FreeBSD : databases/postgresql*-server -- multiple vulnerabilities (07234e78-e899-11e1-b38d-0023ae8e59f0)

The PostgreSQL Global Development Group reports : The PostgreSQL Global Development Group today released security updates for all active branches of the PostgreSQL database system, including versions 9.1.5, 9.0.9, 8.4.13 and 8.3.20. This update patches security holes associated with libxml2 and...

Fedora 17 : python-djblets-0.7.1-3.fc17 (2012-11668)

Previous version of python-djblets contained embedded / own copy of python-feedparser BUILD/Djblets-0.6.22/djblets/feedview feedparser.py code, which is vulnerable to numerous security flaws CVE-2009-5065, CVE-2011-1156, CVE-2011-1157, and CVE-2011-1158 to mention some of them. This package...

RedHat Update for kernel RHSA-2012:1156-01

Check for the Version of kernel OpenVAS Vulnerability Test RedHat Update for kernel RHSA-2012:1156-01 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the ter...

[slackware-security] t1lib

New t1lib packages are available for Slackware 12.1, 12.2, 13.0, 13.1, 13.37, and -current to fix security issues. Here are the details from the Slackware 13.37 ChangeLog: patches/packages/t1lib-5.1.2-i486-3slack13.37.txz: Rebuilt. Patched various overflows, crashes, and pointer bugs. For more...

CentOS 6 : kernel (CESA-2012:1156)

Updated kernel packages that fix two security issues and several bugs are now available for Red Hat Enterprise Linux 6. The Red Hat Security Response Team has rated this update as having moderate security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity...

CVE-2011-2653

creationtimestamp| type| source ---|---|--- 2012-08-15 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/20502 2018-05-29 15:50:33+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/http/zenworksassetmgmtuploadservlet.rb 2025-02-06...

globalSCAPE CuteZIP Stack Buffer Overflow

This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit web site for more information on licensing and terms of use. http://metasploit.com/ require 'msf/core' require 'rex/zip' class Metasploit3 'globalSCAPE CuteZIP...

CVE-2011-5099

The CVE-2011-5099 entry affects Joomla! ccNewsletter (mod_ccnewsletter) in versions 1.0.7–1.0.9. The root cause is a SQL injection in helper/popup.php, enabling remote attackers to inject arbitrary SQL via the id parameter. The description does not specify exploited products beyond this Joomla! e...

Fedora Update for krb5 FEDORA-2012-11370

Check for the Version of krb5 OpenVAS Vulnerability Test Fedora Update for krb5 FEDORA-2012-11370 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms o...

Mandriva Update for busybox MDVSA-2012:129 (busybox)

The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

Fedora Update for tomcat6 FEDORA-2012-7593

Check for the Version of tomcat6 OpenVAS Vulnerability Test Fedora Update for tomcat6 FEDORA-2012-7593 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...

Novell ZENworks Asset Management Remote Execution

Exploit for java platform in category remote exploits This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit web site for more information on licensing and terms of use. http://metasploit.com/ require 'msf/core'...

Mandriva Update for busybox MDVSA-2012:129-1 (busybox)

Check for the Version of busybox OpenVAS Vulnerability Test Mandriva Update for busybox MDVSA-2012:129-1 busybox Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it...

Fedora Update for rubygem-actionpack FEDORA-2012-11353

The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

Fedora Update for tomcat6 FEDORA-2012-7593

The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

Fedora Update for bind FEDORA-2012-11153

The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

Fedora Update for krb5 FEDORA-2012-11370

The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

inn -- plaintext command injection into encrypted channel

INN developers report: Fixed a possible plaintext command injection during the negotiation of a TLS layer. The vulnerability detailed in CVE-2011-0411 affects the STARTTLS and AUTHINFO SASL commands. nnrpd now resets its read buffer upon a successful negotiation of a TLS layer. It prevents...

CVE-2011-0524

CVE-2011-0524 concerns gypsy 0.8, where multiple buffer overflows in the NMEA parser (nmea-gen.c) allow local users to crash the process via the sprintf-based vulnerability. The issue is tied to the NMEA parser’s use of sprintf, enabling denial of service when running gypsy 0.8. Connected sources...

CVE-2011-0523

Vulnerability: gypsy 0.8 allows local users to read restricted files while running as root due to improper file-access restrictions. Impact: partial information disclosure on the host. Root cause: inadequate restriction of readable files in a setuid/root context (unspecified vectors). Remediation...