jakarta-taglibs-standard security update

0:1.1.1-11.7 - Gracefully handle parsers without FSP support e.g. Java 5 GCJ - Resolves: CVE-2015-0254 0:1.1.1-11.6 - Prevent XXE and RCE in JSTL XML tags - Apply correction for previous CVE-2015-0254 patch prevent XXE in - Resolves: CVE-2015-0254 0:1.1.1-11.5 - Prevent XXE and RCE in JSTL XML ta...

Debian DLA-210-1 : qt4-x11 security update

This update fixes multiple security issues in the Qt library. CVE-2013-0254 The QSharedMemory class uses weak permissions world-readable and world-writable for shared memory segments, which allows local users to read sensitive information or modify critical program data, as demonstrated by readin...

DLA-210-1 qt4-x11 - security update

Bulletin has no description...

MGASA-2015-0140 Updated jakarta-taglibs-standard packages fix CVE-2015-0254

Updated jakarta-taglibs-standard packages fix security vulnerability: David Jorm discovered that the Apache Standard Taglibs incorrectly handled external XML entities. A remote attacker could possibly use this issue to execute arbitrary code or perform other external XML entity attacks...

Updated jakarta-taglibs-standard packages fix CVE-2015-0254

Updated jakarta-taglibs-standard packages fix security vulnerability: David Jorm discovered that the Apache Standard Taglibs incorrectly handled external XML entities. A remote attacker could possibly use this issue to execute arbitrary code or perform other external XML entity attacks...

Ubuntu: Security Advisory (USN-2551-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2015-0254

CVE-2015-0254 : Apache Standard Taglibs before 1.2.3 allows remote code execution/XXE via a crafted XSLT extension in a JSTL XML tag (/). Affects JSTL/Taglibs; root cause is XXE. Public fixes exist in 1.2.3 and later; apply upgrade to mitigate. IBM bulletins also reference this CVE and note remed...

[SECURITY] CVE-2015-0254 XXE and RCE via XSL extension in JSTL XML tags

CVE-2015-0254 XXE and RCE via XSL extension in JSTL XML tags Severity: Important Vendor: The Apache Software Foundation Versions Affected: Standard Taglibs 1.2.1 The unsupported 1.0.x and 1.1.x versions may also be affected. Description: When an application uses x:parse or x:transform tags to...

Fixed in Apache Standard Taglib 1.2.3

Important: Information Disclosure CVE-2015-0254 Apache Standard Taglibs before 1.2.3 allows remote attackers to execute arbitrary code or conduct external XML entity XXE attacks via a crafted XSLT extension in a JSTL XML tag. This issue was identified by the David Jorm of IIX and made public on 2...

openSUSE Security Update : libqt4 (openSUSE-SU-2013:0404-1)

libqt4 was updated to fix a information disclosure via QSharedMemory CVE-2013-0254. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update openSUSE-2013-178. The text description of this plugin is C...

openSUSE Security Update : libqt4 (openSUSE-SU-2013:0403-1)

libqt4 was updated to fix a information disclosure via QSharedMemory CVE-2013-0254. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update openSUSE-2013-179. The text description of this plugin is C...

CVE-2014-0254

The CVE-2014-0254 issue affects Microsoft Windows 8, Windows Server 2012, and Windows RT, where the IPv6 TCP/IP stack does not properly validate ICMPv6 Router Advertisement packets, allowing remote denial-of-service that can cause a system hang. Affected component: IPv6 implementation in Windows ...

Microsoft Windows TCP/IP IPv6路由器广播数据包拒绝服务漏洞（MS14-006）

BUGTRAQ ID: 65409 CVECAN ID: CVE-2014-0254 Windows是一款由美国微软公司开发的窗口化操作系统。 Windows内TCP/IP IPv6实现存在拒绝服务漏洞，成功利用后可造成受影响系统停止响应。如果用户发送大量的特制 IPv6数据包到受影响系统，该漏洞可造成拒绝服务。要利用此漏洞，攻击者的系统必须和目标系统属于同一个子网。 0 Microsoft Windows Windows Server 2012 Microsoft Windows RT Microsoft Windows 8 厂商补丁： Microsoft ---------...

Microsoft Windows IPv6 Denial of Service Vulnerability (2904659)

This host is missing an important security update according to Microsoft Bulletin MS14-006. SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

Oracle Linux 6 : qt (ELSA-2013-0669)

The remote Oracle Linux 6 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2013-0669 advisory. 1:4.6.2-26 - Resolves: CVE-2013-0254, QSharedMemory class created shared memory segments with insecure permissions Tenable has extracted the preceding descripti...

CentOS 6 : qt (CESA-2013:0669)

Updated qt packages that fix one security issue are now available for Red Hat Enterprise Linux 6. The Red Hat Security Response Team has rated this update as having moderate security impact. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is availabl...

RHEL 6 : qt (RHSA-2013:0669)

The remote Redhat Enterprise Linux 6 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2013:0669 advisory. - qt: QSharedMemory class created shared memory segments with insecure permissions CVE-2013-0254 Note that Nessus has not tested for this issue but h...

RedHat Update for qt RHSA-2013:0669-01

Check for the Version of qt OpenVAS Vulnerability Test RedHat Update for qt RHSA-2013:0669-01 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms of th...

RedHat Update for qt RHSA-2013:0669-01

The remote host is missing an update for the SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

CentOS Update for phonon-backend-gstreamer CESA-2013:0669 centos6

The remote host is missing an update for the SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...