Ubuntu: Security Advisory (USN-1154-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Ubuntu Update for openjdk-6 USN-1154-1

Ubuntu Update for Linux kernel vulnerabilities USN-1154-1 OpenVAS Vulnerability Test $Id: gbubuntuUSN11541.nasl 7964 2017-12-01 07:32:11Z santu $ Ubuntu Update for openjdk-6 USN-1154-1 Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH, http://www.greenbone.net Th...

Fedora Update for java-1.6.0-openjdk FEDORA-2011-8020

Check for the Version of java-1.6.0-openjdk OpenVAS Vulnerability Test Fedora Update for java-1.6.0-openjdk FEDORA-2011-8020 Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or...

Fedora Update for java-1.6.0-openjdk FEDORA-2011-8020

The remote host is missing an update for the SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

SuSE 11.1 Security Update : Sun/Oracle Java (SAT Patch Number 4698)

Oracle Java 6 Update 26 fixes several security vulnerabilities. Please refer to Oracle's site for further information: http://www.oracle.com/technetwork/topics/security/javacpujune2011-3133 39.html %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in thi...

CVE-2011-0872

Unspecified vulnerability in the Java Runtime Environment JRE component in Oracle Java SE 6 Update 25 and earlier allows remote attackers to affect availability via unknown vectors related to NIO...

CVE-2011-0872

Unspecified vulnerability in the Java Runtime Environment JRE component in Oracle Java SE 6 Update 25 and earlier allows remote attackers to affect availability via unknown vectors related to NIO...

CVE-2011-0872

CVE-2011-0872 affects Oracle Java SE/JRE 6 Update 25 and earlier. The vulnerability lies in the NIO component and can impact availability via unknown vectors, exploitable remotely. The connected records reference this CVE among Java-related issues and indicate later updates/patches address multip...

CVE-2011-0872

Unspecified vulnerability in the Java Runtime Environment JRE component in Oracle Java SE 6 Update 25 and earlier allows remote attackers to affect availability via unknown vectors related to NIO...

CVE-2010-0872

Technical details about CVE-2010-0872 are not publicly available in the provided documents; monitor for updates.

Solaris 10 (x86) : 139463-02

SunOS 5.10x86: nfssrv patch. Date this patch was last updated by Sun : Mar/05/09 %NASLMINLEVEL 70300 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a recommended security fix. Disabled on 2011/10/24. C Tenable Network Security, Inc. if ! definedfunc"bnrandom...

Solaris 10 (sparc) : 139462-02

SunOS 5.10: nfssrv patch. Date this patch was last updated by Sun : Mar/05/09 %NASLMINLEVEL 70300 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a recommended security fix. Disabled on 2011/10/24. C Tenable Network Security, Inc. if ! definedfunc"bnrandom"...

Sun Solaris NFS服务程序安全模式非授权访问漏洞

BUGTRAQ ID: 34063 CVECAN ID: CVE-2009-0872 Solaris是一款由Sun开发和维护的商业UNIX操作系统。 Solaris的NSF服务程序没有正确地结合其他安全模式实现AUTHNONE（sec=none）安全模式，远程攻击者可以组合使用（AUTHNONE）和sys（AUTHSYS）安全模式绕过限制，非授权访问通过NFS共享的文件系统。 Sun Solaris 10.0x86 Sun Solaris 10.0 Sun OpenSolaris snv01 - snv110 临时解决方法：...

CVE-2009-0872

CVE-2009-0872 affects Sun Solaris 10 and OpenSolaris builds prior to snv_111, where the NFS server fails to properly enforce AUTH_NONE (sec=none) when used with other security modes. This allows remote attackers to bypass access controls and read/modify files by abusing a combination of AUTH_NONE...

CVE-2008-0872

Cross-site scripting XSS vulnerability in SmarterTools SmarterMail Enterprise 4.3 allows remote attackers to inject arbitrary web script or HTML via a STYLE attribute of an element in the Subject field of an e-mail message...

CVE-2008-0872

CVE-2008-0872 affects SmarterTools SmarterMail Enterprise 4.3. The issue is a cross-site scripting (XSS) vulnerability in the webmail Subject field where the STYLE attribute can carry arbitrary HTML/Script reflected in the user’s browser. Root cause: inadequate sanitization of the Subject field b...

CVE-2007-0872

CVE-2007-0872: The Plain Old Webserver (POW) add-on for Mozilla Firefox before 0.0.9 is vulnerable to a directory traversal via .. in the URI, allowing an unauthenticated attacker to read arbitrary files on the host within Firefox’s running user’s permissions. The issue is triggered by unsanitize...

CVE-2006-0872

CVE-2006-0872 describes a directory traversal vulnerability in Coppermine Photo Gallery

CVE-2005-0872

Topic Calendar 1.0.1 for phpBB is affected. The vulnerability is a cross-site scripting (XSS) flaw in calendar_scheduler.php that allows remote attackers to inject arbitrary web script or HTML through the start parameter. This is documented in multiple sources (OpenVAS entry “Topic Calendar XSS” ...

Debian DSA-091-1 : ssh - influencing login

If the UseLogin feature is enabled in ssh local users could pass environment variables including variables like LDPRELOAD to the login process. This has been fixed by not copying the environment if UseLogin is enabled. Please note that the default configuration for Debian does not have UseLogin...