Mandriva Update for pulseaudio MDVA-2010:107 (pulseaudio)

Check for the Version of pulseaudio OpenVAS Vulnerability Test Mandriva Update for pulseaudio MDVA-2010:107 pulseaudio Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify...

openSUSE Security Update : libpulse-browse0 (libpulse-browse0-2129)

Due to a race condition in pulseaudio a local attacker could make pulseaudio change ownership and permissions of arbitrary files. The problem is only security relevant if pulseaudio is run in 'system mode' which is not the case by default CVE-2009-1299. %NASLMINLEVEL 70300 C Tenable Network...

openSUSE Security Update : libpulse-browse0 (libpulse-browse0-2129)

Due to a race condition in pulseaudio a local attacker could make pulseaudio change ownership and permissions of arbitrary files. The problem is only security relevant if pulseaudio is run in 'system mode' which is not the case by default CVE-2009-1299. %NASLMINLEVEL 70300 C Tenable Network...

openSUSE Security Update : libpulse-browse0 (libpulse-browse0-2131)

Due to a race condition in pulseaudio a local attacker could make pulseaudio change ownership and permissions of arbitrary files. The problem is only security relevant if pulseaudio is run in 'system mode' which is not the case by default CVE-2009-1299. This update also improves some latency...

Debian DSA-2015-1 : drbd8 - privilege escalation

A local vulnerability has been discovered in drbd8. Philipp Reisner fixed an issue in the drbd kernel module that allows local users to send netlink packets to perform actions that should be restricted to users with CAPSYSADMIN privileges. This is a similar issue to those described by...

[SECURITY] [DSA 2015-1] New drbd8 packages fix privilege escalation

------------------------------------------------------------------------ Debian Security Advisory DSA-2015 [email protected] http://www.debian.org/security/ Dann Frazier March 15, 2010 http://www.debian.org/security/faq - ------------------------------------------------------------------------...

Debian DSA-2017-1 : pulseaudio - insecure temporary directory

Dan Rosenberg discovered that the PulseAudio sound server creates a temporary directory with a predictable name. This allows a local attacker to create a Denial of Service condition or possibly disclose sensitive information to unprivileged users. %NASLMINLEVEL 70300 C Tenable Network Security,...

[SECURITY] [DSA 2017-1] New pulseaudio packages fix insecure temporary directory

------------------------------------------------------------------------ Debian Security Advisory DSA-2017-1 [email protected] http://www.debian.org/security/ Giuseppe Iuculano March 15, 2010 http://www.debian.org/security/faq -...

[SECURITY] [DSA 2017-1] New pulseaudio packages fix insecure temporary directory

------------------------------------------------------------------------ Debian Security Advisory DSA-2017-1 [email protected] http://www.debian.org/security/ Giuseppe Iuculano March 15, 2010 http://www.debian.org/security/faq -...

Debian DSA-1838-1 : pulseaudio - privilege escalation

Tavis Ormandy and Julien Tinnes discovered that the pulseaudio daemon does not drop privileges before re-executing itself, enabling local attackers to increase their privileges. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were...

Debian DSA-1934-1 : apache2 - multiple issues

A design flaw has been found in the TLS and SSL protocol that allows an attacker to inject arbitrary content at the beginning of a TLS/SSL connection. The attack is related to the way how TLS and SSL handle session renegotiations. CVE-2009-3555 has been assigned to this vulnerability. As a partia...

Debian DSA-1834-1 : apache2 - denial of service

CVE-2009-1890 A denial of service flaw was found in the Apache modproxy module when it was used as a reverse proxy. A remote attacker could use this flaw to force a proxy process to consume large amounts of CPU time. This issue did not affect Debian 4.0 'etch'. - CVE-2009-1891 A denial of service...

Microsoft ASN.1 Library Bitstring Heap Overflow

$Id$ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' class Metasploit3 'Microsoft...

Symantec Altiris Deployment Solution ActiveX Control Arbitrary File Download and Execute.

This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/projects/Framework/ require 'msf/core' class Metasploit3 'Symantec...

[SECURITY] [DSA-1934-1] New apache2 packages fix several issues

------------------------------------------------------------------------ Debian Security Advisory DSA-1934-1 [email protected] http://www.debian.org/security/ Stefan Fritsch November 16, 2009 http://www.debian.org/security/faq -...

[SECURITY] [DSA-1934-1] New apache2 packages fix several issues

------------------------------------------------------------------------ Debian Security Advisory DSA-1934-1 [email protected] http://www.debian.org/security/ Stefan Fritsch November 16, 2009 http://www.debian.org/security/faq -...

openSUSE 10 Security Update : apache2 (apache2-6576)

This update of the Apache webserver fixes various security issues : - the option IncludesNOEXEC could be bypassed via .htaccess CVE-2009-1195 - modproxy could run into an infinite loop when used as reverse proxy CVE-2009-1890 - moddeflate continued to compress large files even after a network...

SuSE Security Advisory SUSE-SA:2009:050 (apache2,libapr1)

The remote host is missing updates announced in advisory SUSE-SA:2009:050. OpenVAS Vulnerability Test $Id: susesa2009050.nasl 6668 2017-07-11 13:34:29Z cfischer $ Description: Auto-generated from advisory SUSE-SA:2009:050 apache2,libapr1 Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft...

SUSE: Security Advisory for apache2, libapr1 (SUSE-SA:2009:050)

The remote host is missing updates announced in advisory SUSE-SA:2009:050. Copyright C 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software...

openSUSE Security Update : apache2 (apache2-1419)

This update of the Apache webserver fixes various security issues : - the option IncludesNOEXEC could be bypassed via .htaccess CVE-2009-1195 - modproxy could run into an infinite loop when used as reverse proxy CVE-2009-1890 - moddeflate continued to compress large files even after a network...