VMSA-2006-0008 - VMware ESX Server 2.0.2 Upgrade Patch 2

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 - - ------------------------------------------------------------------- VMware Security Advisory Advisory ID: VMSA-2006-0008 Synopsis: VMware ESX Server 2.0.2 Upgrade Patch 2 Patch URL: http://www.vmware.com/download/esx/esx-202-200610-patch.html...

[SECURITY] [DSA 1184-2] New Linux 2.6.8 packages fix several vulnerabilities

-------------------------------------------------------------------------- Debian Security Advisory DSA 1184-2 [email protected] http://www.debian.org/security/ Dann Frazier September 26th, 2006 http://www.debian.org/security/faq -...

CVE-2006-1343

The connected Debian advisory (DSA-1184-2) confirms CVE-2006-1343 as a local information-leak in the Linux 2.6.8 kernel (kernel-source-2.6.8), caused by an information leak in the getsockopt system call that can let a local user leak potentially sensitive memory to userspace. Affected architectur...

CVE-2005-1271

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2005-1343. Reason: This candidate is a reservation duplicate of CVE-2005-1343. Notes: All CVE users should reference CVE-2005-1343 instead of this candidate. All references and descriptions in this candidate have been removed to...

CVE-2005-1271

CVE-2005-1271 is a reservation duplicate of CVE-2005-1343 and should not be used as an active entry. The concrete vulnerability is CVE-2005-1343: a stack-based buffer overflow in the Mac OS X VPN daemon vpnd (Server_id via -i) allows a local user to execute arbitrary code with root privileges on ...

CVE-2005-1343

CVE-2005-1343: Mac OS X vpnd vulnerability. A stack-based buffer overflow in the VPN daemon (vpnd) before 10.3.9 allows a local, authenticated user to execute arbitrary code with root privileges by supplying a long -i Server_id argument. This affects the vpnd component and is triggered when Serve...

Debian DSA-715-1 : cvs - several vulnerabilities

Several problems have been discovered in the CVS server, which serves the popular Concurrent Versions System. The Common Vulnerabilities and Exposures project identifies the following problems : - CAN-2004-1342 Maks Polunin and Alberto Garcia discovered independently that using the pserver access...

CVE-2004-1343

CVE-2004-1343 affects CVS 1.12 and earlier on Debian GNU/Linux; the issue occurs when cvs-repouids lacks a mapping for the current repository, allowing remote attackers to crash the CVS server (DoS). Debian security advisories DSA-715-1 describe fixes: for woody, CVS 1.11.1p1debian-10; for sid, C...

CVE-2004-1343

CVS 1.12 and earlier on Debian GNU/Linux does not properly handle when a mapping for the current repository does not exist in the cvs-repouids file, which allows remote attackers to cause a denial of service server crash...

CVE-2004-1343

CVS 1.12 and earlier on Debian GNU/Linux does not properly handle when a mapping for the current repository does not exist in the cvs-repouids file, which allows remote attackers to cause a denial of service server crash...

CVE-2004-1343

CVS 1.12 and earlier on Debian GNU/Linux does not properly handle when a mapping for the current repository does not exist in the cvs-repouids file, which allows remote attackers to cause a denial of service server crash...

CVE-2003-1343

Trend Micro ScanMail for Exchange SMEX before 3.81 and before 6.1 might install a back door account in smgSmxcfg30.exe, which allows remote attackers to gain access to the web management interface via the vcc parameter, possibly "3560121183d3"...

CVE-2001-1343

CVE-2001-1343 affects WebStore 400/400CS 4.14 via ws_mail.cgi. The vulnerability allows remote authenticated WebStore administrators to execute arbitrary code by supplying shell metacharacters in the kill parameter. The CVSS metrics indicate network access with low attack complexity and no authen...

CVE-1999-1343

The CVE concerns the HTTP server used by Xerox DocuColor 4 LP. The vulnerability arises in the HTTP server’s handling of URLs: a crafted long URL containing a large number of dot characters can cause the server to hang, resulting in a denial of service. Affected component: the HTTP server for Doc...