RHEL 2.1 / 3 : samba (RHSA-2007:1013)

Updated samba packages that fix several security issues are now available for Red Hat Enterprise Linux 2.1 and 3. This update has been rated as having critical security impact by the Red Hat Security Response Team. Samba is a suite of programs used by machines to share files, printers, and other...

RHEL 5 : samba (RHSA-2007:1017)

Updated samba packages that fix security issues are now available for Red Hat Enterprise Linux 5. This update has been rated as having critical security impact by the Red Hat Security Response Team. Samba is a suite of programs used by machines to share files, printers, and other information. A...

Secunia Research: Samba "reply_netbios_packet()" Buffer Overflow Vulnerability

====================================================================== Secunia Research 15/11/2007 - Samba "replynetbiospacket" Buffer Overflow Vulnerability - ====================================================================== Table of Contents Affected...

Unfixed XSS vulnerability at www.schwarz-auf-weiss.de

Security researcher Langy, has submitted on 16/11/2007 a cross-site-scripting XSS vulnerability affecting www.schwarz-auf-weiss.de, which at the time of submission ranked 203100 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 21/11/2007. It is...

RHEL 4 : openssl (RHSA-2007:1003)

The remote Redhat Enterprise Linux 4 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2007:1003 advisory. OpenSSL is a toolkit that implements the Secure Sockets Layer SSL v2/v3 and Transport Layer Security TLS v1 protocols, and is also a...

RHEL 3 / 4 / 5 : net-snmp (RHSA-2007:1045)

Updated net-snmp packages that fix a security issue are now available for Red Hat Enterprise Linux 3, 4, and 5. Simple Network Management Protocol SNMP is a protocol used for network management. A flaw was discovered in the way net-snmp handled certain requests. A remote attacker who can connect ...

[SAMBA] CVE-2007-4572 - GETDC mailslot processing buffer overrun in nmbd

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ========================================================== == == Subject: Stack buffer overflow in nmbd's logon == request processing. == == CVE ID: CVE-2007-4572 == == Versions: Samba 3.0.0 - 3.0.26a inclusive == == Summary: Processing of specially...

Microsoft Jet Database Engine MDB File Parsing Remote Buffer Overflow Vulnerability

Microsoft Jet Database Engine MDB File Parsing Remote Buffer Overflow Vulnerability. CVE-2007-6026. Dos exploit for windows platform source: http://www.securityfocus.com/bid/26468/info Microsoft Jet Database Engine is prone to a buffer-overflow vulnerability because it fails to properly...

RHEL 4 : wireshark (RHSA-2007:0709)

New Wireshark packages that fix various security vulnerabilities and functionality bugs are now available for Red Hat Enterprise Linux 4. Wireshark was previously known as Ethereal. This update has been rated as having low security impact by the Red Hat Security Response Team. Wireshark is a...

RHEL 4 : xterm (RHSA-2007:0701)

An updated xterm package that corrects a security issue is now available for Red Hat Enterprise Linux 4. This update has been rated as having low security impact by the Red Hat Security Response Team. The xterm program is a terminal emulator for the X Window System. It provides DEC VT102 and...

RHEL 4 : pam (RHSA-2007:0737)

Updated pam packages that fix two security flaws, resolve two bugs, and add an enhancement are now available for Red Hat Enterprise Linux 4. This update has been rated as having moderate security impact by the Red Hat Security Response Team. Pluggable Authentication Modules PAM provide a system...

Critical: samba security update

3.0.9-1.3E.14 - Security fix for CVE-2007-4572 and CVE-2007-5398 resolves: 350731 resolves: 359101...

Unfixed XSS vulnerability at www.sternstunden-jena.de

Security researcher bate, has submitted on 16/11/2007 a cross-site-scripting XSS vulnerability affecting www.sternstunden-jena.de, which at the time of submission ranked 1862389 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 21/11/2007. It is...

CVE-2007-6011

The CVE-2007-6011 entry concerns BugHotel Reservation System (main.php) before version 4.9.9 P3, where an authentication bypass allows remote attackers to gain administrative access via unspecified vectors. The description notes the vulnerability details are unspecified and provenance is from thi...

US-CERT Technical Cyber Security Alert TA07-319A -- Apple Updates for Multiple Vulnerabilities

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 National Cyber Alert System Technical Cyber Security Alert TA07-319A Apple Updates for Multiple Vulnerabilities Original release date: November 15, 2007 Last revised: -- Source: US-CERT Systems Affected Apple Mac OS X version 10.3.x and 10.4.x Apple M...

RHEL 4 : httpd (RHSA-2007:0747)

Updated httpd packages that fix a security issue, various bugs, and add enhancements are now available for Red Hat Enterprise Linux 4. This update has been rated as having moderate security impact by the Red Hat Security Response Team. The Apache HTTP Server is a popular and freely-available Web...

Fedora 7 : thunderbird-2.0.0.9-1.fc7 (2007-3431)

Updated thunderbird packages that fix several security bugs are now available for Fedora Core 7. This update has been rated as having moderate security impact by the Fedora Security Response Team. Mozilla Thunderbird is a standalone mail and newsgroup client. Several flaws were found in the way i...

DEBIAN-CVE-2007-6010

Unspecified vulnerability in pioneers formerly gnocatan 0.11.3 allows remote attackers to cause a denial of service daemon crash via unspecified vectors that trigger an assert error. NOTE: this issue reportedly exists because of an incomplete fix for CVE-2007-5933...

CVE-2007-6010

CVE-2007-6010 affects pioneers (formerly gnocatan) 0.11.3. The vulnerability allows remote denial of service (daemon crash) via unspecified vectors that trigger an assert error. The issue is reportedly related to an incomplete fix for CVE-2007-5933. Connected sources (NVD, OSV, Debian, Gentoo GLS...

Sql injection

SQL injection vulnerability in searchresult.php in Softbiz Link Directory Script allows remote attackers to execute arbitrary SQL commands via the sbcatid parameter, a related issue to CVE-2007-5449...