OpenSSL < 0.9.8k Signature Repudiation

According to its banner, the remote server is running a version of OpenSSL that is earlier than 0.9.8k. As such, it may allow a valid sign to generate invalid signatures which would appear valid and could be repudiated later. This only affects CMS users. CMS appeared in OpenSSL 0.9.8h. C Tenable...

Adobe Acrobat and Reader U3D CLODMeshDeclaration Memory Corruption (CVE-2009-2994)

A memory corruption vulnerability has been reported in Adobe Reader and Acrobat. The vulnerability is due to an index boundary error while handling specially crafted PDF files. A remote attacker may exploit this vulnerability by enticing unsuspecting users to open a malicious PDF document with an...

Adobe Acrobat and Reader U3D CLODMeshDeclaration Memory Corruption (CVE-2009-2994)

A memory corruption vulnerability has been reported in Adobe Reader and Acrobat...

http-vuln-cve2009-3960 NSE Script

Exploits cve-2009-3960 also known as Adobe XML External Entity Injection. This vulnerability permits to read local files remotely and is present in BlazeDS 3.2 and earlier, LiveCycle 8.0.1, 8.2.1, and 9.0, LiveCycle Data Services 2.5.1, 2.6.1, and 3.0, Flex Data Services 2.0.1, and ColdFusion...

CVE-2009-2436

creationtimestamp| type| source ---|---|--- 2012-01-02 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/18300...

SOL13277 - Apache vulnerability CVE-2009-2412

Recommended action ARX To eliminate this vulnerability, upgrade to a version that is listed in the Versions known to be not vulnerable column of the table. To mitigate this vulnerability, do not enable access to the ARX management API. Supplemental Information Note: The previous link takes you to...

CVE-2009-5110

CVE-2009-5110 affects dhttpd and allows remote attackers to cause a denial of service (daemon outage) by sending partial HTTP requests, demonstrated by Slowloris. Public records from multiple sources (NVD, Red Hat, Ubuntu, CVE list, etc.) confirm the DoS impact via incomplete/slow HTTP requests, ...

CVE-2009-5111

Affected product: GoAhead WebServer. Vulnerability arises from handling of partial HTTP requests, enabling remote attackers to cause a denial of service (daemon outage) as demonstrated by Slowloris. Exploitation details and practical impact are stated; no patch/version or remediation is provided ...

Tianya, China's biggest online forum 40 million users data leaked

Tianya, China's biggest online forum 40 million users data leaked Tianya.cn, China's biggest online forum confirmed on Sunday that private information for 40 million users had been leaked, three days after the country's largest programmers' website CSDN reported a similar leak. Tianya is one of t...

CVE-2009-5109

CVE-2009-5109 is a stack-based buffer overflow in Mini-Stream Ripper 3.0.1.1 that permits remote code execution through a crafted long entry in a .pls file. Public references describe attacking via specially crafted .pls files, with exploit code and proof-of-concept material (exploit-db, Metasplo...

RedHat Update for netpbm RHSA-2011:1811-01

The remote host is missing an update for the SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

CentOS Update for netpbm CESA-2011:1811 centos5 i386

Check for the Version of netpbm OpenVAS Vulnerability Test CentOS Update for netpbm CESA-2011:1811 centos5 i386 Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it und...

SOL13275 - PHP vulnerability CVE-2009-3293

Recommended Action None Supplemental Information SOL9970: Subscribing to email notifications regarding F5 products SOL9957: Creating a custom RSS feed to view new and updated documents SOL4602: Overview of the F5 security vulnerability response policy...

SuSE 10 Security Update : dbus (ZYPP Patch Number 7482)

Local users could crash the D-Bus daemon by sending a specially crafted message CVE-2010-4352. This update also properly fixes CVE-2008-3834 / CVE-2009-1189. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc. include'deprecatednasllevel.inc'...

SuSE 10 Security Update : libsndfile (ZYPP Patch Number 7639)

An integer overflow in libsndfile while processing certain PAF files has been fixed. CVE-2011-2696 has been assigned to this issue. Additionally a divide by zero error CVE-2009-4835 has been fixed. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novel...

RHEL 4 / 5 : netpbm (RHSA-2011:1811)

The remote Redhat Enterprise Linux 4 / 5 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2011:1811 advisory. The netpbm packages contain a library of functions which support programs for handling various graphics file formats, including .pbm...

CentOS 4 / 5 : netpbm (CESA-2011:1811)

Updated netpbm packages that fix three security issues are now available for Red Hat Enterprise Linux 4 and 5. The Red Hat Security Response Team has rated this update as having important security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity ratings,...

SuSE 10 Security Update : compat-openssl097g (ZYPP Patch Number 7645)

This update adds openssl patches since 2007 for : - CVE-2009-0590 - CVE-2008-5077 - CVE-2009-0789 - CVE-2009-3555 - CVE-2010-4180 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc. if NASLLEVEL 3000 exit0; include'deprecatednasllevel.inc';...

netpbm security update

10.35.58-8.el5.3 - Actually apply the patch for - CVE-2009-4274 760849 10.35.58-8.el5.2 - fix xpmtoppm overfow - CVE-2009-4274 760849 10.35.58-8.el5.1 - fix libjasper heap buffer overflow CVE-2011-4516 CVE-2011-4517 760849...

RHEL 6 : glibc (RHSA-2011:1526)

The remote Redhat Enterprise Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2011:1526 advisory. The glibc packages contain the standard C libraries used by multiple programs on the system. These packages contain the standard C and the...