Fedora 15 : rocksndiamonds-3.3.0.1-5.fc15 (2012-1553)

Apply fix for user configuration/cache directory permission issue CVE-2011-4606, bz766805. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible...

RHEL 5 : util-linux (RHSA-2012:0307)

The remote Redhat Enterprise Linux 5 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2012:0307 advisory. The util-linux package contains a large variety of low-level system utilities that are necessary for a Linux system to function. Among other...

CentOS 6 : thunderbird (CESA-2012:0140)

An updated thunderbird package that fixes one security issue is now available for Red Hat Enterprise Linux 6. The Red Hat Security Response Team has rated this update as having critical security impact. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating,...

Thunderbird 3.1.x < 3.1.19 png_decompress_chunk Integer Overflow (Mac OS X)

The installed version of Thunderbird 3.1.x is earlier than 3.1.19 and is, therefore, potentially affected by an integer overflow vulnerability in libpng, a library used by this application. When decompressing certain PNG image files, this could be exploited to crash the application or even execut...

Debian DSA-2413-1 : libarchive - buffer overflows

Two buffer overflows have been discovered in libarchive, a library providing a flexible interface for reading and writing archives in various formats. The possible buffer overflows while reading ISO 9660 or tar streams allow remote attackers to execute arbitrary code depending on the application...

CentOS 4 / 5 / 6 : libpng / libpng10 (CESA-2012:0317)

Updated libpng and libpng10 packages that fix one security issue are now available for Red Hat Enterprise Linux 4, 5, and 6. The Red Hat Security Response Team has rated this update as having important security impact. A Common Vulnerability Scoring System CVSS base score, which gives a detailed...

RHEL 5 : Red Hat Enterprise Linux 5.8 kernel update (Moderate) (RHSA-2012:0150)

The remote Redhat Enterprise Linux 5 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2012:0150 advisory. The kernel packages contain the Linux kernel, the core of any Linux operating system. This update fixes the following security issue: A flaw was foun...

CVE-2011-4187

Buffer overflow in the GetDriverSettings function in nipplib.dll in Novell iPrint Client before 5.78 on Windows allows remote attackers to execute arbitrary code via a long realm field, a different vulnerability than CVE-2011-3173...

CVE-2011-4187

CVE-2011-4187 affects the Novell iPrint Client on Windows. A stack-based overflow in the GetDriverSettings function of nipplib.dll (in the iPrint Client before 5.78) allows a remote attacker to execute arbitrary code by sending a crafted realm parameter via the iPrint ActiveX control (ienipp.ocx)...

CVE-2011-4186

CVE-2011-4186 describes a heap-based buffer overflow in Nipplib.dll used by the Novell iPrint Client on Windows, before version 5.78. The flaw occurs when handling the client-file-name parameter in a printer-url, allowing remote code execution with the potential to run under the SYSTEM context. P...

CVE-2011-4185

CVE-2011-4185 affects Novell iPrint Client ActiveX GetPrinterURLList2 prior to 5.78 on Windows, enabling memory corruption that can lead to remote code execution or denial of service. Connected advisories describe memory corruption via improper validation of string parameters in the ActiveX contr...

[SECURITY] [DSA 2413-1] libarchive security update

------------------------------------------------------------------------- Debian Security Advisory DSA-2413-1 [email protected] http://www.debian.org/security/ Luk Claes February 20, 2012 http://www.debian.org/security/faq -...

HP OpenView Network Node Manager OVBuildPath Overflow

Added: 02/20/2012 CVE: CVE-2011-3167 BID: 50471 OSVDB: 76775 Background HP OpenView Network Node Manager NNM is a network monitoring solution based on SNMP. Problem User supplied data from the NNM web interface is passed to the OVBuildPath function in ov.dll. This function contains a stack overfl...

Ubuntu 10.04 LTS / 10.10 : xulrunner-1.9.2 vulnerability (USN-1367-4)

USN-1367-1 fixed vulnerabilities in libpng. This provides the corresponding update for Xulrunner. Jueri Aedla discovered that libpng did not properly verify the size used when allocating memory during chunk decompression. If a user or automated system using libpng were tricked into opening a...

Fedora 16 : java-1.6.0-openjdk-1.6.0.0-65.1.11.1.fc16 (2012-1711)

The update contains the following security fixes : - S7082299, CVE-2011-3571: Fix in AtomicReferenceArray - S7088367, CVE-2011-3563: Fix issues in java sound - S7110683, CVE-2012-0502: Issues with some KeyboardFocusManager method - S7110687, CVE-2012-0503: Issues with TimeZone class - S7110700,...

libpng security update

2:1.2.46-2 - Fix CVE-2011-3026 Resolves: 791007...

Ubuntu 10.04 LTS / 10.10 / 11.04 / 11.10 : firefox vulnerability (USN-1367-2)

USN-1367-1 fixed vulnerabilities in libpng. This provides the corresponding update for Firefox. Jueri Aedla discovered that libpng did not properly verify the size used when allocating memory during chunk decompression. If a user or automated system using libpng were tricked into opening a...

HP OpenView Network Node Manager OVBuildPath Overflow

Added: 02/20/2012 CVE: CVE-2011-3167 BID: 50471 OSVDB: 76775 Background HP OpenView Network Node Manager NNM is a network monitoring solution based on SNMP. Problem User supplied data from the NNM web interface is passed to the OVBuildPath function in ov.dll. This function contains a stack overfl...

CVE-2011-5081

Cross-site scripting XSS vulnerability in RestoreFile.pm in BackupPC 3.1.0, 3.2.1, and possibly other earlier versions allows remote attackers to inject arbitrary web script or HTML via the share parameter in a RestoreFile action to index.cgi...

DEBIAN-CVE-2011-4320

The modpubsub module modpubsub.erl in ejabberd 2.1.8 and 3.0.0-alpha-3 allows remote authenticated users to cause a denial of service infinite loop via a stanza with a publish tag that lacks a node attribute...