openSUSE 10 Security Update : kernel (kernel-4752)

This kernel update fixes the following security problems : ++ CVE-2007-3104: The sysfsreaddir function in the Linux kernel 2.6 allows local users to cause a denial of service kernel OOPS by dereferencing a NULL pointer to an inode in a dentry. ++ CVE-2007-4997: A 2 byte buffer underflow in the...

RHEL 2.1 / 3 / 4 / 5 : e2fsprogs (RHSA-2008:0003)

Updated e2fsprogs packages that fix several security issues are now available for Red Hat Enterprise Linux. This update has been rated as having moderate security impact by the Red Hat Security Response Team. The e2fsprogs packages contain a number of utilities for creating, checking, modifying,...

Debian DSA-1453-1 : tomcat5 - several vulnerabilities

Several remote vulnerabilities have been discovered in the Tomcat servlet and JSP engine. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2007-3382 It was discovered that single quotes ' in cookies were treated as a delimiter, which could lead to an...

[SECURITY] [DSA 1454-1] New freetype packages fix arbitrary code execution

------------------------------------------------------------------------ Debian Security Advisory DSA-1454-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff January 07, 2008 http://www.debian.org/security/faq -...

Moderate: Red Hat Security Advisory: e2fsprogs security update

Updated e2fsprogs packages that fix several security issues are now available for Red Hat Enterprise Linux. This update has been rated as having moderate security impact by the Red Hat Security Response Team. The e2fsprogs packages contain a number of utilities for creating, checking, modifying,...

[SECURITY] [DSA 1453-1] New tomcat5 packages fix several vulnerabilities

------------------------------------------------------------------------ Debian Security Advisory DSA-1453-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff January 07, 2008 http://www.debian.org/security/faq -...

Moderate: e2fsprogs security update

1.32-15.4 - Fix integer overflows 414611 / CVE-2007-5497...

DSA-1453-1 tomcat5 - several vulnerabilities

Bulletin has no description...

Debian DSA-1449-1 : loop-aes-utils - programming error

It was discovered that loop-aes-utils, tools for mounting and manipulating filesystems, didn't drop privileged user and group permissions in the correct order in the mount and umount commands. This could potentially allow a local user to gain additional privileges. %NASLMINLEVEL 70300 C Tenable...

Debian DSA-1451-1 : mysql-dfsg-5.0 - several vulnerabilities

Several local/remote vulnerabilities have been discovered in the MySQL database server. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2007-3781 It was discovered that the privilege validation for the source table of CREATE TABLE LIKE statements was...

ClamAV 0.91.2 - libclamav MEW PE Buffer Overflow

ClamAV 0.91.2 - libclamav MEW PE Buffer Overflow ''' clamav-0.91.2 exploit CVE-2007-6335 c Thomas Pollet [email protected] we own dsize in readdesc, src + dsize, exesectionsi + 1.rsz != exesectionsi + 1.rsz exploited with randomizevaspace = 0 ''' import struct exe=...

AOL Radio AmpX ActiveX Control Buffer Overflow (CVE-2007-5755)

AOL Radio is a free online radio service provided by America Online. Multiple buffer overflow vulnerabilities exist in AOL Radio. These vulnerabilities are due to boundary errors in the AOL Radio AmpX ActiveX Control. To trigger this issue, an attacker may create a malicious web page that will...

Mort Bay Jetty URL Multiple Slash Character Information Disclosure

The remote instance of Mort Bay Jetty allows an attacker to view static content in WEB-INF and behind security constraints because of the approach it uses to compact URLs like '/foo///bar'. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc'; include'compat.inc';...

MS07-063: Vulnerability in SMBv2 Could Allow Remote Code Execution (942624) (uncredentialed check)

The remote version of Windows contains a version of SMBv2 Server Message Block protocol that is affected by several vulnerabilities. An attacker may exploit these flaws to elevate his privileges and gain control of the remote host. C Tenable Network Security, Inc. include"compat.inc"; if...

Debian DSA-1447-1 : tomcat5.5 - several vulnerabilities

Several remote vulnerabilities have been discovered in the Tomcat servlet and JSP engine. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2007-3382 It was discovered that single quotes ' in cookies were treated as a delimiter, which could lead to an...

ClamAV 0.91.2 - libclamav MEW PE Buffer Overflow

''' clamav-0.91.2 exploit CVE-2007-6335 c Thomas Pollet [email protected] we own dsize in readdesc, src + dsize, exesectionsi + 1.rsz != exesectionsi + 1.rsz exploited with randomizevaspace = 0 ''' import struct exe=...

[SECURITY] [DSA 1452-1] New wzdftpd packages fix denial of service

------------------------------------------------------------------------ Debian Security Advisory DSA-1452-1 [email protected] http://www.debian.org/security/ Steve Kemp January 06, 2008 http://www.debian.org/security/faq -...

[SECURITY] [DSA 1451-1] New mysql-dfsg-5.0 packages fix several vulnerabilities

------------------------------------------------------------------------ Debian Security Advisory DSA-1451-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff January 06, 2008 http://www.debian.org/security/faq -...

Apple Mac OS X v10.5.1 2007-009 Multiple Security Vulnerabilities

CVE-2007-4708 CVE-2007-4709 CVE-2007-4710 CVE-2007-5847 CVE-2007-5848 CVE-2007-5849 CVE-2007-5850 CVE-2007-5851 CVE-2007-5853 CVE-2007-5854 CVE-2007-5855 CVE-2007-5856 CVE-2007-5857 CVE-2007-5859 CVE-2007-5876 CVE-2007-5860 CVE-2007-5861 These issues affect Mac OS X and various applications,...

IBM Domino Web Access Upload Module inotes6.dll BoF Exploit

No description provided by source. !-- written by e.b. IBM Domino Web Access Upload Module inotes6.dll SEH Overwrite Exploit Bad chars: 0x80+ CVE-2007-4474 Tested on Windows XP SP2fully patched English, IE6, inotes6.dll version 6.0.40.0 and version 6.0.48.0...