systemtap security update

0.7.2-3.0.1.el53 - Add oracle-enterprise.patch 0.7.2-3 - Resolves: bug 489979, CVE-2009-0784...

CVE-2009-0784

CVE-2009-0784 : A race condition in the SystemTap stap tool (versions 0.0.20080705 and 0.0.20090314) can allow local stapusr users to insert arbitrary kernel modules and gain privileges. The issue is documented across multiple distributions ( MiracleLinux 3, Red Hat Enterprise Linux, Oracle Linux...

[SECURITY] [DSA 1755-1] New systemtap packages fix local privilege escalation

------------------------------------------------------------------------ Debian Security Advisory DSA-1755-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff March 25, 2009 http://www.debian.org/security/faq -...

Gentoo Security Advisory GLSA 200408-27 (Gaim)

The remote host is missing updates announced in advisory GLSA 200408-27. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Gentoo Security Advisory GLSA 200803-18 (cacti)

The remote host is missing updates announced in advisory GLSA 200803-18. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...

FreeBSD Ports: icecast

The remote host is missing an update to the system as announced in the referenced advisory. VID 5e92e8a2-5d7b-11d8-80e3-0020ed76ef5a OpenVAS Vulnerability Test $ Description: Auto generated from vuxml or freebsd advisories Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc...

FreeBSD Ports: gaim, ja-gaim, ko-gaim, ru-gaim

The remote host is missing an update to the system as announced in the referenced advisory. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

FreeBSD Ports: gaim, ja-gaim, ko-gaim, ru-gaim

The remote host is missing an update to the system as announced in the referenced advisory. VID 635bf5f4-26b7-11d9-9289-000c41e2cdad OpenVAS Vulnerability Test $ Description: Auto generated from vuxml or freebsd advisories Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc...

GLSA-200803-18 : Cacti: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-200803-18 Cacti: Multiple vulnerabilities The following inputs are not properly sanitized before being processed: 'viewtype' parameter in the file graph.php, 'filter' parameter in the file graphview.php, 'action' and 'loginusernam...

CVE-2006-0784

CVE-2006-0784 affects D-Link DWL-G700AP (firmware 2.00 and 2.01). A remote attacker can cause a denial-of-service by sending a crafted request: a bare "GET" followed by a space and two newline characters, possibly crashing the CAMEO HTTP service due to missing arguments. No remediation details ar...

CVE-2005-0784

CVE-2005-0784 affects Phorum before 5.0.15, where multiple cross-site scripting (XSS) vulnerabilities allow remote attackers to inject arbitrary web script or HTML. The issue is triggered via the subject line in follow.php or in the user’s personal control panel, stemming from failure to properly...

Phorum < 5.0.15 Multiple XSS

The version of Phorum installed on the remote host is prone to multiple cross-site scripting vulnerabilities due to its failure to sanitize user input. An attacker can exploit these flaws to potentially cause arbitrary script and HTML code to be rendered by a user's browser in the context of the...

CVE-2004-0784

CVE-2004-0784 affects Gaim before 0.82. The flaw arises in the smiley theme: remote attackers can execute arbitrary commands through shell metacharacters embedded in the tar file name dragged to the smiley selector. Impact is arbitrary command execution with network access and no authentication; ...

CVE-2003-0784

Format string vulnerability in tsm for the bos.rte.security fileset on AIX 5.2 allows remote attackers to gain root privileges via login, and local users to gain privileges via login, su, or passwd, with a username that contains format string specifiers...

CVE-2003-0784

The entries describe a Format string vulnerability in the tsm package (bos.rte.security fileset) on AIX 5.2. The root cause is a format string flaw that can be exploited to gain root privileges via login (remote) and to gain privileges locally via login, su, or passwd when a username contains for...

CVE-2002-0784

The CVE-2002-0784 entry concerns a directory traversal vulnerability in Lysias Lidik Web Server 0.7b. The issue allows remote attackers to list directories by sending HTTP requests that use a modified dot-dot sequence, revealing directory listings and potentially exposing sensitive files. The NVD...

CVE-2002-0784

Directory traversal vulnerability in Lysias Lidik web server 0.7b allows remote attackers to list directories via an HTTP request with a ... modified dot dot...

CVE-2001-0784

Directory traversal vulnerability in Icecast 1.3.10 and earlier allows remote attackers to read arbitrary files via a modified .. dot dot attack using encoded URL characters...

CVE-1999-0784

Denial of service in Oracle TNSLSNR SQLNet Listener via a malformed string to the listener port, aka NERP...

CVE-1999-0784

The CVE-1999-0784 entry describes a Denial of Service against Oracle TNSLSNR SQLNet Listener caused by a malformed string sent to the listener port (NERP). Affected component: Oracle TNSLSNR SQL Net Listener. The root cause is a malformed input to the listener port that can trigger a DoS. The pro...