Fedora Core 10 FEDORA-2009-0587 (boinc-client)

The remote host is missing an update to boinc-client announced via advisory FEDORA-2009-0587. Note: This VT has been deprecated and is therefore no longer functional. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C ...

[SECURITY] [DSA 1718-1] New boinc packages fix validation bypass

------------------------------------------------------------------------ Debian Security Advisory DSA-1718-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff February 08, 2009 http://www.debian.org/security/faq -...

SuSE Update for opera SUSE-SA:2007:009

Check for the Version of opera OpenVAS Vulnerability Test $Id: gbsuse2007009.nasl 8050 2017-12-08 09:34:29Z santu $ SuSE Update for opera SUSE-SA:2007:009 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; y...

CVE-2009-0126

The decryptpublic function in lib/crypt.cpp in the client in Berkeley Open Infrastructure for Network Computing BOINC 6.2.14 and 6.4.5 does not check the return value from the OpenSSL RSApublicdecrypt function, which allows remote attackers to bypass validation of the certificate chain via a...

CVE-2009-0126

The decryptpublic function in lib/crypt.cpp in the client in Berkeley Open Infrastructure for Network Computing BOINC 6.2.14 and 6.4.5 does not check the return value from the OpenSSL RSApublicdecrypt function, which allows remote attackers to bypass validation of the certificate chain via a...

CVE-2009-0126

Technical details for CVE-2009-0126 are not present in the provided connected documents. The materials do not specify affected products, root cause, or fixes. Monitor for updates.

Gentoo Security Advisory GLSA 200701-08 (opera)

The remote host is missing updates announced in advisory GLSA 200701-08. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

FreeBSD Security Advisory (FreeBSD-SA-04:03.jail.asc)

The remote host is missing an update to the system as announced in the referenced advisory FreeBSD-SA-04:03.jail.asc ADV FreeBSD-SA-04:03.jail.asc OpenVAS Vulnerability Test $ Description: Auto generated from vuxml or freebsd advisories Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft In...

SUSE-SA:2007:009: opera

The remote host is missing the patch for the advisory SUSE-SA:2007:009 opera. This update brings the Opera Web browser to version 9.10, including fixes for the following 2 security problems: - CVE-2007-0126: Opera processes a JPEG DHT marker incorrectly, which can potentially lead to remote code...

CVE-2007-0126

CVE-2007-0126 concerns Opera 9.02 where a heap-based overflow in processing a JPEG Define Huffman Table (DHT) marker can allow remote code execution. Connected advisories alsoreference CVE-2007-0127 related to a typecasting issue in Opera’s SVG handling. Mitigation documented in GLSA 200701-08 an...

CVE-2006-0126

rxvt-unicode before 6.3, on certain platforms that use openpty and non-Unix pty devices such as Linux and most BSD platforms, does not maintain the intended permissions of tty devices, which allows local users to gain read and write access to the devices...

CVE-2006-0126

CVE-2006-0126 affects rxvt-unicode prior to 6.3 on platforms that use openpty and non-Unix pty devices (e.g., Linux and most BSDs). The issue is that tty device permissions are not preserved as intended, allowing local users to gain read and write access to the devices. The description specifies ...

Oracle XSQL Stylesheet Vulnerability

The Oracle XSQL Servlet allows arbitrary Java code to be executed by an attacker by supplying the URL of a malicious XSLT stylesheet when making a request to an XSQL page. OpenVAS Vulnerability Test $Id: oraclexsql.nasl 8023 2017-12-07 08:36:26Z teissa $ Description: Oracle XSQL Stylesheet...

CVE-2005-0126

ColorSync on Mac OS X 10.3.7 and 10.3.8 allows attackers to execute arbitrary code via malformed ICC color profiles that modify the heap...

CVE-2005-0126

CVE-2005-0126 affects Apple Mac OS X ColorSync prior to or in versions 10.3.7–10.3.8, where ICC color profile handling can cause a heap-based buffer overflow. This may allow an attacker to execute arbitrary code with the privileges of the user running ColorSync when provided with a malicious ICC ...

CVE-2004-0126

The jailattach system call in FreeBSD 5.1 and 5.2 changes the directory of a calling process even if the process doesn't have permission to change directory, which allows local users to gain read/write privileges to files and directories within another jail...

CVE-2004-0126

CVE-2004-0126 affects FreeBSD jail_attach(2) in FreeBSD 5.1–5.2. A programming error caused the process to change its root directory even if the process lacked permission, allowing a superuser inside a jail to set its root to another jail and gain full read/write access to files and directories w...

FreeBSD : SA-04:03.jail

The remote host is running a version of the FreeBSD kernel which contains a bug which may allow a jailed process to attach to another jail. An attacker compromised a jailed process on the remote host could exploit this flaw to switch to other jails on the system. C Tenable Network Security, Inc. ...

CVE-2004-0126

The jailattach system call in FreeBSD 5.1 and 5.2 changes the directory of a calling process even if the process doesn't have permission to change directory, which allows local users to gain read/write privileges to files and directories within another jail...

CVE-2003-0126

The CVE-2003-0126 entry concerns the web interface of SOHO Routefinder 550 devices (firmware 4.63 and older; possibly later) that ships with a default admin account using a blank password. This (LAN‑facing) vulnerability enables unauthorized activities by attackers on the local network due to wea...