Important: Red Hat Security Advisory: polkit security update

Updated polkit packages that fix one security issue are now available for Red Hat Enterprise Linux 6. The Red Hat Security Response Team has rated this update as having important security impact. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...

polkit security update

0.96-2.el60.1 - Include fixes for CVE-2011-1485 - Resolves: 692941...

Linux PolicyKit Race Condition Privilege Escalation

A race condition flaw was found in the PolicyKit pkexec utility and polkitd daemon. A local user could use this flaw to appear as a privileged user to pkexec, allowing them to execute arbitrary commands as root by running those commands with pkexec. Those vulnerable include RHEL6 prior to...

CentOS Security Advisory CESA-2009:1485 (postgresql)

The remote host is missing updates to postgresql announced in advisory CESA-2009:1485. CESA-2009:1485 65755 2 $Id: ovcesa20091485.nasl 6650 2017-07-10 11:43:12Z cfischer $ Description: Auto-generated from advisory CESA-2009:1485 postgresql Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft...

CentOS Security Advisory CESA-2009:1485 (postgresql)

The remote host is missing updates to postgresql announced in advisory CESA-2009:1485. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only OR...

CVE-2009-1485

CVE-2009-1485 affects eMule Plus before version 1.2e. The vulnerability is related to the application's logging feature, which can be abused by remote attackers to trigger a denial-of-service condition (infinite loop) via unspecified attack vectors. The available sources confirm the issue and its...

Fedora Update for dovecot FEDORA-2007-1485

Check for the Version of dovecot OpenVAS Vulnerability Test Fedora Update for dovecot FEDORA-2007-1485 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...

CVE-2008-1485

The CVE-2008-1485 issue is a Cross-site Scripting (XSS) vulnerability in PunBB 1.2.16 and earlier. The flaw allows remote attackers to inject arbitrary web script or HTML via the get_host parameter to moderate.php, exposing users to scripted payloads when the affected page is viewed. The availabl...

Debian Security Advisory DSA 1485-1 (icedove)

The remote host is missing an update to icedove announced via advisory DSA 1485-1. OpenVAS Vulnerability Test $Id: deb14851.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 1485-1 icedove Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc...

CVE-2003-1485

The CVE-2003-1485 entry concerns Clearswift MAILsweeper versions 4.0–4.3.7, where remote attackers can bypass mail filtering by sending a file attachment that uses “multiple extensions combined with large blocks of white space.” The connected sources confirm the affected product family and the by...

CVE-2007-1485

CVE-2007-1485 describes a buffer overflow in LIBFtp 3.1-1’s QFTP implementation, specifically in the set_umask function, where a long -m argument could allow local code execution. The connected sources corroborate: LIBFtp 3.1-1 is affected, and the overflow is in QFTP’s processing path. The CVE n...

CVE-2006-1485

Greymatter 1.3.1 is affected by CVE-2006-1485 due to gm-upload.cgi , which allows remote authenticated users with upload privileges to execute arbitrary programs by uploading files under the web root. The description notes that provenance is unknown and information comes from third parties. No ve...

CVE-2005-1485

Golden FTP Server Pro 2.52 is affected by an information-disclosure vulnerability: when a GET request targets a non-existent file, the FTP error response reveals the absolute path of the server. This is a server-side path disclosure issue that can aid an attacker in mapping the environment. The p...

CVE-2004-1485

Buffer overflow in the TFTP client in InetUtils 1.4.2 allows remote malicious DNS servers to execute arbitrary code via a large DNS response that is handled by the gethostbyname function...

CVE-2004-1485

CVE-2004-1485: Buffer overflow in the TFTP client of InetUtils 1.4.2 allows a remote DNS server to drive a large DNS response into gethostbyname, enabling arbitrary code execution. The connected documents confirm the vulnerability but do not provide remediation steps or explicit exploit details b...

CVE-2004-1485

Buffer overflow in the TFTP client in InetUtils 1.4.2 allows remote malicious DNS servers to execute arbitrary code via a large DNS response that is handled by the gethostbyname function...

CVE-2003-1485

Clearswift MAILsweeper 4.0 through 4.3.7 allows remote attackers to bypass filtering via a file attachment that contains "multiple extensions combined with large blocks of white space."...

CVE-2002-1485

The AIM component of Trillian 0.73 and 0.74 allows remote attackers to cause a denial of service crash via certain strings such as "P O C"...

CVE-2002-1485

The CVE-2002-1485 entry concerns the AIM component of Trillian versions 0.73 and 0.74. A remote attacker can cause a denial of service (crash) by sending certain strings (e.g., "P > O

CVE-1999-1485

nsd in IRIX 6.5 through 6.5.2 exports a virtual filesystem on a UDP port, which allows remote attackers to view files and cause a possible denial of service by mounting the nsd virtual file system...