 |
|
|
|
Trend Micro antiviral products multiple security vulnerabilities
updated since 22.08.2007 | | Published: |  | 11.09.2007 | | Source: |  | BUGTRAQ | | SecurityVulns ID: |  | 8084 | | Type: |  | remote | | Level: |  | 7/10 | | Description: |  | Buffer overflow in SSAPI engine on oversized local path. Buffer overflow in ServerProtect on different TCP/5168 RPC requests. |
| CVE: |  | CVE-2007-4731 (Stack-based buffer overflow in the TMregChange function in TMReg.dll in Trend Micro ServerProtect before 5.58 Security Patch 4 allows remote attackers to execute arbitrary code via a crafted packet to TCP port 5005.) | | | | CVE-2007-4219 (Integer overflow in the RPCFN_SYNC_TASK function in StRpcSrv.dll, as used by the ServerProtect service (SpntSvc.exe), in Trend Micro ServerProtect for Windows before 5.58 Security Patch 4 allows remote attackers to execute arbitrary code via a certain integer field in a request packet to TCP port 5168, which triggers a heap-based buffer overflow.) | | | | CVE-2007-4218 (Multiple buffer overflows in the ServerProtect service (SpntSvc.exe) in Trend Micro ServerProtect for Windows before 5.58 Security Patch 4 allow remote attackers to execute arbitrary code via certain RPC requests to certain TCP ports that are processed by the (1) RPCFN_ENG_NewManualScan, (2) RPCFN_ENG_TimedNewManualScan, and (3) RPCFN_SetComputerName functions in (a) StRpcSrv.dll; the (4) RPCFN_CMON_SetSvcImpersonateUser and (5) RPCFN_OldCMON_SetSvcImpersonateUser functions in (b) Stcommon.dll; the (6) RPCFN_ENG_TakeActionOnAFile and (7) RPCFN_ENG_AddTaskExportLogItem functions in (c) Eng50.dll; the (8) NTF_SetPagerNotifyConfig function in (d) Notification.dll; or the (9) RPCFN_CopyAUSrc function in the (e) ServerProtect Agent service.) | | | | CVE-2007-3873 (Stack-based buffer overflow in vstlib32.dll 1.2.0.1012 in the SSAPI Engine 5.0.0.1066 through 5.2.0.1012 in Trend Micro AntiSpyware 3.5 and PC-Cillin Internet Security 2007 15.0 through 15.3, when the Venus Spy Trap (VST) feature is enabled, allows local users to cause a denial of service (service crash) or execute arbitrary code via a file with a long pathname, which triggers the overflow during a ReadDirectoryChangesW callback notification.) |
| Original document |  | ZDI, ZDI-07-051: Trend Micro ServerProtect TMregChange() Stack Overflow Vulnerability (11.09.2007) |
| | | ZDI, ZDI-07-050: Trend Micro ServerProtect RPCFN_SetComputerName() Stack Overflow Vulnerability (11.09.2007) |
| | | IDEFENSE, iDefense Security Advisory 08.21.07: Trend Micro ServerProtect RPCFN_SYNC_TASK Integer Overflow Vulnerability (22.08.2007) |
| | | IDEFENSE, iDefense Security Advisory 08.21.07: Trend Micro ServerProtect Multiple Buffer Overflow Vulnerabilities (22.08.2007) |
| | | IDEFENSE, iDefense Security Advisory 08.20.07: Trend Micro SSAPI Long Path Buffer Overflow Vulnerability (22.08.2007) |
| Daily web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl) | | Published: | | 11.09.2007 | | Source: | | BUGTRAQ | | SecurityVulns ID: | | 8131 | | Type: | | remote | | Level: | | 5/10 | | Description: | | PHP inclusions, SQL injections, directory traversals, crossite scripting, information leaks, etc. |
| Affected: |  | DIRECTADMIN : DirectAdmin 1.30 | | | | OLATE : Olate Download 3.4 | | | | ROIREVOLUTION : Urchin 5.6 | | | | INTERSPIRE : ActiveKB NX 2.5 | | | | CARE2X : CARE2X 2.2 | | | | TOMS : Toms Gastebuch 1.0 | | | | NETJUKE : Netjuke 1.0 | | | | PHPMYQUOTE : phpMyQuote 0.20 | | | | HUSREV : Husrev Forums 2.0 | | | | PROXYANKET : Proxy Anket 3.0 | | | | NUCLEARBB : NuclearBB Alpha 2 |
| Original document | | Advisory_(at)_Aria-Security.net, [Aria-Security Team] social-networkin SQL Injection (11.09.2007) |
| | | b14ck1c3_(at)_hotmail.com, NuclearBB Alpha 2 Remote File Inclusion (11.09.2007) |
| | | yollubunlar_(at)_yollubunlar.org, Husrev Forums v2.0.1:PoWerBoard Sql (11.09.2007) |
| | | yollubunlar_(at)_yollubunlar.org, Proxy Anket v3.0.1 Sql injection Vulnerable (11.09.2007) |
| | | yollubunlar_(at)_yollubunlar.org, phpMyQuote 0.20 Version Multiple Sql And Xss Vulnerabilities (11.09.2007) |
| | | cod3in_(at)_gmail.com, Netjuke 1.0-rc2 - sql injection & XSS (11.09.2007) |
| | | cod3in_(at)_gmail.com, Toms Gstebuch 1.00 - XSS (11.09.2007) |
| | | imei, Olate Download 3.4.2~uploads folder ~ directory traversal (11.09.2007) |
| | | imei, Olate Download 3.4.2 ~ userupload.php ~ Upload Executable Files (11.09.2007) |
| | | home_edition2001_(at)_irc.mildnet.org, SolpotCrew Advisory #15 (home_edition2001) - Weblogicnet (files_dir) Remote File Inclusion (11.09.2007) |
| | | Ivan Niiiil, CARE2X php Integ Hospital Info System 2G Deployment 2.2 Multi Remote File Include (11.09.2007) |
| | | Ivan Niiiil, CRS Manager ($DOCUMENT_ROOT) Multi Remote File Include (11.09.2007) |
| | | r0t, DirectAdmin <= v1.30.2 XSS vuln. (11.09.2007) |
| | | noname indexed, XSS UMI CMS (11.09.2007) |
| | | durito, XXS в ActiveKB NX 2.5.4 (11.09.2007) |
| | | r0t, Urchin Multiple XSS vuln. (11.09.2007) |
| Samba nss_info extension privilege escalation | | Published: | | 11.09.2007 | | Source: | | BUGTRAQ | | SecurityVulns ID: | | 8135 | | Type: | | local | | Level: | | 5/10 | | Description: | | Gid 0 is assigned to user, if "winbind nss info" configuration parameter has value "sfu" or "rfc2307". |
| Affected: | | SAMBA : Samba 3.0 | | CVE: | | CVE-2007-4138 (The Winbind nss_info extension (nsswitch/idmap_ad.c) in idmap_ad.so in Samba 3.0.25 through 3.0.25c, when the "winbind nss info" option is set to rfc2307 or sfu, grants all local users the privileges of gid 0 when the (1) RFC2307 or (2) Services for UNIX (SFU) primary group attribute is not defined.) |
| |
|
| |
