267301
|
- |
|
hiki
|
hiki
|
Directory traversal vulnerability in session.rb in Hiki 0.8.0 through 0.8.6 allows remote attackers to delete arbitrary files via directory traversal sequences in the session ID, which is matched aga…
|
CWE-22
Path Traversal
|
CVE-2007-2836
|
2017-07-29 10:31 |
2007-07-3 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
267302
|
- |
|
hiki
|
hiki
|
The vendor has addressed this issue through a product update: http://prdownloads.sourceforge.jp/hiki/25954/hiki-0.8.7.tar.gz
|
CWE-22
Path Traversal
|
CVE-2007-2836
|
2017-07-29 10:31 |
2007-07-3 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
267303
|
- |
|
fireflier
|
fireflier
|
The (1) getRule and (2) getChains functions in server/rules.cpp in fireflierd (fireflier-server) in FireFlier 1.1.6 allow local users to overwrite arbitrary files via a symlink attack on the /tmp/fir…
|
NVD-CWE-Other
|
CVE-2007-2837
|
2017-07-29 10:31 |
2007-07-4 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
267304
|
- |
|
gsambad
|
gsambad
|
The populate_conns function in src/populate_conns.c in GSAMBAD 0.1.4 allows local users to overwrite arbitrary files via a symlink attack on the /tmp/gsambadtmp temporary file.
|
NVD-CWE-Other
|
CVE-2007-2838
|
2017-07-29 10:31 |
2007-07-3 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
267305
|
- |
|
debian
|
gfax
|
gfax 0.4.2 and probably other versions creates temporary files insecurely, which allows local users to execute arbitrary commands via unknown vectors.
|
NVD-CWE-Other
|
CVE-2007-2839
|
2017-07-29 10:31 |
2007-07-6 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
267306
|
- |
|
sky_software
|
shcombobox_activex_control shell_megapack_activex
|
Stack-based buffer overflow in the SetPath function in the shComboBox ActiveX control (shcmb80.ocx) in Sky Software Shell MegaPack ActiveX 8.0 allows remote attackers to execute arbitrary code via a …
|
NVD-CWE-Other
|
CVE-2007-2848
|
2017-07-29 10:31 |
2007-05-25 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
267307
|
- |
|
knowledgetree_document_management
|
knowledgetree_document_management
|
KnowledgeTree Document Management (aka KnowledgeTree Open Source) before STABLE 3.3.7 does not require a password for an unregistered user, when the user exists in Active Directory, which allows remo…
|
NVD-CWE-Other
|
CVE-2007-2849
|
2017-07-29 10:31 |
2007-05-25 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
267308
|
- |
|
citrix
|
access_essentials metaframe
|
The Session Reliability Service (XTE) in Citrix MetaFrame Presentation Server 3.0, Presentation Server 4.0, and Access Essentials 1.0 and 1.5, allows remote attackers to bypass network security polic…
|
NVD-CWE-Other
|
CVE-2007-2850
|
2017-07-29 10:31 |
2007-05-25 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
267309
|
- |
|
citrix
|
access_essentials metaframe
|
The vendor has addressed this issue with the following product updates:
MetaFrame Presentation Server 3.0 for Windows 2000 Server:
EN - http://support.citrix.com/article/CTX112818
FR - http://su…
|
NVD-CWE-Other
|
CVE-2007-2850
|
2017-07-29 10:31 |
2007-05-25 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
267310
|
- |
|
dart
|
dart_ziplite_compression
|
Buffer overflow in a certain ActiveX control in DartZipLite.dll 1.8.5.3 in Dart ZipLite Compression for ActiveX allows user-assisted remote attackers to execute arbitrary code via a long first argume…
|
CWE-119
Incorrect Access of Indexable Resource ('Range Error')
|
CVE-2007-2855
|
2017-07-29 10:31 |
2007-05-25 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|