 |
|
|
|
Microsoft Office unsigned data
updated since 13.12.2007 | | Published: |  | 16.12.2007 | | Source: |  | BUGTRAQ | | SecurityVulns ID: |  | 8449 | | Type: |  | remote | | Level: |  | 4/10 | | Description: |  | Metadata file and hyperlink desination is not signed on document signing. |
| Portage information leak | | Published: | | 16.12.2007 | | Source: | | BUGTRAQ | | SecurityVulns ID: | | 8454 | | Type: | | local | | Level: | | 5/10 | | Description: | | etc-update utilities stores sensitive information in insecure temporayr file. |
| wpa_supplicant driver DoS | | Published: | | 16.12.2007 | | Source: | | BUGTRAQ | | SecurityVulns ID: | | 8456 | | Type: | | remote | | Level: | | 5/10 | | Description: | | Crash on parsing TSF data. |
| Affected: |  | WPASUPPLICANT : wpa_supplicant 0.6 | | CVE: |  | CVE-2007-6025 (Stack-based buffer overflow in driver_wext.c in wpa_supplicant 0.6.0 and earlier allows remote attackers to cause a denial of service (crash) via crafted TSF data.) |
| Novell Groupwise client buffer overflow | | Published: | | 16.12.2007 | | Source: | | BUGTRAQ | | SecurityVulns ID: | | 8457 | | Type: | | client | | Level: | | 6/10 | | Description: | | Buffer overflow on oversized SRC property of IMG tag. |
HP Info Center ActiveX code execution
updated since 13.12.2007 | | Published: | | 16.12.2007 | | Source: | | BUGTRAQ | | SecurityVulns ID: | | 8447 | | Type: | | client | | Level: | | 6/10 | | Description: | | Few unsafe methods are explosed. |
| Affected: | | HP : HP Quick Launch Button 6.3 | | CVE: | | CVE-2007-6333 (The HPInfoDLL.HPInfo.1 ActiveX control in HPInfoDLL.dll 1.0, as shipped with HP Info Center (hpinfocenter.exe) 1.0.1.1 in HP Quick Launch Button (QLBCTRL.exe, aka QLB) 6.3 and earlier, allows remote attackers to read arbitrary registry values via the arguments to the GetRegValue method.) | | | | CVE-2007-6332 (The HPInfoDLL.HPInfo.1 ActiveX control in HPInfoDLL.dll 1.0, as shipped with HP Info Center (hpinfocenter.exe) 1.0.1.1 in HP Quick Launch Button (QLBCTRL.exe, aka QLB) 6.3 and earlier, on Microsoft Windows before Vista allows remote attackers to create or modify arbitrary registry values via the arguments to the SetRegValue method.) | | | | CVE-2007-6331 (Absolute path traversal vulnerability in the HPInfoDLL.HPInfo.1 ActiveX control in HPInfoDLL.dll 1.0, as shipped with HP Info Center (hpinfocenter.exe) 1.0.1.1 in HP Quick Launch Button (QLBCTRL.exe, aka QLB) 6.3 and earlier allows remote attackers to execute arbitrary programs via the first argument to the LaunchApp method. NOTE: only a user-assisted attack is possible on Windows Vista.) |
Samba buffer overflow
updated since 12.12.2007 | | Published: | | 16.12.2007 | | Source: | | BUGTRAQ | | SecurityVulns ID: | | 8440 | | Type: | | remote | | Level: | | 8/10 | | Description: | | Buffer overflow in send_mailslot() on parsing domain logon request. |
| Daily web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl) | | Published: | | 16.12.2007 | | Source: | | | | SecurityVulns ID: | | 8453 | | Type: | | remote | | Level: | | 5/10 | | Description: | | PHP inclusions, SQL injections, directory traversals, crossite scripting, information leaks, etc.
WordPress: information leakage |
| Original document |  | admin_(at)_biyofrm.com, Adult Script Unauthorized Administrative Access Exploit (16.12.2007) |
| | | MustLive, Information disclosure vulnerabilities in WordPress (16.12.2007) |
| | | th3.r00k_(at)_gmail.com, Anon Proxy Server - Remote Code Execution (16.12.2007) |
| | | th3.r00k_(at)_gmail.com, Wordpress - Broken Access Control (16.12.2007) |
| | | th3.r00k_(at)_gmail.com, PHP RPG - Sql Injection and Session Information Disclosure. (16.12.2007) |
| | | th3.r00k_(at)_gmail.com, Oreon/Centreon - Multiple Remote File Inclusion (16.12.2007) |
| | | th3.r00k_(at)_gmail.com, Phpay - Local File Inclusion (16.12.2007) |
| | | arsalan1991_(at)_gmail.com, PHP MySQL Banner Exchange 2.2.1 remote mysql database bug (16.12.2007) |
| | | swhite_(at)_securestate.com, + Trivantis CourseMill Enterprise Learning Management System - SQL Injection - CVE-2007-6338 (16.12.2007) |
| | | admin_(at)_bugreport.ir, Hosting Controller - Multiple Security Bugs (Extremely Critical) (16.12.2007) |
| IRC Services DoS | | Published: | | 16.12.2007 | | Source: | | BUGTRAQ | | SecurityVulns ID: | | 8455 | | Type: | | remote | | Level: | | 5/10 | | Description: | | DoS on oversized password. |
| Affected: | | IRCSERVICES : IRC Services 5.0 | | | | IRCSERVICES : IRC Services 5.1 | | CVE: | | CVE-2007-6122 (The default_encrypt function in encrypt.c in IRC Services before 5.0.63, and 5.1.x before 5.1.7, allows remote attackers to cause a denial of service (daemon crash) via a long password. NOTE: some of these details are obtained from third party information.) |
HP-UX DCE DoS
updated since 16.12.2007 | | Published: | | 14.12.2008 | | Source: | | BUGTRAQ | | SecurityVulns ID: | | 8452 | | Type: | | remote | | Level: | | 5/10 |
| CVE: | | CVE-2008-4418 (Unspecified vulnerability in DCE in HP HP-UX B.11.11, B.11.23, and B.11.31 allows remote attackers to cause a denial of service via unknown vectors.) | | | | CVE-2007-6195 (Buffer overflow in the sw_rpc_agent_init function in swagentd in Software Distributor (SD), and possibly other DCE applications, in HP HP-UX B.11.11 and B.11.23 allows remote attackers to execute arbitrary code or cause a denial of service via malformed arguments in an opcode 0x04 DCE RPC request.) |
|
|
|
|
|
|
|
|
