Fedora Update for hardlink FEDORA-2011-14753

The remote host is missing an update for the SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

[USN-1293-1] Linux kernel vulnerabilities

========================================================================== Ubuntu Security Notice USN-1293-1 December 08, 2011 linux vulnerabilities ========================================================================== A security issue affects these releases of Ubuntu and its derivatives: -...

Fedora 15 : zabbix-1.8.9-1.fc15 (2011-16712)

update to 1.8.9 - upstream changelog at http://www.zabbix.com/rn1.8.9.php Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing...

CVE-2011-4684

creationtimestamp| type| source ---|---|--- 2011-12-12 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/36443...

Iron Mountain Connected Backup Opcode 13 Processing Command Injection

Added: 12/12/2011 CVE: CVE-2011-2397 BID: 50884 OSVDB: 77495 Background Iron Mountain Connected Backup is a solution for automatic online backup and recovery for Microsoft Windows and Mac OS X. An agent is installed on each computer that is to be backed up. The agent listens by default on TCP por...

Fedora 14 : openswan-2.6.33-3.fc14 (2011-15127)

Fixes for CVE-2011-4073. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVEL 70300 C Tenable...

Fedora 15 : pam-1.1.5-1.fc15 (2011-16365)

Low impact security update from upstream. Only minor and safe changes. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing...

Fedora 15 : hardlink-1.0-12.fc15 (2011-14753)

fix possible buffer overflows, integer overflows CVE-2011-3630 CVE-2011-3631 CVE-2011-3632 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible...

Fedora Update for python-celery FEDORA-2011-16549

The remote host is missing an update for the SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

ZDI-11-341 : Cisco WebEx Player WRF Type 0 Parsing Remote Code Execution Vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ZDI-11-341 : Cisco WebEx Player WRF Type 0 Parsing Remote Code Execution Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-11-341 December 7, 2011 - -- CVE ID: CVE-2011-3319 - -- CVSS: 9, AV:N/AC:L/Au:N/C:P/I:P/A:C - -- Affected Vendors:...

zFTPServer Suite 6.0.0.52 - 'rmdir' Directory Traversal

!/usr/bin/perl Advisory: zFTPServer Suite 6.0.0.52 'rmdir' Directory Traversal Author: Stefan Schurtz Contact: [email protected] Affected Software: Successfully tested on zFTPServer Suite 6.0.0.52 Vendor URL: http://www.zftpserver.com/ Vendor Status: fixed CVE-ID: CVE-2011-4717 PoC-Version: 0....

[SECURITY] [DSA 2361-1] chasen security update

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - ------------------------------------------------------------------------- Debian Security Advisory DSA-2361-1 [email protected] http://www.debian.org/security/ Florian Weimer December 07, 2011 http://www.debian.org/security/faq -...

zFTPServer Suite 6.0.0.52 'rmdir' Directory Traversal

Exploit for windows platform in category remote exploits !/usr/bin/perl Advisory: zFTPServer Suite 6.0.0.52 'rmdir' Directory Traversal Author: Stefan Schurtz Contact: email protected Affected Software: Successfully tested on zFTPServer Suite 6.0.0.52 Vendor URL: http://www.zftpserver.com/ Vendor...

zFTPServer Suite 6.0.0.52 - rmdir Directory Traversal

zFTPServer Suite 6.0.0.52 - rmdir Directory Traversal !/usr/bin/perl Advisory: zFTPServer Suite 6.0.0.52 'rmdir' Directory Traversal Author: Stefan Schurtz Contact: [email protected] Affected Software: Successfully tested on zFTPServer Suite 6.0.0.52 Vendor URL: http://www.zftpserver.com/ Vend...

ZDI-11-340 : Apple Quicktime Font Table Signed Length Remote Code Execution Vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ZDI-11-340 : Apple Quicktime Font Table Signed Length Remote Code Execution Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-11-340 December 7, 2011 - -- CVE ID: CVE-2011-3248 - -- CVSS: 7.5, AV:N/AC:L/Au:N/C:P/I:P/A:P - -- Affected...

CVE-2011-4349

Multiple SQL injection vulnerabilities in 1 cd-mapping-db.c and 2 cd-device-db.c in colord before 0.1.15 allow local users to execute arbitrary SQL commands via vectors related to color devices and a device id, b property, or c profile id...

CVE-2011-4346

CVE-2011-4346 corresponds to an XSS flaw in the web interface of Red Hat Network Satellite 5.4.1. An authenticated RHN Satellite user could inject arbitrary script/HTML via the Description field of the asset tag in a Custom Info page. The issue is documented across multiple sources (RHSA-2011:179...

CVE-2011-4349

CVE-2011-4349 concerns the colord color management service, where multiple SQL injection vulnerabilities in the internal databases (cd-mapping-db.c and cd-device-db.c) allow a local user to modify or read databases via vectors involving color devices, including device id, property, or profile id....

CVE-2011-4357

CVE-2011-4357 describes a format string vulnerability in the p_cgi_error function of the Clearsilver neo_cgi module (Python CGI Kit) affecting Clearsilver 0.10.5 and earlier. This allows remote attackers to crash the process and potentially execute arbitrary code via unhandled CGI error message f...

CVE-2011-4346

Cross-site scripting XSS vulnerability in the web interface in Red Hat Network RHN Satellite 5.4.1 allows remote authenticated users to inject arbitrary web script or HTML via the Description field of the asset tag in a Custom Info page...