Deepin TFTP Server Directory Traversal Vulnerability

Software : Deepin TFTP Server Directory Traversal Vulnerability Software Version : v1.25 Vendor: Deepin.org Vulnerability Published : 2010-08-14 Vulnerability Update Time : Status : Impact : Medium Bug Description : Deepin TFTP Server does not properly sanitise filenames containing directory...

Fedora 14 : bugzilla-3.6.2-1.fc14 (2010-13171)

Bug 623423 - CVE-2010-2756 CVE-2010-2757 CVE-2010-2758 CVE-2010-2759 bugzilla: multiple vulnerabilities corrected in 3.4.8/3.6.2 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically...

[SECURITY] Fedora 14 Update: bogofilter-1.2.2-1.fc14

Bogofilter is a Bayesian spam filter. In its normal mode of operation, it takes an email message or other text on standard input, does a statistical check against lists of "good" and "bad" words, and returns a status code indicating whether or not the message is spam. Bogofilter is designed with...

[SECURITY] Fedora 14 Update: kdegraphics-4.5.0-2.fc14

Graphics applications, including gwenview an image viewer kamera digital camera support kcolorchooser a color chooser kolourpaint4 an easy-to-use paint program kruler screen ruler and color measurement tool ksnapshot screen capture utility okular a document viewer...

Deepin TFTP Server 1.25 Directory Traversal

Software : Deepin TFTP Server Directory Traversal Vulnerability Software Version : v1.25 Vendor: Deepin.org Vulnerability Published : 2010-08-14 Vulnerability Update Time : Status : Impact : Medium Bug Description : Deepin TFTP Server does not properly sanitise filenames containing directory...

Fedora 14 : kdegraphics-4.5.0-2.fc14 (2010-13589)

CVE-2010-2575, Okular PDB Processing Memory Corruption Vulnerability. For more infos please take a look at the http://www.kde.org/info/security/advisory-20100825-1.txt Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory...

Fedora 14 : zabbix-1.8.2-3.fc14 (2010-12646)

Bug 620806 - CVE-2010-2790 Zabbix: XSS in triggers page ZBX-2326 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing...

Deepin TFTP Server 1.25 - Directory Traversal

Software : Deepin TFTP Server Directory Traversal Vulnerability Software Version : v1.25 Vendor: Deepin.org Vulnerability Published : 2010-08-14 Vulnerability Update Time : Status : Impact : Medium Bug Description : Deepin TFTP Server does not properly sanitise filenames containing directory...

[SECURITY] Fedora 14 Update: uzbl-0-0.16.20100626gitafc0f873e.fc14

Uzbl is a lightweight web browser based on WebKit/Gtk+. Uzbl follows the UNIX philosophy - "Write programs that do one thing and do it well. Write programs to work together. Write programs to handle text streams, because that is a universal interface."...

[SECURITY] Fedora 14 Update: ruby-1.8.7.302-1.fc14

Ruby is the interpreted scripting language for quick and easy object-oriented programming. It has many features to process text files and to do system management tasks as in Perl. It is simple, straight-forward, and extensible...

Fedora 14 : uzbl-0-0.16.20100626gitafc0f873e.fc14 (2010-12386)

Fix a bug in the default configuration for the mouse bindings that can allow crafted links to execute arbitrary shell code. Please check your local configuration and replace '@SELECTEDURI' with '$8' in any string that is executed as shell code usually involves 'sh 'commandshere'. Note that Tenabl...

Fedora 14 : ruby-1.8.7.302-1.fc14 (2010-13401)

New version 1.8.7p302 is released. This version is for XSS security vulnerability found in WEBrick module which is now tagged as CVE-2010-0541. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to...

[SECURITY] Fedora 14 Update: znc-0.093-2.svn2101.fc14

ZNC is an IRC bouncer with many advanced features like detaching, multiple users, per channel playback buffer, SSL, IPv6, transparent DCC bouncing, Perl and C++ module support to name a few...

Fedora 14 : znc-0.093-2.svn2101.fc14 (2010-13038)

Update to znc 0.093 svn2101 to fix: CVE-2010-2812 and CVE-2010-2934 znc: multiple out-of-range errors can crash znc Update to 0.092 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically...

Metaroa Cross Site Scripting

!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!! !! !! !! METAROA XSS Vulnerability !! !! !! !! Author : Mohammad . Javanbakht !! !! Email : Secanaratgmail.com !! !! Blog : secanar.blogspot.com !! !! !! !! Date : Saturday , August 14 2010 !! !! !!...

Joomla Component com_jgrid 1.0 Local File Inclusion Vulnerability

Exploit for php platform in category web applications ================================================================= Joomla Component comjgrid 1.0 Local File Inclusion Vulnerability ================================================================= Name Jgrid Vendor...

CVE-2007-3336

creationtimestamp| type| source ---|---|--- 2010-08-14 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/14646...

[SECURITY] Fedora 14 Update: selinux-policy-3.8.8-10.fc14

SELinux Reference Policy - modular. Based off of reference policy: Checked out revision 2.20091117...

Novell iPrint Client ActiveX Control ExecuteRequest debug Buffer Overflow

This module exploits a stack-based buffer overflow in Novell iPrint Client 5.40. When sending an overly long string to the 'debug' parameter in ExecuteRequest property of ienipp.ocx an attacker may be able to execute arbitrary code. Module Options msf use...

Fixed in Apache Tomcat 6.0.28

Important: Remote Denial Of Service and Information Disclosure Vulnerability CVE-2010-2227 Several flaws in the handling of the 'Transfer-Encoding' header were found that prevented the recycling of a buffer. A remote attacker could trigger this flaw which would cause subsequent requests to fail...