CentOS 4 / 5 : thunderbird (CESA-2011:0474)

An updated thunderbird package that fixes several security issues is now available for Red Hat Enterprise Linux 4 and 5. The Red Hat Security Response Team has rated this update as having critical security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity...

[SECURITY] [DSA 2227-1] iceape security update

------------------------------------------------------------------------- Debian Security Advisory DSA-2227-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff April 30, 2011 http://www.debian.org/security/faq -...

Critical: Red Hat Security Advisory: seamonkey security update

Updated seamonkey packages that fix several security issues are now available for Red Hat Enterprise Linux 4. The Red Hat Security Response Team has rated this update as having critical security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity ratings, ar...

SeaMonkey < 2.0.14 Multiple Vulnerabilities

The installed version of SeaMonkey is earlier than 2.0.14. Such versions are potentially affected by the following security issues : - Multiple use-after-free errors exist in the handling of the object attributes 'mChannel', 'mObserverList' and 'nsTreeRange'. CVE-2011-0065, CVE-2011-0066,...

RHEL 6 : firefox (RHSA-2011:0471)

The remote Redhat Enterprise Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2011:0471 advisory. Mozilla Firefox is an open source web browser. XULRunner provides the XUL Runtime environment for Mozilla Firefox. Several flaws were found ...

Mozilla Thunderbird 3.1 < 3.1.10 Multiple Vulnerabilities

The installed version of Thunderbird 3.1 is earlier than 3.1.10. Such versions are potentially affected by the following security issues : - An error in the resource protocol can allow directory traversal. CVE-2011-0071 - Multiple memory safety issues can lead to application crashes and possibly...

RHEL 4 : seamonkey (RHSA-2011:0473)

The remote Redhat Enterprise Linux 4 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2011:0473 advisory. - Mozilla use after free flaw MFSA 2011-12 CVE-2011-0072 - Mozilla dangling pointer flaw MFSA 2011-13 CVE-2011-0073 - Mozilla crash from...

CVE-2010-0074

CVE-2010-0074 concerns the WebLogic Server component of the BEA Product Suite. Per the BEA Product Suite risk matrix, affected releases include BEA WebLogic Server 7.0 through 10.3.1 (specifically 7.0 SP7, 8.1 SP6, 9.0, 9.1, 9.2 MP3, 10.0 MP2, 10.3.1). The description notes an unspecified vulnera...

CVE-2007-0074

Trend Micro ServerProtect versions 5.7 and 5.58 contain a heap-based buffer overflow in an unspecified procedure, allowing remote code execution via unknown vectors (possibly related to a folder read operation over RPC). Affected product is Trend Micro ServerProtect; root cause is a heap overflow...

FreeBSD Ports: xpcd

The remote host is missing an update to the system as announced in the referenced advisory. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

Microsoft IIS文件更改通知本地权限提升漏洞（MS08-005）

BUGTRAQ ID: 27101 CVECAN ID: CVE-2008-0074 Microsoft Internet信息服务（IIS）是Microsoft Windows自带的一个网络信息服务器，其中包含HTTP服务功能。 IIS处理FTPRoot、NNTPFile\Root和WWWRoot文件夹中文件变化通知的方式存在本地权限提升漏洞，成功利用这个漏洞的攻击者可以在本地系统安全环境中执行任意指令。 Microsoft IIS 7.0 Microsoft IIS 6.0 Microsoft IIS 5.1 Microsoft IIS 5.0 临时解决方法： 在Windows...

CVE-2008-0074

CVE-2008-0074 describes a local elevation of privilege in Microsoft Internet Information Services (IIS) 5.0–7.0 due to how file change notifications are handled in FTPRoot, NNTPFile\Root, and WWWRoot folders. Exploitation could allow a local attacker to execute arbitrary code with SYSTEM privileg...

rPSA-2007-0074-1 dovecot

rPath Security Advisory: 2007-0074-1 Published: 2007-04-18 Products: rPath Linux 1 Rating: Informational Exposure Level Classification: Local User Deterministic Information Exposure Updated Versions: dovecot=/conary.rpath.com@rpl:devel//1/1.0.0-0.1-1 References:...

CVE-2006-0074

CVE-2006-0074 describes an SQL injection in PHPenpals’ profile.php via the personalID parameter. The vulnerability allows remote attackers to execute arbitrary SQL commands. Connected sources indicate that the issue affects profile.php and note that 1.1 and earlier versions are affected; this vec...

CVE-2005-0074

CVE-2005-0074 corresponds to a local buffer overflow in xpcd’s pcdsvgaview (part of xpcd-2.08) that could allow arbitrary code execution with root privileges. Debian and OpenVAS advisories confirm a local overflow in pcdsvgaview; the fix is to upgrade to xpcd 2.08-8woody3 (or newer) across woody/...

CVE-2004-0074

CVE-2004-0074 : The provided documents state multiple buffer overflows in xsok 1.02 that allow local users to gain privileges via (1) a long LANG environment variable or (2) a long -xsokdir command line argument. This is described as a different vulnerability from CVE-2003-0949. The Debian/OpenVA...

CVE-2002-0074

Cross-site scripting vulnerability in Help File search facility for Internet Information Server IIS 4.0, 5.0 and 5.1 allows remote attackers to embed scripts into another user's session...

CVE-2002-0074

CVE-2002-0074 describes a cross-site scripting vulnerability in the IIS Help Files search facility affecting Microsoft IIS 4.0, 5.0 and 5.1. The issue allows remote attackers to embed scripts into another user’s session through crafted input, as detailed in CERT/CC and various vulnerability advis...

CVE-2003-0074

Format string vulnerability in mpmain.c for plpnfsd of the plptools package allows remote attackers to execute arbitrary code via the functions 1 debuglog, 2 errorlog, and 3 infolog...

CVE-2003-0074

CVE-2003-0074 describes a format-string vulnerability in mpmain.c for the plpnfsd component of the plptools package. The flaw allows remote attackers to execute arbitrary code through (1) debuglog, (2) errorlog, and (3) infolog, as stated in the public records. The connected documents confirm the...