Borland Interbase 2007 - 'PWD_db_aliased' Remote Buffer Overflow (Metasploit)

$Id$ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' class Metasploit3 'Borland...

CentOS 3 / 4 / 5 : gimp (CESA-2007:0513)

Updated gimp packages that fix several security issues are now available for Red Hat Enterprise Linux. This update has been rated as having moderate security impact by the Red Hat Security Response Team. The GIMP GNU Image Manipulation Program is an image composition and editing program. Multiple...

RHEL 5 : kernel (RHSA-2007:0936)

Updated kernel packages that fix a security issue in the Red Hat Enterprise Linux 5 kernel are now available. This update has been rated as having important security impact by the Red Hat Security Response Team. The Linux kernel handles the basic functions of the operating system. A flaw was foun...

Unfixed XSS vulnerability at www.groupcommunication.com

Security researcher MaXWeL, has submitted on 10/03/2007 a cross-site-scripting XSS vulnerability affecting www.groupcommunication.com, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 12/03/2007. It is...

Unfixed XSS vulnerability at microformguides.gale.com

Security researcher MaXWeL, has submitted on 10/03/2007 a cross-site-scripting XSS vulnerability affecting microformguides.gale.com, which at the time of submission ranked 52482 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 10/03/2007. It is...

Solaris 10 (sparc) : 127737-01

SunOS 5.10: fifofs patch. Date this patch was last updated by Sun : Oct/02/07 %NASLMINLEVEL 70300 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a recommended security fix. Disabled on 2011/10/24. C Tenable Network Security, Inc. if ! definedfunc"bnrandom"...

Borland Interbase 2007/2007 SP2 - 'jrd8_create_database' Remote Buffer Overflow (Metasploit)

$Id$ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' class Metasploit3 'Borland...

CentOS 4 : kernel (CESA-2007:0937)

Updated kernel packages that fix a security issue in the Red Hat Enterprise Linux 4 kernel are now available. This update has been rated as having important security impact by the Red Hat Security Response Team. The Linux kernel handles the basic functions of the operating system. A flaw was foun...

CentOS 3 : php (CESA-2007:0889)

Updated PHP packages that fix several security issues are now available for Red Hat Enterprise Linux 3. This update has been rated as having moderate security impact by the Red Hat Security Response Team. PHP is an HTML-embedded scripting language commonly used with the Apache HTTP Web server...

HP-UX PHNE_36168 : HP-UX Running rpc.yppasswdd, Remote Denial of Service (DoS) (HPSBUX02295 SSRT071333 rev.1)

s700800 11.11 ONC/NFS General Release/Performance Patch : A potential security vulnerability has been identified with HP-UX running rpc.yppasswdd. The vulnerability could be exploited remotely to create a denial of service DoS. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive...

CentOS 3 : kernel (CESA-2007:0938)

Updated kernel packages that fix a security issue in the Red Hat Enterprise Linux 3 kernel are now available. This update has been rated as having important security impact by the Red Hat Security Response Team. The Linux kernel handles the basic functions of the operating system. A flaw was foun...

Solaris 9 (sparc) : 117471-04

SunOS 5.9: connld, fifofs, fifonode patch. Date this patch was last updated by Sun : Oct/02/07 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc'; include'compat.inc'; if...

[SECURITY] [DSA 1379-1] New openssl packages fix arbitrary code execution

------------------------------------------------------------------------ Debian Security Advisory DSA-1379 [email protected] http://www.debian.org/security/ Noah Meyerhans October 02, 2007 - ------------------------------------------------------------------------ Package : openssl Vulnerability...

[SECURITY] [DSA 1379-1] New openssl packages fix arbitrary code execution

------------------------------------------------------------------------ Debian Security Advisory DSA-1379 [email protected] http://www.debian.org/security/ Noah Meyerhans October 02, 2007 - ------------------------------------------------------------------------ Package : openssl Vulnerability...

[SECURITY] [DSA 1365-3] New id3lib3.8.3 packages fix denial of service

-------------------------------------------------------------------------- Debian Security Advisory DSA 1365-3 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff, Dann Frazier October 2nd, 2007 http://www.debian.org/security/faq - -...

Unfixed XSS vulnerability at www.dennistoun.co.uk

Security researcher TiT, has submitted on 10/02/2007 a cross-site-scripting XSS vulnerability affecting www.dennistoun.co.uk, which at the time of submission ranked 6054163 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 10/02/2007. It is...

DSA-1381-2 linux-2.6

Bulletin has no description...

Important: xen security update

3.0.3-25.0.4.el5 - QEmu cirrus bitblit bounds check - CVE-2007-1320 rhbz 296271 - QEmu NE2000 overflow check - CVE-2007-1321 rhbz 296271 - Pygrub guest escape - CVE-2007-4993 rhbz 302821...

Unfixed XSS vulnerability at secure.namesystem.com

Security researcher X-Turk, has submitted on 10/02/2007 a cross-site-scripting XSS vulnerability affecting secure.namesystem.com, which at the time of submission ranked 3636305 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 10/02/2007. It is...

CVE-2007-5006

Multiple command handlers in CA Computer Associates BrightStor ARCserve Backup for Laptops and Desktops r11.0 through r11.5 do not verify if a peer is authenticated, which allows remote attackers to add and delete users, and start client restores...