# CVEs published 2007-12-06

15 CVEs were published on December 6, 2007: 0 critical, 0 high. Days are UTC.

- [CVE-2007-5769](https://cve.now/CVE-2007-5769.md): Double free vulnerability in the getreply function in ftp.c in netkit ftp (netkit-ftp) 0.17 20040614 and later allows remote FTP servers to (no CVSS)
- [CVE-2007-5938](https://cve.now/CVE-2007-5938.md): The iwl\_set\_rate function in compatible/iwl3945-base.c in iwlwifi 1.1.21 and earlier dereferences an iwl\_get\_hw\_mode return value without ch (no CVSS)
- [CVE-2007-5939](https://cve.now/CVE-2007-5939.md): The gss\_userok function in appl/ftp/ftpd/gss\_userok.c in Heimdal 0.7.2 does not allocate memory for the ticketfile pointer before calling fr (no CVSS)
- [CVE-2007-6263](https://cve.now/CVE-2007-6263.md): The dataconn function in ftpd.c in netkit ftpd (netkit-ftpd) 0.17, when certain modifications to support SSL have been introduced, calls fcl (no CVSS)
- [CVE-2004-2758](https://cve.now/CVE-2004-2758.md): Multiple unspecified vulnerabilities in the H.323 protocol implementation for Sun SunForum 3.2 and 3D 1.0 allow remote attackers to cause a (no CVSS)
- [CVE-2007-4575](https://cve.now/CVE-2007-4575.md): HSQLDB before 1.8.0.9, as used in OpenOffice.org (OOo) 2 before 2.3.1, allows user-assisted remote attackers to execute arbitrary Java code (no CVSS)
- [CVE-2007-5894](https://cve.now/CVE-2007-5894.md): The reply function in ftpd.c in the gssftp ftpd in MIT Kerberos 5 (krb5) does not initialize the length variable when auth\_type has a certai (no CVSS)
- [CVE-2007-5901](https://cve.now/CVE-2007-5901.md): Use-after-free vulnerability in the gss\_indicate\_mechs function in lib/gssapi/mechglue/g\_initialize.c in MIT Kerberos 5 (krb5) has unknown i (no CVSS)
- [CVE-2007-5902](https://cve.now/CVE-2007-5902.md): Integer overflow in the svcauth\_gss\_get\_principal function in lib/rpc/svc\_auth\_gss.c in MIT Kerberos 5 (krb5) allows remote attackers to hav (no CVSS)
- [CVE-2007-5971](https://cve.now/CVE-2007-5971.md): Double free vulnerability in the gss\_krb5int\_make\_seal\_token\_v3 function in lib/gssapi/krb5/k5sealv3.c in MIT Kerberos 5 (krb5) has unknown (no CVSS)
- [CVE-2007-5972](https://cve.now/CVE-2007-5972.md): Double free vulnerability in the krb5\_def\_store\_mkey function in lib/kdb/kdb\_default.c in MIT Kerberos 5 (krb5) 1.5 has unknown impact and r (no CVSS)
- [CVE-2007-6194](https://cve.now/CVE-2007-6194.md): Unspecified vulnerability in HP Select Identity 4.01 before 4.01.012 and 4.1x before 4.13.003 allows remote attackers to obtain unspecified (no CVSS)
- [CVE-2007-6260](https://cve.now/CVE-2007-6260.md): The installation process for Oracle 10g and llg uses accounts with default passwords, which allows remote attackers to obtain login access b (no CVSS)
- [CVE-2007-6261](https://cve.now/CVE-2007-6261.md): Integer overflow in the load\_threadstack function in the Mach-O loader (mach\_loader.c) in the xnu kernel in Apple Mac OS X 10.4 through 10.5 (no CVSS)
- [CVE-2007-6262](https://cve.now/CVE-2007-6262.md): A certain ActiveX control in axvlc.dll in VideoLAN VLC 0.8.6 before 0.8.6d allows remote attackers to execute arbitrary code via crafted arg (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2007-12-06
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.