Security fix for the ALT Linux 9 package openssl1.1 version 0.9.8m-alt1

Feb. 26, 2010 Evgeny Sinelnikov 0.9.8m-alt1 - Updated to 0.9.8m with security fixes and improvements, including: + CVE-2009-3245, CVE-2008-1678 + CVE-2009-1377, CVE-2009-1378, CVE-2009-1379 + CVE-2009-1387 closes: 20280 + CVE-2009-4355 closes: 22817, 23037 + patch for Cisco VPN client DTLS...

Security fix for the ALT Linux 8 package openssl10 version 0.9.8m-alt1

Feb. 26, 2010 Evgeny Sinelnikov 0.9.8m-alt1 - Updated to 0.9.8m with security fixes and improvements, including: + CVE-2009-3245, CVE-2008-1678 + CVE-2009-1377, CVE-2009-1378, CVE-2009-1379 + CVE-2009-1387 closes: 20280 + CVE-2009-4355 closes: 22817, 23037 + patch for Cisco VPN client DTLS...

Security fix for the ALT Linux 6 package openssl10 version 0.9.8m-alt1

Feb. 26, 2010 Evgeny Sinelnikov 0.9.8m-alt1 - Updated to 0.9.8m with security fixes and improvements, including: + CVE-2009-3245, CVE-2008-1678 + CVE-2009-1377, CVE-2009-1378, CVE-2009-1379 + CVE-2009-1387 closes: 20280 + CVE-2009-4355 closes: 22817, 23037 + patch for Cisco VPN client DTLS...

Security fix for the ALT Linux 9 package openssl10 version 0.9.8m-alt1

Feb. 26, 2010 Evgeny Sinelnikov 0.9.8m-alt1 - Updated to 0.9.8m with security fixes and improvements, including: + CVE-2009-3245, CVE-2008-1678 + CVE-2009-1377, CVE-2009-1378, CVE-2009-1379 + CVE-2009-1387 closes: 20280 + CVE-2009-4355 closes: 22817, 23037 + patch for Cisco VPN client DTLS...

Design/Logic Flaw

Memory leak in the zlibstatefulfinish function in crypto/comp/czlib.c in OpenSSL 0.9.8l and earlier and 1.0.0 Beta through Beta 4 allows remote attackers to cause a denial of service memory consumption via vectors that trigger incorrect calls to the CRYPTOcleanupallexdata function, as demonstrate...

CentOS 5 : httpd (CESA-2009:1075)

Updated httpd packages that fix two security issues are now available for Red Hat Enterprise Linux 5. This update has been rated as having moderate security impact by the Red Hat Security Response Team. The Apache HTTP Server is a popular and freely-available Web server. A flaw was found in the...

Mandriva Security Advisory MDVSA-2009:323 (apache)

The remote host is missing an update to apache announced via advisory MDVSA-2009:323. OpenVAS Vulnerability Test $Id: mdksa2009323.nasl 6573 2017-07-06 13:10:50Z cfischer $ Description: Auto-generated from advisory MDVSA-2009:323 apache Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft In...

Mandrake Security Advisory MDVSA-2009:124 (apache)

The remote host is missing an update to apache announced via advisory MDVSA-2009:124. OpenVAS Vulnerability Test $Id: mdksa2009124.nasl 6573 2017-07-06 13:10:50Z cfischer $ Description: Auto-generated from advisory MDVSA-2009:124 apache Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft In...

CentOS Security Advisory CESA-2009:1075 (httpd)

The remote host is missing updates to httpd announced in advisory CESA-2009:1075. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only OR GPL-3.0-onl...

RedHat Security Advisory RHSA-2009:1075

The remote host is missing updates announced in advisory RHSA-2009:1075. The Apache HTTP Server is a popular and freely-available Web server. A flaw was found in the handling of compression structures between modssl and OpenSSL. If too many connections were opened in a short period of time, all...

Mandriva Linux Security Advisory : apache (MDVSA-2009:124-1)

Multiple vulnerabilities has been found and corrected in apache : Memory leak in the zlibstatefulinit function in crypto/comp/czlib.c in libssl in OpenSSL 0.9.8f through 0.9.8h allows remote attackers to cause a denial of service memory consumption via multiple calls, as demonstrated by initial S...

httpd, mod_ssl security update

CentOS Errata and Security Advisory CESA-2009:1075 Updated httpd packages that fix two security issues are now available for Red Hat Enterprise Linux 5. This update has been rated as having moderate security impact by the Red Hat Security Response Team. The Apache HTTP Server is a popular and...

RHEL 5 : httpd (RHSA-2009:1075)

The remote Redhat Enterprise Linux 5 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2009:1075 advisory. The Apache HTTP Server is a popular and freely-available Web server. A flaw was found in the handling of compression structures between mods...

httpd security update

2.2.3-22.0.1.el53.1 - Replace index.html with oracle's index page oracleindex.html - Update vstring and distro in specfile 2.2.3-22.el53.1 - add security fixes for CVE-2008-1678, CVE-2009-1195 499284...

CVE-2009-1678

Directory traversal vulnerability in the saveFeed function in rss/feedcreator.class.php in Bitweaver 2.6 and earlier allows remote attackers to create or overwrite arbitrary files via a .. dot dot in the version parameter to boards/boardsrss.php...

CVE-2009-1678

Bitweaver prior to version 2.7 is affected by a directory traversal flaw in the saveFeed function of rss/feedcreator.class.php, where a crafted .. in the version parameter to boards/boards_rss.php allows remote attackers to create or overwrite arbitrary files. This impacts Bitweaver 2.6 and earli...

CVE-2009-1678

creationtimestamp| type| source ---|---|--- 2009-05-12 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/8659...

Debian Security Advisory DSA 1678-2 (perl)

The remote host is missing an update to perl announced via advisory DSA 1678-2. OpenVAS Vulnerability Test $Id: deb16782.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 1678-2 perl Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc...

[SECURITY] [DSA 1678-2] New perl packages fix regression

------------------------------------------------------------------------ Debian Security Advisory DSA-1678-2 [email protected] http://www.debian.org/security/ Florian Weimer December 21, 2008 http://www.debian.org/security/faq -...

openSUSE 10 Security Update : apache2 (apache2-5648)

Missing sanity checks of FTP URLs allowed cross site scripting XSS attacks via the modproxyftp module CVE-2008-2939. Missing precautions allowed cross site request forgery CSRF via the modproxybalancer interface CVE-2007-6420. A memory leak in the ssl module could crash apache CVE-2008-1678...