Security Vulnerabilities Published In 2007(Gain Privilege)

2007 : January February March April May June July August September October November December

CVSS Scores Greater Than: 0 1 2 3 4 5 6 7 8 9

Sort Results By : CVE Number Descending CVE Number Ascending CVSS Score Descending Number Of Exploits Descending

#	CVE ID	CWE ID	Vulnerability Type(s)	Publish Date	Update Date	Score	Gained Access Level	Access	Complexity	Authentication	Conf.	Integ.	Avail.
1	CVE-2007-6594	264	+Priv	2007-12-28	2008-11-15	6.9	Admin	Local	Medium	Not required	Complete	Complete	Complete
IBM Lotus Notes 8 for Linux before 8.0.1 uses (1) unspecified weak permissions for the installation kit obtained through a Notes 8 download and (2) 0777 permissions for the installdata file that is created by setup.sh, which allows local users to gain privileges via a Trojan horse file.
2	CVE-2007-6386	119	DoS Overflow +Priv	2007-12-14	2017-08-07	7.2	Admin	Local	Low	Not required	Complete	Complete	Complete
Stack-based buffer overflow in PccScan.dll before build 1451 in Trend Micro AntiVirus plus AntiSpyware 2008, Internet Security 2008, and Internet Security Pro 2008 allows user-assisted remote attackers to cause a denial of service (SfCtlCom.exe crash), and allows local users to gain privileges, via a malformed .zip archive with a long name, as demonstrated by a .zip file created via format string specifiers in a crafted .uue file.
3	CVE-2007-6334	264	+Priv	2007-12-20	2018-10-15	5.0	None	Remote	Low	Not required	Partial	None	None
Ingres 2.5 and 2.6 on Windows, as used in multiple CA products and possibly other products, assigns the privileges and identity of users to be the same as the first user, which allows remote attackers to gain privileges.
4	CVE-2007-6305	119	Overflow +Priv	2007-12-10	2008-09-05	4.6	None	Local	Low	Not required	Partial	Partial	Partial
Multiple unspecified vulnerabilities in IBM Hardware Management Console (HMC) 7 R3.2.0 allow attackers to gain privileges via "some HMC commands."
5	CVE-2007-6303		+Priv	2007-12-10	2018-10-15	3.5	None	Remote	Medium	Single system	None	Partial	None
MySQL 5.0.x before 5.0.51a, 5.1.x before 5.1.23, and 6.0.x before 6.0.4 does not update the DEFINER value of a view when the view is altered, which allows remote authenticated users to gain privileges via a sequence of statements including a CREATE SQL SECURITY DEFINER VIEW statement and an ALTER VIEW statement.
6	CVE-2007-6294	264	+Priv	2007-12-10	2017-08-07	4.9	None	Local	Low	Not required	None	None	Complete
Multiple unspecified vulnerabilities in IBM Hardware Management Console (HMC) 3 R3.7 allow attackers to gain privileges via "some HMC commands."
7	CVE-2007-6293		+Priv	2007-12-10	2008-11-15	10.0	Admin	Remote	Low	Not required	Complete	Complete	Complete
Multiple unspecified vulnerabilities in IBM Hardware Management Console (HMC) 6 R1.3 allow attackers to gain privileges via "some HMC commands."
8	CVE-2007-6246	264	+Priv	2007-12-19	2017-09-28	4.4	User	Local	Medium	Not required	Partial	Partial	Partial
Adobe Flash Player 9.x up to 9.0.48.0, 8.x up to 8.0.35.0, and 7.x up to 7.0.70.0, when running on Linux, uses insecure permissions for memory, which might allow local users to gain privileges.
9	CVE-2007-6211	264	+Priv	2007-12-03	2018-10-15	7.2	Admin	Local	Low	Not required	Complete	Complete	Complete
Send ICMP Nasty Garbage (sing) on Debian GNU/Linux allows local users to append to arbitrary files and gain privileges via the -L (output log file) option. NOTE: this issue is only a vulnerability in limited environments, since sing is not installed setuid, and the administrator would need to override a non-setuid default during installation.
10	CVE-2007-6210	16	+Priv	2007-12-03	2008-09-05	2.1	None	Local	Low	Not required	Partial	None	None
zabbix_agentd 1.1.4 in ZABBIX before 1.4.3 runs "UserParameter" scripts with gid 0, which might allow local users to gain privileges.
11	CVE-2007-6182	264	+Priv	2007-11-29	2017-07-28	7.2	None	Local	Low	Not required	Complete	Complete	Complete
The responder program in ISPsystem ISPmanager (aka ISPmgr) 4.2.15.1 allows local users to gain privileges via shell metacharacters in command line arguments.
12	CVE-2007-6174	264	+Priv	2007-11-29	2017-07-28	8.5	Admin	Remote	Medium	Single system	Complete	Complete	Complete
PHPDevShell before 0.7.0 allows remote authenticated users to gain privileges via a crafted request to update a user profile. NOTE: some of these details are obtained from third party information.
13	CVE-2007-6081	264	+Priv	2007-11-21	2008-11-15	7.5	User	Remote	Low	Not required	Partial	Partial	Partial
AdventNet EventLog Analyzer build 4030 for Windows, and possibly other versions and platforms, installs a mysql instance with a default "root" account without a password, which allows remote attackers to gain privileges and modify logs.
14	CVE-2007-5970		+Priv	2007-12-10	2017-07-28	5.8	None	Remote	Medium	Not required	Partial	Partial	None
MySQL 5.1.x before 5.1.23 and 6.0.x before 6.0.4 allows remote authenticated users to gain privileges on arbitrary tables via unspecified vectors involving use of table-level DATA DIRECTORY and INDEX DIRECTORY options when creating a partitioned table with the same name as a table on which the user lacks privileges.
15	CVE-2007-5969	264	+Priv	2007-12-10	2018-10-15	7.1	None	Remote	High	Single system	Complete	Complete	Complete
MySQL Community Server 5.0.x before 5.0.51, Enterprise Server 5.0.x before 5.0.52, Server 5.1.x before 5.1.23, and Server 6.0.x before 6.0.4, when a table relies on symlinks created through explicit DATA DIRECTORY and INDEX DIRECTORY options, allows remote authenticated users to overwrite system table information and gain privileges via a RENAME TABLE statement that changes the symlink to point to an existing file.
16	CVE-2007-5964	16	+Priv	2007-12-13	2017-09-28	6.9	Admin	Local	Medium	Not required	Complete	Complete	Complete
The default configuration of autofs 5 in some Linux distributions, such as Red Hat Enterprise Linux (RHEL) 5, omits the nosuid option for the hosts (/net filesystem) map, which allows local users to gain privileges via a setuid program on a remote NFS server.
17	CVE-2007-5956	22	+Priv Dir. Trav.	2007-11-14	2017-07-28	7.2	None	Local	Low	Not required	Complete	Complete	Complete
Directory traversal vulnerability in IBM Informix Dynamic Server (IDS) before 10.00.xC7W1 allows local users to gain privileges by referencing modified NLS message files through directory traversal sequences in the DBLANG environment variable.
18	CVE-2007-5838	16	+Priv	2007-11-06	2017-07-28	7.2	None	Local	Low	Not required	Complete	Complete	Complete
Aclient in Symantec Altiris Deployment Solution 6.x before 6.8.380.0 allows local users to gain local System privileges via the "Enable key-based authentication to Deployment server" browser option, a different issue than CVE-2007-4380.
19	CVE-2007-5829	264	+Priv	2007-11-05	2017-07-28	6.0	Admin	Local	High	Single system	Complete	Complete	Complete
The Disk Mount scanner in Symantec AntiVirus for Macintosh 9.x and 10.x, Norton AntiVirus for Macintosh 10.0 and 10.1, and Norton Internet Security for Macintosh 3.x, uses a directory with weak permissions (group writable), which allows local admin users to gain root privileges by replacing unspecified files, which are executed when a user with physical access inserts a disk and the "Show Progress During Mount Scans" option is enabled.
20	CVE-2007-5756	119	Overflow +Priv	2007-11-13	2017-07-28	6.9	None	Local	Medium	Not required	Complete	Complete	Complete
Multiple array index errors in the bpf_filter_init function in NPF.SYS in WinPcap before 4.0.2, when run in monitor mode (aka Table Management Extensions or TME), and as used in Wireshark and possibly other products, allow local users to gain privileges via crafted IOCTL requests.
21	CVE-2007-5700		+Priv +Info	2007-10-29	2017-07-28	6.3	None	Remote	Medium	Single system	Complete	None	None
The Evaluate LotusScript method in IBM Lotus Domino before 7.0.3 uses an incorrect security context for @ formula commands in some circumstances, which might allow remote authenticated users to gain privileges and obtain sensitive information.
22	CVE-2007-5690	119	Overflow +Priv	2007-10-29	2018-10-15	4.6	User	Local	Low	Not required	Partial	Partial	Partial
DISPUTED Buffer overflow in sethdlc.c in the Asterisk Zaptel 1.4.5.1 might allow local users to gain privileges via a long device name (interface name) in the ifr_name field. NOTE: the vendor disputes this issue, stating that the application requires root access, so privilege boundaries are not crossed.
23	CVE-2007-5667	20	+Priv Bypass	2007-11-13	2018-10-30	7.2	None	Local	Low	Not required	Complete	Complete	Complete
NWFILTER.SYS in Novell Client 4.91 SP 1 through SP 4 for Windows 2000, XP, and Server 2003 makes the \.\nwfilter device available for arbitrary user-mode input via METHOD_NEITHER IOCTLs, which allows local users to gain privileges by passing a kernel address as an argument and overwriting kernel memory locations.
24	CVE-2007-5634	119	DoS Overflow +Priv	2007-10-23	2017-07-28	4.9	None	Local	Low	Not required	None	None	Complete
Speedfan.sys in Alfredo Milani Comparetti SpeedFan 4.33, when used on Microsoft Windows Vista x64, does not properly check a buffer during an IOCTL 0x9c402420 call, which allows local users to cause a denial of service (machine crash) and possibly gain privileges via unspecified vectors.
25	CVE-2007-5633		+Priv	2007-10-23	2017-07-28	7.2	Admin	Local	Low	Not required	Complete	Complete	Complete
Speedfan.sys in Alfredo Milani Comparetti SpeedFan 4.33, when used on Microsoft Windows Vista x64, allows local users to read or write arbitrary MSRs, and gain privileges and load unsigned drivers, via the (1) IOCTL_RDMSR 0x9C402438 and (2) IOCTL_WRMSR 0x9C40243C IOCTLs to \Device\speedfan, as demonstrated by an IOCTL_WRMSR action on MSR_LSTAR.
26	CVE-2007-5619		+Priv	2007-10-21	2009-10-14	7.2	None	Local	Low	Not required	Complete	Complete	Complete
Unspecified vulnerability in VMware Server before 1.0.4 causes user passwords to be recorded in cleartext in server logs, which might allow local users to gain privileges.
27	CVE-2007-5618		+Priv	2007-10-21	2018-10-26	7.2	None	Local	Low	Not required	Complete	Complete	Complete
Unquoted Windows search path vulnerability in the Authorization and other services in VMware Player 1.0.x before 1.0.5 and 2.0 before 2.0.1, VMware Server before 1.0.4, and Workstation 5.x before 5.5.5 and 6.x before 6.0.1 might allow local users to gain privileges via malicious programs.
28	CVE-2007-5587	119	Overflow +Priv	2007-10-19	2018-10-15	6.9	None	Local	Medium	Not required	Complete	Complete	Complete
Buffer overflow in Macrovision SafeDisc secdrv.sys before 4.3.86.0, as shipped in Microsoft Windows XP SP2, XP Professional x64 and x64 SP2, Server 2003 SP1 and SP2, and Server 2003 x64 and x64 SP2 allows local users to overwrite arbitrary memory locations and gain privileges via a crafted argument to a METHOD_NEITHER IOCTL, as originally discovered in the wild.
29	CVE-2007-5548	119	Overflow +Priv	2007-10-18	2008-11-15	6.9	Admin	Local	Medium	Not required	Complete	Complete	Complete
Multiple stack-based buffer overflows in Command EXEC in Cisco IOS allow local users to gain privileges via unspecified vectors, aka (1) PSIRT-0474975756 and (2) PSIRT-0388256465. NOTE: as of 20071016, the only disclosure is a vague pre-advisory with no actionable information. However, since it is from a well-known researcher, it is being assigned a CVE identifier for tracking purposes.
30	CVE-2007-5539		+Priv	2007-10-17	2017-07-28	9.0	None	Remote	Low	Single system	Complete	Complete	Complete
Unspecified vulnerability in Cisco Unified Intelligent Contact Management Enterprise (ICME), Unified ICM Hosted (ICMH), Unified Contact Center Enterprise (UCCE), Unified Contact Center Hosted (UCCH), and System Unified Contact Center Enterprise (SUCCE) 7.1(5) allows remote authenticated users to gain privileges, and read reports or change the SUCCE configuration, via certain web interfaces, aka CSCsj55686.
31	CVE-2007-5382	264	+Priv	2007-10-11	2017-07-28	10.0	Admin	Remote	Low	Not required	Complete	Complete	Complete
The conversion utility for converting CiscoWorks Wireless LAN Solution Engine (WLSE) 4.1.91.0 and earlier to Cisco Wireless Control System (WCS) creates administrator accounts with default usernames and passwords, which allows remote attackers to gain privileges.
32	CVE-2007-5350	264	+Priv	2007-12-11	2018-10-15	7.2	Admin	Local	Low	Not required	Complete	Complete	Complete
Unspecified vulnerability in the Windows Advanced Local Procedure Call (ALPC) in the kernel in Microsoft Windows Vista allows local users to gain privileges via unspecified vectors involving "legacy reply paths."
33	CVE-2007-5254	264	+Priv	2007-10-06	2008-11-15	7.2	Admin	Local	Low	Not required	Complete	Complete	Complete
VirusBlokAda Vba32 AntiVirus 3.12.2 uses weak permissions (Everyone:Write) for its installation directory, which allows local users to gain privileges by replacing application programs, as demonstrated by replacing vba32ldr.exe.
34	CVE-2007-5194	264	+Priv	2007-10-04	2018-10-15	6.9	Admin	Local	Medium	Not required	Complete	Complete	Complete
The Chroot server in rMake 1.0.11 creates a /dev/zero device file with read/write permissions for the rMake user and the same minor device number as /dev/port, which might allow local users to gain root privileges.
35	CVE-2007-5191	264	+Priv	2007-10-04	2018-10-15	6.9	Admin	Local	Medium	Not required	Complete	Complete	Complete
mount and umount in util-linux and loop-aes-utils call the setuid and setgid functions in the wrong order and do not check the return values, which might allow attackers to gain privileges via helpers such as mount.nfs.
36	CVE-2007-5101	264	+Priv	2007-09-26	2017-07-28	7.2	Admin	Local	Low	Not required	Complete	Complete	Complete
ChironFS before 1.0 RC7 sets user/group ownership to the mounter account instead of the creator account when files are created, which allows local users to gain privileges.
37	CVE-2007-5047	20	DoS +Priv	2007-09-23	2018-10-15	7.2	Admin	Local	Low	Not required	Complete	Complete	Complete
Norton Internet Security 2008 15.0.0.60 does not properly validate certain parameters to System Service Descriptor Table (SSDT) function handlers, which allows local users to cause a denial of service (crash) and possibly gain privileges via the NtOpenSection kernel SSDT hook. NOTE: the NtCreateMutant and NtOpenEvent function hooks are already covered by CVE-2007-1793.
38	CVE-2007-5044	264	DoS +Priv	2007-09-23	2018-10-15	6.9	Admin	Local	Medium	Not required	Complete	Complete	Complete
ZoneAlarm Pro 7.0.362.000 does not properly validate certain parameters to System Service Descriptor Table (SSDT) function handlers, which allows local users to cause a denial of service (crash) and possibly gain privileges via the (1) NtCreatePort and (2) NtDeleteFile kernel SSDT hooks, a partial regression of CVE-2007-2083.
39	CVE-2007-5043	20	DoS +Priv	2007-09-23	2018-10-15	4.4	User	Local	Medium	Not required	Partial	Partial	Partial
Kaspersky Internet Security 7.0.0.125 does not properly validate certain parameters to System Service Descriptor Table (SSDT) function handlers, which allows local users to (1) cause a denial of service (crash) and possibly gain privileges via the NtCreateSection kernel SSDT hook or (2) cause a denial of service (avp.exe service outage) via the NtLoadDriver kernel SSDT hook. NOTE: this issue may partially overlap CVE-2006-3074.
40	CVE-2007-5042	264	DoS +Priv	2007-09-23	2018-10-15	4.6	User	Local	Low	Not required	Partial	Partial	Partial
Outpost Firewall Pro 4.0.1025.7828 does not properly validate certain parameters to System Service Descriptor Table (SSDT) function handlers, which allows local users to cause a denial of service (crash) and possibly gain privileges via the (1) NtCreateKey, (2) NtDeleteFile, (3) NtLoadDriver, (4) NtOpenProcess, (5) NtOpenSection, (6) NtOpenThread, and (7) NtUnloadDriver kernel SSDT hooks, a partial regression of CVE-2006-7160.
41	CVE-2007-5041	20	DoS +Priv	2007-09-23	2018-10-15	4.6	User	Local	Low	Not required	Partial	Partial	Partial
G DATA InternetSecurity 2007 does not properly validate certain parameters to System Service Descriptor Table (SSDT) function handlers, which allows local users to cause a denial of service (crash) and possibly gain privileges via the (1) NtCreateKey and (2) NtOpenProcess kernel SSDT hooks.
42	CVE-2007-5040	20	DoS +Priv	2007-09-23	2018-10-15	2.1	None	Local	Low	Not required	None	None	Partial
Ghost Security Suite alpha 1.200 does not properly validate certain parameters to System Service Descriptor Table (SSDT) function handlers, which allows local users to cause a denial of service (crash) and possibly gain privileges via the (1) NtCreateKey, (2) NtCreateThread, (3) NtDeleteValueKey, (4) NtQueryValueKey, (5) NtSetSystemInformation, and (6) NtSetValueKey kernel SSDT hooks.
43	CVE-2007-5039	20	DoS +Priv	2007-09-23	2018-10-15	2.1	None	Local	Low	Not required	None	None	Partial
Ghost Security Suite beta 1.110 does not properly validate certain parameters to System Service Descriptor Table (SSDT) function handlers, which allows local users to cause a denial of service (crash) and possibly gain privileges via the (1) NtCreateKey, (2) NtDeleteValueKey, (3) NtQueryValueKey, (4) NtSetSystemInformation, and (5) NtSetValueKey kernel SSDT hooks.
44	CVE-2007-5023	264	+Priv	2007-09-21	2019-08-01	6.9	Admin	Local	Medium	Not required	Complete	Complete	Complete
Unquoted Windows search path vulnerability in EMC VMware Workstation before 5.5.5 Build 56455 and 6.x before 6.0.1 Build 55017, Player before 1.0.5 Build 56455 and Player 2 before 2.0.1 Build 55017, ACE before 1.0.3 Build 54075, and Server before 1.0.4 Build 56528 allows local users to gain privileges via unspecified vectors, possibly involving a malicious "program.exe" file in the C: folder.
45	CVE-2007-4972	264	DoS +Priv	2007-09-18	2018-10-15	1.9	None	Local	Medium	Not required	None	None	Partial
RegMon 7.04 does not properly validate certain parameters to System Service Descriptor Table (SSDT) function handlers, which allows local users to cause a denial of service (crash) and possibly gain privileges via kernel SSDT hooks to the (1) NtCreateKey and (2) NtOpenKey Windows Native API functions.
46	CVE-2007-4971	20	DoS +Priv	2007-09-18	2018-10-15	4.4	None	Local	Medium	Not required	Partial	Partial	Partial
ProSecurity 1.40 Beta 2 does not properly validate certain parameters to System Service Descriptor Table (SSDT) function handlers, which allows local users to cause a denial of service (crash) and possibly gain privileges via kernel SSDT hooks for Windows Native API functions including (1) NtCreateKey, (2) NtDeleteFile, (3) NtLoadDriver, (4) NtOpenSection, and (5) NtSetSystemTime.
47	CVE-2007-4970	20	DoS +Priv	2007-09-18	2018-10-15	4.4	None	Local	Medium	Not required	Partial	Partial	Partial
ProcessGuard 3.410 does not properly validate certain parameters to System Service Descriptor Table (SSDT) function handlers, which allows local users to cause a denial of service (crash) and possibly gain privileges via kernel SSDT hooks for Windows Native API functions including (1) NtCreateFile, (2) NtCreateKey, (3) NtDeleteValueKey, (4) NtOpenFile, (5) NtOpenKey, and (6) NtSetValueKey.
48	CVE-2007-4969	20	DoS +Priv	2007-09-18	2018-10-15	4.4	None	Local	Medium	Not required	Partial	Partial	Partial
Process Monitor 1.22 does not properly validate certain parameters to System Service Descriptor Table (SSDT) function handlers, which allows local users to cause a denial of service (crash) and possibly gain privileges via unspecified kernel SSDT hooks for Windows Native API functions including (1) NtCreateKey, (2) NtDeleteValueKey, (3) NtLoadKey, (4) NtOpenKey, (5) NtQueryValueKey, (6) NtSetValueKey, and (7) NtUnloadKey.
49	CVE-2007-4968	20	DoS +Priv	2007-09-18	2018-10-15	4.4	None	Local	Medium	Not required	Partial	Partial	Partial
Privatefirewall 5.0.14.2 does not properly validate certain parameters to System Service Descriptor Table (SSDT) function handlers, which allows local users to cause a denial of service (crash) and possibly gain privileges via kernel SSDT hooks for (1) NtOpenProcess and (2) NtOpenThread.
50	CVE-2007-4967	20	DoS +Priv	2007-09-18	2018-10-15	4.4	None	Local	Medium	Not required	Partial	Partial	Partial
Online Armor Personal Firewall 2.0.1.215 does not properly validate certain parameters to System Service Descriptor Table (SSDT) function handlers, which allows local users to cause a denial of service (crash) and possibly gain privileges via unspecified kernel SSDT hooks for Windows Native API functions including (1) NtAllocateVirtualMemory, (2) NtConnectPort, (3) NtCreateFile, (4) NtCreateKey, (5) NtCreatePort, (6) NtDeleteFile, (7) NtDeleteValueKey, (8) NtLoadKey, (9) NtOpenFile, (10) NtOpenProcess, (11) NtOpenThread, (12) NtResumeThread, (13) NtSetContextThread, (14) NtSetValueKey, (15) NtSuspendProcess, (16) NtSuspendThread, and (17) NtTerminateThread.

Total number of vulnerabilities : 242 Page : 1 (This Page)2 3 4 5