CVE-2007-3438

Buffer overflow in the SIP header parsing module in the Nortel PC Client SIP Soft Phone 4.1 3.5.20820051015 allows remote attackers to execute arbitrary code via a malformed message, a different vulnerability than CVE-2007-3361...

CVE-2007-3438

CVE-2007-3438 : Buffer overflow in the SIP header parsing module of the Nortel PC Client SIP Soft Phone 4.1 3.5.208[20051015]. This vulnerability allows remote attackers to execute arbitrary code via a malformed SIP message. It is described as a separate issue from CVE-2007-3361. No remediation d...

CVE-2007-3438: Undefined Security Weakness

Buffer overflow in the SIP header parsing module in the Nortel PC Client SIP Soft Phone 4.1 3.5.20820051015 allows remote attackers to execute arbitrary code via a malformed message, a different vulnerability than CVE-2007-3361...

Design/Logic Flaw

The Nortel PC Client SIP Soft Phone 4.1 3.5.20820051015 allows remote attackers to cause a denial of service device crash via a SIP message with a malformed header...

CVE-2007-3361

The Nortel PC Client SIP Soft Phone 4.1 3.5.20820051015 allows remote attackers to cause a denial of service device crash via a SIP message with a malformed header...

CVE-2007-3351

The SJPhone SIP soft phone 1.60.303c, when installed on the Dell Axim X3 running Windows Mobile 2003, allows remote attackers to cause a denial of service device hang and traffic amplification via a direct crafted INVITE transaction, which causes the phone to transmit many RTP packets...

CVE-2007-3361

The Nortel PC Client SIP Soft Phone 4.1 3.5.20820051015 allows remote attackers to cause a denial of service device crash via a SIP message with a malformed header...

CVE-2007-3351

CVE-2007-3351 affects SJPhone SIP soft phone 1.60.303c running on Dell Axim X3 with Windows Mobile 2003. A direct crafted INVITE can cause the device to transmit many RTP packets, resulting in a denial of service (device hang). No remediation or exploit details are provided in the supplied docume...

CVE-2007-3361

CVE-2007-3361 affects the Nortel PC Client SIP Soft Phone (version 4.1, 3.5.208[20051015]). The vulnerability allows remote attackers to cause a denial of service (device crash) by sending a SIP message with a malformed header. The provided documents do not include exploit code or a specific patc...

CVE-2007-3351: Undefined Security Weakness

The SJPhone SIP soft phone 1.60.303c, when installed on the Dell Axim X3 running Windows Mobile 2003, allows remote attackers to cause a denial of service device hang and traffic amplification via a direct crafted INVITE transaction, which causes the phone to transmit many RTP packets...

CVE-2007-3361: Undefined Security Weakness

The Nortel PC Client SIP Soft Phone 4.1 3.5.20820051015 allows remote attackers to cause a denial of service device crash via a SIP message with a malformed header...

CVE-2007-3065

CVE-2007-3065 describes a SQL injection vulnerability in viewimage.php of Particle Gallery 1.0.1 and earlier. The vulnerability allows remote attackers to execute arbitrary SQL commands via the editcomment parameter (a vector/version different from CVE-2006-2862). Affected software is Particle Ga...

CVE-2007-3065

SQL injection vulnerability in viewimage.php in Particle Soft Particle Gallery 1.0.1 and earlier allows remote attackers to execute arbitrary SQL commands via the editcomment parameter, a different version and vector than CVE-2006-2862...

Particle Blogger Archives.PHP SQL注入漏洞

Particle Blogger是一款基于PHP的WEB应用程序。 Particle Blogger不正确过滤用户提交的输入，远程攻击者可以利用漏洞进行SQL注入攻击，获得敏感信息。 问题是'Archives.PHP'脚本对用户提交的'month'参数缺少过滤，提交恶意SQL查询作为参数数据，可更改原来的SQL逻辑，获得敏感信息。 Particle Soft Particle Blogger 1.2.1 Particle Soft Particle Blogger 1.2 Particle Soft Particle Blogger 1.1.2 Particle Soft Particl...

Authentication flaw

Unspecified vulnerability in Rational Soft Hidden Administrator 1.7 and earlier allows remote attackers to bypass authentication and execute arbitrary code via unspecified vectors. NOTE: this issue has no actionable information, and perhaps should not be included in CVE...

CVE-2007-2783

Unspecified vulnerability in Rational Soft Hidden Administrator 1.7 and earlier allows remote attackers to bypass authentication and execute arbitrary code via unspecified vectors. NOTE: this issue has no actionable information, and perhaps should not be included in CVE...

CVE-2007-2783

Unspecified vulnerability in Rational Soft Hidden Administrator 1.7 and earlier allows remote attackers to bypass authentication and execute arbitrary code via unspecified vectors. NOTE: this issue has no actionable information, and perhaps should not be included in CVE...

CVE-2007-2783

Technical details are not publicly available in the provided documents. Monitor for updates.

CVE-2007-2783: Undefined Security Weakness

Unspecified vulnerability in Rational Soft Hidden Administrator 1.7 and earlier allows remote attackers to bypass authentication and execute arbitrary code via unspecified vectors. NOTE: this issue has no actionable information, and perhaps should not be included in CVE...

REWTERZ-20070518 - Authentication Bypass in Rational Soft's Hidden Administrator

REWTERZ-20070518 - Authentication Bypass in Rational Soft's Hidden Administrator Release Date: 18 May, 2007 Severity: High Remote Code Execution Vendor: Rational Soft Software Affected: Hidden Administrator v1.7 and below Overview: rewterz has discovered a critical vulnerability in Hidden...