|
298611
|
- |
|
yarssr
|
yarssr
|
GUI.pm in yarssr 0.2.2, when Gnome default URL handling is disabled, allows remote attackers to execute arbitrary commands via shell metacharacters in a link element in a feed.
|
CWE-94
Code Injection
|
CVE-2007-5837
|
2017-07-29 10:33 |
2007-11-6 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
298612
|
- |
|
symantec
|
altiris_deployment_solution
|
Aclient in Symantec Altiris Deployment Solution 6.x before 6.8.380.0 allows local users to gain local System privileges via the "Enable key-based authentication to Deployment server" browser option, …
|
CWE-16
Configuration
|
CVE-2007-5838
|
2017-07-29 10:33 |
2007-11-7 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
298613
|
- |
|
bitchx
|
bitchx
|
The e_hostname function in commands.c in BitchX 1.1a allows local users to overwrite arbitrary files via a symlink attack on temporary files when using the (1) HOSTNAME or (2) IRCHOST command.
|
CWE-59
Link Following
|
CVE-2007-5839
|
2017-07-29 10:33 |
2007-11-7 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
298614
|
- |
|
apple
|
mac_os_x
|
Race condition in the CFURLWriteDataAndPropertiesToResource API in Core Foundation in Apple Mac OS X 10.4.11 creates files with insecure permissions, which might allow local users to obtain sensitive…
|
CWE-362
Race Condition
|
CVE-2007-5847
|
2017-07-29 10:33 |
2007-12-20 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
298615
|
- |
|
easy_software_products
|
cups
|
Integer underflow in the asn1_get_string function in the SNMP back end (backend/snmp.c) for CUPS 1.2 through 1.3.4 allows remote attackers to execute arbitrary code via a crafted SNMP response that t…
|
CWE-189
Numeric Errors
|
CVE-2007-5849
|
2017-07-29 10:33 |
2007-12-20 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
298616
|
- |
|
apple
|
mac_os_x
|
Heap-based buffer overflow in Desktop Services in Apple Mac OS X 10.4.11 allows user-assisted attackers to execute arbitrary code via a directory with a crafted .DS_Store file.
|
CWE-119
Incorrect Access of Indexable Resource ('Range Error')
|
CVE-2007-5850
|
2017-07-29 10:33 |
2007-12-20 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
298617
|
- |
|
apple
|
mac_os_x
|
iChat in Apple Mac OS X 10.4.11 allows network-adjacent remote attackers to automatically initiate a video connection to another user via unknown vectors.
|
NVD-CWE-noinfo CWE-264
Permissions, Privileges, and Access Controls
|
CVE-2007-5851
|
2017-07-29 10:33 |
2007-12-20 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
298618
|
- |
|
apple
|
mac_os_x
|
Unspecified vulnerability in IO Storage Family in Apple Mac OS X 10.4.11 allows user-assisted attackers to cause a denial of service (system shutdown) or execute arbitrary code via a disk image with …
|
NVD-CWE-noinfo
|
CVE-2007-5853
|
2017-07-29 10:33 |
2007-12-20 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
298619
|
- |
|
apple
|
mac_os_x
|
Launch Services in Apple Mac OS X 10.4.11 and 10.5.1 does not treat HTML files as unsafe content, which allows attackers to conduct cross-site scripting (XSS) attacks or obtain sensitive information …
|
CWE-79
Cross-site Scripting
|
CVE-2007-5854
|
2017-07-29 10:33 |
2007-12-20 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
298620
|
- |
|
apple
|
mac_os_x
|
Mail in Apple Mac OS X 10.4.11 and 10.5.1, when an SMTP account has been set up using Account Assistant, can use plaintext authentication even when MD5 Challenge-Response authentication is available,…
|
CWE-287
Improper Authentication
|
CVE-2007-5855
|
2017-07-29 10:33 |
2007-12-20 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|