[SECURITY] [DSA 2725-1] tomcat6 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-2725-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff July 18, 2013 http://www.debian.org/security/faq -...

CVE-2012-6349

CVE-2012-6349 describes a buffer overflow in the Autonomy KeyView IDOL .mdb parser, used in IBM Notes 8.5.x before 8.5.3 FP4 . A crafted file can trigger the overflow, enabling remote code execution. The vulnerability is tied to the KeyView IDOL integration (via the .mdb parser) and is consistent...

Debian Security Advisory DSA 2725-1 (tomcat6 - several vulnerabilities)

Two security issues have been found in the Tomcat servlet and JSP engine: CVE-2012-3544 The input filter for chunked transfer encodings could trigger high resource consumption through malformed CRLF sequences, resulting in denial of service. CVE-2013-2067 The FormAuthenticator module was vulnerab...

unbreakable enterprise kernel security update

kernel-uek 2.6.32-400.29.2uek - Bluetooth: RFCOMM - Fix missing msgnamelen update in rfcommsockrecvmsg Mathias Krause Orabug: 17173824 CVE-2013-3225 - Bluetooth: fix possible info leak in btsockrecvmsg Mathias Krause Orabug: 17173824 CVE-2013-3224 - atm: update msgnamelen in vccrecvmsg Mathias...

SuSE 11.3 Security Update : gpg2 (SAT Patch Number 7919)

This update for gpg2 provides the following fixes : - 780943: Set proper file permissions when en/de-crypting files. - 798465: Fix an issue that could cause corruption of the public keys database. CVE-2012-6085 - 808958: Select proper ciphers when running in FIPS mode. %NASLMINLEVEL 70300 C Tenab...

Security fix for the ALT Linux 7 package kernel-image-el-def version 2.6.32-alt9

July 17, 2013 Led 2.6.32-alt9 - 2.6.32-358.14.1.el6: + CVE-2012-6548 + CVE-2013-0914 + CVE-2013-1848 + CVE-2013-2128 + CVE-2013-2634 + CVE-2013-2635 + CVE-2013-2852 + CVE-2013-3222 + CVE-2013-3224 + CVE-2013-3225 + CVE-2013-3301 - added radeon firmwares...

Debian: Security Advisory (DSA-2725-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Mozilla Thunderbird Multiple Vulnerabilities (Aug 2012) - Mac OS X

Mozilla Thunderbird is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Mozilla Thunderbird ESR Multiple Vulnerabilities - August12 (Mac OS X)

This host is installed with Mozilla Thunderbird ESR and is prone to multiple vulnerabilities. OpenVAS Vulnerability Test $Id: gbmozillathunderbirdesrmultvulnaug12macosx.nasl 6115 2017-05-12 09:03:25Z teissa $ Mozilla Thunderbird ESR Multiple Vulnerabilities - August12 Mac OS X Authors: Arun Kalla...

Mozilla Firefox ESR Multiple Vulnerabilities - August12 (Windows)

This host is installed with Mozilla Firefox ESR and is prone to multiple vulnerabilities. OpenVAS Vulnerability Test $Id: gbmozillafirefoxesrmultvulnaug12win.nasl 6079 2017-05-08 09:03:33Z teissa $ Mozilla Firefox ESR Multiple Vulnerabilities - August12 Windows Authors: Arun Kallavi Copyright:...

Mozilla Thunderbird ESR Multiple Vulnerabilities (Aug 2012) - Windows

Mozilla Thunderbird ESR is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Mozilla Thunderbird Multiple Vulnerabilities (Aug 2012) - Windows

Mozilla Thunderbird is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Mozilla Firefox ESR Multiple Vulnerabilities (Aug 2012) - Windows

Mozilla Firefox ESR is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Oracle Linux 6 : kernel (ELSA-2013-1051)

The remote Oracle Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2013-1051 advisory. - wireless b43: stop format string leaking into error msgs John Linville 971387 971389 CVE-2013-2852 - net rtnl: fix info leak on RTMGETLINK request fo...

Moderate: Red Hat Security Advisory: kernel security and bug fix update

Updated kernel packages that fix multiple security issues and several bugs are now available for Red Hat OpenStack 3.0. The Red Hat Security Response Team has rated this update as having moderate security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity...

Important: Red Hat Security Advisory: rhev-hypervisor6 security and bug fix update

An updated rhev-hypervisor6 package that fixes one security issue and various bugs is now available. The Red Hat Security Response Team has rated this update as having important security impact. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...

VLC Media Player Multiple Vulnerabilities - July 13 (Windows)

This host is installed with VLC Media Player and is prone to multiple vulnerabilities. OpenVAS Vulnerability Test $Id: gbvlcmediaplayermultvulnjul13win.nasl 8174 2017-12-19 12:23:25Z cfischer $ VLC Media Player Multiple Vulnerabilities - July 13 Windows Authors: Arun Kallavi Copyright: Copyright ...

Comodo Internet Security Denial of Service Vulnerability (Jul 2013)

Comodo Internet Security is prone to a denial of service DoS vulnerability. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2012-6297 - Command Injection via CSRF on DD-WRT v24-sp2

DD-WRT v24-sp2 is prone to command injection from specially crafted configuration values containing shell meta-characters. A remote attacker can potentially use CSRF from an authenticated client to execute commands on the router as the root user. Successful exploitation can result in system wide...

Mozilla Thunderbird Security Bypass Vulnerabilities - Oct 12 (Mac OS X)

The host is installed with Mozilla Thunderbird and is prone to multiple vulnerabilities. OpenVAS Vulnerability Test $Id: gbmozillathunderbirdsecbypassvulnoct12macosx.nasl 6086 2017-05-09 09:03:30Z teissa $ Mozilla Thunderbird Security Bypass Vulnerabilities - Oct 12 Mac OS X Authors: Arun Kallavi...