OpenSSL DTLS远程堆溢出漏洞

BUGTRAQ ID: 26055 CVECAN ID: CVE-2007-4995 OpenSSL是一种开放源码的SSL实现，用来实现网络通信的高强度加密，现在被广泛地用于各种网络应用程序中。 OpenSSL的DTLS支持中存在漏洞，攻击者可以创建能够触发堆溢出的恶意客户端或服务器，导致执行任意指令。 请注意这个漏洞仅影响使用DTLS的应用程序。 OpenSSL Project OpenSSL 0.9.8f OpenSSL Project OpenSSL 0.9.8 RedHat Linux 5.0 OpenSSL Project ---------------...

Unfixed XSS vulnerability at www.openlab.cn

Security researcher kusomiso.com, has submitted on 13/10/2007 a cross-site-scripting XSS vulnerability affecting www.openlab.cn, which at the time of submission ranked 901831 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 01/11/2007. It is...

Solaris 8 (x86) : 126126-01

SunOS 5.8x86: thread patch. Date this patch was last updated by Sun : Aug/29/07 %NASLMINLEVEL 999999 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a recommended security fix. Disabled on 2011/09/17. C Tenable Network Security, Inc. if ! definedfunc"bnrandom...

Solaris 9 (x86) : 123377-01

SunOS 5.9x86: bootconfchk patch. Date this patch was last updated by Sun : Sep/19/07 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc'; include'compat.inc'; if description...

Solaris 8 (x86) : 127034-01

SunOS 5.8x86: pamroles.so patch. Date this patch was last updated by Sun : Aug/15/07 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc'; include'compat.inc'; if description...

Solaris 8 (x86) : 126132-01

SunOS 5.8x86: crash patch. Date this patch was last updated by Sun : Jul/23/07 %NASLMINLEVEL 999999 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a recommended security fix. Disabled on 2011/09/17. C Tenable Network Security, Inc. if ! definedfunc"bnrandom"...

Solaris 5.10 (sparc) : 125407-01

Webservices, SunOS 5.9 5.10 5.9x86 5.10x86: patch. Date this patch was last updated by Sun : Sep/05/07 %NASLMINLEVEL 70300 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a recommended security fix. Disabled on 2011/09/17. C Tenable Network Security, Inc. if ...

Solaris (SPARCx86) - fifofs I_PEEK Kernel Memory Disclosure

Solaris SPARCx86 - fifofs IPEEK Kernel Memory Disclosure / 10/2007: public release SPARC Solaris 8 without 109454-06 Solaris 9 without 117471-04 Solaris 10 without 127737-01 x86 Solaris 8 without 109455-06 Solaris 9 without 117472-04 Solaris 10 without 127738-01 Solaris fifofs IPEEK Kernel Memory...

Solaris 10 (sparc) : 127716-01

SunOS 5.10: ip Patch. Date this patch was last updated by Sun : Oct/05/07 %NASLMINLEVEL 70300 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a recommended security fix. Disabled on 2011/10/24. C Tenable Network Security, Inc. if ! definedfunc"bnrandom" exit0...

Solaris 8 (sparc) : 127033-01

SunOS 5.8: pamroles.so patch. Date this patch was last updated by Sun : Aug/15/07 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc'; include'compat.inc'; if description...

Solaris 10 (sparc) : 127737-01

SunOS 5.10: fifofs patch. Date this patch was last updated by Sun : Oct/02/07 %NASLMINLEVEL 70300 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a recommended security fix. Disabled on 2011/10/24. C Tenable Network Security, Inc. if ! definedfunc"bnrandom"...

Solaris 8 (sparc) : 126131-01

SunOS 5.8: crash patch. Date this patch was last updated by Sun : Jul/23/07 %NASLMINLEVEL 999999 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a recommended security fix. Disabled on 2011/09/17. C Tenable Network Security, Inc. if ! definedfunc"bnrandom"...

Solaris 9 (sparc) : 123376-01

SunOS 5.9: bootconfchk patch. Date this patch was last updated by Sun : Sep/19/07 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc'; include'compat.inc'; if description...

CVE-2007-4135

The NFSv4 ID mapper nfsidmap before 0.17 does not properly handle return values from the getpwnamr function when performing a username lookup, which can cause it to report a file as being owned by "root" instead of "nobody" if the file exists on the server but not on the client...

TISA2007-01.txt

========================================================================= TeamIntell Security Advisory TISA2007-01 ------------------------------------------------------------------------- Letterman Subscriber Module "Itemid" Script Insertion Vulnerability...

GLSA-200706-01 : libexif: Integer overflow vulnerability

The remote host is affected by the vulnerability described in GLSA-200706-01 libexif: Integer overflow vulnerability Victor Stinner reported an integer overflow in the exifdataloaddataentry function from file exif-data.c while handling Exif data. Impact : An attacker could entice a user to proces...

PowerPoint Viewer OCX 3.2 - ActiveX Control Denial of Service

2007/05/01 ----------------------------------------------------------------------------- PowerPointViewer.ocx v. 3.1.0.3 multiple methods Denial of Service url: http://www.officeocx.com/ price: from €63.95 update to last version to €1,585.95 Royalty author: shinnai mail:...

Solaris 8 (sparc) : 115298-01

X11 6.4.1: xscreensaver patch. Date this patch was last updated by Sun : Apr/16/07 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc'; include'compat.inc'; if description...

Solaris 8 (sparc) : 125802-01

SunOS 5.8: Modular Debugger patch. Date this patch was last updated by Sun : Apr/10/07 %NASLMINLEVEL 999999 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a recommended security fix. Disabled on 2011/09/17. C Tenable Network Security, Inc. if !...

Solaris 5.6 (x86) : 111963-04

Solstice Backup 6.1x86: Product Patch. Date this patch was last updated by Sun : Jan/06/04 %NASLMINLEVEL 999999 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a recommended security fix. Disabled on 2011/09/17. C Tenable Network Security, Inc. if !...