security flaw

A regression error in the Perl package for Red Hat Enterprise Linux 4 omits the patch for CVE-2005-0155, which allows local users to overwrite arbitrary files with debugging information...

Low: Red Hat Security Advisory: kdebase security fix

Updated kdebase packages that resolve several bugs are now available. This update has been rated as having low security impact by the Red Hat Security Response Team. The kdebase packages provide the core applications for KDE, the K Desktop Environment. These core packages include the file manager...

IMAP Servers LIST Command Buffer Overflow (CVE-2005-4267)

...

JVN#62171179 Kiri directory traversal vulnerability

Impact If the email analysis command processes an email with an attachment with a particular file name, the attachment may be written to an unintended location. Solution Products Affected Kiri ver9-2006 Kiri ver9-2005 Kiri ver9-2004...

[SECURITY] [DSA 1148-1] New gallery packages fix several vulnerabilities

-------------------------------------------------------------------------- Debian Security Advisory DSA 1148-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff August 9th, 2006 http://www.debian.org/security/faq -...

Microsoft Security Bulletin MS06-047 Vulnerability in Microsoft Visual Basic for Applications Could Allow Remote Code Execution (921645)

Microsoft Security Bulletin MS06-047 Vulnerability in Microsoft Visual Basic for Applications Could Allow Remote Code Execution 921645 Published: August 8, 2006 Version: 1.0 Summary Who Should Read this Document: Customers using Microsoft Office applications or applications that use Microsoft...

HP-UX PHSS_32966 : HP-UX Running Xserver Local Execution of Arbitrary Code, Privilege Elevation (HPSBUX02137 SSRT051024 rev.1)

s700800 11.11 Xserver cumulative patch : A potential security vulnerability has been identified in the Xserver running on HP-UX. The vulnerability could be exploited by a local user to execute arbitrary code with the privileges of the Xserver. %NASLMINLEVEL 70300 C Tenable Network Security, Inc...

DSA-1145-1 freeradius - several

Bulletin has no description...

[SECURITY] [DSA 1145-1] New freeradius packages fix several vulnerabilities

-------------------------------------------------------------------------- Debian Security Advisory DSA 1145-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff August 8th, 2006 http://www.debian.org/security/faq -...

CVE-2005-2738

The CVE-2005-2738 entry concerns Java 1.4.2 before 1.4.2 Release 2 on Apple Mac OS X, where multiple programs can open the same port via a Java ServerSocket. The underlying issue is that the runtime does not prevent port-sharing, allowing a local user to have a Java program intercept data intende...

CVE-2005-2530

CVE-2005-2530 is an unspecified vulnerability in Java 1.3.1 before 1.3.1_16 on Apple Mac OS X that allows an untrusted applet to gain privileges via Mac OS X specific extensions. Affected component: Java for Mac OS X 1.3.1 (and possibly 1.4.2 per Nessus plugin reference). Impact: elevated privile...

CVE-2005-2529

CVE-2005-2529 affects Apple Mac OS X Java 1.4.2 before 1.4.2 Release 2. The flaw is a local privilege escalation via the updater utility used for Java shared archives. The description does not specify the exact attack vectors or exploited components beyond this updater mechanism. Connected source...

CVE-2005-2194

The CVE-2005-2194 entry describes an unspecified vulnerability in the Apple Mac OS X kernel prior to 10.4.2 that allows remote attackers to cause a denial of service (kernel panic) via a crafted TCP packet, possibly involving source routing or loose source routing. Affected software is Mac OS X k...

CVE-2005-2527

CVE-2005-2527 affects Java 1.4.2 on Mac OS X prior to Release 2. The issue is a race condition in the handling of a temporary directory, possibly due to a symlink attack, that allows local users to corrupt files or create arbitrary files. The vulnerability is local (attack vector: local user) and...

[SECURITY] [DSA 1136-1] New gpdf packages fix denial of service

-------------------------------------------------------------------------- Debian Security Advisory DSA 1136-1 [email protected] http://www.debian.org/security/ Martin Schulze August 2nd, 2006 http://www.debian.org/security/faq -...

VMSA-2006-0004 Cross site scripting vulnerability and other fixes

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - ------------------------------------------------------------------- VMware Security Advisory Advisory ID: VMSA-2006-0004 Synopsis: Cross site scripting vulnerability and other fixes Knowledge base URL:http://kb.vmware.com/kb/2118366 Issue date:...

Corsaire Security Advisory - VMware ESX Server Password Disclosure in Log issue

-- Corsaire Security Advisory -- Title: VMware ESX Server Password Disclosure in Log issue Date: 14.11.05 Application: VMware ESX prior to 2.5.3 upgrade patch 2 VMware ESX prior to 2.1.3 upgrade patch 1 VMware ESX prior to 2.0.2 upgrade patch 1 Environment: VMware ESX Author: Stephen de Vries...

CVE-2005-3620

CVE-2005-3620 affects VMware ESX Server: versions 2.0.x before 2.0.2 patch 1, 2.1.x before 2.1.3 patch 1, and 2.x before 2.5.3 patch 2 store passwords in cleartext in URLs that are logged in world-readable web server logs. This enables local users to view passwords and potentially gain privileges...

CVE-2005-3618

CVE-2005-3618 describes a CSRF vulnerability in VMware ESX Server’s Management Interface that can let an attacker modify a known user’s password via a crafted URL. Affected products/versions include ESX Server 2.0.x prior to 2.0.2 patch 1, 2.1.x prior to 2.1.3 patch 1, and 2.x prior to 2.5.3 patc...

Computer Associates License Service GCR buffer overflow

Added: 07/28/2006 CVE: CVE-2005-0581 BID: 12705 OSVDB: 14389 Background The License service comes with most Computer Associatesproducts and exchanges license information over ports 10202/tcp and 10203/tcp. Problem A buffer overflow vulnerability in the processing of GCR messages allows remote...