[CLOSE] OSVDB ID : 43253 - Disclosed: 2007-02-15

Description:

Unknown / Incomplete

[CLOSE] OSVDB ID : 56501 - Disclosed: 2007-02-15

Description:

Haber Script contains a flaw that may allow an attacker to carry out an SQL injection attack. The issue is due to the 'HaberDetay.asp' script not properly sanitizing user-supplied input to the 'id' or 'kid' parameters. This may allow an attacker to inject or manipulate SQL queries in the back-end database.

[CLOSE] OSVDB ID : 58782 - Disclosed: 2007-02-15

Description:

Haber Script contains a flaw that may allow an attacker to carry out an SQL injection attack. The issue is due to the rss.asp script not properly sanitizing user-supplied input to the 'id' and 'kid' parameter. This may allow an attacker to inject or manipulate SQL queries in the back-end database.

[CLOSE] OSVDB ID : 32104 - Disclosed: 2007-02-14

Description:

Mozilla Firefox, Mozilla SeaMonkey, and other Mozilla-based browsers contain a flaw that may allow a remote attacker to bypass security restrictions and gain knowledge of sensitive information. The issue is due to Mozilla-based browsers improperly handling writes to the 'location.hostname' DOM property. The flaw is triggered when a malicious web page writes a hostname value containing NULL characters ('\x00') to the 'location.hostname' DOM property, allowing for alteration of the 'document.domain' in order to bypass the same-origin policy for cross-frame/cross-window data access. This may allow an attacker the ability to manipulate authentication cookies for third party web pages and tamper with the way these sites are displayed or how they work, resulting in a loss of confidentiality.

[CLOSE] OSVDB ID : 33210 - Disclosed: 2007-02-14

Description:

(Description Provided by CVE) : Unspecified vulnerability in LifeType before 1.1.6, and 1.2 before 1.2-beta2, allows remote attackers to obtain sensitive information (file contents) via a "crafted URL."

[CLOSE] OSVDB ID : 33195 - Disclosed: 2007-02-14

Description:

(Description Provided by CVE) : The NTLM_UnPack_Type3 function in MENTLM.dll in MailEnable Professional 2.35 and earlier allows remote attackers to cause a denial of service (application crash) via certain base64-encoded data following an AUTHENTICATE NTLM command to the imap port (143/tcp), which results in an out-of-bounds read.

[CLOSE] OSVDB ID : 33062 - Disclosed: 2007-02-14

Description:

(Description Provided by CVE) : Cisco PIX 500 and ASA 5500 Series Security Appliances 7.2.2, when configured to inspect certain TCP-based protocols, allows remote attackers to cause a denial of service (device reboot) via malformed TCP packets.

[CLOSE] OSVDB ID : 33063 - Disclosed: 2007-02-14

Description:

(Description Provided by CVE) : Unspecified vulnerability in Cisco PIX 500 and ASA 5500 Series Security Appliances 7.2.2, when configured to use the LOCAL authentication method, allows remote authenticated users to gain privileges via unspecified vectors.

[CLOSE] OSVDB ID : 34843 - Disclosed: 2007-02-14

Description:

(Description Provided by CVE) : The default configuration of the AirPort utility in Apple AirPort Extreme creates an IPv6 tunnel but does not enable the "Block incoming IPv6 connections" setting, which might allow remote attackers to bypass intended access restrictions by establishing IPv6 sessions that would have been rejected over IPv4.

[CLOSE] OSVDB ID : 34180 - Disclosed: 2007-02-14

Description:

Unknown / Incomplete

[CLOSE] OSVDB ID : 33054 - Disclosed: 2007-02-14

Description:

(Description Provided by CVE) : Cisco PIX 500 and ASA 5500 Series Security Appliances 6.x before 6.3(5.115), 7.0 before 7.0(5.2), and 7.1 before 7.1(2.5), and the FWSM 3.x before 3.1(3.24), when the "inspect sip" option is enabled, allows remote attackers to cause a denial of service (device reboot) via malformed SIP packets.

[CLOSE] OSVDB ID : 33055 - Disclosed: 2007-02-14

Description:

(Description Provided by CVE) : Cisco PIX 500 and ASA 5500 Series Security Appliances 7.0 before 7.0(4.14) and 7.1 before 7.1(2.1), and the FWSM 2.x before 2.3(4.12) and 3.x before 3.1(3.24), when "inspect http" is enabled, allows remote attackers to cause a denial of service (device reboot) via malformed HTTP traffic.

[CLOSE] OSVDB ID : 33056 - Disclosed: 2007-02-14

Description:

Cisco Firewall Services Module (FWSM) contains a flaw that may allow a remote denial of service. The issue is triggered when the FWSM receives an unknown malformed packet for one of it's interfaces IP and generates a syslog message with id 710006. This will result in loss of availability for the system.

[CLOSE] OSVDB ID : 33057 - Disclosed: 2007-02-14

Description:

Cisco Firewall Services Module (FWSM) contains a flaw that may allow a remote denial of service. The issue is triggered when certain malformed HTTPS requests are send through the auth-proxy feature, and will result in loss of availability for the system.

[CLOSE] OSVDB ID : 33058 - Disclosed: 2007-02-14

Description:

Cisco Firewall Services Module (FWSM) contains a flaw that may allow a remote denial of service. The issue is triggered when HTTP requests with a long URL are send through the auth-proxy feature, and will result in loss of availability for the system.

[CLOSE] OSVDB ID : 33059 - Disclosed: 2007-02-14

Description:

Cisco Firewall Services Module contains a flaw that may allow a remote denial of service. The issue is triggered when specially crafted HTTPS packets are directed to the FWSM it's HTTPS services, and will result in loss of availability for the system.

[CLOSE] OSVDB ID : 33060 - Disclosed: 2007-02-14

Description:

The Firewall Services Module (FWSM) contains a flaw that may allow a remote denial of service. The issue is triggered when processing received malformed SNMP packets, and will result in loss of availability for the system.

[CLOSE] OSVDB ID : 33061 - Disclosed: 2007-02-14

Description:

Cisco Firewall Services Module (FWSM) contains a design flaw that may allow corruption of access-lists (ACL). The issue could be triggered by manipulating ACL's which uses object-groups. It is possible that the ACL becomes corrupted and ACE entries to not be elevated at all or out of order, resulting in blocking legitimate traffic and allowing traffic that is normally restricted. This vulnerability results in a loss of integrity and availability.

[CLOSE] OSVDB ID : 33187 - Disclosed: 2007-02-14

Description:

(Description Provided by CVE) : Stack-based buffer overflow in iTinySoft Studio Total Video Player 1.03, and possibly earlier, allows remote attackers to execute arbitrary code via a M3U playlist file that contains a long file name. NOTE: it was later reported that 1.20 and 1.30 are also affected.

[CLOSE] OSVDB ID : 35763 - Disclosed: 2007-02-14

Description:

(Description Provided by CVE) : Unspecified vulnerability in Microsoft Powerpoint allows remote user-assisted attackers to execute arbitrary code via unknown attack vectors, as exploited by Trojan.PPDropper.G. NOTE: as of 20070213, it is not clear whether this is the same issue as CVE-2006-5296, CVE-2006-4694, CVE-2006-3876, CVE-2006-3877, or older issues.

[CLOSE] OSVDB ID : 33202 - Disclosed: 2007-02-14

Description:

(Description Provided by CVE) : Multiple cross-site scripting (XSS) vulnerabilities in WebTester 5.0.20060927 and earlier allow remote attackers to inject arbitrary web script or HTML via unspecified vectors related to POST parameters to multiple files.

[CLOSE] OSVDB ID : 33203 - Disclosed: 2007-02-14

Description:

(Description Provided by CVE) : Multiple SQL injection vulnerabilities in WebTester 5.0.20060927 and earlier allow remote attackers to execute arbitrary SQL commands via the testID parameter to directions.php, and unspecified parameters to other files that accept GET or POST input.

[CLOSE] OSVDB ID : 33188 - Disclosed: 2007-02-14

Description:

(Description Provided by CVE) : Multiple cross-site scripting (XSS) vulnerabilities in MailEnable Professional before 2.37 allow remote attackers to inject arbitrary Javascript script via (1) e-mail messages and (2) the ID parameter to (a) right.asp, (b) Forms/MAI/list.asp, and (c) Forms/VCF/list.asp in mewebmail/base/default/lang/EN/.

[CLOSE] OSVDB ID : 33189 - Disclosed: 2007-02-14

Description:

(Description Provided by CVE) : Multiple cross-site scripting (XSS) vulnerabilities in MailEnable Professional before 2.37 allow remote attackers to inject arbitrary Javascript script via (1) e-mail messages and (2) the ID parameter to (a) right.asp, (b) Forms/MAI/list.asp, and (c) Forms/VCF/list.asp in mewebmail/base/default/lang/EN/.

[CLOSE] OSVDB ID : 33190 - Disclosed: 2007-02-14

Description:

(Description Provided by CVE) : Multiple cross-site scripting (XSS) vulnerabilities in MailEnable Professional before 2.37 allow remote attackers to inject arbitrary Javascript script via (1) e-mail messages and (2) the ID parameter to (a) right.asp, (b) Forms/MAI/list.asp, and (c) Forms/VCF/list.asp in mewebmail/base/default/lang/EN/.

[CLOSE] OSVDB ID : 33191 - Disclosed: 2007-02-14

Description:

(Description Provided by CVE) : Cross-site request forgery (CSRF) vulnerability in MailEnable Professional before 2.37 allows remote attackers to modify arbitrary configurations and perform unauthorized actions as arbitrary users via a link or IMG tag.

[CLOSE] OSVDB ID : 31888 - Disclosed: 2007-02-14

Description:

A local overflow exists in Malware Protection Engine. mpengine.dll fails to validate PDF files resulting in an integer overflow. With a specially crafted file, an attacker can cause arbitrary code execution resulting in a loss of integrity.

[CLOSE] OSVDB ID : 33840 - Disclosed: 2007-02-14

Description:

(Description Provided by CVE) : Buffer overflow in Symantec Mail Security for SMTP 5.0 before Patch 175 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via crafted headers in an e-mail message. NOTE: some information was obtained from third party sources.

[CLOSE] OSVDB ID : 33725 - Disclosed: 2007-02-14

Description:

(Description Provided by CVE) : Cross-site scripting (XSS) vulnerability in faq.php in DeskPRO 1.1.0 allows remote attackers to inject arbitrary web script or HTML via the article parameter.

[CLOSE] OSVDB ID : 33732 - Disclosed: 2007-02-14

Description:

(Description Provided by CVE) : Buffer overflow in the ActSoft DVD-Tools ActiveX control (dvdtools.ocx) allows remote attackers to execute arbitrary code via a long DVD_TOOLS.OpenDVD property value.

[CLOSE] OSVDB ID : 33727 - Disclosed: 2007-02-14

Description:

Jupiter CMS contains a flaw that may allow an attacker to carry out an SQL injection attack. The issue is due to the 'index.php' script not properly sanitizing user-supplied input to the Client-IP, X-Forwarded-For, X-Forwarded, Forwarded-For and Forwarded HTTP headers. This may allow an attacker to inject or manipulate SQL queries in the back-end database, allowing for the manipulation or disclosure of arbitrary data.

[CLOSE] OSVDB ID : 33728 - Disclosed: 2007-02-14

Description:

Jupiter CMS contains a flaw that may allow an attacker to upload files. The issue is triggered when a malicious attacker makes a direct request to the 'modules/emoticions.php' script with 'a' parameter set to '1'.

[CLOSE] OSVDB ID : 33729 - Disclosed: 2007-02-14

Description:

Jupiter CMS contains a flaw that allows a remote cross site scripting (XSS) attack. This flaw exists because the application does not validate the Client-IP, X-Forwarded-For, X-Forwarded, Forwarded-For and Forwarded HTTP headers upon submission to the 'index.php script. This may allow a user to create a specially crafted URL that would execute arbitrary script code in a user's browser within the trust relationship between their browser and the server.

[CLOSE] OSVDB ID : 33730 - Disclosed: 2007-02-14

Description:

Jupiter CMS contains a flaw that may allow a remote attacker to execute arbitrary commands or code. The issue is due to the 'index.php' script not properly sanitizing user input supplied to the 'n' parameter when the input is an FTP URL. This may allow an attacker to include a file from a third-party remote host that contains commands or code that will be executed by the vulnerable script with the same privileges as the web server.

[CLOSE] OSVDB ID : 33731 - Disclosed: 2007-02-14

Description:

Jupiter CMS contains a flaw that may allow a remote attacker to execute arbitrary commands or code. The issue is due to the 'index.php script not properly sanitizing user input, specifically directory traversal style attacks (e.g., ../../) supplied to the 'n' parameter. This may allow an attacker to include a file from the targeted host that contains arbitrary commands or code that will be executed by the vulnerable script. Such attacks are limited due to the script only calling files already on the target host. In addition, this flaw can potentially be used to disclose the contents of any file on the system accessible by the web server.

[CLOSE] OSVDB ID : 31939 - Disclosed: 2007-02-13

Description:

Ekiga softphone contains a flaw that may allow a malicious user to execute arbitrary code resulting in a loss of integrity. This issue is caused due to a format string error within the 'gm_main_window_flash_message()' function in src/endpoints/urlhandler.cpp, src/endpoints/manager.cpp and src/endpoints/sip.cpp.

[CLOSE] OSVDB ID : 31889 - Disclosed: 2007-02-13

Description:

Windows XP contains a flaw that may allow a malicious user to gain access to unauthorized privileges. The issue is triggered by an unspecified unchecked buffer in the Windows Image Acquisition service. This flaw may lead to a loss of integrity.

[CLOSE] OSVDB ID : 31890 - Disclosed: 2007-02-13

Description:

Windows contains an unspecified flaw that may allow a malicious user to gain access to unauthorized privileges. The issue is triggered by an unspecified flaw in the way Windows detects and installs new hardware. This flaw may lead to a loss of integrity.

[CLOSE] OSVDB ID : 31891 - Disclosed: 2007-02-13

Description:

A remote memory corruption flaw exists in Internet Explorer. The flaw is triggered when Imjpcksid.dll is instantiated as an ActiveX control within Internet Explorer. With a specially crafted web page, an attacker can cause arbitrary code execution resulting in a loss of integrity.

[CLOSE] OSVDB ID : 31894 - Disclosed: 2007-02-13

Description:

A remote memory corruption flaw exists in Internet Explorer. The flaw is triggered when Htmlmm.ocx is instantiated as an ActiveX control within Internet Explorer. With a specially crafted web page, an attacker can cause arbitrary code execution resulting in a loss of integrity.