18185 matches found
GLSA-200808-07 : ClamAV: Multiple Denials of Service
The remote host is affected by the vulnerability described in GLSA-200808-07 ClamAV: Multiple Denials of Service Damian Put has discovered an out-of-bounds memory access while processing Petite files CVE-2008-2713, CVE-2008-3215. Also, please note that the 0.93 ClamAV branch fixes the first of th...
VMSA-2008-0013:Updated ESX packages for OpenSSL, net-snmp, perl
VMSA-2008-0013.4 Updated ESX packages for OpenSSL, net-snmp, perl VMware Security Advisory VMware Security AdvisoryAdvisory ID: VMSA-2008-0013.4 VMware Security AdvisorySynopsis: Updated ESX packages for OpenSSL, net-snmp, perl VMware Security AdvisoryIssue date: 2008-08-12 VMware Security...
RealPlayer for Windows < 6.0.14.806 / 6.0.12.1675 Multiple Vulnerabilities
Binary data 4608.prm...
DSquare Exploit Pack: D2SEC_K9WEB
Name| d2seck9web ---|--- CVE| CVE-2007-2952 Exploit Pack| D2ExploitPack Description| Blue Coat K9 Web Protection 'Referer' Header Stack Overflow Vulnerability Notes|...
CVE-2007-2952
Blue Coat K9 Web Protection 3.2.44 (Filter 3.2.32) has concrete stack-based buffer overflow vulnerabilities in k9filter.exe. An attacker can trigger remote code execution: (1) via a crafted long Referer header to the Web Protection Administration interface, and (2) via an HTTP response with an ov...
CVE-2007-2363
creationtimestamp| type| source ---|---|--- 2008-08-01 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/6188...
mysql security, bug fix, and enhancement update
4.1.22-2 - Back-patch three upstream security fixes from 4.1.23 and 4.1.24 Resolves: 445321 4.1.22-1 - Update to not-so-new-anymore upstream version 4.1.22 Resolves: 278461, 327771, 218009, 201988 - Use default port number if out-of-range port number is specified Resolves: 206067 - Sync mysql.ini...
Mac OS X Multiple Vulnerabilities (Security Update 2008-005)
The remote host is running a version of Mac OS X 10.5 or 10.4 that does not have the security update 2008-005 applied. This update contains security fixes for a number of programs. C Tenable Network Security, Inc. if !definedfunc"bnrandom" exit0; if NASLLEVEL 3004 exit0; include"compat.inc"; if...
Critical: Red Hat Security Advisory: RealPlayer security update
RealPlayer 10.0.9 as shipped in Red Hat Enterprise Linux 3 Extras, 4 Extras, and 5 Supplementary, contains a security flaw and should not be used. This update has been rated as having critical security impact by the Red Hat Security Response Team. Updated 17 September 2008 We have updated this...
Apache Tomcat JK Web Server Connector URI worker map buffer overflow
Added: 07/30/2008 CVE: CVE-2007-0774 BID: 22791 OSVDB: 33855 Background Apache Tomcat is a Java web application platform which can run under various types of web servers. The JK Web Server Connector modjk is used for communication between Tomcat and the web server. Problem A buffer overflow in a...
Apache Tomcat JK Web Server Connector URI worker map buffer overflow
Added: 07/30/2008 CVE: CVE-2007-0774 BID: 22791 OSVDB: 33855 Background Apache Tomcat is a Java web application platform which can run under various types of web servers. The JK Web Server Connector modjk is used for communication between Tomcat and the web server. Problem A buffer overflow in a...
Apache Tomcat JK Web Server Connector URI worker map buffer overflow
Added: 07/30/2008 CVE: CVE-2007-0774 BID: 22791 OSVDB: 33855 Background Apache Tomcat is a Java web application platform which can run under various types of web servers. The JK Web Server Connector modjk is used for communication between Tomcat and the web server. Problem A buffer overflow in a...
[slackware-security] httpd
New httpd packages are available for Slackware 12.0, 12.1, and -current to fix XSS security issues. More details about this issue may be found in the Common Vulnerabilities and Exposures CVE database: https://vulners.com/cve/CVE-2007-5000 https://vulners.com/cve/CVE-2007-6388 Here are the details...
CVE-2007-2586
creationtimestamp| type| source ---|---|--- 2008-07-29 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/6155...
Slackware 12.0 / 12.1 / current : httpd (SSA:2008-210-02)
New httpd packages are available for Slackware 12.0, 12.1, and -current to fix XSS security issues. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Slackware Security Advisory 2008-210-02. The text itself is copyright...
CVE-2007-5400
CVE-2007-5400 is a heap-based buffer overflow in RealNetworks RealPlayer 10.x (SWF frame handling) that can allow remote code execution via crafted SWF files. Connected advisories confirm a design/error in Shockwave Flash handling within RealPlayer’s SWF module, with multiple vendors issuing patc...
RealPlayer for Windows < Build 6.0.14.806 / 6.0.12.1675 Multiple Vulnerabilities
According to its build number, the installed version of RealPlayer / on the remote Windows host suffers from possibly several issues : - Heap memory corruption issues in several ActiveX controls can lead to arbitrary code execution. CVE-2008-1309 - An unspecified local resource reference...
Updated ESX service console packages for Samba and vmnix
I Service Console rpm updates a. Security Update to Service Console Kernel This fix upgrades service console kernel version to 2.4.21-57.EL. The Common Vulnerabilities and Exposures project cve.mitre.org has assigned the names CVE-2007-5001, CVE-2007-6151, CVE-2007-6206, CVE-2008-0007,...
[SECURITY] [DSA 1620-1] New python2.5 packages fix several vulnerabilities
------------------------------------------------------------------------ Debian Security Advisory DSA-1620-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff July 27, 2008 http://www.debian.org/security/faq -...
