Debian DSA-2243-1 : unbound - design flaw

It was discovered that Unbound, a caching DNS resolver, ceases to provide answers for zones signed using DNSSEC after it has processed a crafted query. CVE-2009-4008 In addition, this update improves the level of DNSSEC support in the lenny version of Unbound so that it is possible for system...

[SECURITY] [DSA 2256-1] tiff security update

------------------------------------------------------------------------- Debian Security Advisory DSA-2256-1 [email protected] http://www.debian.org/security/ Thijs Kinkhorst June 9, 2011 http://www.debian.org/security/faq -...

RHEL 6 : xerces-j2 (RHSA-2011:0858)

The remote Redhat Enterprise Linux 6 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2011:0858 advisory. - xerces-j2, JDK: XML parsing Denial-Of-Service 6845701 CVE-2009-2625 Note that Nessus has not tested for this issue but has instead relied only on t...

CVE-2009-5077

CRE Loaded before 6.2.14 allows remote attackers to bypass authentication and gain administrator privileges via vectors related to a modified PHPSELF variable, which is not properly handled by 1 includes/applicationtop.php and 2 admin/includes/applicationtop.php...

CVE-2009-5077

CRE Loaded before 6.2.14 allows remote attackers to bypass authentication and gain administrator privileges via vectors related to a modified PHPSELF variable, which is not properly handled by 1 includes/applicationtop.php and 2 admin/includes/applicationtop.php...

CVE-2009-5077

CRE Loaded before 6.2.14 is vulnerable to an authentication bypass that can grant administrator privileges via manipulation of a modified PHP_SELF variable, not properly handled by includes/application_top.php and admin/includes/application_top.php. The issue affects CRE Loaded prior to version 6...

CVE-2009-5077

CRE Loaded before 6.2.14 allows remote attackers to bypass authentication and gain administrator privileges via vectors related to a modified PHPSELF variable, which is not properly handled by 1 includes/applicationtop.php and 2 admin/includes/applicationtop.php...

CVE-2009-5076

CRE Loaded before 6.2.14, and possibly other versions before 6.3.x, allows remote attackers to bypass authentication and gain administrator privileges via a request with 1 login.php or 2 passwordforgotten.php appended as the PATHINFO, which bypasses a check that uses PHPSELF, which is not properl...

CVE-2009-5076

CRE Loaded before 6.2.14, and possibly other versions before 6.3.x, allows remote attackers to bypass authentication and gain administrator privileges via a request with 1 login.php or 2 passwordforgotten.php appended as the PATHINFO, which bypasses a check that uses PHPSELF, which is not properl...

CVE-2009-5076

CVE-2009-5076 affects CRE Loaded prior to 6.3.x (and possibly other versions before 6.3.x) where authentication can be bypassed via PATH_INFO by requesting login.php or password_forgotten.php, exploiting improper handling of PHP_SELF in includes/application_top.php and admin/includes/application_...

xerces-j2 security update

0:2.7.1-12.6 - Add xerces-j2-CVE-2009-2625.patch - Resolves: rhbz690931 CVE-2009-2625...

HP-UX Update for XNTP HPSBUX02639

The remote host is missing an update for the XNTP packages announced via the referenced advisory. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-on...

CentOS Update for gimp CESA-2011:0837 centos4 i386

The remote host is missing an update for the SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

RedHat Update for gimp RHSA-2011:0838-01

The remote host is missing an update for the SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

Ubuntu: Security Advisory (USN-1140-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

RedHat Update for gimp RHSA-2011:0837-01

Check for the Version of gimp OpenVAS Vulnerability Test RedHat Update for gimp RHSA-2011:0837-01 Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms o...

Fedora Update for viewvc FEDORA-2011-7222

The remote host is missing an update for the SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

CVE-2009-4008

Unbound before 1.4.4 does not send responses for signed zones after mishandling an unspecified query, which allows remote attackers to cause a denial of service DNSSEC outage via a crafted query...

VMware hosted product updates, ESX patches and VI Client update resolve multiple security issue

a. VMware vmkernel third party e1000e Driver Packet Filter Bypass There is an issue in the e1000e Linux driver for Intel PRO/1000 adapters that allows a remote attacker to bypass packet filters. The Common Vulnerabilities and Exposures project cve.mitre.org has assigned the name CVE-2009-4536 to...

RHEL 4 : gimp (RHSA-2011:0837)

The remote Redhat Enterprise Linux 4 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2011:0837 advisory. - Gimp: Integer overflow in the BMP image file plugin CVE-2009-1570 - Gimp: Stack-based buffer overflow in SphereDesigner plug-in...