Apple Mac OS X 2009-006更新修复多个安全漏洞

BUGTRAQ ID: 36956 CVE ID:...

Mac OS X Multiple Vulnerabilities (Security Update 2009-006)

The remote host is running a version of Mac OS X 10.5 that does not have Security Update 2009-006 applied. This security update contains fixes for the following products : - AFP Client - Adaptive Firewall - Apache - Apache Portable Runtime - ATS - Certificate Assistant - CoreGraphics - CUPS -...

Plume CMS SQL Injection

Plume CMS Multiple SQL Injection Vulnerabilities - Security Advisory - SOS-09-006 Release Date. 12-Aug-2009 Vendor Notification Date. 16-Jun-2009 Product. Plume CMS Platform. Independent Affected versions. 1.2.3 verified, possibly others Severity Rating. High Impact. Manipulation of data Attack...

[Full-disclosure] Plume CMS Multiple SQL Injection Vulnerabilities - Security Advisory - SOS-09-006

Plume CMS Multiple SQL Injection Vulnerabilities - Security Advisory - SOS-09-006 Release Date. 12-Aug-2009 Last Update. - Vendor Notification Date. 16-Jun-2009 Product. Plume CMS Platform. Independent Affected versions. 1.2.3 verified, possibly others Severity Rating. High Impact. Manipulation o...

Plume CMS 1.2.3 - Multiple SQL Injections

Plume CMS Multiple SQL Injection Vulnerabilities - Security Advisory - SOS-09-006 Release Date. 12-Aug-2009 Last Update. - Vendor Notification Date. 16-Jun-2009 Product. Plume CMS Platform. Independent Affected versions. 1.2.3 verified, possibly others Severity Rating. High Impact. Manipulation o...

Fedora Core 9 FEDORA-2009-7362 (drupal)

The remote host is missing an update to drupal announced via advisory FEDORA-2009-7362. Note: This VT has been deprecated and is therefore no longer functional. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the...

CVE-2009-1844

Multiple cross-site scripting XSS vulnerabilities in Drupal 5.x before 5.18 and 6.x before 6.12 allow 1 remote authenticated users to inject arbitrary web script or HTML via crafted UTF-8 byte sequences that are treated as UTF-7 by Internet Explorer 6 and 7, which are not properly handled in the...

Fedora Core 10 FEDORA-2009-5002 (drupal)

The remote host is missing an update to drupal announced via advisory FEDORA-2009-5002. OpenVAS Vulnerability Test $Id: fcore20095002.nasl 6624 2017-07-10 06:11:55Z cfischer $ Description: Auto-generated from advisory FEDORA-2009-5002 drupal Authors: Thomas Reinke Copyright: Copyright c 2009 E-So...

Fedora Core 9 FEDORA-2009-4997 (drupal)

The remote host is missing an update to drupal announced via advisory FEDORA-2009-4997. OpenVAS Vulnerability Test $Id: fcore20094997.nasl 6624 2017-07-10 06:11:55Z cfischer $ Description: Auto-generated from advisory FEDORA-2009-4997 drupal Authors: Thomas Reinke Copyright: Copyright c 2009 E-So...

Fedora 10 : drupal-6.12-1.fc10 (2009-5002)

Fixes SA-CORE-2009-006 http://drupal.org/node/461886 . Remember to log in to your site as the admin user before upgrading this package. After upgrading the package, browse to http://host/drupal/update.php to run the upgrade script. When outputting user-supplied data Drupal strips potentially...

SuSE Security Summary SUSE-SR:2009:006

The remote host is missing updates announced in advisory SUSE-SR:2009:006. SuSE Security Summaries are short on detail when it comes to the names of packages affected by a particular bug. Because of this, while this test will detect out of date packages, it cannot tell you what bugs impact which...

SUSE: Security Summary (SUSE-SR:2009:006)

The remote host is missing updates announced in advisory SUSE-SR:2009:006. SuSE Security Summaries are short on detail when it comes to the names of packages affected by a particular bug. Because of this, while this test will detect out of date packages, it cannot tell you what bugs impact which...

Microsoft Windows内核句柄本地权限提升漏洞（MS09-006）

BUGTRAQ ID: 34027 CVECAN ID: CVE-2009-0082 Microsoft Windows是微软发布的非常流行的操作系统。 在执行某些操作时，Windows内核没有正确地验证句柄。拥有有效登录凭据的本地攻击者可以利用这个漏洞执行任意内核态代码，然后可以安装程序；查看、更改或删除数据；或创建拥有完全用户权限的新帐号。 Microsoft Windows XP SP3 Microsoft Windows XP SP2 Microsoft Windows XP Professional x64 Edition Microsoft Windows Vista SP1...

Microsoft Windows内核GDI EMF/WMF解析远程代码执行漏洞（MS09-006）

BUGTRAQ ID: 34015 CVECAN ID: CVE-2009-0085 Microsoft Windows是微软发布的非常流行的操作系统。 Windows的GDI内核组件没有正确地验证用户态所传送输入，如果用户受骗查看了恶意网站上的特制EMF或WMF图形文件的话，就可能导致在系统上执行任意内核态代码。 Microsoft Windows XP SP3 Microsoft Windows XP SP2 Microsoft Windows Vista SP1 Microsoft Windows Vista Microsoft Windows Server 2008...

Microsoft Security Bulletin MS09-006 – Critical Vulnerabilities in Windows Kernel Could Allow Remote Code Execution (958690)

Microsoft Security Bulletin MS09-006 – Critical Vulnerabilities in Windows Kernel Could Allow Remote Code Execution 958690 Published: March 10, 2009 Version: 1.0 General Information Executive Summary This security update resolves several privately reported vulnerabilities in the Windows kernel. T...

Microsoft Windows Kernel Input Validation Remote Code Execution (MS09-006; CVE-2009-0081)

The Windows kernel is the core of the operating system. It provides system level services, allocates processor time to processes, and manages error handling. A remote code execution vulnerability has been discovered in the Windows kernel.The vulnerability is due to an error in the Windows kernel...

Mandrake Security Advisory MDVSA-2009:006 (openoffice.org)

The remote host is missing an update to openoffice.org announced via advisory MDVSA-2009:006. OpenVAS Vulnerability Test $Id: mdksa2009006.nasl 6573 2017-07-06 13:10:50Z cfischer $ Description: Auto-generated from advisory MDVSA-2009:006 openoffice.org Authors: Thomas Reinke Copyright: Copyright ...

Mac OS X Multiple Vulnerabilities (Security Update 2008-006)

The remote host is running a version of Mac OS X 10.4 that does not have the security update 2008-006 applied. This update contains security fixes for a number of programs. C Tenable Network Security, Inc. if !definedfunc"bnrandom" exit0; if NASLLEVEL 3004 exit0; include"compat.inc"; if descripti...

Microsoft IIS ASP远程代码执行漏洞（MS08-006）

BUGTRAQ ID: 27676 CVECAN ID: CVE-2008-0075 Microsoft Internet信息服务（IIS）是Microsoft Windows自带的一个网络信息服务器，其中包含HTTP服务功能。 IIS处理ASP网页输入的方式存在远程代码执行漏洞，允许攻击者向网站的ASP页面传送恶意输入。成功利用这个漏洞的攻击者可以在IIS服务器上以WPI的权限（默认配置为网络服务帐号权限）执行任意操作。 Microsoft IIS 6.0 Microsoft IIS 5.1 临时解决方法： 在Windows Server 2003上禁用传统风格ASP： 1...

MS08-006: Vulnerability in Internet Information Services Could Allow Remote Code Execution (942830)

The remote host is running a version of Windows and IIS that is vulnerable to a flaw that could allow an attacker who has the privileges to upload arbitrary ASP scripts to it to execute arbitrary code. Specifically, the remote version of IIS is vulnerable to a flaw when parsing specially crafted...