Document ID: 91923

Advisory ID: cisco-sa-20070815-vpnclient

Two vulnerabilities exist in the Cisco VPN Client for Microsoft Windows that may allow unprivileged users to elevate their privileges to those of the LocalSystem account.

A workaround exists for one of the two vulnerabilities disclosed in this advisory.

Cisco has made free software available to address these vulnerabilities for affected customers...

Security advisory: McAfee Virus Scan for Linux and Unix v5.10.0 Local
Buffer Overflow

II - SUMMARY

Description: Local buffer overflow vulnerability in McAfee Virus Scan
for Linux and Unix allows arbitrary code execution...

Topic: Microsoft IE5 CSS Parsing Memory Corruption Vulnerability

Release Date: 2007-08-15

CVE CAN ID : CVE-2007-0943

Affected system:
==============
Internet Explorer 5.01

Unaffected system:
==============

Impact:
======
NSFocus Security Team discovered a memory corruption vulnerability in IE 5 that allows arbitrary code execution when parsing a malicious CSS file...

RedTeam Pentesting discovered a remote command execution in the Fujitsu-Siemens ServerView during a penetration test. The DBAsciiAccess CGI script is vulnerable to a remote command execution because of a parameter which is not properly sanitized. An attacker may run arbitrary commands on the server with the permissions of the webserver user...