CVE-2011-3443

CVE-2011-3443 affects WebKit used by Apple Safari prior to 5.0.6. The flaw is a use-after-free in CSS @font-face handling caused by improper list management, enabling remote code execution or a denial of service through heap memory corruption and application crashes. Affected software: WebKit/Saf...

Linux kernel 2.6.x 'net/bridge/br_multicast.c'本地拒绝服务漏洞(CVE-2011-0716)

BUGTRAQ ID: 46433 CVE ID: CVE-2011-0716 Linux Kernel是Linux操作系统的内核。 Linux Kernel在实现上存在本地拒绝服务漏洞，攻击者可利用此漏洞造成内核崩溃、拒绝服务合法用户 0 Linux kernel 2.6.x 厂商补丁： Linux ----- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载： http://www.kernel.org/...

CVE-2011-4486

Cisco CUCM/Skinny (SCCP) vulnerabilities (CVE-2011-4486) allow remote, unauthenticated attackers to cause a device reload via crafted SCCP registrations. Affected software versions include CUCM 6.x and 7.x prior to 7.1(5b)su5, CUCM 8.0 prior to 8.0(3a)su3, and CUCM 8.5/8.6 prior to 8.6(2a)su1, pl...

CVE-2011-4487

CVE-2011-4487 affects Cisco Unified Communications Manager (CUCM) and Cisco BE6000/BE5000/BE3000 with various 6.x–8.x releases. The issue is a SQL injection in the SCCP registration handling, allowing remote, unauthenticated attackers to execute arbitrary SQL commands against the CUCM database, p...

samba security, bug fix, and enhancement update

3.0.33-3.37.el5 - Regenerate manpage for 'wide links' and 'unix extensions' sections - related: 722553 3.0.33-3.36.el5 - Security Release, fixes CVE-2010-0926 - resolves: 722553 3.0.33-3.35.el5 - Fix smbclient return code - resolves: 768908 3.0.33-3.34.el5 - Fix support for Windows 2008 R2 domain...

JVN#31517714: Kingsoft Internet Security 2011 vulnerable to denial-of-service

Kingsoft Internet Security 2011 contains a vulnerability in the device driver, which may result in a denial-of-service DoS. Impact An attacker that can login to the system with the software running may cause a denial-of-service DoS. Solution Update the Software Update to the latest version...

Novell Groupwise Address Book Code Execution

Application: Novell Groupwise Address Book Remote Code Execution Platforms: Windows Exploitation: Remote code execution CVE Number: 2011-4189 Novell TID: 733885 PRL: 2012-04 Author: Francis Provencher Protek Research Lab's Website: http://www.protekresearchlab.com/ Twitter: @ProtekResearch 1...

nfs-utils security, bug fix, and enhancement update

1.0.9-60.0.1.el5 - Add support for resvport for unmonting orabug 13567018 1.0.9-60 - Updated idmapd.conf and idmapd.conf.man to reflect the static user name mapping 502707 - Fixed an umount regression introduced by bz 513094 bz 781931 1.0.9-59 - gss: turned of even more excessive syslogs bz 59309...

util-linux security, bug fix, and enhancement update

2.13-0.59.0.1.el5 - Merge UEK modification fix 10104470 - Import hwclock from util-linux-ng Kris Van Hees 2.13-0.59 - fix 768382 - CVE-2011-1675 CVE-2011-1677 util-linux various flaws 2.13-0.58 - fix 677452 - util-linux fails to build with gettext-0.17 2.13-0.57 - fix 646300 - login doesn't updat...

Novell Groupwise - Address Book Remote Code Execution

Application: Novell Groupwise Address Book Remote Code Execution Platforms: Windows Exploitation: Remote code execution CVE Number: 2011-4189 Novell TID: 733885 PRL: 2012-04 Author: Francis Provencher Protek Research Lab's Website: http://www.protekresearchlab.com/ Twitter: @ProtekResearch 1...

sudo security and bug fix update

1.7.2p1-13 - patch: parse ldap.conf more closely to nssldap Resolves: rhbz750318 1.7.2p1-12 - added patch for CVE-2011-0010 Resolves: rhbz757157 1.7.2p1-11 - backported selinux support from 1.7.4p5 477185, 673157 - fixed bug in RunasSpec group matching 627543 - disable 'sudo -l' output word...

Mandriva Linux Security Advisory : libxslt (MDVSA-2012:028)

A vulnerability has been found and corrected in libxslt : libxslt allows remote attackers to cause a denial of service out-of-bounds read via unspecified vectors CVE-2011-3970. The updated packages have been patched to correct this issue. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The...

Linux kernel 2.6.x TOMOYO LSM本地拒绝服务漏洞(CVE-2011-2518)

BUGTRAQ ID: 52202 CVE ID: CVE-2011-2518 Linux Kernel是Linux操作系统的内核。 Linux Kernel在实现上存在本地拒绝服务漏洞，攻击者可利用此漏洞造成内核崩溃、拒绝服务合法用户 0 Linux kernel 2.6.x 厂商补丁： Linux ----- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载： http://www.kernel.org/...

Novell Groupwise - Address Book Remote Code Execution

Novell Groupwise - Address Book Remote Code Execution Application: Novell Groupwise Address Book Remote Code Execution Platforms: Windows Exploitation: Remote code execution CVE Number: 2011-4189 Novell TID: 733885 PRL: 2012-04 Author: Francis Provencher Protek Research Lab's Website:...

Novell Groupwise Address Book Remote Code Execution

Exploit for windows platform in category dos / poc Application: Novell Groupwise Address Book Remote Code Execution Platforms: Windows Exploitation: Remote code execution CVE Number: 2011-4189 Novell TID: 733885 PRL: 2012-04 Author: Francis Provencher Protek Research Lab's Website:...

conga security, bug fix, and enhancement update

0.12.2-51.0.1.el5 - Added conga-enterprise.patch - Added conga-enterprise-Carthage.patch to support OEL5 - Replaced redhat logo image in conga-0.12.2.tar.gz 0.12.2-51 - Fix bz711494 CVE-2011-1948 plone: reflected XSS vulnerability - Fix bz771920 CVE-2011-4924 Zope: Incomplete upstream patch for...

kvm security and bug fix update

kvm-83-249.0.1.el5 - Added kvm-add-oracle-workaround-for-libvirt-bug.patch - Added kvm-Introduce-oel-machine-type.patch - modify kversion to fix build failure kvm-83-249.el5 - kvm-kernel-KVM-x86-Prevent-starting-PIT-timers-in-the-absence-o.patch bz770101 - CVE: CVE-2011-4622 - Resolves: bz770101...

GLSA-201202-08 : stunnel: Arbitrary code execution

The remote host is affected by the vulnerability described in GLSA-201202-08 stunnel: Arbitrary code execution An unspecified heap vulnerability was discovered in stunnel. Impact : The vulnerability may possibly be leveraged to perform remote code execution or a Denial of Service attack. Workarou...

Moderate: Red Hat Security Advisory: java-1.4.2-ibm-sap security update

Updated java-1.4.2-ibm-sap packages that fix several security issues are now available for Red Hat Enterprise Linux 4, 5 and 6 for SAP. The Red Hat Security Response Team has rated this update as having moderate security impact. Common Vulnerability Scoring System CVSS base scores, which give...

USN-1380-1: Linux kernel vulnerabilities

A flaw was discovered in the TOMOYO LSM's handling of mount system calls. An unprivileged user could oops the system causing a denial of service. CVE-2011-2518 A bug was discovered in the Linux kernel's calculation of OOM Out of memory scores, that would result in the wrong process being killed. ...