HP-UX PHNE_41177 : HP-UX Running XNTP, Remote Denial of Service (DoS) (HPSBUX02639 SSRT100293 rev.1)

s700800 11.31 NTP timeservices upgrade plus utilities : A potential security vulnerability has been identified with HP-UX running XNTP. The vulnerability could be exploited remotely create a Denial of Service DoS. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and patch...

HP-UX PHNE_41908 : HP-UX Running XNTP, Remote Denial of Service (DoS) (HPSBUX02639 SSRT100293 rev.1)

s700800 11.23 NTP timeservices upgrade plus utilities : A potential security vulnerability has been identified with HP-UX running XNTP. The vulnerability could be exploited remotely create a Denial of Service DoS. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and patch...

CVE-2009-5064

ldd in the GNU C Library aka glibc or libc6 2.13 and earlier allows local users to gain privileges via a Trojan horse executable file linked with a modified loader that omits certain LDTRACELOADEDOBJECTS checks. NOTE: the GNU C Library vendor states "This is just nonsense. There are a gazillion...

CVE-2009-5064

ldd in the GNU C Library aka glibc or libc6 2.13 and earlier allows local users to gain privileges via a Trojan horse executable file linked with a modified loader that omits certain LDTRACELOADEDOBJECTS checks. NOTE: the GNU C Library vendor states "This is just nonsense. There are a gazillion...

CVE-2009-5064

CVE-2009-5064 concerns glibc

CVE-2009-5064

ldd in the GNU C Library aka glibc or libc6 2.13 and earlier allows local users to gain privileges via a Trojan horse executable file linked with a modified loader that omits certain LDTRACELOADEDOBJECTS checks. NOTE: the GNU C Library vendor states "This is just nonsense. There are a gazillion...

CVE-2009-5064

ldd in the GNU C Library aka glibc or libc6 2.13 and earlier allows local users to gain privileges via a Trojan horse executable file linked with a modified loader that omits certain LDTRACELOADEDOBJECTS checks. NOTE: the GNU C Library vendor states "This is just nonsense. There are a gazillion...

Fedora Update for whatsup FEDORA-2011-2801

The remote host is missing an update for the SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

CVE-2009-5060

IBM Lotus Quickr 8.1 (before 8.1.0.11) for Lotus Domino is affected by an unspecified vulnerability that can allow remote authenticated users to cause a denial of service (daemon crash) by accessing an entry in a calendar (SPR MZHA7SEBJX). CVSS vector: AV:N/AC:M/Au:S/C:N/I:N/A:P with a base score...

CVE-2009-5059

Technical details about CVE-2009-5059 are not provided in the connected documents. The initial description notes a denial-of-service potential in IBM Lotus Quickr 8.1 before 8.1.0.10 when accessing via a connector; monitor for updates.

CVE-2009-5062

CVE-2009-5062 affects IBM Lotus Quickr 8.1 before 8.1.0.15 on AIX running Lotus Domino services. A remote authenticated user can cause a daemon crash (denial of service) by subscribing to an Atom feed, identified as SPR JRIE7VKMP9. According to the provided data, the CVSSv2 score is 3.5 (Network ...

CVE-2009-5061

The CVE-2009-5061 entry concerns IBM Lotus Quickr 8.1 prior to 8.1.0.14 for Lotus Domino, where, when Domino Native Authentication is enabled, remote authenticated users can cause a denial of service (daemon crash) by going offline. Public details in the provided documents are limited to this des...

CVE-2009-5056

Open Ticket Request System OTRS before 2.4.0-beta2 does not properly enforce the moveinto permission setting for a queue, which allows remote authenticated users to bypass intended access restrictions and read a ticket by watching this ticket, and then selecting the ticket from the watched-ticket...

CVE-2009-5056

Open Ticket Request System OTRS before 2.4.0-beta2 does not properly enforce the moveinto permission setting for a queue, which allows remote authenticated users to bypass intended access restrictions and read a ticket by watching this ticket, and then selecting the ticket from the watched-ticket...

CVE-2009-5055

Open Ticket Request System OTRS before 2.4.4 grants ticket access on the basis of single-digit substrings of the CustomerID value, which allows remote authenticated users to bypass intended access restrictions in opportunistic circumstances by visiting a ticket, as demonstrated by leveraging the...

CVE-2009-5057

The vulnerability CVE-2009-5057 affects OTRS (Open Ticket Request System) before version 2.3.4. The root cause is that the S/MIME feature does not configure the RANDFILE and HOME environment variables for OpenSSL, which may leave the entropy seeding file with insufficient randomness. This could a...

CVE-2009-5056

Removed by vendor...

CVE-2009-5056

CVE-2009-5056 affects Open Ticket Request System (OTRS) prior to 2.4.0-beta2. The flaw is an improper enforcement of the queue move_into permission that allows remote authenticated users to bypass access controls and read a ticket by watching it, then selecting it from the watched-tickets list. T...

CVE-2009-5055

Open Ticket Request System (OTRS) prior to 2.4.4 has a transport-layer access-control flaw: ticket access is granted based on single-digit substrings of the CustomerID, enabling remote authenticated users to bypass restrictions and read tickets intended for other CustomerIDs (e.g., CustomerID 12 ...

SuSE 11 Security Update : Linux kernel (SAT Patch Number 1753)

Indications Everyone using the Linux Kernel on s390x architecture should update. Contraindications None. Problem description The SUSE Linux Enterprise 11 Kernel was updated to 2.6.27.42 fixing various bugs and security issues. The following security issues were fixed : - A underflow in the e1000...