[SECURITY] [DSA 2049-1] New barnowl packages fix arbitrary code execution

------------------------------------------------------------------------ Debian Security Advisory DSA-2049-1 [email protected] http://www.debian.org/security/ Steffen Joeris May 23, 2010 http://www.debian.org/security/faq -...

CVE-2010-0793

Buffer overflow in BarnOwl before 1.5.1 allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a crafted CC: header...

CVE-2010-0793

CVE-2010-0793 affects barnowl prior to version 1.5.1, where a buffer overflow in the CC: header handling could allow a remote attacker to crash the client or execute arbitrary code. Connected advisories (Debian DSA-2049-1) confirm remote, code-execution risk and specify fixed packages/releases: s...

Mandriva Security Advisory MDVSA-2009:121-1 (lcms)

The remote host is missing an update to lcms announced via advisory MDVSA-2009:121-1. OpenVAS Vulnerability Test $Id: mdksa20091211.nasl 6573 2017-07-06 13:10:50Z cfischer $ Description: Auto-generated from advisory MDVSA-2009:121-1 lcms Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft...

openSUSE Security Update : java-1_6_0-openjdk (java-1_6_0-openjdk-1252)

The XML signature checker did not impose limits on the minimum length of HMAC signatures in XML documentes. Attackers could therefore specify a length of e.g. 1 to make the signature appear valid and therefore effectively bypass verification of XML documents. CVE-2009-0217 The WebStart component...

openSUSE Security Update : java-1_6_0-openjdk (java-1_6_0-openjdk-1252)

The XML signature checker did not impose limits on the minimum length of HMAC signatures in XML documentes. Attackers could therefore specify a length of e.g. 1 to make the signature appear valid and therefore effectively bypass verification of XML documents. CVE-2009-0217 The WebStart component...

Fedora Core 10 FEDORA-2009-3967 (lcms)

The remote host is missing an update to lcms announced via advisory FEDORA-2009-3967. Note: This VT has been deprecated and is therefore no longer functional. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the...

Fedora 10 : java-1.6.0-openjdk-1.6.0.0-15.b14.fc10 (2009-3426)

Fixes remaining LCMS issue, which resolves a TCK failure Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issue...

Gentoo Security Advisory GLSA 200904-19 (littlecms)

The remote host is missing updates announced in advisory GLSA 200904-19. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only OR GPL-3.0-only...

Fedora Core 9 FEDORA-2009-3425 (java-1.6.0-openjdk)

The remote host is missing an update to java-1.6.0-openjdk announced via advisory FEDORA-2009-3425. Note: This VT has been deprecated and is therefore no longer functional. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are...

Fedora Core 10 FEDORA-2009-3426 (java-1.6.0-openjdk)

The remote host is missing an update to java-1.6.0-openjdk announced via advisory FEDORA-2009-3426. OpenVAS Vulnerability Test $Id: fcore20093426.nasl 6624 2017-07-10 06:11:55Z cfischer $ Description: Auto-generated from advisory FEDORA-2009-3426 java-1.6.0-openjdk Authors: Thomas Reinke Copyrigh...

Fedora Core 10 FEDORA-2009-3426 (java-1.6.0-openjdk)

The remote host is missing an update to java-1.6.0-openjdk announced via advisory FEDORA-2009-3426. Note: This VT has been deprecated and is therefore no longer functional. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are...

[SECURITY] [DSA 1769-1] New openjdk-6 packages fix arbitrary code execution

------------------------------------------------------------------------ Debian Security Advisory DSA-1769-1 [email protected] http://www.debian.org/security/ Florian Weimer April 11, 2009 http://www.debian.org/security/faq -...

CVE-2009-0793

CVE-2009-0793 affects LittleCMS (lcms) 1.18, specifically cmsxform.c handling transformations of monochrome profiles. The issue enables a remote attacker to cause a denial of service (NULL pointer dereference and application crash) via a crafted image that triggers incorrect code execution in mon...

java security update

CentOS Errata and Security Advisory CESA-2009:0377 Updated java-1.6.0-openjdk packages that fix several security issues are now available for Red Hat Enterprise Linux 5. This update has been rated as having important security impact by the Red Hat Security Response Team. These packages provide th...

CVE-2008-0793

Multiple cross-site scripting XSS vulnerabilities in search.asp in Tendenci CMS allow remote attackers to inject arbitrary web script or HTML via the 1 category, 2 searchtext, 3 jobcategoryid, 4 contactcompany, and unspecified other parameters. NOTE: some of these details are obtained from third...

CVE-2008-0793

CVE-2008-0793 describes multiple cross-site scripting (XSS) vulnerabilities in Tendenci CMS, specifically in the search.asp endpoint. The vulnerabilities allow remote attackers to inject arbitrary web script/HTML via parameters such as category, searchtext, jobcategoryid, contactcompany, and othe...

CVE-2007-0793

CVE-2007-0793 describes a PHP remote file inclusion vulnerability in inc/common.php of GlobalMegaCorp dvddb 0.6, allowing remote attackers to execute arbitrary PHP code via a URL supplied in the config parameter. The affected component is the dvddb app’s common.php handling of config paths; root ...

CVE-2006-0793

CVE-2006-0793 concerns V-webmail 1.6.2. The vulnerability is in frameset.php, where a remote attacker can trigger phishing by supplying arbitrary websites in the rframe parameter. The exploit details and exact impact are described only as phishing via rframe; no further root-cause specifics or af...

CVE-2005-0793

Summary: The provided documents describe a PHP remote file inclusion (RFI) vulnerability in ZPanel, affecting zpanel.php and related template code. The issue arises from insufficient sanitization of user-supplied input in the page parameter (and, for templates/ZPanelV2/template.php, the body para...