Fedora 18 : libX11-1.5.99.901-3.20130524gita3bdd2b09.fc18 (2013-9151)

Fix CVE-2013-1981, CVE-2013-1997, CVE-2013-2004. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues...

Fedora 19 : libX11-1.5.99.901-3.20130524gita3bdd2b09.fc19 (2013-9079)

Fix CVE-2013-1981, CVE-2013-1997, CVE-2013-2004. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues...

[SECURITY] [DSA 2693-1] libx11 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-2693-1 [email protected] http://www.debian.org/security/ Raphael Geissert May 24, 2013 http://www.debian.org/security/faq -...

Debian Security Advisory DSA 2693-1 (libx11 - several vulnerabilities)

Ilja van Sprundel of IOActive discovered several security issues in multiple components of the X.org graphics stack and the related libraries: Various integer overflows, sign handling errors in integer conversions, buffer overflows, memory corruption and missing input sanitising may lead to...

House Committee Passes Bill to Force ISPs to Retain User Data For 12 Months

A controversial bill that would force ISPs to retain records for up to 12 months that would allow them to identify users by IP address has cleared a key hurdle and passed the House Judiciary Committee by a wide margin, setting it up for passage by the full House. The bill was introduced with the...

CVE-2010-1981

CVE-2010-1981 : A directory traversal (Local File Inclusion) vulnerability affects the Joomla! component Fabrik (com_fabrik) version 2.0. The issue allows an attacker to read arbitrary files by manipulating the controller parameter in index.php (.. traversal). Root cause is improper input handlin...

CVE-2010-1981

Directory traversal vulnerability in the Fabrik comfabrik component 2.0 for Joomla! allows remote attackers to read arbitrary files via a .. dot dot in the controller parameter to index.php...

CVE-2010-1981

creationtimestamp| type| source ---|---|--- 2010-04-06 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/12087...

Debian DSA-1981-1 : maildrop - privilege escalation

Christoph Anton Mitterer discovered that maildrop, a mail delivery agent with filtering abilities, is prone to a privilege escalation issue that grants a user root group privileges. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were...

maildrop 2.3.0本地权限提升漏洞

CVE ID: CVE-2010-0301 maildrop是带有过滤功能的邮件传输代理。 如果root用户以-d选项运行maildrop，则main.C使用了root的gid执行用户主目录中的.mailfilter，这允许本地用户通过特制文件获得权限提升。成功攻击要求maildrop编译为没有设置RESETGID，如邮件目录没有使用粘着位。 Double Precision Inc. maildrop 2.3.0 厂商补丁： Debian ------ Debian已经为此发布了一个安全公告（DSA-1981-1）以及相应补丁: DSA-1981-1：New maildrop...

Debian Security Advisory DSA 1981-2 (maildrop)

The remote host is missing an update to maildrop announced via advisory DSA 1981-2. OpenVAS Vulnerability Test $Id: deb19812.nasl 6614 2017-07-07 12:09:12Z cfischer $ Description: Auto-generated from advisory DSA 1981-2 maildrop Authors: Thomas Reinke Copyright: Copyright c 2010 E-Soft Inc...

Debian Security Advisory DSA 1981-1 (maildrop)

The remote host is missing an update to maildrop announced via advisory DSA 1981-1. OpenVAS Vulnerability Test $Id: deb19811.nasl 6614 2017-07-07 12:09:12Z cfischer $ Description: Auto-generated from advisory DSA 1981-1 maildrop Authors: Thomas Reinke Copyright: Copyright c 2010 E-Soft Inc...

Debian: Security Advisory (DSA-1981-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian: Security Advisory (DSA-1981-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2009-1981

CVE-2009-1981 relates to the Siebel product suite, specifically the Highly Interactive Client component. The Siebel entry lists affected versions: 7.5.3, 7.7.2, 7.8.2, 8.0.0.5, and 8.1.0. The vulnerability is described as unspecified, allowing local users to affect confidentiality and integrity v...

CVE-2008-1981

CVE-2008-1981 is a CSRF vulnerability in the Drupal module E-Publish, affecting 5.x releases before 5.x-1.1 and 6.x releases before 6.x-1.0 beta1. The issue allows remote attackers to perform unauthorized actions as other users via unspecified vectors. The connected documents confirm the affected...

CVE-2008-1981

Cross-site request forgery CSRF vulnerability in E-Publish 5.x before 5.x-1.1 and 6.x before 6.x-1.0 beta1, a Drupal module, allows remote attackers to perform unauthorized actions as other users via unspecified vectors...

CVE-2007-1981

The CVE-2007-1981 issue affects Metamod-P 1.19p29 and earlier on Windows, where the safevoid_vsnprintf function can be triggered by a long meta list command to cause a denial of service (daemon crash). The available connected data confirms the affected component and the impact as described (DoS)....

CVE-2006-1981

CVE-2006-1981 affects Mac OS X 10.4.5 and involves Java InputMethods. The issue: InputMethods may send input events intended for secure fields to the wrong text field, potentially exposing passwords to onlookers. The available sources do not specify a vendor patch version or explicit remediation ...

CVE-2002-1981

Microsoft SQL Server 2000 through SQL Server 2000 SP2 allows the "public" role to execute the 1 spMSSetServerProperties or 2 spMSsetalertinfo stored procedures, which allows attackers to modify configuration including SQL server startup and alert settings...