SuSE 11.1 Security Update : sysconfig (SAT Patch Number 5618)

sysconfig hook script for NetworkManager did not properly quote shell meta characters when processing ESSIDs. Specially crafted network names could have therefore lead to execution of shell code. CVE-2011-4182 In addition, the following non-security bugs were fixed : - 580018: ip addr flush $ifna...

Fedora 16 : bugzilla-4.0.3-1.fc16 (2012-0301)

These new versions fix the following securtiy flaws : - CVE-2011-3657 - CVE-2011-3667 - CVE-2011-3668 - CVE-2011-3669 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and forma...

Fedora 15 : bugzilla-3.6.7-1.fc15 (2012-0328)

These new versions fix the following securtiy flaws : - CVE-2011-3657 - CVE-2011-3667 - CVE-2011-3668 - CVE-2011-3669 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and forma...

CVE-2011-3570

Unspecified vulnerability in Oracle Communications Unified 7.0 allows local users to affect confidentiality via unknown vectors related to Calendar Server...

Code injection

Unspecified vulnerability in the EnterpriseOne Tools component in Oracle JD Edwards 8.98 SP 24 allows remote authenticated users to affect confidentiality, related to Enterprise Infrastructure SEC JDENET, a different vulnerability than CVE-2011-2325, CVE-2011-3509, and CVE-2011-3524...

CVE-2011-3564

Oracle GlassFish Server 2.1.1 is affected by an unspecified vulnerability in the Administration component that allows local users to affect confidentiality. The issue is documented across multiple feeds (e.g., GlassFish NASL entry CVE-2011-3564) with an explicit remediation: upgrade to GlassFish ...

CVE-2011-3524

CVE-2011-3524 is an unspecified vulnerability in Oracle JD Edwards EnterpriseOne Tools that affects confidentiality via the JDENet/SAW kernel. Connected Onapsis advisories (mapping to CVE-2011-3524) describe information-disclosure flaws in the JD Edwards JDENet service/Saw kernel where specially ...

CVE-2011-3569

Technical details about CVE-2011-3569 are not provided in the connected documents. The entries repeat an unspecified remote information disclosure against Oracle Fusion Middleware Web Services Manager; monitor Oracle advisories for patch information.

CVE-2011-2326

CVE-2011-2326 affects Oracle JD Edwards EnterpriseOne components (Server + Tools 8.98, SP 24) and is tied to the JDENet/SAW kernel. A crafted JDENet packet to the JDENet Service enables remote access to information relevant to system confidentiality, per Onapsis-reported details, with the root ca...

CVE-2011-3514

CVE-2011-3514 affects Oracle JD Edwards EnterpriseOne Tools (JD Edwards 8.98 SP 24 / JD Edwards EnterpriseOne Server + Tools 9.0/8.98) via the JDENET SAW kernel. A specially crafted JDENET message can remotely modify the JDE.INI configuration file, enabling remote compromise of the ERP system. Ex...

CVE-2011-3565

CVE-2011-3565 affects Oracle Communications Unified 7.0, with impact on confidentiality, integrity, and availability via Calendar Server. The initial entry states an unspecified vulnerability allowing local users to exploit via unknown vectors; no concrete exploit details or affected subcomponent...

CVE-2011-3509

CVE-2011-3509 affects Oracle JD Edwards 8.98 SP 24 (EnterpriseOne Tools) and is tied to the JDENet/SAW kernel information flow in the EnterpriseOne Tools stack. The vulnerability involves the JDENet/SAW kernel components, allowing a remote attacker to access confidential information related to th...

CVE-2011-3531

CVE-2011-3531 affects Oracle Fusion Middleware’s Oracle Web Services Manager in versions 11.1.1.3, 11.1.1.4, and 11.1.1.5. The vulnerability is described as unspecified with impact to availability via unknown vectors related to Web Services Security. The connected documents confirm the affected p...

CVE-2011-3571

Unspecified vulnerability in the Virtual Desktop Infrastructure VDI component in Oracle Virtualization 3.2 allows remote authenticated users to affect confidentiality and integrity via unknown vectors related to Session. NOTE: this CVE identifier was accidentally used for a Concurrency issue in...

CVE-2011-3566

CVE-2011-3566 is described as an unspecified vulnerability in Oracle WebLogic Server (Oracle Fusion Middleware) affecting versions 9.2.4, 10.0.2, 10.3.3, 10.3.4, and 10.3.5. The initial description indicates the issue could affect availability and is related to the Web Container, with remote atta...

CVE-2011-3568

CVE-2011-3568 affects Oracle Fusion Middleware’s Oracle Web Services Manager component (versions 11.1.1.3, 11.1.1.4, 11.1.1.5). The vulnerability is described as unspecified and involves remote authenticated users impacting confidentiality and integrity via unknown vectors related to Web Services...

CVE-2011-2325

Oracle JD Edwards sawkernel/JDENet vulnerability CVE-2011-2325 affects the JD Edwards 9.0 EnterpriseOne Server + EnterpriseOne Tools 8.98 (and older variants). A specially crafted packet to the JDENET/SAW kernel could disclose system credentials (passwords) and other confidential data, enabling r...

CVE-2011-2262

CVE-2011-2262 is an unspecified vulnerability in Oracle MySQL Server 5.1.x and 5.5.x that can affect availability via unknown vectors. Connected documents reference multiple advisories and patches upgrading MySQL to fixed versions (e.g., MiracleLinux AXSA-2012-195: 5.1.61-1.1.0.1).

CVE-2011-3570

Technical details about CVE-2011-3570 are not publicly provided in the supplied documents. No confirmed affected versions or root cause are described here. Monitor for updates from vendors and security advisories.

CVE-2011-3574

Technical details for CVE-2011-3574 are not publicly available in the provided documents. No concrete information on affected products, versions, or exploitability. Monitor for updates from connected sources.