CVE-2005-3272

CVE-2005-3272 affects the Linux kernel prior to 2.6.12. The issue lets remote attackers poison the bridge forwarding table with frames that have already been dropped by filtering, causing the bridge to forward spoofed packets. The vulnerability stems from how bridge/frame filtering handling inter...

[Full-disclosure] Oracle Workflow CSS Vulnerability wf_monitor

Dear FD-Reader, The Oracle Critical Patch Update October 2005 provides fixes for 2 Cross-Site- Scripting vulnerabilities in Oracle Workflow found by Red-Database-Security GmbH. I know that the severity and impact of CSS bugs is low. My critical security bugs in Oracle e.g. become DBA via the impo...

[Full-disclosure] [SECURITY] [DSA 867-1] New module-assistant package fixes insecure temporary file

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - -------------------------------------------------------------------------- Debian Security Advisory DSA 867-1 [email protected] http://www.debian.org/security/ Martin Schulze October 20th, 2005 http://www.debian.org/security/faq -...

[Full-disclosure] Oracle Workflow CSS Vulnerability wf_monitor

Dear FD-Reader, The Oracle Critical Patch Update October 2005 provides fixes for 2 Cross-Site- Scripting vulnerabilities in Oracle Workflow found by Red-Database-Security GmbH. I know that the severity and impact of CSS bugs is low. My critical security bugs in Oracle e.g. become DBA via the impo...

[Full-disclosure] [USN-211-1] Enigmail vulnerability

=========================================================== Ubuntu Security Notice USN-211-1 October 20, 2005 enigmail vulnerability CVE-2005-3256 =========================================================== A security issue affects the following Ubuntu releases: Ubuntu 4.10 Warty Warthog Ubuntu...

SUSE-SA:2005:061: openssl

The remote host is missing the patch for the advisory SUSE-SA:2005:061 openssl. The openssl cryptographic libraries have been updated to fix a protocol downgrading attack which allows a man-in-the-middle attacker to force the usage of SSLv2. This happens due to the work-around code of...

Symantec LiveUpdate for Macintosh Local Privilege Escalation

SUMMARY Risk Impact Medium Remote Access | No ---|--- Local Access | Yes Authentication Required | Yes Exploit publicly available | No AFFECTED PRODUCTS Product | Version | Build | Language | Solution ---|---|---|---|--- LiveUpdate for Macintosh | 3.0.0 | All | All | Live Update Patch 3.0.1 | All...

RHEL 2.1 / 3 : openldap and nss_ldap (RHSA-2005:751)

Updated openldap and nssldap packages that correct a potential password disclosure issue are now available. This update has been rated as having moderate security impact by the Red Hat Security Response Team. OpenLDAP is an open source suite of LDAP Lightweight Directory Access Protocol...

Fedora Core 4 : lynx-2.8.5-23.1 (2005-994)

This package fixes a security bug CVE-2005-3120 when handling connections to NNTP news servers. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possib...

Fedora Core 3 : koffice-1.4.2-0.FC3.2 (2005-984)

Tue Oct 11 2005 Than Ngo 4:1.4.2-0.FC3.2 - remove security fix which is included in new 1.4.2 upstream - Thu Sep 29 2005 Than Ngo 4:1.4.2-0.FC3.1 - update to 1.4.2 - apply upstream patch to fix CVE-2005-2971 kword buffer overflow 169486 Note that Tenable Network Security has extracted the...

RHEL 2.1 / 3 / 4 : xloadimage (RHSA-2005:802)

A new xloadimage package that fixes bugs in handling malformed tiff and pbm/pnm/ppm images, and in handling metacharacters in file names is now available. This update has been rated as having low security impact by the Red Hat Security Response Team. The xloadimage utility displays images in an X...

RHEL 2.1 : binutils (RHSA-2005:763)

An updated binutils package that fixes minor security issues is now available. This update has been rated as having low security impact by the Red Hat Security Response Team. Binutils is a collection of utilities used for the creation of executable code. A number of bugs were found in various...

RHEL 4 : lynx (RHSA-2005:803)

The remote Redhat Enterprise Linux 4 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2005:803 advisory. - CAN-2005-3120 lynx buffer overflow CVE-2005-3120 Note that Nessus has not tested for this issue but has instead relied only on the application's...

Fedora Core 3 : openssl-0.9.7a-42.2 / openssl096b-0.9.6b-21.2 (2005-985)

The remote Fedora Core host is missing one or more security updates : openssl-0.9.7a-42.2 : - Tue Oct 11 2005 Tomas Mraz 0.9.7a-42.2 - fix CVE-2005-2969 - remove SSLOPMSIESSLV2RSAPADDING which disables the countermeasure against man in the middle attack in SSLv2 169863 - more fixes for constant...

Fedora Core 4 : openssl-0.9.7f-7.10 / openssl097a-0.9.7a-3.1 (2005-986)

The remote Fedora Core host is missing one or more security updates : openssl-0.9.7f-7.10 : - Wed Oct 12 2005 Tomas Mraz 0.9.7f-7.10 - fix CVE-2005-2969 - remove SSLOPMSIESSLV2RSAPADDING which disables the countermeasure against man in the middle attack in SSLv2 169863 - more fixes for constant...

Fedora Core 4 : texinfo-4.8-4.1 (2005-991)

This package fixes a temporary file name vulnerability in the texindex program CVE-2005-3011. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible...

RHEL 2.1 / 3 / 4 : openssl (RHSA-2005:800)

Updated OpenSSL packages that fix various security issues are now available. This update has been rated as having moderate security impact by the Red Hat Security Response Team. OpenSSL is a toolkit that implements Secure Sockets Layer SSL v2/v3 and Transport Layer Security TLS v1 protocols as we...

Mandrake Linux Security Advisory : openssl (MDKSA-2005:179)

Yutaka Oiwa discovered vulnerability potentially affects applications that use the SSL/TLS server implementation provided by OpenSSL. Such applications are affected if they use the option SSLOPMSIESSLV2RSAPADDING. This option is implied by use of SSLOPALL, which is intended to work around various...

Linux Kernel 2.4.302.6.11.5 - BlueTooth bluez_sock_create Local Privilege Escalation

Linux Kernel 2.4.302.6.11.5 - BlueTooth bluezsockcreate Local Privilege Escalation / EDB Note: Update can be found here https://www.exploit-db.com/exploits/25290/ source: https://www.securityfocus.com/bid/12911/info A local signed-buffer-index vulnerability affects the Linux kernel because it fai...

Mandrake Linux Security Advisory : cfengine (MDKSA-2005:184)

Javier Fernndez-Sanguino Pea discovered several insecure temporary file uses in cfengine = 1.6.5 and = 2.1.16 which allows local users to overwrite arbitrary files via a symlink attack on temporary files used by vicf.in. CVE-2005-2960 In addition, Javier discovered the cfmailfilter and cfcron.in...