239 matches found
SuSE 10 Security Update : CUPS (ZYPP Patch Number 6279)
The 'pdftops' was prone to several integer overflows CVE-2009-0791. The cups daemon could crash when receiving IPP requests with multiple unsupported tags. CVE-2009-0949 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc...
SuSE9 Security Update : CUPS (YOU Patch Number 12434)
The following bugs have been fixed : - The 'pdftops' was prone to several integer overflows. CVE-2009-0791 - The cups daemon could crash when receiving IPP requests with multiple unsupported tags. CVE-2009-0949 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plug...
SuSE Security Summary SUSE-SR:2009:014
The remote host is missing updates announced in advisory SUSE-SR:2009:014. SuSE Security Summaries are short on detail when it comes to the names of packages affected by a particular bug. Because of this, while this test will detect out of date packages, it cannot tell you what bugs impact which...
CVE-2009-0791
CVE-2009-0791 involves multiple integer overflows in Xpdf (2.x/3.x) and Poppler 0.x, used by pdftops in CUPS, KDE KPDF, and related components. The issue arises in the JBIG2 decoder and other areas (Decrypt.cxx, FoFiTrueType.cxx, gmem.c, JBIG2Stream.cxx, PSOutputDev.cxx) and can trigger a heap-ba...
RedHat Security Advisory RHSA-2009:1083
The remote host is missing updates announced in advisory RHSA-2009:1083. The Common UNIX® Printing System CUPS provides a portable printing layer for UNIX operating systems. The Internet Printing Protocol IPP allows users to print and manage printing-related tasks over a network. The CUPS pdftops...
CUPS pdftops过滤器多个整数溢出漏洞
BUGTRAQ ID: 35195 CVECAN ID: CVE-2009-0791 Common Unix Printing System(CUPS)是一款通用Unix打印系统,是Unix环境下的跨平台打印解决方案,基于Internet打印协议,提供大多数PostScript和raster打印机服务。 CUPS的pdftops过滤器中存在多个可能导致堆溢出的整数溢出漏洞。攻击者可以创建恶意的PDF文件,如果打印了该文件就会导致pdftops崩溃或以运行lp用户的权限执行任意指令。 Easy Software Products CUPS 1.1.22 厂商补丁: Easy Softwar...
CentOS 3 / 4 : cups (CESA-2009:1083)
Updated cups packages that fix multiple security issues are now available for Red Hat Enterprise Linux 3 and 4. This update has been rated as having important security impact by the Red Hat Security Response Team. The Common UNIXr Printing System CUPS provides a portable printing layer for UNIX...
RHEL 4 : cups (RHSA-2009:1083)
The remote Redhat Enterprise Linux 4 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2009:1083 advisory. The Common UNIX Printing System CUPS provides a portable printing layer for UNIX operating systems. The Internet Printing Protocol IPP allow...
cups security update
1:1.3.7-8:.6 - Applied patch to fix CVE-2009-0791 bug 491840. 1:1.3.7-8:.5 - Applied patch to fix CVE-2009-0949 bug 500972...
cups security update
1:1.1.22-0.rc1.9.32:.3 - Updated patch to fix CVE-2009-0791 to treat also cases gmallocint C + int nObjs int objSize bug 491840. 1:1.1.22-0.rc1.9.32:.2 - Applied patch to fix CVE-2009-0949 bug 500972. 1:1.1.22-0.rc1.9.32:.1 - Applied patch to fix CVE-2009-0791 bug 491840. - Applied patch to fix...
CVE-2008-0791
CVE-2008-0791 affects ipdsserver.exe in Intermate WinIPDS 3.3 G52-33-021. The vulnerability allows remote attackers to cause a denial of service through short TCP packets on port 5001, using packet types 3, 5, 7, 13, 14, or 15. Root cause is not detailed beyond packet-type handling triggering CPU...
CVE-2007-0791
Cross-site scripting XSS vulnerability in Atom feeds in Bugzilla 2.20.3, 2.22.1, and 2.23.3, and earlier versions down to 2.20.1, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...
CVE-2007-0791
CVE-2007-0791 is a cross-site scripting (XSS) vulnerability in Bugzilla’s Atom feeds affecting Bugzilla versions 2.20.3, 2.22.1, 2.23.3, and older releases back to 2.20.1. The issue allows remote attackers to inject arbitrary web script or HTML via unspecified vectors within Atom feeds. The conne...
CVE-2006-0791
PHP remote file inclusion vulnerability in index.php in DreamCost HostAdmin allows remote attackers to include arbitrary files via the $path variable, which is not initialized before use...
CVE-2006-0791
DreamCost HostAdmin (vulnerable up to 3.1 and earlier) is affected by a PHP remote file inclusion via index.php. The root cause is an uninitialized $path variable used by index.php, allowing an attacker to include arbitrary files. Related records note that the index.php vector is covered by CVE-2...
[security bulletin] SSRT4884 HP-UX TCP/IP Remote Denial of Service (DoS)
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 SUPPORT COMMUNICATION - SECURITY BULLETIN Document ID: c00576017 Version: 8 HPSBUX01164 SSRT4884 HP-UX TCP/IP Remote Denial of Service DoS NOTICE: The information in this Security Bulletin should be acted upon as soon as possible. Release Date:...
UnixWare ICMP Message Handling Denial of Service
Release Date: 2005-09-05 Critical: Less critical Impact: DoS Where: From remote Solution Status: Vendor Patch OS: UnixWare 7.x.x Select a product and view a complete list of all Patched/Unpatched Secunia advisories affecting it. CVE reference: CAN-2004-0790 CAN-2004-0791 CAN-2004-1060 CAN-2005-00...
HP-UX PHNE_33427 : s700_800 11.04 (VVOS) cumulative ARPA Transport patch
s700800 11.04 VVOS cumulative ARPA Transport patch : The remote HP-UX host is affected by multiple vulnerabilities : - A potential security vulnerability has been identified with HP-UX running TCP/IP. This vulnerability could be remotely exploited by an unauthorized user to cause a Denial of...
Solaris 10 (sparc) : 118822-30
SunOS 5.10: kernel Patch. Date this patch was last updated by Sun : Feb/23/06 %NASLMINLEVEL 70300 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a recommended security fix. Disabled on 2011/09/17. C Tenable Network Security, Inc. if ! definedfunc"bnrandom"...
HP-UX PHNE_32606 : s700_800 11.23 cumulative ARPA Transport patch
s700800 11.23 cumulative ARPA Transport patch : The remote HP-UX host is affected by multiple vulnerabilities : - A potential security vulnerability has been identified with HP-UX running TCP/IP. This vulnerability could be remotely exploited by an unauthorized user to cause a Denial of ServiceDo...