Solaris 8 (sparc) : 123038-01

N1 Grid Engine 6.0: maintenance patch. Date this patch was last updated by Sun : May/04/06 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc'; include'compat.inc'; if...

Solaris 9 (x86) : 114691-01

GNOME 2.0.0x86: Print Patch for Solaris 9x86. Date this patch was last updated by Sun : Apr/01/03 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc'; include'compat.inc'; if...

Solaris 8 (sparc) : 121209-01

PC NetLink 2.0 Client GUI fixes. Date this patch was last updated by Sun : Dec/02/05 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc'; include'compat.inc'; if description...

Microsoft Windows PNG文件畸形IHDR结构处理拒绝服务漏洞

Microsoft Windows是微软发布的非常流行的操作系统。 Microsoft Windows在处理畸形的PNG文件时存在拒绝服务漏洞，可能导致资源管理器耗尽大量的CPU资源。 当PNG图形文件的IHDR结构中的Width和Height字段被设置为恶意的值时，Windows在处理其时会消耗大量CPU资源。 Microsoft Windows XP Microsoft Windows Server 2003 Microsoft Windows 2000 目前厂商还没有提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本：...

PHP ZendEngine ECalloc 整数溢出漏洞

PHP是广泛使用的通用目的脚本语言，特别适合于Web开发，可嵌入到HTML中。 PHP内存处理例程ecalloc函数中存在整数溢出漏洞，远程攻击者可能利用此漏洞在服务器上执行指令。 如果脚本能够导致基于不可信任用户数据的内存分配的话，远程攻击者就可以通过发送特制的请求导致以apache用户的权限执行任意指令 PHP PHP = 5.1.6 RedHat Enterprise Linux WS 2.1 RedHat Enterprise Linux ES 2.1 RedHat Enterprise Linux AS 2.1 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载：...

GNU Mailman跨站脚本及拒绝服务漏洞

GNU Mailman是一款开放源码的邮件列表管理系统。 Mailman中存在多个安全漏洞，具体如下： 1 日志功能中的错误允许攻击者通过特制的URL向错误日志中注入欺骗性的日志消息。这可能诱骗管理员访问恶意的Web站点。 2 Mailman在处理畸形MIME首部时没有遵循RFC 2231标准，可能导致拒绝服务。 3 Mailman没有正确过滤某些用户输入，允许在用户浏览器会话中执行任意HTML和脚本代码。 受影响系统： GNU Mailman 2.1.9 不受影响系统： GNU Mailman 2.1.9rc1 GNU Mailman 2.1.9 厂商补丁： GNU ---...

GLSA-200610-01 : Mozilla Thunderbird: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-200610-01 Mozilla Thunderbird: Multiple vulnerabilities A number of vulnerabilities have been found and fixed in Mozilla Thunderbird. For details please consult the references below. Impact : The most severe vulnerabilities might...

Apple QuickTime 7.1.3 PlugIn - Arbitrary Script Execution

source: https://www.securityfocus.com/bid/20138/info Apple QuickTime plug-in is prone to an arbitrary-script-execution weakness when executing QuickTime Media Link files .qtl. An attacker can exploit this issue to execute arbitrary script code in the context of the affected application and load...

ncompress security update

CentOS Errata and Security Advisory CESA-2006:0663-01 Updated ncompress packages that address a security issue and fix bugs are now available. This update has been rated as having low security impact by the Red Hat Security Response Team. The ncompress package contains file compression and...

GLSA-200609-01 : Streamripper: Multiple remote buffer overflows

The remote host is affected by the vulnerability described in GLSA-200609-01 Streamripper: Multiple remote buffer overflows Ulf Harnhammar, from the Debian Security Audit Project, has found that Streamripper is vulnerable to multiple stack based buffer overflows caused by improper bounds checking...

CVE-2006-4550

Directory traversal vulnerability in CHXO Feedsplitter 2006-01-21 allows remote attackers to read arbitrary XML files via .. dot dot sequences in the format parameter with a leading ".", which bypasses a security check...

CVE-2006-4549

CHXO Feedsplitter 2006-01-21 allows remote attackers to read the source code of feedsplitter.php via the showsource function. NOTE: this issue is not a vulnerability in standard distributions, but could be an issue if the source has been modified...

Linux Kernel auto-reap ptraced子进程本地拒绝服务漏洞

BUGTRAQ ID: 15625 CVECAN ID: CVE-2005-3784 Linux Kernel是开放源码操作系统Linux所使用的内核。 Linux Kernel对系统进程的处理上存在问题，本地攻击者可能利用此漏洞进行拒绝服务攻击。 漏洞存在于signal.c文件中，内核对子进程执行auto-reap操作时，操作对象包含了已经被ptrace附着的进程，这可能导致ptrace引用混乱，允许本地攻击者触发拒绝服务问题。 Linux kernel = 2.6.15-rc2 S.u.S.E. Linux Enterprise Server 9 S.u.S.E. Linux...

Linux Kernel set_mempolicy本地拒绝服务漏洞

BUGTRAQ ID: 16135 CVECAN ID: CVE-2005-3358 Linux Kernel是开放源码操作系统Linux所使用的内核。 Linux Kernel的setmempolicy系统调用实现上存在漏洞，本地攻击者可能利用此漏洞对系统进行拒绝服务攻击。 漏洞存在于“mm/mempolicy.c”文件中，本地攻击者以掩码0调用setmempolicy会导致某些64位的系统崩溃。 Linux kernel 2.6.15 RedHat Linux WS 4 RedHat Linux ES 4 RedHat Linux Desktop 4 RedHat Linux AS ...

Linux Kernel mq_open系统调用拒绝服务漏洞

BUGTRAQ ID: 16283 CVECAN ID: CVE-2005-335 Linux Kernel是开放源码操作系统Linux所使用的内核。 Linux Kernel对目录操作的实现上存在漏洞，本地攻击者可能利用此漏洞对系统进行拒绝服务攻击。 如果dentryopen函数调用失败的话，就会多次调用mntput函数。Linux Kernel的mqopen系统调用在这种情况下就可能两次递减计数器，这就允许本地攻击者导致系统忙碌，造成拒绝服务。 Linux kernel 2.6.9 RedHat Linux WS 4 RedHat Linux ES 4 RedHat Linux...

Linux Kernel Sysctl接口注销本地拒绝服务漏洞

BUGTRAQ ID: 15365 CVECAN ID: CVE-2005-2709 Linux kernel是开放源码操作系统Linux所使用的内核。 Linux Kernel的"sysctl.c"在"/proc/sys/net/ipv4/conf/"中处理接口注销时存在拒绝服务漏洞。恶意用户可以利用这个漏洞导致系统忙碌，造成服务不可用。 Linux kernel 2.6.14.1 Linux ----- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载： Linux Upgrade linux-2.6.14.1.tar.bz2...

Barracuda Spam Firewall <= 3.3.03.053 Remote Code Execution (extra)

Exploit for hardware platform in category remote exploits =================================================================== Barracuda Spam Firewall /cgi-bin/previewemail.cgi?file=/mail/mlog/../tmp/backup/periodicconfig.txt.tmp https:///cgi-bin/previewemail.cgi?file=/mail/mlog/../../bin/ls%20/|...

GLSA-200608-01 : Apache: Off-by-one flaw in mod_rewrite

The remote host is affected by the vulnerability described in GLSA-200608-01 Apache: Off-by-one flaw in modrewrite An off-by-one flaw has been found in Apache's modrewrite module by Mark Dowd of McAfee Avert Labs. This flaw is exploitable depending on the types of rewrite rules being used. Impact...

Solaris 8/9 ps - Environment Variable Information leak

Solaris 8/9 ps - Environment Variable Information leak. CVE-1999-1587. Local exploit for Solaris platform !/bin/sh $Id: raptorucbps,v 1.1 2006/07/26 12:15:42 raptor Exp $ raptorucbps - information leak with Solaris /usr/ucb/ps Copyright c 2006 Marco Ivaldi A security vulnerability in the...

CVE-2006-2614

Sun N1 System Manager 1.1 for Solaris 10 before patch 121161-01 records system passwords in the world-readable scripts 1 /cr/hdjobsdb.sh, 2 /cr/hdplancheckin.sh, and 3 /cr/oracleplancheckin.sh, which allows local users to obtain System Manager passwords...