DSA-1145-1 freeradius - several

Bulletin has no description...

HP-UX PHSS_32966 : HP-UX Running Xserver Local Execution of Arbitrary Code, Privilege Elevation (HPSBUX02137 SSRT051024 rev.1)

s700800 11.11 Xserver cumulative patch : A potential security vulnerability has been identified in the Xserver running on HP-UX. The vulnerability could be exploited by a local user to execute arbitrary code with the privileges of the Xserver. %NASLMINLEVEL 70300 C Tenable Network Security, Inc...

[SECURITY] [DSA 1145-1] New freeradius packages fix several vulnerabilities

-------------------------------------------------------------------------- Debian Security Advisory DSA 1145-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff August 8th, 2006 http://www.debian.org/security/faq -...

CVE-2005-2738

The CVE-2005-2738 entry concerns Java 1.4.2 before 1.4.2 Release 2 on Apple Mac OS X, where multiple programs can open the same port via a Java ServerSocket. The underlying issue is that the runtime does not prevent port-sharing, allowing a local user to have a Java program intercept data intende...

CVE-2005-2529

CVE-2005-2529 affects Apple Mac OS X Java 1.4.2 before 1.4.2 Release 2. The flaw is a local privilege escalation via the updater utility used for Java shared archives. The description does not specify the exact attack vectors or exploited components beyond this updater mechanism. Connected source...

CVE-2005-2530

CVE-2005-2530 is an unspecified vulnerability in Java 1.3.1 before 1.3.1_16 on Apple Mac OS X that allows an untrusted applet to gain privileges via Mac OS X specific extensions. Affected component: Java for Mac OS X 1.3.1 (and possibly 1.4.2 per Nessus plugin reference). Impact: elevated privile...

CVE-2005-2194

The CVE-2005-2194 entry describes an unspecified vulnerability in the Apple Mac OS X kernel prior to 10.4.2 that allows remote attackers to cause a denial of service (kernel panic) via a crafted TCP packet, possibly involving source routing or loose source routing. Affected software is Mac OS X k...

CVE-2005-2527

CVE-2005-2527 affects Java 1.4.2 on Mac OS X prior to Release 2. The issue is a race condition in the handling of a temporary directory, possibly due to a symlink attack, that allows local users to corrupt files or create arbitrary files. The vulnerability is local (attack vector: local user) and...

[SECURITY] [DSA 1136-1] New gpdf packages fix denial of service

-------------------------------------------------------------------------- Debian Security Advisory DSA 1136-1 [email protected] http://www.debian.org/security/ Martin Schulze August 2nd, 2006 http://www.debian.org/security/faq -...

Corsaire Security Advisory - VMware ESX Server Password Disclosure in Log issue

-- Corsaire Security Advisory -- Title: VMware ESX Server Password Disclosure in Log issue Date: 14.11.05 Application: VMware ESX prior to 2.5.3 upgrade patch 2 VMware ESX prior to 2.1.3 upgrade patch 1 VMware ESX prior to 2.0.2 upgrade patch 1 Environment: VMware ESX Author: Stephen de Vries...

VMSA-2006-0004 Cross site scripting vulnerability and other fixes

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - ------------------------------------------------------------------- VMware Security Advisory Advisory ID: VMSA-2006-0004 Synopsis: Cross site scripting vulnerability and other fixes Knowledge base URL:http://kb.vmware.com/kb/2118366 Issue date:...

CVE-2005-3618

CVE-2005-3618 describes a CSRF vulnerability in VMware ESX Server’s Management Interface that can let an attacker modify a known user’s password via a crafted URL. Affected products/versions include ESX Server 2.0.x prior to 2.0.2 patch 1, 2.1.x prior to 2.1.3 patch 1, and 2.x prior to 2.5.3 patc...

CVE-2005-3620

CVE-2005-3620 affects VMware ESX Server: versions 2.0.x before 2.0.2 patch 1, 2.1.x before 2.1.3 patch 1, and 2.x before 2.5.3 patch 2 store passwords in cleartext in URLs that are logged in world-readable web server logs. This enables local users to view passwords and potentially gain privileges...

ViRobot Server web interface addschup buffer overflow

Added: 07/28/2006 CVE: CVE-2005-2041 BID: 13964 OSVDB: 17320 Background ViRobot Linux Server includes a web-based control interface. Problem A buffer overflow in the addschup CGI program included in the ViRobot Linux Server allows remote attackers to write arbitrary commands into the root crontab...

Computer Associates License Service GCR buffer overflow

Added: 07/28/2006 CVE: CVE-2005-0581 BID: 12705 OSVDB: 14389 Background The License service comes with most Computer Associatesproducts and exchanges license information over ports 10202/tcp and 10203/tcp. Problem A buffer overflow vulnerability in the processing of GCR messages allows remote...

Computer Associates License Service GCR buffer overflow

Added: 07/28/2006 CVE: CVE-2005-0581 BID: 12705 OSVDB: 14389 Background The License service comes with most Computer Associatesproducts and exchanges license information over ports 10202/tcp and 10203/tcp. Problem A buffer overflow vulnerability in the processing of GCR messages allows remote...

Computer Associates License Service GCR buffer overflow

Added: 07/28/2006 CVE: CVE-2005-0581 BID: 12705 OSVDB: 14389 Background The License service comes with most Computer Associatesproducts and exchanges license information over ports 10202/tcp and 10203/tcp. Problem A buffer overflow vulnerability in the processing of GCR messages allows remote...

[slackware-security] xine-lib

New xine-lib packages are available for Slackware 10.2 and -current to fix security issues. More details about these issues may be found in the Common Vulnerabilities and Exposures CVE database: https://vulners.com/cve/CVE-2005-4048 https://vulners.com/cve/CVE-2006-2802 Evidently there is also an...

[SECURITY] [DSA 1122-1] New Net::Server packages fix denial of service

-------------------------------------------------------------------------- Debian Security Advisory DSA 1122-1 [email protected] http://www.debian.org/security/ Martin Schulze July 24th, 2005 http://www.debian.org/security/faq -...

[SECURITY] [DSA 1121-1] New postgrey packages fix denial of service

-------------------------------------------------------------------------- Debian Security Advisory DSA 1121-1 [email protected] http://www.debian.org/security/ Martin Schulze July 24th, 2006 http://www.debian.org/security/faq -...