Security Advisories

2008

Aug05

R7-0033: Apache HTTP Server mod_proxy_ftp Wildcard Characters Cross-Site Scripting

Mar10

R7-0032: Microsoft Internet Explorer FTP Command Injection Vulnerability

2007

Dec06

R7-0031: JFreeChart Image Map Cross-Site Scripting Vulnerabilities

May14

R7-0030: Caucho Resin Multiple Path Disclosure Vulnerabilities

May14

R7-0029: Caucho Resin Web Application Directory Traversal

May14

R7-0028: Caucho Resin World Readable DOS Device

Apr30

R7-0027: Denial-of-Service in the Xrender Extension's Trapezoid Drawing Routines

2006

Oct17

R7-0026: HTTP Header Injection Vulnerabilities in the Flash Player Plugin

Oct16

R7-0025: Buffer Overflow in NVIDIA Binary Graphics Driver For Linux

May16

R7-0024: Caucho Resin Windows Directory Traversal Vulnerability, CVE-2006-1953

Apr21

R7-0023: Symantec Scan Engine File Disclosure Vulnerability, CVE-2006-0232

Apr21

R7-0022: Symantec Scan Engine Known Immutable DSA Private Key, CVE-2006-0231

Apr21

R7-0021: Symantec Scan Engine Authentication Fundamental Design Error, CVE-2006-0230

2005

Aug17

R7-0020: Directory traversal vulnerability in WinAgents TFTP Server for Windows, CVE-2006-1952

Apr21

R7-0019: Directory traversal vulnerability in SolarWinds TFTP Server for Windows, CVE-2006-1951

Mar23

R7-0018: OpenBSD isakmpd payload handling denial-of-service vulnerabilities, CVE ID: CAN-2004-0218, CAN-2004-0219, CAN-2004-0220, CAN-2004-0221, CAN-2004-0222

Mar30

R7-0017: TCPDUMP ISAKMP payload handling denial-of-service vulnerabilities, CVE ID: CAN-2004-0183, CAN-2004-0184

2003

Nov20

R7-0016: Sybase ASE 12.5 Remote Password Array Denial of Service, CVE ID: CAN-2003-0327

Jul22

R7-0015: Multiple Vulnerabilities Apple QuickTime/Darwin Streaming Server, CVE ID: CAN-2003-0421, CAN-2003-0422, CAN-2003-0423, CAN-2003-0424, CAN-2003-0425, CAN-2003-0426, CAN-2003-0502

June18

R7-0014: RSA SecurID ACE Agent Cross Site Scripting, CVE ID: CAN-2003-0389

Apr11

R7-0013: Heap Corruption in Gaim-Encryption Plugin, CVE ID: CAN-2003-0163

Mar12

R7-0012: Lotus Notes/Domino R6-beta PROTOS LDAP Denial of Service Regression, CVE ID: CAN-2001-1311 (regression)

Mar12

R7-0011: Lotus Notes/Domino Web Retriever HTTP Status Buffer Overflow, CVE ID: CAN-2003-0123

Mar12

R7-0010: Buffer Overflow in Lotus Notes Protocol Authentication, CVE ID: CAN-2003-0122

Mar06

Lotus Notes/Domino vulnerabilities: impact and how to mitigate your risks

2002

Dec16

R7-0009: Vulnerabilities in SSH2 Implementations from Multiple Vendors, CVE ID: CAN-2002-1357/CAN-2002-1358/CAN-2002-1359/CAN-2002-1360, CERT CA-2002-36, CERT VU#389665

Oct23

R7-0008: IBM WebSphere Edge Server Caching Proxy Cross-Site Scripting Issues, CVE ID: CAN-2002-1167/CAN-2002-1168, BID 6000/6001

Oct23

R7-0007: IBM WebSphere Edge Server Caching Proxy Denial of Service, CVE ID: CAN-2002-1169, BID 6002

Oct09

R7-0006: Oracle 8i/9i Listener SERVICE_CURLOAD Denial of Service, CVE ID: CAN-2002-1118, BID 5678

Sep06

R7-0005: Granite Software ZMerge Administration Database Insecure Default ACLs, CVE ID: CAN-2002-0664; BID 5101

Oct02

R7-0004: Multiple Vendor Long ZIP Entry Filename Processing Issues, CVE ID: CAN-2002-0370, CERT VU#383779

May02

R7-0003: Nautilus Symlink Vulnerability, CVE ID: CAN-2002-0157; BID 4373

2001

Nov30

R7-0002: Alchemy Eye Remote Unauthenticated Log Viewing, CVE ID: CAN-2001-0870; BID 3598

Nov29

R7-0001: Alchemy Eye HTTP Remote Command Execution, CVE ID: CAN-2001-0871; BID 3599