Products: Firefox, SeaMonkey Fixed in: Firefox 2.0.0.2 Firefox 1.5.0.10 SeaMonkey 1.0.8 Description shutdown...

Mozilla Foundation Security Advisory 2007-06

Mozilla Foundation Security Advisory 2007-06 Title: Mozilla Network Security Services NSS SSLv2 buffer overflows Impact: Critical Firefox 2.0 not affected in default configuration Announced: February 23, 2007 Reporter: iDefense Products: Firefox, Thunderbird, SeaMonkey Fixed in: Firefox 2.0.0.2...

Mozilla Foundation Security Advisory 2007-07

Mozilla Foundation Security Advisory 2007-07 Title: Embedded nulls in location.hostname confuse same-domain checks Impact: High Announced: February 23, 2007 Reporter: Michal Zalewski Products: Firefox, SeaMonkey Fixed in: Firefox 2.0.0.2 Firefox 1.5.0.10 SeaMonkey 1.0.8 Description Michal Zalewsk...

Unfixed XSS vulnerability at www.ellisonfoundation.org

Security researcher RubberDuck, has submitted on 23/02/2007 a cross-site-scripting XSS vulnerability affecting www.ellisonfoundation.org, which at the time of submission ranked 4073525 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 27/02/2007...

mozilla -- multiple vulnerabilities

The Mozilla Foundation reports of multiple security issues in Firefox, Seamonkey, and Thunderbird. Several of these issues can probably be used to run arbitrary code with the privilege of the user running the program. MFSA 2007-08 onUnload + document.write memory corruption MFSA 2007-07 Embedded...

MOAB-22-01-2007: Apple UserNotificationCenter Privilege Escalation Vulnerability

Summary The following description about CFUserNotification is available from Apple's Mac OS X Core Foundation reference: A CFUserNotification object presents a simple dialog on the screen and optionally receives feedback from the user. The contents of the dialog can include a header, a message, a...

Texinfo File Handling Buffer Overflow Vulnerability

Texinfo is prone to a buffer-overflow vulnerability because the application fails to properly bounds-check user-supplied input before copying it to an insufficiently sized memory buffer. Exploiting this issue allows attackers to cause the affected applications using Texinfo to crash, denying...