[SECURITY] [DSA 2303-1] linux-2.6 security update

---------------------------------------------------------------------- Debian Security Advisory DSA-2303-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff, Dann Frazier September 8, 2011 http://www.debian.org/security/faq -...

RHEL 5 : kernel (RHSA-2011:1212)

The remote Redhat Enterprise Linux 5 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2011:1212 advisory. - kernel: sctp dos CVE-2011-2482 - kernel: rpc task leak after flocking NFS share CVE-2011-2491 - kernel: /proc/PID/io infoleak CVE-2011-249...

Unbreakable Enterprise kernel security and bug fix update

2.6.32-200.19.1.el6uek - Apply new fix for CVE-2011-1576. 2.6.32-200.18.1.el6uek - Revert 'proc: fix a race in doioaccounting' 2.6.32-200.17.1.el6uek - net: Fix memory leak/corruption on VLAN GRODROP CVE-2011-1576 - iommu-api: Extension to check for interrupt remapping CVE-2011-1898 - KVM: IOMMU:...

Ubuntu: Security Advisory (USN-1083-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2010-2495

CVE-2010-2495 affects the Linux kernel’s L2TP implementation (pppol2tp.c). The vulnerability arises from improper validation of certain interface-related values in pppol2tp_xmit, enabling a NULL pointer dereference and an OOPs that can cause a denial of service via routing-change vectors. The iss...

[security bulletin] HPSBMA02488 SSRT100013 rev.1 - HP ProLiant Support Pack 8.30 for Windows, Remote Code Execution, Information Disclosure

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 SUPPORT COMMUNICATION - SECURITY BULLETIN Document ID: c01997644 Version: 1 HPSBMA02488 SSRT100013 rev.1 - HP ProLiant Support Pack 8.30 for Windows, Remote Code Execution, Information Disclosure NOTICE: The information in this Security Bulletin shoul...

MS09-060: Vulnerabilities in Microsoft Active Template Library (ATL) ActiveX Controls for Microsoft Office Could Allow Remote Code Execution (973965)

One or more ActiveX controls included in Microsoft Outlook or Visio and installed on the remote Windows host was compiled with a version of Microsoft Active Template Library ATL that is affected by potentially several vulnerabilities : - An issue in the ATL headers could allow an attacker to forc...

SLES9: Security update for XFree86-Xvnc

The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: XFree86-Xvnc For more information, please visit the referenced security advisories. More details may also be found by searching for keyword 5009392 within th...

SLES9: Security update for XFree86-server

The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: XFree86-server For more information, please visit the referenced security advisories. More details may also be found by searching for keyword 5013484 within...

iDefense Security Advisory 07.28.09: Multiple Vendor Microsoft ATL/MFC ActiveX Information Disclosure Vulnerability

iDefense Security Advisory 07.28.09 http://labs.idefense.com/intelligence/vulnerabilities/ Jul 28, 2009 I. BACKGROUND Microsoft's Component Object Model COM was designed to allow interoperability between disjointed software components. It is a standardized interface solution to the programming...

MS09-035: Vulnerabilities in Visual Studio Active Template Library Could Allow Remote Code Execution (969706)

The remote Windows host contains a version of the Microsoft Active Template Library ATL, included as part of Visual Studio or Visual C++, that is affected by multiple vulnerabilities : - On systems with components and controls installed that were built using Visual Studio ATL, an issue in the ATL...

CVE-2009-2495

CVE-2009-2495 is part of the ATL mathing family addressed by Microsoft in MS09-035/MS09-060. The vulnerability is the ATL Null String Vulnerability, where an attacker could read memory beyond the end of a string due to improper termination in ATL-based components/controls built with Visual Studio...

Gentoo Security Advisory GLSA 200509-07 (X.Org)

The remote host is missing updates announced in advisory GLSA 200509-07. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...

Gentoo Security Advisory GLSA 200509-07 (X.Org)

The remote host is missing updates announced in advisory GLSA 200509-07. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2008-2495

CVE-2008-2495 is a directory traversal vulnerability affecting Zina 1.0 RC3. The flaw is in index.php where a .. (dot dot) in the p parameter can be exploited by remote attackers to access files. The NVD entry lists a CVSS2 base score of 7.5 (HIGH) with network attack vector and low complexity, n...

CVE-2007-2495

Multiple stack-based buffer overflows in the ExcelOCX ActiveX control in ExcelViewer.ocx 3.1.0.6 allow remote attackers to cause a denial of service Internet Explorer 7 crash via a long 1 DoOleCommand, 2 FTPDownloadFile, 3 FTPUploadFile, 4 HttpUploadFile, 5 Save, 6 SaveWebFile, 7 HttpDownloadFile...

CVE-2007-2495

CVE-2007-2495 affects the ExcelViewer.ocx 3.1.0.6 ExcelOCX ActiveX control. The vulnerability is described as multiple stack-based buffer overflows that allow remote attackers to cause a denial of service, specifically an Internet Explorer 7 crash, by supplying long values for any of these proper...

HP-UX PHSS_32966 : HP-UX Running Xserver Local Execution of Arbitrary Code, Privilege Elevation (HPSBUX02137 SSRT051024 rev.1)

s700800 11.11 Xserver cumulative patch : A potential security vulnerability has been identified in the Xserver running on HP-UX. The vulnerability could be exploited by a local user to execute arbitrary code with the privileges of the Xserver. %NASLMINLEVEL 70300 C Tenable Network Security, Inc...

CentOS 4 : xorg-x11 (CESA-2005:396)

Updated X.org packages that fix several integer overflows are now available for Red Hat Enterprise Linux 4. This update has been rated as having important security impact by the Red Hat Security Response Team. X.org is an open source implementation of the X Window System. It provides the basic...

CentOS 3 : XFree86 (CESA-2005:501)

Updated XFree86 packages that fix several integer overflows, various bugs, and add ATI RN50/ES1000 support are now available for Red Hat Enterprise Linux 3. This update has been rated as having important security impact by the Red Hat Security Response Team. XFree86 is an implementation of the X...