RHEL 5 : kernel (RHSA-2010:0661)

Updated kernel packages that fix one security issue are now available for Red Hat Enterprise Linux 5. The Red Hat Security Response Team has rated this update as having important security impact. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...

Important: Red Hat Security Advisory: kernel security update

Updated kernel packages that fix one security issue are now available for Red Hat Enterprise Linux 5. The Red Hat Security Response Team has rated this update as having important security impact. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...

Fedora Update for kernel FEDORA-2010-13058

Check for the Version of kernel OpenVAS Vulnerability Test Fedora Update for kernel FEDORA-2010-13058 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the ter...

Ubuntu Update for linux regression USN-974-2

Ubuntu Update for Linux kernel vulnerabilities USN-974-2 OpenVAS Vulnerability Test $Id: gbubuntuUSN9742.nasl 7965 2017-12-01 07:38:25Z santu $ Ubuntu Update for linux regression USN-974-2 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.ne...

Ubuntu: Security Advisory (USN-974-2)

The remote host is missing an update for the SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Ubuntu 8.04 LTS : linux regression (USN-974-2)

USN-974-1 fixed vulnerabilities in the Linux kernel. The fixes for CVE-2010-2240 caused failures for Xen hosts. This update fixes the problem. We apologize for the inconvenience. Gael Delalleu, Rafal Wojtczuk, and Brad Spengler discovered that the memory manager did not properly handle when...

Fedora 12 : kernel-2.6.32.19-163.fc12 (2010-13110)

Update to kernel 2.6.32.19: http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.32.17 http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.32.18 http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.32.19 - Includes fixes from kernel 2.6.36-rc1 for problems caused by the...

Debian DSA-2094-1 : linux-2.6 - privilege escalation/denial of service/information leak

Several vulnerabilities have been discovered in the Linux kernel that may lead to a denial of service or privilege escalation. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2009-4895 Kyle Bader reported an issue in the tty subsystem that allows local...

Ubuntu Update for Linux kernel vulnerabilities USN-974-1

Ubuntu Update for Linux kernel vulnerabilities USN-974-1 OpenVAS Vulnerability Test $Id: gbubuntuUSN9741.nasl 7965 2017-12-01 07:38:25Z santu $ Ubuntu Update for Linux kernel vulnerabilities USN-974-1 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH,...

Important: Red Hat Security Advisory: kernel-rt security and bug fix update

Updated kernel-rt packages that fix multiple security issues and several bugs are now available for Red Hat Enterprise MRG 1.2. The Red Hat Security Response Team has rated this update as having important security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed...

openSUSE Security Update : viewvc (viewvc-2240)

The regular expression search feature didn't properly sanitize user input, therefore allowing attackers to conduct cross-site-scripting XSS attacks CVE-2010-0132. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSU...

IBM Lotus Domino Web Server Accept-Language Stack Overflow

$Id$ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/projects/Framework/ require 'msf/core' class Metasploit3 'IBM...

CVE-2009-2240

The CVE-2009-2240 issue affects leger (free edition) from AD2000 (Web Conference Room Free). A cross-site scripting (XSS) vulnerability exists in version 1.6.4 and earlier, allowing an attacker to cause arbitrary script execution in a user’s browser. The vendor addressed this with an update in ve...

IBM Lotus Domino Web服务器Accept Language HTTP头栈溢出漏洞

BUGTRAQ ID: 29310 CVECAN ID: CVE-2008-2240 Lotus Domino是集电子邮件、文档数据库、快速应用开发技术以及Web技术为一体的电子邮件与群集平台。 Lotus Domino Web服务器中负责处理HTTP头的代码存在栈溢出漏洞，Accept Language字段是直接从请求的HTTP头中获得的，然后使用strcpy函数拷贝到了固定长度的栈缓冲区中，因此远程攻击者可以通过包含有GET方式的HTTP 1.1请求覆盖栈缓冲区，导致执行任意指令。 IBM Lotus Domino 8.0 IBM Lotus Domino 7.0 IBM Lotus...

DSquare Exploit Pack: D2SEC_LOTUS_DOMINO_HTTP

Name| d2seclotusdominohttp ---|--- CVE| CVE-2008-2240 Exploit Pack| D2ExploitPack Description| IBM Lotus Domino Web Server Accept-Language HTTP Header Buffer Overflow Vulnerability Notes|...

Immunity Canvas: LOTUS_DOMINO_HTTP

Name| lotusdominohttp ---|--- CVE| CVE-2008-2240 Exploit Pack| CANVAS Description| Lotus Domino 8.0.0 HTTP Server - Accept-Language Overflow Notes| References: http://osvdb.org/show/osvdb/45415 CVE Name: CVE-2008-2240 VENDOR: IBM Notes: Repeatability: One-Shot Date public: 05/20/2008 CVE Url:...

CVE-2008-2240

CVE-2008-2240 : IBM Lotus Domino Web Server before 7.0.3 FP1 and 8.x before 8.0.1 is vulnerable to a stack-based buffer overflow triggered by a long Accept-Language HTTP header, allowing remote access to cause a daemon crash or potentially execute arbitrary code. Affected products/versions: Lotus...

CVE-2007-2240

The CVE-2007-2240 issue affects the IBM/Lenovo Automated Solutions package’s acpRunner ActiveX control (AcpController.dll before 1.2.8.0 and possibly Acpir.dll before 1.0.0.9). The control fails to properly validate digital signatures of downloaded software, enabling remote attackers to spoof dow...

CVE-2006-2240

CVE-2006-2240 concerns an unspecified vulnerability in the Fujitsu NetShelter/FW web cache or web proxy. The issue reportedly allows remote attackers to cause a denial of service resulting in device unresponsiveness, via certain DNS packets, as demonstrated by the OUSPG PROTOS DNS test suite. The...

CVE-2004-2240

Phorum 5.0.11 and earlier contains multiple SQL injection vulnerabilities. Specifically, remote attackers can modify SQL statements via (1) the query string in read.php or (2) unknown vectors in file.php. The connected sources confirm the affected product/version and the injection paths, but do n...