CVE-2011-2473

CVE-2011-2473 concerns do_dump_data in utils/opcontrol of OProfile (0.9.6 and earlier). The flaw allows local users to create or overwrite arbitrary files via a crafted --session-dir argument combined with a symlink attack on the opd_pipe file, and is described as a different vulnerability from C...

SuSE 11.1 Security Update : libpng12-0 (SAT Patch Number 2473)

Denial of service while decompressing a highly compressed huge ancillary chunk has been fixed in libpng. CVE-2010-0205 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from SuSE 11 update information. The text itself is...

Security fix for the ALT Linux 5 package gnome-vfs version 1:2.24.4-alt0.M50P.1

Nov. 13, 2010 Andrey Cherepanov 1:2.24.4-alt0.M50P.1 - backport to p5 branch fixed CVE-2009-2473...

Security fix for the ALT Linux 5 package gnome-vfs version 1:2.24.3-alt2

Sept. 27, 2010 Alexey Shabalin 1:2.24.3-alt2 - fixed CVE-2009-2473 - drop hal and gnome-mime-data dependencies...

CVE-2009-2473

creationtimestamp| type| source ---|---|--- 2009-11-12 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/10206...

SuSE Security Summary SUSE-SR:2009:018

The remote host is missing updates announced in advisory SUSE-SR:2009:018. SuSE Security Summaries are short on detail when it comes to the names of packages affected by a particular bug. Because of this, while this test will detect out of date packages, it cannot tell you what bugs impact which...

SLES11: Security update for libneon

The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: libneon27 neon More details may also be found by searching for the SuSE Enterprise Server 11 patch database located at http://download.novell.com/patch/finde...

SLES10: Security update for neon

The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: neon More details may also be found by searching for the SuSE Enterprise Server 10 patch database linked in the references. SPDX-FileCopyrightText: 2009 E-So...

SLES11: Security update for libneon

The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: libneon27 neon More details may also be found by searching for the SuSE Enterprise Server 11 patch database linked in the references. SPDX-FileCopyrightText:...

openSUSE Security Update : libneon-devel (libneon-devel-1377)

neon did not properly handle embedded NUL characters in X.509 certificates when comparing host names. Attackers could exploit that to spoof SSL servers CVE-2009-2408. Specially crafted XML documents that contain a large number of nested entity references could cause neon to consume large amounts ...

SuSE 11 Security Update : libneon (SAT Patch Number 1376)

neon did not properly handle embedded NUL characters in X.509 certificates when comparing host names. Attackers could exploit that to spoof SSL servers. CVE-2009-2408 Specially crafted XML documents that contain a large number of nested entity references could cause neon to consume large amounts ...

neon security update

CentOS Errata and Security Advisory CESA-2009:1452 Updated neon packages that fix two security issues are now available for Red Hat Enterprise Linux 4 and 5. This update has been rated as having moderate security impact by the Red Hat Security Response Team. neon is an HTTP and WebDAV client...

Moderate: Red Hat Security Advisory: neon security update

Updated neon packages that fix two security issues are now available for Red Hat Enterprise Linux 4 and 5. This update has been rated as having moderate security impact by the Red Hat Security Response Team. neon is an HTTP and WebDAV client library, with a C interface. It provides a high-level...

neon security update

0.25.5-10.el54.1 - add security fixes for CVE-2009-2473 CVE-2009-2474 521788...

Fedora Core 11 FEDORA-2009-8815 (neon)

The remote host is missing an update to neon announced via advisory FEDORA-2009-8815. OpenVAS Vulnerability Test $Id: fcore20098815.nasl 6624 2017-07-10 06:11:55Z cfischer $ Description: Auto-generated from advisory FEDORA-2009-8815 neon Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft...

Fedora Core 10 FEDORA-2009-8794 (neon)

The remote host is missing an update to neon announced via advisory FEDORA-2009-8794. OpenVAS Vulnerability Test $Id: fcore20098794.nasl 6624 2017-07-10 06:11:55Z cfischer $ Description: Auto-generated from advisory FEDORA-2009-8794 neon Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft...

Mandrake Security Advisory MDVSA-2009:221 (libneon0.27)

The remote host is missing an update to libneon0.27 announced via advisory MDVSA-2009:221. OpenVAS Vulnerability Test $Id: mdksa2009221.nasl 6573 2017-07-06 13:10:50Z cfischer $ Description: Auto-generated from advisory MDVSA-2009:221 libneon0.27 Authors: Thomas Reinke Copyright: Copyright c 2009...

Fedora Core 10 FEDORA-2009-8794 (neon)

The remote host is missing an update to neon announced via advisory FEDORA-2009-8794. Note: This VT has been deprecated and is therefore no longer functional. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the...

Fedora Core 11 FEDORA-2009-8815 (neon)

The remote host is missing an update to neon announced via advisory FEDORA-2009-8815. Note: This VT has been deprecated and is therefore no longer functional. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the...

Neon XML文档解析拒绝服务漏洞

BUGTRAQ ID: 36080 CVECAN ID: CVE-2009-2473 neon是一款HTTP和WebDAV客户端库。 如果使用了expat库，neon在实体扩展期间没有正确的检测递归。当客户端应用访问恶意的DAV服务器或使用XML解析接口（nexml）解析XML文档的时候，包含有大量嵌套实体引用的特制XML文档就可能耗尽大量内存和CPU资源。 Neon Client Library 0.28.6 厂商补丁： Neon ---- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载：...