deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2007-3903
Published: 2007-12-12
Description: Microsoft Internet Explorer 6 and 7 allows remote attackers to execute arbitrary code via uninitialized or deleted objects used in repeated calls to the (1) cloneNode or (2) nodeValue JavaScript function, a different issue than CVE-2007-3902 and CVE-2007-5344, a variant of "Uninitialized Memory Corruption Vulnerability."
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-399
References: http://secunia.com/advisories/28036; http://securitytracker.com/id?1019078; http://www.securityfocus.com/archive/1/484888/100/0/threaded
CVE: CVE-2007-5344
Published: 2007-12-12
Description: Microsoft Internet Explorer 5.01 through 7 allows remote attackers to execute arbitrary code via a crafted website using Javascript that creates, modifies, deletes, and accesses document objects using the tags property, which triggers heap corruption, related to uninitialized or deleted objects, a different issue than CVE-2007-3902 and CVE-2007-3903, and a variant of "Uninitialized Memory Corruption Vulnerability."
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-94
References: http://secunia.com/advisories/28036; http://securitytracker.com/id?1019078; http://www.securityfocus.com/archive/1/484890/100/100/threaded
CVE: CVE-2007-5347
Published: 2007-12-12
Description: Microsoft Internet Explorer 5.01 through 7 allows remote attackers to execute arbitrary code via "unexpected method calls to HTML objects," aka "DHTML Object Memory Corruption Vulnerability."
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-399
References: http://secunia.com/advisories/28036; http://securitytracker.com/id?1019078; http://www.securityfocus.com/archive/1/485268/100/0/threaded
CVE: CVE-2007-5350
Published: 2007-12-12
Description: Unspecified vulnerability in the Windows Advanced Local Procedure Call (ALPC) in the kernel in Microsoft Windows Vista allows local users to gain privileges via unspecified vectors involving "legacy reply paths."
CVSS Score: 7.2 (HIGH)
CWE: CWE-264
References: http://secunia.com/advisories/28015; http://www.kb.cert.org/vuls/id/601073; http://www.securityfocus.com/archive/1/485268/100/0/threaded
CVE: CVE-2007-5351
Published: 2007-12-12
Description: Unspecified vulnerability in Server Message Block Version 2 (SMBv2) signing support in Microsoft Windows Vista allows remote attackers to force signature re-computation and execute arbitrary code via a crafted SMBv2 packet, aka "SMBv2 Signing Vulnerability."
CVSS Score: 10.0 (HIGH)
CWE: CWE-94
References: http://secunia.com/advisories/27997; http://www.kb.cert.org/vuls/id/520465; http://www.securityfocus.com/archive/1/485268/100/0/threaded
CVE: CVE-2007-6314
Published: 2007-12-12
Description: BarracudaDrive Web Server before 3.8 allows remote attackers to read the source code for web scripts by appending a (1) + (plus), (2) . (dot), or (3) %80 and similar characters to the file name in the URL.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-20
References: http://aluigi.altervista.org/adv/barradrive-adv.txt; http://secunia.com/advisories/28032; http://securityreason.com/securityalert/3434
CVE: CVE-2007-6315
Published: 2007-12-12
Description: Group Chat in BarracudaDrive Web Server before 3.8 allows remote authenticated users to cause a denial of service (crash) via a HTTP request to /eh/chat.ehintf/C. that does not contain a Connection ID, which results in a NULL pointer dereference.
CVSS Score: 4.0 (MEDIUM)
CWE: CWE-119
References: http://aluigi.altervista.org/adv/barradrive-adv.txt; http://secunia.com/advisories/28032; http://securityreason.com/securityalert/3434
CVE: CVE-2007-6316
Published: 2007-12-12
Description: Cross-site scripting (XSS) vulnerability in BarracudaDrive Web Server before 3.8 allows remote attackers to inject arbitrary web script or HTML via the URI path in an HTTP GET request, which is activated by administrators viewing log files via the Trace page.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://aluigi.altervista.org/adv/barradrive-adv.txt; http://secunia.com/advisories/28032; http://securityreason.com/securityalert/3434
CVE: CVE-2007-6317
Published: 2007-12-12
Description: Multiple directory traversal vulnerabilities in BarracudaDrive Web Server before 3.8 allow (1) remote attackers to read arbitrary files via certain ..\ (dot dot backslash) sequences in the URL path, or (2) remote authenticated users to delete arbitrary files or create arbitrary directories via a ..\ (dot dot backslash) sequence in the dir parameter to /drive/c/bdusers/USER/.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-22
References: http://aluigi.altervista.org/adv/barradrive-adv.txt; http://secunia.com/advisories/28032; http://securityreason.com/securityalert/3434
CVE: CVE-2007-6318
Published: 2007-12-12
Description: SQL injection vulnerability in wp-includes/query.php in WordPress 2.3.1 and earlier allows remote attackers to execute arbitrary SQL commands via the s parameter, when DB_CHARSET is set to (1) Big5, (2) GBK, or possibly other character set encodings that support a "\" in a multibyte character.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-89
References: http://lists.grok.org.uk/pipermail/full-disclosure/2007-December/058999.html; http://secunia.com/advisories/28005; http://secunia.com/advisories/28310
CVE: CVE-2007-6320
Published: 2007-12-12
Description: Feature 4.7.x-dev and 5.x-dev before 20071206, a Drupal module, does not follow Drupal's Forms API submission model, which allows remote attackers to conduct cross-site request forgery (CSRF) attacks.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-352
References: http://drupal.org/node/198164; http://osvdb.org/43671; http://drupal.org/node/198164
CVE: CVE-2007-6321
Published: 2007-12-12
Description: Cross-site scripting (XSS) vulnerability in RoundCube webmail 0.1rc2, 2007-12-09, and earlier versions, when using Internet Explorer, allows remote attackers to inject arbitrary web script or HTML via style sheets containing expression commands.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://openmya.hacker.jp/hasegawa/security/expression.txt; http://secunia.com/advisories/30734; http://securityreason.com/securityalert/3435
CVE: CVE-2007-5007
Published: 2007-12-12
Description: Stack-based buffer overflow in the ir_fetch_seq function in balsa before 2.3.20 might allow remote IMAP servers to execute arbitrary code via a long response to a FETCH command.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-119
References: http://bugs.gentoo.org/show_bug.cgi?id=193179; http://bugzilla.gnome.org/show_bug.cgi?id=474366; http://mail.gnome.org/archives/balsa-list/2007-September/msg00010.html
CVE: CVE-2007-5000
Published: 2007-12-13
Description: Cross-site scripting (XSS) vulnerability in the (1) mod_imap module in the Apache HTTP Server 1.3.0 through 1.3.39 and 2.0.35 through 2.0.61 and the (2) mod_imagemap module in the Apache HTTP Server 2.2.0 through 2.2.6 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://docs.info.apple.com/article.html?artnum=307562; http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01345501; http://httpd.apache.org/security/vulnerabilities_13.html
CVE: CVE-2007-5964
Published: 2007-12-13
Description: The default configuration of autofs 5 in some Linux distributions, such as Red Hat Enterprise Linux (RHEL) 5, omits the nosuid option for the hosts (/net filesystem) map, which allows local users to gain privileges via a setuid program on a remote NFS server.
CVSS Score: 6.9 (MEDIUM)
CWE: CWE-16
References: http://osvdb.org/40441; http://secunia.com/advisories/28052; http://secunia.com/advisories/28097
CVE: CVE-2007-6322
Published: 2007-12-13
Description: Directory traversal vulnerability in filedownload.php in xml2owl 0.1.1 allows remote attackers to read arbitrary files via a .. (dot dot) in the file parameter.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-22
References: http://osvdb.org/40090; http://secunia.com/advisories/28071; http://www.securityfocus.com/bid/26849
CVE: CVE-2007-6323
Published: 2007-12-13
Description: Multiple directory traversal vulnerabilities in MMS Gallery PHP 1.0 allow remote attackers to read arbitrary files via a .. (dot dot) in the id parameter to (1) get_image.php or (2) get_file.php in mms_template/.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-22
References: http://osvdb.org/39148; http://osvdb.org/39149; http://secunia.com/advisories/28075
CVE: CVE-2007-6324
Published: 2007-12-13
Description: PHP remote file inclusion vulnerability in head.php in CityWriter 0.9.7 allows remote attackers to execute arbitrary PHP code via a URL in the path parameter.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-94
References: http://secunia.com/advisories/28058; http://www.securityfocus.com/bid/26848; https://exchange.xforce.ibmcloud.com/vulnerabilities/39012
CVE: CVE-2007-6325
Published: 2007-12-13
Description: PHP remote file inclusion vulnerability in adminbereich/designconfig.php in Fastpublish CMS 1.9999 allows remote attackers to execute arbitrary PHP code via a URL in the config[fsBase] parameter, a different vector than CVE-2006-2726.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-20, CWE-94
References: http://secunia.com/advisories/28054; http://www.osvdb.org/39153; http://www.securityfocus.com/bid/26845
CVE: CVE-2007-6326
Published: 2007-12-13
Description: Sergey Lyubka Simple HTTPD (shttpd) 1.3 on Windows allows remote attackers to cause a denial of service via a request that includes an MS-DOS device name, as demonstrated by the /aux URI.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-20
References: http://shinnai.altervista.org/exploits/txt/TXT_8kXDua0a0Tl5Vm5LU3ms.html; http://www.securityfocus.com/bid/26813; https://exchange.xforce.ibmcloud.com/vulnerabilities/38980
CVE: CVE-2007-6327
Published: 2007-12-13
Description: Buffer overflow in a certain ActiveX control in Online Media Technologies AVSMJPEGFILE.DLL 1.1.1.102 allows remote attackers to execute arbitrary code via a long first argument to the CreateStill method.
CVSS Score: 7.5 (HIGH)
CWE: CWE-119
References: http://shinnai.altervista.org/exploits/txt/TXT_UXI8vq3qF5Tl9zwyxCBb.html; http://www.securityfocus.com/bid/26814; https://exchange.xforce.ibmcloud.com/vulnerabilities/38984
CVE: CVE-2007-6328
Published: 2007-12-13
Description: DOSBox 0.72 and earlier allows local users to obtain access to the filesystem on the host operating system via the mount command.  NOTE: the researcher reports a vendor response stating that this is not a security problem
CVSS Score: 7.2 (HIGH)
References: http://aluigi.org/poc/dosboxxx.zip; http://osvdb.org/44766; http://securityreason.com/securityalert/3442
CVE: CVE-2007-6329
Published: 2007-12-13
Description: Microsoft Office 2007 12.0.6015.5000 and MSO 12.0.6017.5000 do not sign the metadata of Office Open XML (OOXML) documents, which makes it easier for remote attackers to modify Dublin Core metadata fields, as demonstrated by the (1) LastModifiedBy and (2) creator fields in docProps/core.xml in the OOXML ZIP container.
CVSS Score: 6.4 (MEDIUM)
CWE: CWE-255
References: http://osvdb.org/44938; http://securityreason.com/securityalert/3443; http://www.securityfocus.com/archive/1/484919/100/0/threaded
CVE: CVE-2007-6330
Published: 2007-12-13
Description: Meridian Prolog Manager 2007, and 7.5 and earlier, sends all usernames and passwords to the client in a (1) cleartext or (2) weakly encrypted format to support client-side login authentication, which makes it easier for remote attackers to obtain database access by capturing credentials via a man-in-the-middle attack.
CVSS Score: 10.0 (HIGH)
References: http://osvdb.org/42634; http://secunia.com/advisories/28065; http://www.kb.cert.org/vuls/id/120593
CVE: CVE-2007-6331
Published: 2007-12-13
Description: Absolute path traversal vulnerability in the HPInfoDLL.HPInfo.1 ActiveX control in HPInfoDLL.dll 1.0, as shipped with HP Info Center (hpinfocenter.exe) 1.0.1.1 in HP Quick Launch Button (QLBCTRL.exe, aka QLB) 6.3 and earlier allows remote attackers to execute arbitrary programs via the first argument to the LaunchApp method.  NOTE: only a user-assisted attack is possible on Windows Vista.
CVSS Score: 9.3 (HIGH)
CWE: CWE-22
References: http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01300486; http://secunia.com/advisories/28055; http://securitytracker.com/id?1019086
CVE: CVE-2007-6332
Published: 2007-12-13
Description: The HPInfoDLL.HPInfo.1 ActiveX control in HPInfoDLL.dll 1.0, as shipped with HP Info Center (hpinfocenter.exe) 1.0.1.1 in HP Quick Launch Button (QLBCTRL.exe, aka QLB) 6.3 and earlier, on Microsoft Windows before Vista allows remote attackers to create or modify arbitrary registry values via the arguments to the SetRegValue method.
CVSS Score: 9.3 (HIGH)
References: http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01300486; http://secunia.com/advisories/28055; http://securitytracker.com/id?1019086
CVE: CVE-2007-6333
Published: 2007-12-13
Description: The HPInfoDLL.HPInfo.1 ActiveX control in HPInfoDLL.dll 1.0, as shipped with HP Info Center (hpinfocenter.exe) 1.0.1.1 in HP Quick Launch Button (QLBCTRL.exe, aka QLB) 6.3 and earlier, allows remote attackers to read arbitrary registry values via the arguments to the GetRegValue method.
CVSS Score: 5.8 (MEDIUM)
References: http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01300486; http://secunia.com/advisories/28055; http://securitytracker.com/id?1019086
CVE: CVE-2007-5989
Published: 2007-12-13
Description: Unspecified vulnerability in the skype4com URI handler in Skype before 3.6 GOLD allows remote attackers to execute arbitrary code via "short string values" that result in heap corruption.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-119
References: http://osvdb.org/39170; http://secunia.com/advisories/27934; http://securityreason.com/securityalert/3440
CVE: CVE-2007-6015
Published: 2007-12-13
Description: Stack-based buffer overflow in the send_mailslot function in nmbd in Samba 3.0.0 through 3.0.27a, when the "domain logons" option is enabled, allows remote attackers to execute arbitrary code via a GETDC mailslot request composed of a long GETDC string following an offset username in a SAMLOGON logon request.
CVSS Score: 9.3 (HIGH)
CWE: CWE-119
References: http://bugs.gentoo.org/show_bug.cgi?id=200773; http://docs.info.apple.com/article.html?artnum=307430; http://lists.apple.com/archives/security-announce/2008/Feb/msg00002.html
CVE: CVE-2007-6204
Published: 2007-12-13
Description: Multiple stack-based buffer overflows in HP OpenView Network Node Manager (OV NNM) 6.41, 7.01, and 7.51 allow remote attackers to execute arbitrary code via unspecified long arguments to (1) ovlogin.exe, (2) OpenView5.exe, (3) snmpviewer.exe, and (4) webappmon.exe, as demonstrated via a long Action parameter to OpenView5.exe.
CVSS Score: 10.0 (HIGH)
CWE: CWE-119
References: http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01188923; http://secunia.com/advisories/27964; http://securityreason.com/securityalert/3441
CVE: CVE-2007-6342
Published: 2007-12-13
Description: SQL injection vulnerability in the David Castro AuthCAS module (AuthCAS.pm) 0.4 for the Apache HTTP Server allows remote attackers to execute arbitrary SQL commands via the SESSION_COOKIE_NAME (session ID) in a cookie.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://search.cpan.org/src/DCASTRO/Apache-AuthCAS-0.5/Changes; http://secunia.com/advisories/29492; http://securityreason.com/securityalert/3439
CVE: CVE-2007-6343
Published: 2007-12-13
Description: Cross-site scripting (XSS) vulnerability in HP OpenView Network Node Manager (OV NNM) 6.41, 7.01, and 7.51 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01218087; http://secunia.com/advisories/27846; http://www.securityfocus.com/bid/26637
CVE: CVE-2007-6344
Published: 2007-12-13
Description: Directory traversal vulnerability in modules/cms/index.php in Mcms Easy Web Make 1.3, allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the template parameter.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-22
References: http://osvdb.org/39139; http://secunia.com/advisories/28053; http://www.securityfocus.com/bid/26821
CVE: CVE-2007-6345
Published: 2007-12-13
Description: SQL injection vulnerability in aurora framework before 20071208 allows remote attackers to execute arbitrary SQL commands via unspecified vectors, possibly the value parameter to the pack_var function in module/db.lib/db_mysql.lib.  NOTE: some of these details are obtained from third party information.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://osvdb.org/39145; http://secunia.com/advisories/28014; http://sourceforge.net/project/shownotes.php?release_id=560073
CVE: CVE-2007-6346
Published: 2007-12-13
Description: Cross-site scripting (XSS) vulnerability in Rainboard before 2.10 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://jvn.jp/jp/JVN%[PII_REDACTED]/index.html; http://secunia.com/advisories/28069; http://udon.be/xss.uhtml
CVE: CVE-2007-6347
Published: 2007-12-13
Description: PHP remote file inclusion vulnerability in blocks/block_site_map.php in ViArt (1) CMS 3.3.2, (2) HelpDesk 3.3.2, (3) Shop Evaluation 3.3.2, and (4) Shop Free 3.3.2 allows remote attackers to execute arbitrary PHP code via a URL in the root_folder_path parameter.  NOTE: some of these details are obtained from third party information.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-94
References: http://osvdb.org/42628; http://secunia.com/advisories/28066; http://www.securityfocus.com/bid/26828
CVE: CVE-2007-6348
Published: 2007-12-14
Description: SquirrelMail 1.4.11 and 1.4.12, as distributed on sourceforge.net before 20071213, has been externally modified to create a Trojan Horse that introduces a PHP remote file inclusion vulnerability, which allows remote attackers to execute arbitrary code.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-94
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]9825&w=2; http://marc.info/?l=squirrelmail-devel&m=[PII_REDACTED]2214&w=2; http://marc.info/?l=squirrelmail-devel&m=[PII_REDACTED]3392&w=2
CVE: CVE-2007-6350
Published: 2007-12-14
Description: scponly 4.6 and earlier allows remote authenticated users to bypass intended restrictions and execute code by invoking dangerous subcommands including (1) unison, (2) rsync, (3) svn, and (4) svnserve, as originally demonstrated by creating a Subversion (SVN) repository with malicious hooks, then using svn to trigger execution of those hooks.
CVSS Score: 8.5 (HIGH)
CWE: CWE-264
References: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=437148; http://bugs.gentoo.org/show_bug.cgi?id=201726; http://osvdb.org/44137
CVE: CVE-2007-4706
Published: 2007-12-15
Description: Heap-based buffer overflow in Apple QuickTime before 7.3.1 allows remote attackers to execute arbitrary code via a crafted QTL file.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-119
References: http://docs.info.apple.com/article.html?artnum=307176; http://lists.apple.com/archives/Security-announce/2007/Dec/msg00000.html; http://osvdb.org/40883
CVE: CVE-2007-4707
Published: 2007-12-15
Description: Multiple unspecified vulnerabilities in the Flash media handler in Apple QuickTime before 7.3.1 allow remote attackers to execute arbitrary code or have other unspecified impacts via a crafted QuickTime movie.
CVSS Score: 9.3 (HIGH)
CWE: CWE-119
References: http://docs.info.apple.com/article.html?artnum=307176; http://lists.apple.com/archives/Security-announce/2007/Dec/msg00000.html; http://secunia.com/advisories/28092
CVE: CVE-2007-5580
Published: 2007-12-15
Description: Buffer overflow in a certain driver in Cisco Security Agent 4.5.1 before 4.5.1.672, 5.0 before 5.0.0.225, 5.1 before 5.1.0.106, and 5.2 before 5.2.0.238 on Windows allows remote attackers to execute arbitrary code via a crafted SMB packet in a TCP session on port (1) 139 or (2) 445.
CVSS Score: 10.0 (HIGH)
CWE: CWE-119
References: http://osvdb.org/39521; http://secunia.com/advisories/27947; http://securityreason.com/securityalert/3425
CVE: CVE-2007-5582
Published: 2007-12-15
Description: Cross-site scripting (XSS) vulnerability in the login page in Cisco CiscoWorks Server (CS), possibly 2.6 and earlier, when using CiscoWorks Common Services 3.0.x and 3.1, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://secunia.com/advisories/27902; http://securityreason.com/securityalert/3449; http://securitytracker.com/id?1019043
CVE: CVE-2007-6151
Published: 2007-12-15
Description: The isdn_ioctl function in isdn_common.c in Linux kernel 2.6.23 allows local users to cause a denial of service via a crafted ioctl struct in which iocts is not null terminated, which triggers a buffer overflow.
CVSS Score: 7.2 (HIGH)
CWE: CWE-119
References: http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commitdiff%3Bh=eafe1aa37e6ec2d56f14732b5240c4dd09f0613a; http://lists.opensuse.org/opensuse-security-announce/2008-02/msg00005.html; http://lists.opensuse.org/opensuse-security-announce/2008-03/msg00007.html
CVE: CVE-2007-6195
Published: 2007-12-15
Description: Buffer overflow in the sw_rpc_agent_init function in swagentd in Software Distributor (SD), and possibly other DCE applications, in HP HP-UX B.11.11 and B.11.23 allows remote attackers to execute arbitrary code or cause a denial of service via malformed arguments in an opcode 0x04 DCE RPC request.
CVSS Score: 10.0 (HIGH)
CWE: CWE-119
References: http://secunia.com/advisories/28087; http://www.securityfocus.com/archive/1/485260/100/0/threaded; http://www.securityfocus.com/bid/26855
CVE: CVE-2007-6249
Published: 2007-12-15
Description: etc-update in Portage before 2.1.3.11 on Gentoo Linux relies on the umask to set permissions for the merge file, often resulting in permissions weaker than those of the original files, which might allow local users to obtain sensitive information by reading the merge file.
CVSS Score: 2.1 (LOW)
CWE: CWE-200
References: http://bugs.gentoo.org/show_bug.cgi?id=193589; http://osvdb.org/42636; http://secunia.com/advisories/28094
CVE: CVE-2007-6338
Published: 2007-12-15
Description: SQL injection vulnerability in userlogin.jsp in Trivantis CourseMill Enterprise Learning Management System 4.1 SP4 allows remote attackers to execute arbitrary SQL commands via the user parameter (username field).  NOTE: some of these details are obtained from third party information.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://packetstorm.linuxsecurity.com/0712-exploits/trivantis-sql.txt; http://secunia.com/advisories/28098; http://securityreason.com/securityalert/3450
CVE: CVE-2007-6357
Published: 2007-12-15
Description: Stack-based buffer overflow in Microsoft Office Access allows remote, user-assisted attackers to execute arbitrary code via a crafted Microsoft Access Database (.mdb) file.  NOTE: due to the lack of details as of 20071210, it is not clear whether this issue is the same as CVE-2007-6026 or CVE-2005-0944.
CVSS Score: 5.8 (MEDIUM)
CWE: CWE-119
References: http://osvdb.org/44150; http://www.computerworld.com/action/article.do?command=viewArticleBasic&articleId=9052538&source=rss_topic17; http://www.informationweek.com/shared/printableArticle.jhtml?articleID=204802012
CVE: CVE-2007-6358
Published: 2007-12-15
Description: pdftops.pl before 1.20 in alternate pdftops filter allows local users to overwrite arbitrary files via a symlink attack on the pdfin.[PID].tmp temporary file, which is created when pdftops reads a PDF file from stdin, such as when pdftops is invoked by CUPS.
CVSS Score: 4.9 (MEDIUM)
References: http://osvdb.org/42029; http://secunia.com/advisories/28113; http://secunia.com/advisories/28139
CVE: CVE-2007-6359
Published: 2007-12-15
Description: The cs_validate_page function in bsd/kern/ubc_subr.c in the xnu kernel 1228.0 and earlier in Apple Mac OS X 10.5.1 allows local users to cause a denial of service (failed assertion and system crash) via a crafted signed Mach-O binary that causes the hashes function to return NULL.
CVSS Score: 4.9 (MEDIUM)
CWE: CWE-189
References: http://digit-labs.org/files/exploits/xnu-superblob-dos.c; http://lists.apple.com/archives/security-announce/2008//May/msg00001.html; http://secunia.com/advisories/28048