5745 matches found
Fedora 20 : kernel-3.11.1-300.fc20 (2013-16794)
Update to latest upstream stable release, Linux v3.11.1. Includes fixes for CVE-2013-4343 and CVE-2013-4350 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as mu...
Fedora 20 : moodle-2.5.2-1.fc20 (2013-16410)
Moodle upstream has released upstream 2.3.9, 2.4.6, and 2.5.2 versions : http://docs.moodle.org/dev/Moodle2.3.9releasenotes http://docs.moodle.org/dev/Moodle2.4.6releasenotes http://docs.moodle.org/dev/Moodle2.5.2releasenotes These releases contain unspecified security fixes, the nature of which...
Fedora 20 : icedtea-web-1.4.1-0.fc20 (2013-16971)
Updated to icedtea-web 1.4.1 New in release 1.4.1 2013-XX-YY : - Improved and cleaned Temporary internet files panel - PR1465 - java.io.FileNotFoundException while trying to download a JAR file - PR1473 - javaws should not depend on name of local file - PR854: Resizing an applet several times...
[SECURITY] Fedora 20 Update: glpi-0.83.9.1-4.fc20
GLPI is the Information Resource-Manager with an additional Administration- Interface. You can use it to build up a database with an inventory for your company computer, software, printers.... It has enhanced functions to make the daily life for the administrators easier, like a job-tracking-syst...
Vino VNC Server 3.7.3 - Persistent Denial of Service
Exploit for linux platform in category dos / poc Product description: Vino is the GNOME desktop sharing server. Finding 1: Remote Persistent Denial of Service Vulnerability Credit: Jonathan Claudius of Trustwave SpiderLabs CVE: CVE-2013-5745 CWE: CWE-20 The Vino VNC server, which is also the...
Vino VNC Server 3.7.3 Denial Of Service
Trustwave SpiderLabs Security Advisory TWSL2013-028: Persistent Denial of Service Vulnerability in Vino VNC Server Published: 09/16/13 Version: 1.0 Vendor: The GNOME Project https://wiki.gnome.org/Vino Product: Vino VNC Server Version affected: Vino VNC Server 3.7.3 and earlier versions 3.8 stabl...
Vino VNC Server 3.7.3 - Persistent Denial of Service
Vino VNC Server 3.7.3 - Persistent Denial of Service Trustwave SpiderLabs Security Advisory TWSL2013-028: Persistent Denial of Service Vulnerability in Vino VNC Server Published: 09/16/13 Version: 1.0 Vendor: The GNOME Project https://wiki.gnome.org/Vino Product: Vino VNC Server Version affected:...
Adobe Digital Editions嵌入式字体处理内存破坏漏洞(CVE-2013-1377)
BUGTRAQ ID: 61528 CVECAN ID: CVE-2013-1377 Adobe Digital Editions是阅读和管理电子书及其他数字出版物的软件，支持工业标准电子书格式，例如PDF/A、EPUB。 Adobe Digital Editions 2.0.67532的rmsdkwrapper.dll模块会在处理嵌入字体流的CVT程序表时出错，攻击者通过PDF文件内的特制字体流，利用此漏洞可破坏内存。 0 Adobe Digital Editions 2.0.67532 厂商补丁： Adobe -----...
TrustGo Antivirus & Mobile Security contains a denial-of-service vulnerability
Overview TrustGo Antivirus & Mobile Security versions 1.2.7 through 1.3.5 contain a denial-of-service CWE-20 vulnerability. Description CWE-20:Improper Input Validation- CVE-2013-3580TrustGo Antivirus & Mobile Security versions 1.2.7 through 1.3.5 crash if an intent is sent to...
Threat Outbreak Alert: Fake Product Quotation Request Email Messages on July 20, 2013
Severity Alert ID: 30159 First Published: 2013 July 22 16:16 GMT Version: 1 Threat Outbreak Threat Outbreak Summary Cisco Security has detected significant activity on July 20, 2013. Revision History Initial ReleaseShow Less Legal Disclaimer THIS DOCUMENT IS PROVIDED ON AN "AS IS" BASIS AND DOES...
CORE-2013-0517 - Xpient Cash Drawer Operation Vulnerability
Core Security - Corelabs Advisory http://corelabs.coresecurity.com/ Xpient Cash Drawer Operation Vulnerability 1. Advisory Information Title: Xpient Cash Drawer Operation Vulnerability Advisory ID: CORE-2013-0517 Advisory URL:...
Happy Birthday FreeBSD! Now you are 20 years old and your security is the same as 20 years ago... :)
$ uname -a FreeBSD fbsd91x64 9.1-RELEASE FreeBSD 9.1-RELEASE 0 r243825: Tue Dec 4 09:23:10 UTC 2012 [email protected]:/usr/obj/usr/src/sys/GENERIC amd64 $ id uid=1001hunger gid=1002hunger groups=1002hunger $ gcc fbsd9lul.c -o fbsd9lul $ ./fbsd9lul FreeBSD 9.0,1 mmap/ptrace exploit by...
FreeBSD 9.0 9.1 - mmapptrace Local Privilege Escalation
FreeBSD 9.0 9.1 - mmapptrace Local Privilege Escalation / FreeBSD 9.0,1 mmap/ptrace exploit by Hunger Happy Birthday FreeBSD! Now you are 20 years old and your security is the same as 20 years ago... : Greetings to nohup, 2501, boldi, eax, johnnyb, kocka, op, pipacs, prof, sd, sghctoma, snq,...
Triangle MicroWorks Improper Input Validation
OVERVIEW Adam Crain of Automatak and independent researcher Chris Sistrunk have identified an improper input validation vulnerability in multiple Triangle MicroWorks’ products and third‑party components. Triangle MicroWorks has produced an update that mitigates this vulnerability. Adam Crain has...
Trend Micro DirectPass - Cloud Software Vulnerabilities
Document Title: =============== Trend Micro DirectPass - Cloud Software Vulnerabilities References: =========== Advisory: http://www.vulnerability-lab.com/getcontent.php?id=894 Article: http://www.vulnerability-lab.com/dev/?p=580 View: http://www.youtube.com/watch?v=Mbf0KqvSERs Release Date:...
Firefox 20 Fixes 11 Critical Flaws, Adds Per-Tab Private Browsing
Mozilla has added a new privacy feature to Firefox that enables users to begin a new private browsing session in a separate tab while still running a normal session in other tabs. Firefox 20 also includes patches for 11 critical security vulnerabilities. The new version of Firefox expands the...
Linux Kernel 3.0 3.3.5 - CLONE_NEWUSER|CLONE_FS Local Privilege Escalation
Linux Kernel 3.0 3.3.5 - CLONENEWUSER|CLONEFS Local Privilege Escalation / source: https://www.securityfocus.com/bid/58478/info Linux kernel is prone to a local privilege-escalation vulnerability. Local attackers can exploit this issue to gain kernel privileges, which will aid in further attacks....
Solaris 10 (x86) : 146233-20
SunOS 5.10x86: iSCSI patch. Date this patch was last updated by Sun : Oct/01/12 %NASLMINLEVEL 70300 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a security fix. Disabled on 2014/01/16. C Tenable Network Security, Inc. if ! definedfunc"bnrandom" exit0;...
RHEL 5 : kernel (RHSA-2011:1321)
The remote Redhat Enterprise Linux 5 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2011:1321 advisory. - kernel: gro: only reset frag0 when skb can be pulled CVE-2011-2723 Note that Nessus has not tested for this issue but has instead relied only on th...
