Fedora 11 : samba-3.4.5-0.47.fc11 (2010-1190)

Tue Jan 26 2010 Guenther Deschner - 3.4.5-0.47 - Security Release, fixes CVE-2009-3297 - resolves: 532940 - Tue Jan 19 2010 Guenther Deschner - 3.4.5-0.46 - Update to 3.4.5 - Thu Jan 7 2010 Guenther Deschner - 3.4.4-0.45 - Update to 3.4.4 - Thu Oct 29 2009 Guenther Deschner - 3.4.3-0.44 - Update...

CVE-2009-4914

CVE-2009-4914 affects Cisco ASA 5580 series with software before 8.1(2). The vulnerability is a memory leak in the handling of Subject Alternative Name fields in X.509 certificates that may be exploited by remote attackers to cause a DoS via memory exhaustion. Connected docs consistently describe...

CVE-2009-4918

CVE-2009-4918 affects Cisco ASA 5580 series devices running software before 8.1(2). The issue allows remote attackers to trigger a denial of service by sending malformed NAT-T packets, causing the IKE process to hang. Root cause is tied to Bug ID CSCsr74439. The available information indicates th...

CVE-2009-4916

The CVE-2009-4916 vulnerability affects Cisco ASA 5580 series devices running software before 8.1(2). The issue, tied to Bug CSCsq80095, is an unspecified flaw that allows remote authenticated users to trigger a denial of service by performing a login action during failover replication, causing a...

CVE-2009-4920

Cisco ASA 5580 series devices running software 8.1(2) are affected by CVE-2009-4920. The vulnerability (unspecified in the sources) allows remote attackers to cause a denial of service (watchdog traceback) by sending a large amount of small-packet data. Impact is noted as a complete availability ...

CVE-2009-4923

Cisco ASA 5580 series devices running software before 8.1(2) are affected by an unspecified vulnerability in the DTLS implementation that allows remote attackers to cause a denial-of-service (traceback) via TLS fragments (Bug ID CSCso53162). The issue is documented across multiple feeds (NVD/Red ...

CVE-2009-4913

Cisco ASA 5580 series devices running software before 8.1(2) have an IPv6 implementation issue (Bug CSCso58622) that exposes IP services on the far side of the box, potentially allowing remote attackers to bypass access restrictions via IPv6 packets. Affected product/component: Cisco ASA 5580; vu...

CVE-2009-4911

CVE-2009-4911 affects Cisco ASA 5580 series devices running software before 8.1(2). The vulnerability allows remote attackers to trigger a denial-of-service (device crash) through SSL VPN and PPPoE transaction vectors (Bug ID CSCsm77958). Affected component/condition: ASA 5580 with older software...

CVE-2009-4922

Cisco ASA 5580 series devices running software before 8.1(2) are affected by CVE-2009-4922. The issue enables remote authenticated users to trigger a denial of service (traceback) by establishing numerous IPsec L2L tunnels from remote peer IP addresses (Bug ID CSCso15583). Affected component/vers...

CVE-2009-4921

CVE-2009-4921 affects Cisco ASA 5580 series devices running software prior to 8.1(2). The issue allows remote attackers to trigger a denial of service (traceback) by sending malformed TCP packets, identified as Bug ID CSCsm84110. Public references in the provided documents confirm the affected pr...

CVE-2009-4910

CVE-2009-4910 is an XSS vulnerability in the WebVPN portal of Cisco ASA 5580 series devices running software before 8.1(2) (Bug ID CSCsq78418). It allows remote attackers to inject arbitrary web script/HTML via unspecified vectors. Documented impact is limited to the browser-based context; no exp...

CVE-2009-4919

The CVE-2009-4919 issue affects Cisco ASA 5580 series devices. It is a buffer overflow in the IKE attribute handling that allows remote attackers to cause an unspecified impact. Root cause is an overflow triggered by long IKE attributes, referenced to Bug ID CSCsu43121. Mitigation is to upgrade t...

CVE-2009-4915

CVE-2009-4915 affects Cisco ASA 5580 series devices running software prior to 8.1(2). The issue allows remote attackers to cause a denial of service (device reload) via unknown network traffic, demonstrated by a connection stress test (Bug CSCsq68451). Connected documents corroborate the same des...

Fedora Update for cups FEDORA-2010-10066

Check for the Version of cups OpenVAS Vulnerability Test Fedora Update for cups FEDORA-2010-10066 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms o...

VMSA-2010-0010 : ESX 3.5 third-party update for Service Console kernel

a. Service Console update for COS kernel The service console package kernel is updated to version 2.4.21-63. The Common Vulnerabilities and Exposures project cve.mitre.org has assigned the names CVE-2008-5029, CVE-2008-5300, CVE-2009-1337, CVE-2009-1385, CVE-2009-1895, CVE-2009-2848, CVE-2009-300...

Firefox JavaScript引擎Math.Random()跨域信息泄露漏洞

BUGTRAQ ID: 33276 CVE ID: CVE-2009-1696,CVE-2008-5913 Firefox是非常流行的开源WEB浏览器。 Firefox的JavaScript实现的Math.random函数中存在安全漏洞，攻击者可以对该函数的种子值进行逆向。由于对于每个浏览的会话伪随机数生成器仅提供了一次种子，因此可以将这个种子值用作唯一的令牌跨不同的网站识别和追踪用户。 Mozilla Firefox 3.6.x Mozilla Firefox 3.5.x Mozilla SeaMonkey 2.0.5 厂商补丁： Debian ------...

CVE-2009-4905

CVE-2009-4905 relates to multiple cross-site request forgery (CSRF) vulnerabilities in index.php of Acc Statistics 1.1. The weaknesses allow remote attackers to hijack administrator authentication to perform changes such as (1) passwords, (2) usernames, and (3) e-mail addresses. The available con...

CVE-2009-4909

The provided documents identify CVE-2009-4909 as a vulnerability in oBlog’s admin/index.php that allows remote attackers to perform brute-force password guessing via HTTP requests. This mode cites concrete details: affected component is the oBlog admin login, and the root cause is insufficient pr...

CVE-2009-4908

CVE-2009-4908 describes multiple cross-site scripting (XSS) vulnerabilities in the oBlog platform. The issues enable remote attackers to inject arbitrary script/HTML via the following parameters: article.php (commentName, commentEmail, commentWeb, commentText); admin/write.php (article_id, title)...

CVE-2009-4903

CVE-2009-4903 describes a Cross-site Scripting (XSS) flaw in the web app oBlog . The vulnerability is in the file index.php and is exploitable via the search parameter , allowing remote attackers to inject arbitrary script/HTML. The NVD entry notes a non-authoritative provenance (“NOTE: the prove...