Ubuntu: Security Advisory (USN-1157-3)

The remote host is missing an update for the SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Ubuntu: Security Advisory (USN-1157-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Mandriva Linux Security Advisory : mozilla (MDVSA-2011:111)

Security issues were identified and fixed in mozilla firefox and thunderbird : Security researcher regenrecht reported via TippingPoint's Zero Day Initiative two instances of code which modifies SVG element lists failed to account for changes made to the list by user-supplied callbacks before...

Ubuntu 11.04 : firefox vulnerabilities (USN-1157-1)

Bob Clary, Kevin Brosnan, Gary Kwong, Jesse Ruderman, Christian Biesinger, Bas Schouten, Igor Bukanov, Bill McCloskey, Olli Pettay, Daniel Veditz and Marcia Knous discovered multiple memory vulnerabilities in the browser rendering engine. An attacker could possibly execute arbitrary code with the...

RHEL 4 : seamonkey (RHSA-2011:0888)

Updated SeaMonkey packages that fix several security issues are now available for Red Hat Enterprise Linux 4. The Red Hat Security Response Team has rated this update as having critical security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity ratings, ar...

RHEL 4 / 5 : thunderbird (RHSA-2011:0887)

The remote Redhat Enterprise Linux 4 / 5 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2011:0887 advisory. Mozilla Thunderbird is a standalone mail and newsgroup client. A flaw was found in the way Thunderbird handled malformed JPEG images. An...

Critical: Red Hat Security Advisory: thunderbird security update

An updated thunderbird package that fixes several security issues is now available for Red Hat Enterprise Linux 6. The Red Hat Security Response Team has rated this update as having critical security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity rating...

CVE-2010-2375

Oracle WebLogic Server Plug-in HTTP Injection (CVE-2010-2375) affects the WebLogic web-server plugins for Apache, Sun, and IIS; the vulnerability arises because the plugin fails to sanitize certain URL-encoded headers before forwarding requests to WebLogic, enabling unauthenticated remote attacke...

CVE-2010-2375

creationtimestamp| type| source ---|---|--- 2010-07-13 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/34312...

SLES10: Security update for vsftpd

The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: vsftpd More details may also be found by searching for the SuSE Enterprise Server 10 patch database located at http://download.novell.com/patch/finder/ VID...

SLES9: Security update for vsftpd

The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: vsftpd For more information, please visit the referenced security advisories. More details may also be found by searching for keyword 5034480 within the SuSE...

SuSE9 Security Update : vsftpd (YOU Patch Number 12192)

This update of vsftpd fixes a memory leak that can occur during authentication. CVE-2008-2375 Additionally non-security bugs for SLES10 were fixed. There were some issues with simultaneous FTP PUT of the same file name that lead to a corrupted file on the server. %NASLMINLEVEL 70300 C Tenable...

CVE-2009-2375

creationtimestamp| type| source ---|---|--- 2009-07-10 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/9104...

CVE-2009-2375

CVE-2009-2375 refers to a stack-based buffer overflow in Photo DVD Maker 8.02 (and possibly earlier versions) that allows remote attackers to execute arbitrary code via a long File_Name parameter inside a .pdm file. The vulnerability is documented in multiple databases and has a high severity in ...

CentOS 3 : vsftpd (CESA-2008:0579)

An updated vsftpd package that fixes a security issue is now available. This update has been rated as having moderate security impact by the Red Hat Security Response Team. vsftpd Very Secure File Transfer Protocol FTP daemon is a secure FTP server for Linux and Unix-like systems. The version of...

RHEL 4 : vsftpd (RHSA-2008:0680)

The remote Redhat Enterprise Linux 4 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2008:0680 advisory. vsftpd Very Secure File Transfer Protocol FTP daemon is a secure FTP server for Linux and Unix-like systems. The version of vsftpd as shipped in Red...

CVE-2008-2375

CVE-2008-2375 is a memory-leak vulnerability in vsftpd exposed on Red Hat Enterprise Linux 3/4 when PAM is used. The issue occurs after an invalid authentication attempt within a single session, enabling potential denial of service via memory exhaustion. Public references indicate Red Hat/RHSA-20...

CVE-2007-2375

The CVE-2007-2375 issue affects Symantec Enterprise Security Manager (ESM) prior to 20070405, where the agent remote upgrade interface does not verify the authenticity of upgrades. This allows remote attackers to execute arbitrary code through software implementing the agent upgrade protocol. The...

CVE-2004-2375

Vulnerability CVE-2004-2375 affects the POP3 server in 1st Class Mail Server 4.0. A buffer overflow can be triggered by an APOP USER command with an excessively long second parameter (digest), potentially causing a denial of service and possibly allowing arbitrary code execution. Documented in CV...

CVE-2005-2375

CVE-2005-2375 affects Race Driver (1.20 and earlier). The vulnerability is a format string issue in the nickname or chat input that can be exploited remotely to cause an application crash (DoS). The connected sources collectively confirm the affected software, the vulnerable components (format st...