Fedora Update for postgresql FEDORA-2012-8893

The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

Fedora 17 : postgresql-9.1.4-1.fc17 (2012-8924)

Upstream bug fix + security updates, including the fixes for CVE-2012-2143, CVE-2012-2655 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible...

Fedora 15 : postgresql-9.0.8-1.fc15 (2012-8915)

Upstream bug fix + security updates, including the fixes for CVE-2012-2143, CVE-2012-2655 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible...

Fedora 16 : postgresql-9.1.4-1.fc16 (2012-8893)

Upstream bug fix + security updates, including the fixes for CVE-2012-2143, CVE-2012-2655 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible...

Mandriva Linux Security Advisory : postgresql (MDVSA-2012:092)

Multiple vulnerabilities has been discovered and corrected in postgresql : Fix incorrect password transformation in contrib/pgcrypto's DES crypt function Solar Designer. If a password string contained the byte value 0x80, the remainder of the password was ignored, causing the password to be much...

[SECURITY] [DSA 2491-1] postgresql-8.4 security update

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - ------------------------------------------------------------------------- Debian Security Advisory DSA-2491-1 [email protected] http://www.debian.org/security/ Florian Weimer June 09, 2012 http://www.debian.org/security/faq -...

[SECURITY] [DSA 2491-1] postgresql-8.4 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-2491-1 [email protected] http://www.debian.org/security/ Florian Weimer June 09, 2012 http://www.debian.org/security/faq -...

Ubuntu: Security Advisory (USN-1461-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Ubuntu 8.04 LTS / 10.04 LTS / 11.04 / 11.10 / 12.04 LTS : postgresql-8.3, postgresql-8.4, postgresql-9.1 vulnerabilities (USN-1461-1)

It was discovered that PostgreSQL incorrectly handled certain bytes passed to the crypt function when using DES encryption. An attacker could use this flaw to incorrectly handle authentication. CVE-2012-2143 It was discovered that PostgreSQL incorrectly handled SECURITY DEFINER and SET attributes...

PostgreSQL 'SECURITY DEFINER'和'SET'属性远程拒绝服务漏洞

BUGTRAQ ID: 53812 CVE ID: CVE-2012-2655 PostgreSQL是一款高级对象－关系型数据库管理系统，支持扩展的SQL标准子集。 PostgreSQL在ALTER FUNCTION RENAME的实现上存在远程拒绝服务漏洞，利用此漏洞可允许攻击者使应用崩溃。 0 PostgreSQL 9.x PostgreSQL 8.x 厂商补丁： PostgreSQL ---------- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载： http://www.postgresql.org...

Code injection

Unspecified vulnerability in ZfHSrvr.exe in Novell ZENworks Handheld Management ZHM 7 allows remote attackers to execute arbitrary code via unknown vectors, a different vulnerability than CVE-2011-2655...

CVE-2011-2655

The connected sources (e.g., Nessus) indicate that CVE-2011-2655 involves ZENworks Handheld Management (ZHM) 7, specifically the ZfHSrvr.exe server process, with multiple remote code execution vulnerabilities that allow arbitrary code execution within the ZfHSrvr.exe context. The exact attack vec...

CVE-2010-2655

The vulnerability CVE-2010-2655 affects the IBM BladeCenter Advanced Management Module (AMM) firmware, BPET48L, and possibly earlier versions before 4.7 and 5.0. It is a directory traversal in private/file_management.php that allows remote authenticated users to list arbitrary directories and pot...

CVE-2010-2655

creationtimestamp| type| source ---|---|--- 2010-07-06 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/14237...

SLES9: Security update for xscreensaver

The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: xscreensaver For more information, please visit the referenced security advisories. More details may also be found by searching for keyword 5017699 within th...

SLES9: Security update for xscreensaver

The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: xscreensaver For more information, please visit the referenced security advisories. More details may also be found by searching for keyword 5017699 within th...

CVE-2009-2655

mshtml.dll in Microsoft Internet Explorer 7 and 8 on Windows XP SP3 allows remote attackers to cause a denial of service application crash by calling the JavaScript findText method with a crafted Unicode string in the first argument, and only one additional argument, as demonstrated by a second...

CVE-2009-2655

CVE-2009-2655 describes a denial-of-service vulnerability in mshtml.dll used by Microsoft Internet Explorer 7/8 on Windows XP SP3. The issue is triggered when the JavaScript findText method is called with a crafted Unicode string in the first argument and only one additional argument (e.g., a sec...

FreeBSD Security Advisory (FreeBSD-SA-06:15.ypserv.asc)

The remote host is missing an update to the system as announced in the referenced advisory FreeBSD-SA-06:15.ypserv.asc ADV FreeBSD-SA-06:15.ypserv.asc OpenVAS Vulnerability Test $ Description: Auto generated from vuxml or freebsd advisories Authors: Thomas Reinke Copyright: Copyright c 2008 E-Sof...

CVE-2007-2655

CVE-2007-2655 affects NetWin Webmail 3.1s-1 used in SurgeMail prior to version 3.8i2. The vulnerability is described as a potential format string issue that could enable remote code execution. Details are limited in the provided sources; no concrete exploit method, affected module/file, or patch/...