Moderate: Red Hat Security Advisory: java-1.4.2-ibm security update

Updated java-1.4.2-ibm packages that fix two security issues are now available for Red Hat Enterprise Linux 4 Extras and Red Hat Enterprise Linux 5 Supplementary. The Red Hat Security Response Team has rated this update as having moderate security impact. Common Vulnerability Scoring System CVSS...

SuSE9 Security Update : IBM Java 5 JRE and SDK (YOU Patch Number 12659)

This update brings IBM Java 5 to Service Release 12 Fixpack 2. It fixes quite a large number of security problems and other bugs. The security issues are tracked by the following CVE ids : - CVE-2010-1321 CVE-2010-3541 CVE-2010-3548 CVE-2010-3549 CVE-2010-3550 CVE-2010-3551 CVE-2010-3556...

RHEL 4 / 5 : java-1.5.0-ibm (RHSA-2010:0807)

Updated java-1.5.0-ibm packages that fix several security issues are now available for Red Hat Enterprise Linux 4 Extras and 5 Supplementary. The Red Hat Security Response Team has rated this update as having critical security impact. Common Vulnerability Scoring System CVSS base scores, which gi...

openSUSE Security Update : java-1_6_0-sun (openSUSE-SU-2010:0754-1)

Sun Java 1.6.0 was updated to Security Update U22. The release notes for this release are on: http://www.oracle.com/technetwork/java/javase/6u22releasenotes-176121. html Security advisory page for this update: http://www.oracle.com/technetwork/topics/security/javacpuoct2010-17625 8.html Following...

Oracle Java SE Multiple Vulnerabilities (October 2010 CPU)

The version of Oracle formerly Sun Java SE or Java for Business installed on the remote host is earlier than 6 Update 22 / 5.0 Update 26 / 1.4.228. Such versions are potentially affected by security issue in the following components : - CORBA - Deployment - Deployment Toolkit - Java 2D - Java Web...

Critical: Red Hat Security Advisory: java-1.6.0-sun security update

Updated java-1.6.0-sun packages that fix several security issues are now available for Red Hat Enterprise Linux 4 Extras and 5 Supplementary. The Red Hat Security Response Team has rated this update as having critical security impact. Common Vulnerability Scoring System CVSS base scores, which gi...

VMSA-2010-0013 : VMware ESX third-party updates for Service Console

a. Service Console update for cpio The service console package cpio is updated to version 2.5-6.RHEL3 for ESX 3.x versions and updated to version 2.6-23.el54.1 for ESX 4.x versions. The Common Vulnerabilities and Exposures project cve.mitre.org has assigned the names CVE-2005-4268 and CVE-2010-06...

Ubuntu Update for krb5 vulnerability USN-940-2

Ubuntu Update for Linux kernel vulnerabilities USN-940-2 OpenVAS Vulnerability Test $Id: gbubuntuUSN9402.nasl 7965 2017-12-01 07:38:25Z santu $ Ubuntu Update for krb5 vulnerability USN-940-2 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH,...

Mandriva Update for heimdal MDVSA-2010:130 (heimdal)

Check for the Version of heimdal OpenVAS Vulnerability Test Mandriva Update for heimdal MDVSA-2010:130 heimdal Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it unde...

[ MDVSA-2010:130 ] heimdal

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Mandriva Linux Security Advisory MDVSA-2010:130 http://www.mandriva.com/security/ Package : heimdal Date : July 7, 2010 Affected: Enterprise Server 5.0 Problem Description: A vulnerability has been found and corrected in heimdal: Certain invalid GSS-A...

HP-UX PHSS_41167 : HP-UX Running Kerberos, Remote Denial of Service (DoS), Execution of Arbitrary Code (HPSBUX02544 SSRT100107 rev.1)

s700800 11.23 KRB5-Client Version 1.0 Cumulative patch : Potential security vulnerabilities have been identified on HP-UX running Kerberos. These vulnerabilities could be exploited by remote unauthenticated users to create a Denial of Service DoS or to execute arbitrary code. %NASLMINLEVEL 70300 ...

CentOS Update for krb5-devel CESA-2010:0423 centos3 i386

Check for the Version of krb5-devel OpenVAS Vulnerability Test CentOS Update for krb5-devel CESA-2010:0423 centos3 i386 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modif...

Mandriva Update for krb5 MDVSA-2010:100 (krb5)

Check for the Version of krb5 OpenVAS Vulnerability Test Mandriva Update for krb5 MDVSA-2010:100 krb5 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the ter...

Fedora Update for krb5 FEDORA-2010-8805

The remote host is missing an update for the SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

openSUSE Security Update : krb5 (openSUSE-SU-2010:0292-1)

This update fixes a denial-of-service vulnerability in kadmind. A remote attack can send a malformed GSS-API token that triggers a NULL pointer dereference. CVE-2010-1321: CVSS v2 Base Score: 6.8 MEDIUM AV:N/AC:L/Au:S/C:N/I:N/A:C %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptiv...

openSUSE Security Update : krb5 (openSUSE-SU-2010:0292-1)

This update fixes a denial-of-service vulnerability in kadmind. A remote attack can send a malformed GSS-API token that triggers a NULL pointer dereference. CVE-2010-1321: CVSS v2 Base Score: 6.8 MEDIUM AV:N/AC:L/Au:S/C:N/I:N/A:C %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptiv...

[SECURITY] [DSA 2052-1] New krb5 packages fix denial of service

------------------------------------------------------------------------ Debian Security Advisory DSA-2052-1 [email protected] http://www.debian.org/security/ Sebastien Delafond May 24, 2010 http://www.debian.org/security/faq -...

[SECURITY] [DSA 2052-1] New krb5 packages fix denial of service

------------------------------------------------------------------------ Debian Security Advisory DSA-2052-1 [email protected] http://www.debian.org/security/ Sebastien Delafond May 24, 2010 http://www.debian.org/security/faq -...

Ubuntu 6.06 LTS / 8.04 LTS / 9.04 / 9.10 : krb5 vulnerabilities (USN-940-1)

It was discovered that Kerberos did not correctly free memory in the GSSAPI and kdb libraries. If a remote attacker were able to manipulate an application using these libraries carefully, the service could crash, leading to a denial of service. Only Ubuntu 6.06 LTS was affected. CVE-2007-5902,...

CVE-2010-1321

The kgacceptkrb5 function in krb5/acceptseccontext.c in the GSS-API library in MIT Kerberos 5 aka krb5 through 1.7.1 and 1.8 before 1.8.2, as used in kadmind and other applications, does not properly check for invalid GSS-API tokens, which allows remote authenticated users to cause a denial of...