Section: .. / 0705-advisories /
| /// File Name: |
vmware-gpf.txt |
Description:
|
Vmware Virtualization products are affected by a design flaw which can lead to a local denial of service vulnerability within the Guest OS.
| | Author: | Ruben Santamarta | | Homepage: | http://www.reversemode.com/ | | File Size: | 7920 | | Related CVE(s): | CVE-2007-1877 | | Last Modified: | May 8 11:06:21 2007 |
| MD5 Checksum: | 8ed06141300222f276e4ddb49aa37d0f |
|
| /// File Name: |
yate-dos.txt |
Description:
|
Yate version 1.1.0 suffers from a denial of service vulnerability due to a null pointer reference.
| | Author: | Yuri Gushin | | File Size: | 3438 | | Related CVE(s): | CVE-2007-1693 | | Last Modified: | May 3 08:53:37 2007 |
| MD5 Checksum: | c64818eba907977787a7e7d7c7602f00 |
|
| /// File Name: |
yenc32.txt |
Description:
|
The yEnc32 Decoder version 1.0.7.207 suffers from a long filename buffer overflow vulnerability.
| | Author: | Tan Chew Keong | | Homepage: | http://vuln.sg/ | | File Size: | 478 | | Last Modified: | May 15 07:30:35 2007 |
| MD5 Checksum: | 960a8234284957926ef2b4be6c181a1c |
|
| /// File Name: |
za6.txt |
Description:
|
ZoneAlarm 6 insufficiently protects the \Device\vsdatant driver from manipulation by malicious applications.
| | Homepage: | http://www.matousec.com/ | | File Size: | 1248 | | Last Modified: | May 3 08:25:45 2007 |
| MD5 Checksum: | dd177d60cf835d5f509eb46480f37bff |
|
| /// File Name: |
ZDI-07-023.txt |
Description:
|
A vulnerability allows attackers to execute arbitrary code on systems with vulnerable installations of Apple's QuickTime. User interaction is required to exploit this vulnerability in that the target must visit a malicious page.
| | Author: | Dino A. Dai Zovi | | Homepage: | http://www.zerodayinitiative.com/ | | File Size: | 2959 | | Related CVE(s): | CVE-2007-2175 | | Last Modified: | May 3 09:03:57 2007 |
| MD5 Checksum: | fc419cf943610bda4a6afd95c1c34c08 |
|
| /// File Name: |
ZDI-07-024.txt |
Description:
|
Multiple vulnerabilities allow attackers to execute arbitrary code on vulnerable installations of Trend Micro ServerProtect. Authentication is not required to exploit these vulnerabilities. The specific flaw exists in the EarthAgent.exe daemon, bound by default on TCP port 3628 and exposing the following DCE/RPC interface through TmRpcSrv.dll.
| | Author: | Eric DETOISIEN | | Homepage: | http://www.zerodayinitiative.com/ | | File Size: | 3024 | | Related CVE(s): | CVE-2007-2508 | | Last Modified: | May 8 11:24:36 2007 |
| MD5 Checksum: | dd15fef7d5127f9f63901107e860298c |
|
| /// File Name: |
ZDI-07-025.txt |
Description:
|
A vulnerability allows attackers to execute arbitrary code on vulnerable installations of Trend Micro ServerProtect. Authentication is not required to exploit this vulnerability. The specific flaw exists in the SpntSvc.exe daemon, bound by default on TCP port 5168 and exposing the following DCE/RPC interface through TmRpcSrv.dll.
| | Author: | Eric DETOISIEN | | Homepage: | http://www.zerodayinitiative.com/ | | File Size: | 3099 | | Related CVE(s): | CVE-2007-2508 | | Last Modified: | May 8 11:25:35 2007 |
| MD5 Checksum: | 56194a1cec388cf8c1ce4cf1d2660283 |
|
| /// File Name: |
ZDI-07-026.txt |
Description:
|
A vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Microsoft Office Excel. Exploitation requires that the attacker coerce the target into opening a malicious .XLS file.
| | Author: | Manuel Santamarina Suarez | | Homepage: | http://www.zerodayinitiative.com/ | | File Size: | 2647 | | Related CVE(s): | CVE-2007-0215 | | Last Modified: | May 10 03:39:18 2007 |
| MD5 Checksum: | cbfb13003f84a5ef4c8519777a101fc6 |
|
| /// File Name: |
ZDI-07-027.txt |
Description:
|
A vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Microsoft Internet Explorer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page.
| | Homepage: | http://www.zerodayinitiative.com/ | | File Size: | 2690 | | Related CVE(s): | CVE-2007-0944 | | Last Modified: | May 10 03:40:19 2007 |
| MD5 Checksum: | 86df24dec24193dcc84c91240b57414e |
|
| /// File Name: |
ZDI-07-028.txt |
Description:
|
A vulnerability allows attackers to execute arbitrary code on vulnerable installations of Computer Associates AntiVirus Server. User interaction is not required to exploit this vulnerability. The specific flaw exists in the authentication function of the inoweb service that listens by default on TCP port 12168. The function copies both the username and password into fixed-length stack buffers. If an attacker provides overly long values for these parameters, an exploitable buffer overflow occurs.
| | Homepage: | http://www.zerodayinitiative.com/ | | File Size: | 2648 | | Related CVE(s): | CVE-2007-2522 | | Last Modified: | May 12 04:33:25 2007 |
| MD5 Checksum: | fc6c254e6a86c9bbb68cd9143fc16f7e |
|
| /// File Name: |
ZDI-07-029.txt |
Description:
|
A vulnerability allows attackers to execute arbitrary code on vulnerable installations of Samba. User interaction is not required to exploit this vulnerability. The specific flaw exists in the parsing of RPC requests to the LSA RPC interface. When parsing a request to LsarAddPrivilegesToAccount, heap allocation is calculated based on user input. By specifying invalid values, heap blocks can be overwritten leading to remote code execution.
| | Homepage: | http://www.zerodayinitiative.com/ | | File Size: | 2508 | | Related CVE(s): | CVE-2007-2446 | | Last Modified: | May 17 04:08:01 2007 |
| MD5 Checksum: | ce96031b28a8ba05deb2c066745918c9 |
|
| /// File Name: |
ZDI-07-030.txt |
Description:
|
A vulnerability allows attackers to execute arbitrary code on vulnerable installations of Samba. User interaction is not required to exploit this vulnerability. The specific flaw exists in the parsing of RPC requests to the DFS RPC interface. When parsing a request to DFSEnum, heap allocation is calculated based on user input. By specifying invalid values, heap blocks can be overwritten leading to remote code execution.
| | Homepage: | http://www.zerodayinitiative.com/ | | File Size: | 2493 | | Related CVE(s): | CVE-2007-2446 | | Last Modified: | May 17 04:12:06 2007 |
| MD5 Checksum: | d549778dfbb738edf585c7b51106b601 |
|
| /// File Name: |
ZDI-07-031.txt |
Description:
|
A vulnerability allows attackers to execute arbitrary code on vulnerable installations of Samba. User interaction is not required to exploit this vulnerability. The specific flaw exists in the parsing of RPC requests to the SPOOLSS RPC interface. When parsing a request to RFNPCNEX, heap allocation is calculated based on user input. By specifying invalid values, heap blocks can be overwritten leading to remote code execution.
| | Homepage: | http://www.zerodayinitiative.com/ | | File Size: | 2495 | | Related CVE(s): | CVE-2007-2446 | | Last Modified: | May 17 04:14:52 2007 |
| MD5 Checksum: | f8dc71e8ab1c7c4c646b490428db484b |
|
| /// File Name: |
ZDI-07-032.txt |
Description:
|
A vulnerability allows attackers to execute arbitrary code on vulnerable installations of Samba. User interaction is not required to exploit this vulnerability. The specific flaw exists in the parsing of RPC requests to the SRVSVC RPC interface. When parsing a request to NetSetFileSecurity, heap allocation is calculated based on user input. By specifying invalid values, heap blocks can be overwritten leading to remote code execution.
| | Homepage: | http://www.zerodayinitiative.com/ | | File Size: | 2493 | | Related CVE(s): | CVE-2007-2446 | | Last Modified: | May 17 04:15:26 2007 |
| MD5 Checksum: | f4fe06853dd941c84f9b054af34a737b |
|
| /// File Name: |
ZDI-07-033.txt |
Description:
|
A vulnerability allows attackers to execute arbitrary code on vulnerable installations of Samba. User interaction is not required to exploit this vulnerability. The specific flaw exists in the parsing of RPC requests to the LSA RPC interface. When parsing a request to LsarLookupSids/LsarLookupSids2, heap allocation is calculated based on user input. By specifying invalid values, heap blocks can be overwritten leading to remote code execution.
| | Homepage: | http://www.zerodayinitiative.com/ | | File Size: | 2510 | | Related CVE(s): | CVE-2007-2446 | | Last Modified: | May 17 04:15:58 2007 |
| MD5 Checksum: | 35687f97d20fbe66af1e1da1c5b0e9ab |
|
|
|
|
|
![.:[ packet storm ]:.](/images/ps-ani.gif)
