CVE-2007-6416

The copytouser function in the PAL emulation functionality for Xen 3.1.2 and earlier, when running on ia64 systems, allows HVM guest users to access arbitrary physical memory by triggering certain mapping operations...

Design/Logic Flaw

The copytouser function in the PAL emulation functionality for Xen 3.1.2 and earlier, when running on ia64 systems, allows HVM guest users to access arbitrary physical memory by triggering certain mapping operations...

CVE-2007-6416

The copytouser function in the PAL emulation functionality for Xen 3.1.2 and earlier, when running on ia64 systems, allows HVM guest users to access arbitrary physical memory by triggering certain mapping operations...

Absolute News Manager .NET 5.1 - getpath.aspx Direct Request Error Message Information

Absolute News Manager .NET 5.1 - getpath.aspx Direct Request Error Message Information source: https://www.securityfocus.com/bid/26692/info Absolute News Manager .NET is prone to multiple remote vulnerabilities, including multiple cross-site scripting, SQL-injection, and information-disclosure...

Absolute News Manager .NET 5.1 - 'getpath.aspx' Direct Request Error Message Information

source: https://www.securityfocus.com/bid/26692/info Absolute News Manager .NET is prone to multiple remote vulnerabilities, including multiple cross-site scripting, SQL-injection, and information-disclosure issues. Attackers can exploit these issues to steal cookie-based authentication...

Design/Logic Flaw

Ingate Firewall before 4.6.0 and SIParator before 4.6.0 do not log truncated 1 ICMP, 2 UDP, and 3 TCP packets, which has unknown impact and remote attack vectors; and do not log 4 serial-console login attempts with nonexistent usernames, which might make it easier for attackers with physical acce...

CVE-2007-6098

Ingate Firewall before 4.6.0 and SIParator before 4.6.0 do not log truncated 1 ICMP, 2 UDP, and 3 TCP packets, which has unknown impact and remote attack vectors; and do not log 4 serial-console login attempts with nonexistent usernames, which might make it easier for attackers with physical acce...

CVE-2007-6098

Ingate Firewall before 4.6.0 and SIParator before 4.6.0 do not log truncated 1 ICMP, 2 UDP, and 3 TCP packets, which has unknown impact and remote attack vectors; and do not log 4 serial-console login attempts with nonexistent usernames, which might make it easier for attackers with physical acce...

Guidance EnCase fails to detect more than 25 partitions

Overview Guidance Software's EnCase Forensic can only detect the first 25 partitions on a volume. Description Guidance Software's EnCase Forensic is a tool that allows an investigator to acquire and analyze a disk image. EnCase names partitions either c: through z:, with an additional partition...

CVE-2007-5829

The Disk Mount scanner in Symantec AntiVirus for Macintosh 9.x and 10.x, Norton AntiVirus for Macintosh 10.0 and 10.1, and Norton Internet Security for Macintosh 3.x, uses a directory with weak permissions group writable, which allows local admin users to gain root privileges by replacing...

CVE-2007-3920

GNOME screensaver 2.20 in Ubuntu 7.10, when used with Compiz, does not properly reserve input focus, which allows attackers with physical access to take control of the session after entering an Alt-Tab sequence, a related issue to CVE-2007-3069...

CVE-2007-3920

GNOME screensaver 2.20 in Ubuntu 7.10, when used with Compiz, does not properly reserve input focus, which allows attackers with physical access to take control of the session after entering an Alt-Tab sequence, a related issue to CVE-2007-3069...

CVE-2007-3920

GNOME screensaver 2.20 in Ubuntu 7.10, when used with Compiz, does not properly reserve input focus, which allows attackers with physical access to take control of the session after entering an Alt-Tab sequence, a related issue to CVE-2007-3069...

[SECURITY] Fedora 7 Update: tempest-0-0.4.20070929.fc7

Tempest is a screensaver based on a physical model whereby particles are attracted to their neighbors...

CVE-2007-3850

The eHCA driver in Linux kernel 2.6 before 2.6.22, when running on PowerPC, does not properly map userspace resources, which allows local users to read portions of physical address space...

CVE-2007-3850

The eHCA driver in Linux kernel 2.6 before 2.6.22, when running on PowerPC, does not properly map userspace resources, which allows local users to read portions of physical address space...

CVE-2007-3850

The eHCA driver in Linux kernel 2.6 before 2.6.22, when running on PowerPC, does not properly map userspace resources, which allows local users to read portions of physical address space...

Linux Kernel eHCA驱动物理地址空间信息泄露漏洞

Linux是一款开放源代码的操作系统。 Linux包含的eHCA驱动在映射用户空间资源时存在问题，本地攻击者可以利用漏洞获得物理地址等敏感信息。 部分驱动包含的资源映射到用户空间的大小为4K，如果内核配置使用64K的页，那么在映射过程中会超过60K大小的物理地址空间映射到用户空间，导致敏感信息泄露。 RedHat Enterprise Linux Desktop v.5 client RedHat Enterprise Linux v. 5 server Linux kernel 2.6.18 .4 Linux kernel 2.6.18 .3 Linux kernel 2.6.18 ....

Session fixation

xscreensaver 5.03 and earlier, when running without xscreensaver-gl-extras GL extras installed, crashes when /usr/bin/xscreensaver-gl-helper does not exist and a user attempts to unlock the screen, which allows attackers with physical access to gain access to the locked session...

CVE-2007-5585

xscreensaver 5.03 and earlier, when running without xscreensaver-gl-extras GL extras installed, crashes when /usr/bin/xscreensaver-gl-helper does not exist and a user attempts to unlock the screen, which allows attackers with physical access to gain access to the locked session...