DEBIAN-CVE-2007-5958

X.Org Xserver before 1.4.1 allows local users to determine the existence of arbitrary files via a filename argument in the -sp option to the X program, which produces different error messages depending on whether the filename exists...

Xorg / XFree86 file existence disclosure vulnerability

X.Org Xserver before 1.4.1 allows local users to determine the existence of arbitrary files via a filename argument in the -sp option to the X program, which produces different error messages depending on whether the filename exists...

Apple Mac OS X v10.5.1 2007-009 Multiple Security Vulnerabilities

CVE-2007-4708 CVE-2007-4709 CVE-2007-4710 CVE-2007-5847 CVE-2007-5848 CVE-2007-5849 CVE-2007-5850 CVE-2007-5851 CVE-2007-5853 CVE-2007-5854 CVE-2007-5855 CVE-2007-5856 CVE-2007-5857 CVE-2007-5859 CVE-2007-5876 CVE-2007-5860 CVE-2007-5861 These issues affect Mac OS X and various applications,...

Apple CFNetwork HTTP空指针引用拒绝服务漏洞

BUGTRAQ ID: 22249 CVECAN ID: CVE-2007-0464 Apple Mac OS X是苹果家族机器所使用的操作系统。 Mac OS X的CFNetwork处理畸形回应数据时存在漏洞，远程攻击者可能利用此漏洞导致客户端崩溃。 CFNetwork是一个Core Services框架，可提供解压网络协议所需的函数库。Mac OS X的CFNetwork没有正确地处理某些HTTP响应，CFNetConnectionWillEnqueueRequests函数可能会引用空指针。如果服务器向使用这个API的客户端发送了特制响应的话，就可以触发这个漏洞，导致拒绝服务的情况。...

Ubuntu 5.04 / 5.10 / 6.06 LTS : libxfont, xorg vulnerability (USN-341-1)

An integer overflow has been discovered in X.org's font handling library. By using a specially crafted font file, this could be exploited to crash the X server or execute arbitrary code with root privileges. Note that Tenable Network Security has extracted the preceding description block directly...

GLSA-200710-16 : X.Org X server: Composite local privilege escalation

The remote host is affected by the vulnerability described in GLSA-200710-16 X.Org X server: Composite local privilege escalation Aaron Plattner discovered a buffer overflow in the compNewPixmap function when copying data from a large pixel depth pixmap into a smaller pixel depth pixmap. Impact :...

X.Org X server: Composite local privilege escalation

Background The X Window System is a graphical windowing system based on a client/server model. Description Aaron Plattner discovered a buffer overflow in the compNewPixmap function when copying data from a large pixel depth pixmap into a smaller pixel depth pixmap. Impact A local attacker could...

X.Org X server composite extention buffer overflow

No description provided...

Apple Safari跨域竞争条件信息泄露漏洞

Apple Safari是一款WEB浏览器。 Apple Safari更新页面时处理HTTP重定向存在竞争条件问题，远程攻击者可以利用漏洞进行跨域攻击，获得敏感信息。 当更新页面并组合HTTP重定向条件，Safari可以允许JavaScript修改其他域的内容，导致敏感信息泄露 Apple Safari 3.0.1 Beta for Windows Apple Mac OS X Server 10.4.10 Apple Mac OS X Server 10.4.9 升级程序： Apple Mac OS X Server 10.4.10 Apple Safari302Beta.dmg...

Mac OS X vpnd local format string

======= Summary ======= Name: Mac OS X vpnd local format string Release Date: 29 May 2007 Reference: NGS00496 Discover: Chris Anley [email protected] Vendor: Apple Vendor Reference: 26417237 CVE-ID: CVE-2007-0753 Systems Affected: OS X Server 10.4.9 and prior Risk: High Status: Published...

Authorization

The Apple Security Update 2007-004 uses an incorrect configuration file for FTPServer in Apple Mac OS X Server 10.4.9, which might allow remote authenticated users to access additional directories...

CVE-2007-0745

The CVE affects Apple Mac OS X Server 10.4.9 where the FTPServer configuration file is incorrect in Apple Security Update 2007-004, potentially allowing remote authenticated users to access additional directories. The connected documents provide the misconfiguration and impact but do not include ...

Mandrake Linux Security Advisory : tightvnc (MDKSA-2007:080-1)

Local exploitation of a memory corruption vulnerability in the X.Org and XFree86 X server could allow an attacker to execute arbitrary code with privileges of the X server, typically root. The vulnerability exists in the ProcXCMiscGetXIDList function in the XC-MISC extension. This request is used...

[Full-disclosure] iDefense Security Advisory 04.03.07: Multiple Vendor X Server XC-MISC Extension Memory Corruption Vulnerability

Multiple Vendor X Server XC-MISC Extension Memory Corruption Vulnerability iDefense Security Advisory 04.03.07 http://labs.idefense.com/intelligence/vulnerabilities/ Apr 03, 2007 I. BACKGROUND The X Window System or X11 is a graphical windowing system used on Unix-like systems. It is based on a...

[Full-disclosure] iDefense Security Advisory 04.03.07: Multiple Vendor X Server fonts.dir File Parsing Integer Overflow Vulnerability

Multiple Vendor X Server fonts.dir File Parsing Integer Overflow Vulnerability iDefense Security Advisory 04.03.07 http://labs.idefense.com/intelligence/vulnerabilities/ Apr 03, 2007 I. BACKGROUND The X Window System or X11 is a graphical windowing system used on Unix-like systems. It is based on...

xserver XC-MISC integer overflow

Integer overflow in ALLOCATELOCAL in the ProcXCMiscGetXIDList function in the XC-MISC extension in the X.Org X11 server xserver 7.1-1.1.0, and other versions before 20070403, allows remote authenticated users to execute arbitrary code via a large expression, which results in memory corruption...

US-CERT Technical Cyber Security Alert TA07-072A -- Apple Updates for Multiple Vulnerabilities

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 National Cyber Alert System Technical Cyber Security Alert TA07-072A Apple Updates for Multiple Vulnerabilities Original release date: March 13, 2007 Last revised: -- Source: US-CERT Systems Affected Apple Mac OS X version 10.3.x and 10.4.x Apple Mac ...

Mandrake Linux Security Advisory : xorg-x11 (MDKSA-2007:005)

Sean Larsson of iDefense Labs discovered several vulnerabilities in X.Org/XFree86 : Local exploitation of a memory corruption vulnerability in the 'ProcRenderAddGlyphs' function in the X.Org and XFree86 X server could allow an attacker to execute arbitrary code with privileges of the X server,...

GLSA-200701-25 : X.Org X server: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-200701-25 X.Org X server: Multiple vulnerabilities Multiple memory corruption vulnerabilities have been found in the ProcDbeGetVisualInfo and the ProcDbeSwapBuffers of the DBE extension, and ProcRenderAddGlyphs in the Render...

Fedora Core 5 : xorg-x11-server-1.0.1-9.fc5.1.1 (2006-483)

A buffer overflow in the X server RENDER extension implementation, documented in CVE-2006-1526 has been fixed in this release. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean...