CVE-2009-5035

Technical details about CVE-2009-5035 are not publicly provided in the supplied documents. The available records only reiterate the vulnerability description; monitor for updates for affected products and fixes.

CVE-2009-5033

IBM Lotus Notes Traveler before 8.5.0.2 is affected by an input handling flaw in a tell command that accepts a "* *" argument sequence. This allows remote authenticated users to access other users’ data via a sync operation, due to how data for multiple users is stored within the same thread. The...

SuSE 11 / 11.1 Security Update : GnuTLS (SAT Patch Numbers 3650 / 3651)

The SSL-renegotiation 'authentication gap' has been fixed in GnuTLS. CVE-2009-3555 has been assigned to this issue. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from SuSE 11 update information. The text itself is...

RHEL 4 : openssl (RHSA-2010:0977)

The remote Redhat Enterprise Linux 4 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2010:0977 advisory. - openssl: NETSCAPEREUSECIPHERCHANGEBUG downgrade-to-disabled ciphersuite attack CVE-2008-7270 - openssl: missing bnwexpand return value...

CVE-2009-3843

creationtimestamp| type| source ---|---|--- 2010-12-14 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/16317 2018-05-29 15:50:33+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/http/tomcatmgrdeploy.rb 2018-05-29 15:50:33+00:00| seen|...

CVE-2009-4189

creationtimestamp| type| source ---|---|--- 2010-12-14 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/16317 2018-05-29 15:50:33+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/http/tomcatmgrdeploy.rb 2018-05-29 15:50:33+00:00| seen|...

openssl security update

0.9.7a-43.17.6 - CVE-2010-4180 - disable code for SSLOPNETSCAPEREUSECIPHERCHANGEBUG 659462 - CVE-2009-3245 - fix missing checks on allocation failure in bnwexpand 570924...

CVE-2009-5021

CVE-2009-5021 affects Cobbler prior to 1.6.1. The advisory states that Cobbler does not properly determine whether an installation has the default password, enabling an attacker to gain access by using that password. According to the NVD entry, this can impact confidentiality, integrity, and avai...

SuSE 10 Security Update : kdelibs (ZYPP Patch Number 7217)

An invalid character reference causing a buffer overflow in khtml has been fixed in the kdelibs package. CVE-2009-1725 has been assigned to this issue. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc. if NASLLEVEL 3000 exit0;...

RedHat Update for php RHSA-2010:0919-01

Check for the Version of php OpenVAS Vulnerability Test RedHat Update for php RHSA-2010:0919-01 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms of...

VMSA-2010-0019 : VMware ESX third-party updates for Service Console

a. Service Console update for samba The service console package samba is updated to version 3.0.9-1.3E.18. The Common Vulnerabilities and Exposures project cve.mitre.org has assigned the name CVE-2010-3069 to this issue. b. Service Console update for bzip2 The service console package bzip2 is...

McAfee VirusScan Enterprise Path Subversion Arbitrary DLL Injection Code Execution

The version of McAfee VirusScan Enterprise installed on the remote Windows host is earlier than 8.7i. Such versions insecurely look in their current working directory when resolving DLL dependencies, such as for 'traceapp.dll'. Attackers may exploit the issue by placing a specially crafted DLL fi...

DEBIAN-CVE-2009-5020

Open redirect vulnerability in awredir.pl in AWStats before 6.95 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via unspecified vectors...

CVE-2009-5020

Open redirect vulnerability in awredir.pl in AWStats before 6.95 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via unspecified vectors...

CVE-2009-5020

AWStats CVE-2009-5020 describes an open redirect in awredir.pl for versions before 6.95, enabling redirects to arbitrary sites and phishing via unspecified vectors. Affected: AWStats (awstats), vulnerability in awredir.pl. Root cause: improper redirect handling in AWStats

Fedora Update for gnome-xcf-thumbnailer FEDORA-2010-17035

Check for the Version of gnome-xcf-thumbnailer OpenVAS Vulnerability Test Fedora Update for gnome-xcf-thumbnailer FEDORA-2010-17035 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it...

Fedora Update for ocsinventory-agent FEDORA-2010-16314

Check for the Version of ocsinventory-agent OpenVAS Vulnerability Test Fedora Update for ocsinventory-agent FEDORA-2010-16314 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or...

SuSE 11 Security Update : glib2 (SAT Patch Number 1831)

When copying symbolic links the gfilecopy function set the target of the link to mode 0777 therefore exposing potentially sensitive information or allowing other user to modify files they should not have access to CVE-2009-3289. This has been fixed. This update also fixes a problem where glib2...

SuSE 11 Security Update : Linux kernel (SAT Patch Numbers 2682 / 2687 / 2689)

The SUSE Linux Enterprise 11 kernel was updated to 2.6.27.48, fixing various bugs and security issues : - The dogfs2setflags function in fs/gfs2/file.c of the Linux kernel does not verify the ownership of a file, which allows local users to bypass intended access restrictions via a SETFLAGS ioctl...

Fedora Update for libtlen FEDORA-2010-17720

The remote host is missing an update for the Copyright C 2010 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...