Scientific Linux Security Update : apr and apr-util on SL4.x, SL5.x i386/x86_64

CVE-2009-2412 apr, apr-util: Integer overflows in memory pool apr and relocatable memory apr-util management Multiple integer overflow flaws, leading to heap-based buffer overflows, were found in the way the Apache Portable Runtime APR manages memory pool and relocatable memory allocations. An...

Scientific Linux Security Update : evolution on SL3.x i386/x86_64

It was discovered that evolution did not properly validate NTLM NT LAN Manager authentication challenge packets. A malicious server using NTLM authentication could cause evolution to disclose portions of its memory or crash during user authentication. CVE-2009-0582 An integer overflow flaw which...

Scientific Linux Security Update : gpdf on SL4.x i386/x86_64

Multiple integer overflow flaws were found in GPdf's JBIG2 decoder. An attacker could create a malicious PDF file that would cause GPdf to crash or, potentially, execute arbitrary code when opened. CVE-2009-0147, CVE-2009-1179 Multiple buffer overflow flaws were found in GPdf's JBIG2 decoder. An...

Scientific Linux Security Update : seamonkey on SL3.x, SL4.x i386/x86_64

A flaw was found in the way that SeaMonkey parsed malformed HTML mail messages. If a user opened a specially crafted HTML mail message, it could cause SeaMonkey to crash or, possibly, to execute arbitrary code as the user running SeaMonkey. CVE-2009-2210 After installing the update, SeaMonkey mus...

Scientific Linux Security Update : kernel on SL5.x i386/x86_64

Security fixes : - a NULL pointer dereference flaw was found in the sctprcvootb function in the Linux kernel Stream Control Transmission Protocol SCTP implementation. A remote attacker could send a specially crafted SCTP packet to a target system, resulting in a denial of service. CVE-2010-0008,...

CentOS Update for gimp CESA-2011:0837 centos4 x86_64

Check for the Version of gimp OpenVAS Vulnerability Test CentOS Update for gimp CESA-2011:0837 centos4 x8664 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under...

CentOS Update for gimp CESA-2011:0838 centos5 x86_64

The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

CentOS Update for python CESA-2011:0491 centos4 x86_64

Check for the Version of python OpenVAS Vulnerability Test CentOS Update for python CESA-2011:0491 centos4 x8664 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it...

CentOS Update for netpbm CESA-2011:1811 centos5 x86_64

Check for the Version of netpbm OpenVAS Vulnerability Test CentOS Update for netpbm CESA-2011:1811 centos5 x8664 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it...

CentOS Update for ruby CESA-2011:0909 centos5 x86_64

Check for the Version of ruby OpenVAS Vulnerability Test CentOS Update for ruby CESA-2011:0909 centos5 x8664 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under...

CentOS Update for openjpeg CESA-2012:1068 centos6

The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

CentOS Update for netpbm CESA-2011:1811 centos5 x86_64

The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

CentOS Update for ghostscript CESA-2012:0095 centos5

The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

Important: openjpeg

Issue Overview: An input validation flaw, leading to a heap-based buffer overflow, was found in the way OpenJPEG handled the tile number and size in an image tile header. A remote attacker could provide a specially-crafted image file that, when decoded using an application linked against OpenJPEG...

CentOS Update for python CESA-2011:0492 centos5 x86_64

The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

Mini-stream RM-MP3 Converter 3.1.2.1.2010.03.30 - Local Buffer Overflow (ASLR + DEP Bypass)

Mini-stream RM-MP3 Converter 3.1.2.1.2010.03.30 - Local Buffer Overflow ASLR + DEP Bypass Exploit Title: Mini-stream RM-MP3 Converter 3.1.2.1.2010.03.30 local buffer overflow \w ASLR and DEP bypass Date: 26 July 2012 Exploit Author: Gianni Gnesa Vendor Homepage: http://mini-stream.net/ Software...

Mini-stream RM-MP3 Converter 3.1.2.1.2010.03.30 - Local Buffer Overflow (ASLR + DEP Bypass)

Exploit Title: Mini-stream RM-MP3 Converter 3.1.2.1.2010.03.30 local buffer overflow \w ASLR and DEP bypass Date: 26 July 2012 Exploit Author: Gianni Gnesa Vendor Homepage: http://mini-stream.net/ Software Link: http://mini-stream.net/rm-to-mp3-converter/download Version: 3.1.2.1.2010.03.30 Teste...

Mini-stream RM-MP3 Converter 3.1.2.1.2010.03.30 Buffer Overflow (ASLR and DEP Bypass)

Exploit for windows platform in category local exploits Exploit Title: Mini-stream RM-MP3 Converter 3.1.2.1.2010.03.30 local buffer overflow \w ASLR and DEP bypass Date: 26 July 2012 Exploit Author: Gianni Gnesa Vendor Homepage: http://mini-stream.net/ Software Link:...

Mini-Stream RM-MP3 Converter 3.1.2.1.2010.03.30 Buffer Overflow

Exploit Title: Mini-stream RM-MP3 Converter 3.1.2.1.2010.03.30 local buffer overflow \w ASLR and DEP bypass Date: 26 July 2012 Exploit Author: Gianni Gnesa Vendor Homepage: http://mini-stream.net/ Software Link: http://mini-stream.net/rm-to-mp3-converter/download Version: 3.1.2.1.2010.03.30 Teste...

Cross site scripting

ModSecurity before 2.6.6, when used with PHP, does not properly handle single quotes not at the beginning of a request parameter value in the Content-Disposition field of a request with a multipart/form-data Content-Type header, which allows remote attackers to bypass filtering rules and perform...