openSUSE Security Update : java-1_6_0-sun (openSUSE-SU-2011:0633-1)

Oracle Java 6 Update 26 fixes several security vulnerabilities. Please refer to Oracle's site for further information: http://www.oracle.com/technetwork/topics/security/javacpujun e2011-313339.html CVE-2011-0862, CVE-2011-0873, CVE-2011-0815, CVE-2011-0817, CVE-2011-0863, CVE-2011-0864,...

CVE-2014-0873

IBM InfoSphere Master Data Management Server is affected by CSRF in the Data Stewardship, Business Admin, and Product interfaces. The issue allows an attacker to hijack a legitimate user’s session by exploiting insufficient CSRF protections. Affected versions: 8.5 before 8.5.0.82; 9.0.1 before 9....

CVE-2013-0873

The readheader function in libavcodec/shorten.c in FFmpeg before 1.1.3 allows remote attackers to have an unspecified impact via an invalid channel count, related to "freeing invalid addresses."...

CVE-2013-0873

FFmpeg has a vulnerability CVE-2013-0873 in the read_header path (libavcodec/shorten.c) where an invalid channel count can cause freeing of invalid addresses. Affected are FFmpeg versions before 1.1.3. Impact is described as unspecified but high risk; limited details on exploit are provided. Reme...

Scientific Linux Security Update : java (jdk 1.6.0) on SL4.x, SL5.x i386/x86_64

This update fixes several vulnerabilities in the Sun Java 6 Runtime Environment and the Sun Java 6 Software Development Kit. Further information about these flaws can be found on the 'Oracle Java SE Critical Patch Update Advisory' page CVE-2011-0802, CVE-2011-0814, CVE-2011-0862, CVE-2011-0863,...

CVE-2012-0873

CVE-2012-0873 : BoonEx Dolphin prior to 7.0.8 contains multiple stored/reflective XSS vulnerabilities in the web UI, exploitable via parameters (explain in explanation.php; photos_only, online_only, or mode in viewFriends.php). Affected versions include 7.0.7 and earlier; an attacker could inject...

SuSE 10 Security Update : IBM Java (ZYPP Patch Number 7650)

IBM Java 1.5.0 SR12 FP5 has been released fixing bugs and security issues. The following security issues were fixed : - Unspecified vulnerability in the Java Runtime Environment JRE component in Oracle Java SE 6 Update 25 and earlier, 5.0 Update 29 and earlier, and 1.4.231 and earlier allows remo...

VMSA-2011-0013 : VMware third-party component updates for VMware vCenter Server, vCenter Update Manager, ESXi and ESX

a. ESX third-party update for Service Console openssl RPM The Service Console openssl RPM is updated to openssl-0.9.8e.12.el55.7 resolving two security issues. The Common Vulnerabilities and Exposures project cve.mitre.org has assigned the names CVE-2008-7270 and CVE-2010-4180 to these issues. b...

Java for Mac OS X 10.6 Update 5

This host is missing an important security update according to Java for Mac OS X 10.6 Update 5. OpenVAS Vulnerability Test $Id: secpodmacosxjava106upd5.nasl 7015 2017-08-28 11:51:24Z teissa $ Java for Mac OS X 10.6 Update 5 Authors: Sooraj KS Copyright: Copyright c 2011 SecPod,...

Java for Mac OS X 10.5 Update 10

This host is missing an important security update according to Mac OS X 10.5 Update 10. OpenVAS Vulnerability Test $Id: secpodmacosxjava105upd10.nasl 7024 2017-08-30 11:51:43Z teissa $ Java for Mac OS X 10.5 Update 10 Authors: Sooraj KS Copyright: Copyright c 2011 SecPod, http://www.secpod.com Th...

SuSE 10 Security Update : IBM Java (ZYPP Patch Number 7649)

IBM Java 1.5.0 SR12 FP5 has been released fixing bugs and security issues. The following security issues were fixed : - Unspecified vulnerability in the Java Runtime Environment JRE component in Oracle Java SE 6 Update 25 and earlier, 5.0 Update 29 and earlier, and 1.4.231 and earlier allows remo...

Oracle Java SE Multiple Unspecified Vulnerabilities - June11 (Windows)

This host is installed with Oracle Java SE and is prone to multiple unspecified vulnerabilities. OpenVAS Vulnerability Test $Id: secpodoraclejavamultunspecifiedvulnwinjun11.nasl 7699 2017-11-08 12:10:34Z santu $ Oracle Java SE Multiple Unspecified Vulnerabilities - June11 Windows Authors: Sooraj ...

SuSE 11.1 Security Update : Sun/Oracle Java (SAT Patch Number 4698)

Oracle Java 6 Update 26 fixes several security vulnerabilities. Please refer to Oracle's site for further information: http://www.oracle.com/technetwork/topics/security/javacpujune2011-3133 39.html %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in thi...

CVE-2011-0873

CVE-2011-0873 is an unspecified vulnerability in Oracle Java SE JRE components affecting Java SE 6 Update 25 and earlier and Java SE 5.0 Update 29 and earlier. The flaw potentially impacts confidentiality, integrity, and availability via unknown vectors related to 2D. The connected advisories ref...

Critical: Red Hat Security Advisory: java-1.6.0-sun security update

Updated java-1.6.0-sun packages that fix several security issues are now available for Red Hat Enterprise Linux 4 Extras, and Red Hat Enterprise Linux 5 and 6 Supplementary. The Red Hat Security Response Team has rated this update as having critical security impact. Common Vulnerability Scoring...

CVE-2010-0873

CVE-2010-0873 affects Oracle TimesTen In-Memory Database Data Server (TimesTen Data Server) 7.0.6.0. The vulnerability is remotely exploitable over TCP/IP (network), with no authentication, and has a CVSS v2 base score of 10.0 (Confidentiality, Integrity, and Availability all Complete). The issue...

Solaris 10 (x86) : 139463-02

SunOS 5.10x86: nfssrv patch. Date this patch was last updated by Sun : Mar/05/09 %NASLMINLEVEL 70300 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a recommended security fix. Disabled on 2011/10/24. C Tenable Network Security, Inc. if ! definedfunc"bnrandom...

Solaris 10 (sparc) : 139462-02

SunOS 5.10: nfssrv patch. Date this patch was last updated by Sun : Mar/05/09 %NASLMINLEVEL 70300 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a recommended security fix. Disabled on 2011/10/24. C Tenable Network Security, Inc. if ! definedfunc"bnrandom"...

Sun Solaris NFS守护程序绕过安全限制漏洞

BUGTRAQ ID: 34062 CVECAN ID: CVE-2009-0873 Solaris是一款由Sun开发和维护的商业UNIX操作系统。 Solaris的NFS守护程序（nfsd）没有正确地实现多种安全模式组合，远程攻击者可以利用sec=sys和sec=krb5安全模式组合绕过预期的访问限制，读取或修改受限制的文件。 Sun Solaris 10.0x86 Sun Solaris 10.0 Sun OpenSolaris snv01 - snv105 临时解决方法： 对NFS服务器所支持的安全模式使用相同的访问列表。...

CVE-2009-0873

CVE-2009-0873 affects Sun Solaris 10 and OpenSolaris before snv_106, where the NFS daemon (nfsd) under NFSv3 mishandles combinations of security modes, allowing remote attackers to bypass access controls and read or modify protected files by abusing incompatible sec=sys and sec=krb5 configuration...