HP-UX PHSS_37703 : HP-UX running WBEM Services, Remote Execution of Arbitrary Code, Gain Extended Privileges (HPSBMA02331 SSRT080000 rev.3)

s700800 11.23 HP WBEM Services A.02.05.08 : Potential security vulnerabilities have been identified with HP-UX running WBEM Services. These vulnerabilities could be exploited remotely to execute arbitrary code or to gain extended privileges. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. Th...

HP-UX PHSS_37702 : HP-UX running WBEM Services, Remote Execution of Arbitrary Code, Gain Extended Privileges (HPSBMA02331 SSRT080000 rev.3)

s700800 11.11 HP WBEM Services A.02.05.08 : Potential security vulnerabilities have been identified with HP-UX running WBEM Services. These vulnerabilities could be exploited remotely to execute arbitrary code or to gain extended privileges. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. Th...

Ubuntu 6.06 LTS / 7.04 / 7.10 / 8.04 LTS : emacs21, emacs22 vulnerabilities (USN-607-1)

It was discovered that Emacs did not account for precision when formatting integers. If a user were tricked into opening a specially crafted file, an attacker could cause a denial of service or possibly other unspecified actions. This issue does not affect Ubuntu 8.04. CVE-2007-6109 Steve Grubb...

CentOS 3 : kernel (CESA-2008:0211)

Updated kernel packages that fix various security issues and several bugs are now available for Red Hat Enterprise Linux 3. This update has been rated as having important security impact by the Red Hat Security Response Team. The kernel packages contain the Linux kernel, the core of any Linux...

Debian DSA-1566-1 : cpio - programming error

Dmitry Levin discovered a vulnerability in path handling code used by the cpio archive utility. The weakness could enable a denial of service crash or potentially the execution of arbitrary code if a vulnerable version of cpio is used to extract or to list the contents of a maliciously crafted...

CVE-2007-6282

CVE-2007-6282 affects the Linux kernel IPsec ESP handling: the kernel before 2.6.25 can crash when processing fragmented ESP packets where the first fragment doesn’t include the full ESP header and IV. This was addressed in multiple advisories, with patches and updated kernels provided (e.g., RHS...

CVE-2007-5001

CVE-2007-5001 affects the Linux kernel (pre-2.4.21) and allows a local unprivileged user to trigger a kernel panic via asynchronous I/O on a FIFO. Publicly documented in multiple advisories (RHSA-2008:0211, SL3 updates, VMware ESX service console patch) as fixed by updating to kernel-2.4.21-57.EL...

USN-609-1: OpenOffice.org vulnerabilities

It was discovered that arbitrary Java methods were not filtered out when opening databases in OpenOffice.org. If a user were tricked into running a specially crafted query, a remote attacker could execute arbitrary Java with user privileges. CVE-2007-4575 Multiple memory overflow flaws were...

[SECURITY] [DSA 1568-1] New b2evolution packages fix cross site scripting

------------------------------------------------------------------------ Debian Security Advisory DSA-1568-1 [email protected] http://www.debian.org/security/ Thijs Kinkhorst May 05, 2008 http://www.debian.org/security/faq -...

HLDS WebMod 0.48 - rconpass Remote Heap Overflow

HLDS WebMod 0.48 - rconpass Remote Heap Overflow JMP EAX/ win32bind - Calc executer. Metasploit.com $shellcode = "\x33\xc9\x83\xe9\xde\xd9\xee\xd9\x74\x24\xf4\x5b\x81\x73\x13\xf4". "\x47\xba\xa4\x83\xeb\xfc\xe2\xf4\x08\xaf\xfe\xa4\xf4\x47\x31\xe1"...

[SECURITY] [DSA 1566-1] New cpio packages fix denial of service

------------------------------------------------------------------------ Debian Security Advisory DSA-1566-1 [email protected] http://www.debian.org/security/ Steve Kemp May 02, 2008 http://www.debian.org/security/faq - ------------------------------------------------------------------------...

Microsoft Works 7 WkImgSrv.dll ActiveX Remote BOF Exploit

Exploit for unknown platform in category remote exploits ========================================================= Microsoft Works 7 WkImgSrv.dll ActiveX Remote BOF Exploit ========================================================= MOV ESI,DWORD PTR SS:EBP+8 ; Do some other stuffs, we don't care...

[SECURITY] [DSA 1565-1] New Linux 2.6.18 packages fix several vulnerabilities

---------------------------------------------------------------------- Debian Security Advisory DSA-1565-1 [email protected] http://www.debian.org/security/ dann frazier May 1, 2008 http://www.debian.org/security/faq - ----------------------------------------------------------------------...

CVE-2007-6339

The CVE-2007-6339 entry is about the Akamai Download Manager ActiveX control (DownloadManagerV2.ocx) before version 2.2.3.5. The vulnerability allows a remote attacker to force the download and execution of arbitrary code via undocumented object parameters in the ActiveX control. Impact is arbitr...

[SECURITY] [DSA 1564-1] New wordpress packages fix several vulnerabilities

------------------------------------------------------------------------ Debian Security Advisory DSA-1564-1 [email protected] http://www.debian.org/security/ Thijs Kinkhorst May 01, 2008 http://www.debian.org/security/faq -...

Fedora 8 : dbmail-2.2.9-1.fc8 (2008-3333)

Fix possible authentication bypass in authldap authentication module when dbmail is used with LDAP servers allowing anonymous logins - CVE-2007-6714 443019. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has...

Fedora 7 : perl-5.8.8-29.fc7 (2008-3399)

Tue Apr 29 2008 Marcela Maslanova - 4:5.8.8-29 - CVE-2008-1927 buffer overflow, when unicode character is used. - Thu Jan 31 2008 Tom 'spot' Callaway - 4:5.8.8-28 - create /usr/lib/perl5/vendorperl/5.8.8/auto and own it in base perl resolves bugzilla 214580 - Mon Nov 26 2007 Tom 'spot' Callaway -...

openSUSE 10 Security Update : nagios (nagios-5168)

This update fixes several cross site scripting XSS issues in nagios CVE-2007-5624, CVE-2007-5803, CVE-2008-1360. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update nagios-5168. The text descripti...

[security bulletin] HPSBMA02331 SSRT080000 rev.1 - HP-UX running WBEM Services, Remote Execution of Arbitrary Code, Gain Extended Privileges

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 SUPPORT COMMUNICATION - SECURITY BULLETIN Document ID: c01438409 Version: 1 HPSBMA02331 SSRT080000 rev.1 - HP-UX running WBEM Services, Remote Execution of Arbitrary Code, Gain Extended Privileges NOTICE: The information in this Security Bulletin shou...

SuSE 10 Security Update : nagios (ZYPP Patch Number 5165)

This update fixes several cross-site scripting XSS issues in nagios. CVE-2007-5624 / CVE-2007-5803 / CVE-2008-1360 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if description...