Fedora Update for krb5-appl FEDORA-2011-17492

The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

Fedora Update for python-virtualenv FEDORA-2011-17341

The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

Ubuntu: Security Advisory (USN-1318-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] [DSA 2383-1] super security update

------------------------------------------------------------------------- Debian Security Advisory DSA-2383-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff January 08, 2012 http://www.debian.org/security/faq -...

CVE-2011-4529

Siemens Automation License Manager (ALM) versions 4.0–5.1+SP1+Upd1 contain buffer-overflow vulnerabilities in the _licensekey command’s handling of the serialid field (via check_licensekey/read_licensekey), allowing remote code execution. Exploitation is remotely feasible over TCP (port 4410) wit...

CVE-2011-4530

Siemens ALM (Automation License Manager) 4.0–5.1+SP1+Upd1 is affected by a vulnerability in how it handles fields coming from clients over the network. The issue arises from improper handling of field lengths in commands sent to the server (notably open_session->workstation->NAME and grant-...

CVE-2011-4531

Siemens ALM (Automation License Manager) versions 4.0–5.1+SP1+Upd1 are affected by a vulnerability where ALM does not validate content in certain commands (get_target_ocx_param, send_target_ocx_param), leading to a NULL pointer dereference and denial of service. Root cause: improper handling of f...

CVE-2011-4361

MediaWiki before 1.17.1 does not check for read permission before handling action=ajax requests, which allows remote attackers to obtain sensitive information by 1 leveraging the SpecialUpload::ajaxGetExistsWarning function, or by 2 leveraging an extension, as demonstrated by the CategoryTree,...

CVE-2011-4360

CVE-2011-4360 affects MediaWiki prior to 1.17.1. The issue allows remote attackers to obtain the titles of restricted pages by issuing a sequence of requests involving the curid or oldid parameters. Impact: partial confidentiality exposure on restricted content. The connection across multiple sou...

CVE-2011-4360

MediaWiki before 1.17.1 allows remote attackers to obtain the page titles of all restricted pages via a series of requests involving the 1 curid or 2 oldid parameter...

CVE-2011-4361

MediaWiki before 1.17.1 does not check read permissions for action=ajax, enabling remote data leakage on private wikis. Exploitation can occur by abusing SpecialUpload::ajaxGetExistsWarning or via extensions such as CategoryTree, ExtTab, and InlineEditor. No explicit remediation is provided in th...

CVE-2011-5055

MaraDNS 1.3.07.12 and 1.4.08 computes hash values for DNS data without properly restricting the ability to trigger hash collisions predictably, which allows remote attackers to cause a denial of service CPU consumption by sending many crafted queries with the Recursion Desired RD bit set. NOTE:...

CVE-2011-3206

Multiple cross-site scripting XSS vulnerabilities in the administration interface in RHQ 4.2.0, as used in JBoss Operations Network aka JON or JBoss ON before 3.0, allow remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2011-5056

The authoritative server in MaraDNS through 2.0.04 computes hash values for DNS data without restricting the ability to trigger hash collisions predictably, which might allow local users to cause a denial of service CPU consumption via crafted records in zone files, a different vulnerability than...

CVE-2011-5055

The provided documents confirm a concrete vulnerability in MaraDNS: hash collision handling bugs allow a remote attacker to exhaust CPU by sending numerous crafted DNS queries with the RD bit set, affecting MaraDNS 1.3.07.12 and 1.4.08 (and older releases affected by related CVE-2012-0024). Root ...

CVE-2011-4055

CVE-2011-4055 is a buffer overflow in the WebClient ActiveX control of Siemens Tecnomatix FactoryLink affecting v6.6.1 (6.6 SP1), v7.5.217 (7.5 SP2), and v8.0.2.54. An attacker could trigger arbitrary code execution by supplying a long string in a parameter for the location URL, remotely exploita...

CVE-2011-4056

The connected documents provide concrete details: CVE-2011-4056 affects Siemens Tecnomatix FactoryLink through the ActBar.ocx ActiveX control. Versions affected include 6.6.1 (6.6 SP1), 7.5.217 (7.5 SP2), and 8.0.2.54. The vulnerability allows remote attackers to create or overwrite arbitrary fil...

CVE-2011-4870

CVE-2011-4870 covers multiple buffer overflows in Invensys Wonderware InBatch, specifically the GUIControls, BatchObjSrv, and BatchSecCtrl ActiveX controls. Affected versions include InBatch 8.1 SP1, 9.0, 9.0 SP1, 9.0 SP2, and 9.5 Server/Runtime Clients; the root cause is improper handling of lon...

CVE-2011-5056

CVE-2011-5056 affects the MaraDNS authoritative server up to version 2.0.04. The vulnerability stems from hash value computation for DNS data being unrestricted with respect to triggering collisions, which can be exploited by local users to cause a denial of service (CPU consumption) via crafted ...

CVE-2011-3206

The CVE-2011-3206 entry describes multiple XSS vulnerabilities in the RHQ/JBoss ON administration interface (RHQ 4.2.0, used in JBoss Operations Network before 3.0). The root cause is lack of input validation in the administration UI, allowing remote attackers to inject arbitrary script/HTML via ...