libarchive does not properly terminate loop

Overview libarchive contains a vulnerability that may allow an attacker to cause a denial of service. Description The libarchive library provides an interface for reading and writing archive files.There is a vulnerability in libarchive that occurs when it parses the pax interchange format. If an...

CVE-2007-6254

CVE-2007-6254 involves a stack-based buffer overflow in the SAP BusinessObjects RptViewerAX ActiveX control (RptViewerAX.dll) for BusinessObjects 6.5, prior to CHF74. The overflow in the RptViewerAX ActiveX control can allow a remote attacker to execute arbitrary code, with exploitation described...

krb5 security update

CentOS Errata and Security Advisory CESA-2008:0164 Updated krb5 packages that resolve several issues and fix multiple bugs are now available for Red Hat Enterprise Linux 5. This update has been rated as having critical security impact by the Red Hat Security Response Team. Kerberos is a network...

tomcat5 security update

CentOS Errata and Security Advisory CESA-2008:0042 Updated tomcat packages that fix security issues and bugs are now available for Red Hat Enterprise Linux 5. This update has been rated as having moderate security impact by the Red Hat Security Response Team. Tomcat is a servlet container for Jav...

HP-UX PHNE_36281 : HP-UX Running ARPA Transport, Remote Denial of Service (DoS) (HPSBUX02306 SSRT071463 rev.2)

s700800 11.31 cumulative ARPA Transport patch : A potential security vulnerability has been identified with HP-UX running ARPA Transport. The vulnerability could be exploited remotely to create a Denial of Service DoS. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and...

Debian Security Advisory DSA 1493-2 (sdl-image1.2)

The remote host is missing an update to sdl-image1.2 announced via advisory DSA 1493-2. OpenVAS Vulnerability Test $Id: deb14932.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 1493-2 sdl-image1.2 Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft In...

Debian: Security Advisory (DSA-1493-2)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian: Security Advisory (DSA-1517-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2007-4592

creationtimestamp| type| source ---|---|--- 2008-03-19 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/31438...

Critical: Red Hat Security Advisory: krb5 security update

Updated krb5 packages that fix multiple security issues are now available for Red Hat Enterprise Linux 4. This update has been rated as having critical security impact by the Red Hat Security Response Team. Kerberos is a network authentication system which allows clients and servers to authentica...

Joomla! Component Acajoom 1.1.5 - SQL Injection

Joomla Component comacajoom SQL Injection Author: fataku Mail : [email protected] Dorks 1 : inurl:"comacajoom" mailingid Sploit:...

Critical: krb5 security update

1.3.4-54.el46.1 - add preliminary patch to fix use of uninitialized pointer / double-free in KDC CVE-2008-0062,CVE-2008-0063 432620, 432621 - add backported patch to fix double-free in libgssapikrb5 CVE-2007-5971 415351...

Cross site scripting

Cross-site scripting XSS vulnerability in Nagios before 2.11 allows remote attackers to inject arbitrary web script or HTML via unknown vectors to unspecified CGI scripts, a different issue than CVE-2007-5624...

ClamAV Milter Blackhole-Mode Remote Code Execution

This module exploits a flaw in the Clam AntiVirus suite 'clamav-milter' Sendmail mail filter. Versions prior to v0.92.2 are vulnerable. When implemented with black hole mode enabled, it is possible to execute commands remotely due to an insecure popen call. This module requires Metasploit:...

Several critical security vulnerabilities have been addressed in the newest releases of VMware's hosted product line

a. Host to guest shared folder HGFS traversal vulnerabilityOn Windows hosts, if you have configured a VMware host to guest shared folder HGFS, it is possible for a program running in the guest to gain access to the host's file system and create or modify executable files in sensitive locations...

[SECURITY] [DSA 1493-2] New sdl-image1.2 packages fix arbitrary code execution

------------------------------------------------------------------------ Debian Security Advisory DSA-1493-2 [email protected] http://www.debian.org/security/ Thijs Kinkhorst March 16, 2008 http://www.debian.org/security/faq -...

DSA-1493-2 sdl-image1.2 - arbitrary code execution

Bulletin has no description...

[SECURITY] [DSA 1518-1] New backup-manager packages fix information disclosure

------------------------------------------------------------------------ Debian Security Advisory DSA-1518-1 [email protected] http://www.debian.org/security/ Thijs Kinkhorst March 15, 2008 http://www.debian.org/security/faq -...

VMSA-2008-0005:Several CRITICAL security vulnerabilities have been addressed in the newest releases of VMware's hosted product line

VMSA-2008-0005.1 Several critical security vulnerabilities have been addressed in the newest releases of VMware's hosted product line VMware Security Advisory VMware Security AdvisoryAdvisory ID: VMSA-2008-0005.1 VMware Security AdvisorySynopsis: Several critical security vulnerabilities have bee...

Directory traversal

Directory traversal vulnerability in the Notes aka Flash Notes or instant messages feature in tb2ftp.dll in Timbuktu Pro 8.6.5 for Windows, and possibly 8.7 for Mac OS X, allows remote attackers to upload files to arbitrary locations via a destination filename with a \ backslash character followe...