Fedora Update for firefox FEDORA-2010-11375

The remote host is missing an update for the SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

Fedora Update for sunbird FEDORA-2010-11379

The remote host is missing an update for the SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

Fedora Update for galeon FEDORA-2010-11345

The remote host is missing an update for the SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

Fedora Update for perl-Gtk2-MozEmbed FEDORA-2010-11345

The remote host is missing an update for the SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

[Backports-security-announce] Security Update for xulrunner

Alexander Reichle-Schmehl uploaded new packages for xulrunner which fixed the following security problems: CVE-2010-1211 Mozilla developers identified and fixed several memory safety bugs in the browser engine used in Firefox and other Mozilla-based products. Some of these bugs showed evidence of...

Critical: Red Hat Security Advisory: seamonkey security update

Updated seamonkey packages that fix several security issues are now available for Red Hat Enterprise Linux 3 and 4. The Red Hat Security Response Team has rated this update as having critical security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity...

Informix Dynamic Server librpc.dll credentials length buffer overflow

Added: 06/10/2010 CVE: CVE-2009-2753 BID: 38471 OSVDB: 62783 Background Informix Dynamic Server is a database solution from IBM. It includes a portmapper service which listens for connections on port 36890/TCP and uses librpc.dll. Problem A buffer overflow vulnerability in librpc.dll allows remot...

Informix Dynamic Server librpc.dll credentials length buffer overflow

Added: 06/10/2010 CVE: CVE-2009-2753 BID: 38471 OSVDB: 62783 Background Informix Dynamic Server is a database solution from IBM. It includes a portmapper service which listens for connections on port 36890/TCP and uses librpc.dll. Problem A buffer overflow vulnerability in librpc.dll allows remot...

Informix Dynamic Server librpc.dll credentials length buffer overflow

Added: 06/10/2010 CVE: CVE-2009-2753 BID: 38471 OSVDB: 62783 Background Informix Dynamic Server is a database solution from IBM. It includes a portmapper service which listens for connections on port 36890/TCP and uses librpc.dll. Problem A buffer overflow vulnerability in librpc.dll allows remot...

IBM Informix Dynamic Server librpc.dll Multiple Buffer Overflows (CVE-2009-2753)

Informix is a family of relational database management system RDBMS products by IBM. IBM Informix Dynamic Server is an online transaction processing data server. Multiple buffer overflow vulnerabilities has been reported in IBM's Informix Dynamic Server. The vulnerabilities are due to insufficien...

CVE-2009-2753

creationtimestamp| type| source ---|---|--- 2010-04-08 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/12109...

CVE-2009-2753

The CVE-2009-2753 issue affects IBM Informix Dynamic Server (IDS) via the librpc.dll used by the ISM Portmapper (portmap.exe) service, which listens on TCP port 36890. Multiple buffer overflows occur during authentication due to insufficient validation of the credentials length parameter, enablin...

ZDI-10-022: IBM Informix librpc.dll Multiple Remote Code Execution Vulnerabilities

ZDI-10-022: IBM Informix librpc.dll Multiple Remote Code Execution Vulnerabilities http://www.zerodayinitiative.com/advisories/ZDI-10-022 March 1, 2010 -- CVE ID: CVE-2009-2753 -- Affected Vendors: IBM -- Affected Products: IBM Informix -- TippingPointTM IPS Customer Protection: TippingPoint IPS...

CVE-2008-2753

CVE-2008-2753 affects Pooya Site Builder (PSB) 6.0, with multiple SQL injection vulnerabilities described via (1) xslIdn to utils/getXsl.aspx and (2) part to getXml.aspx and getXls.aspx in utils/. The issue enables remote attackers to execute arbitrary SQL commands (injection via unvalidated inpu...

Debian Security Advisory DSA 1092-1 (mysql-dfsg-4.1)

The remote host is missing an update to mysql-dfsg-4.1 announced via advisory DSA 1092-1. Josh Berkus and Tom Lane discovered that MySQL 4.1, a popular SQL database, incorrectly parses astring escaped with mysqlrealescape which could lead to SQL injection. This problem does only exist in versions...

CVE-2004-2753

CVE-2004-2753 corresponds to a HP-UX SharedX vulnerability affecting HP-UX B.11.00, B.11.11 and B.11.22 where local users could access unspecified files or cause a denial of service due to how SharedX handles files in a potentially insecure manner. The connected OpenVAS/Nessus entries reference H...

openSUSE 10 Security Update : mysql (mysql-1593)

This update of mysql fixes a bug in the mysqlrealescape function that allowed SQL command injection CVE-2006-2753. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update mysql-1593. The text...

CVE-2007-2753

The CVE-2007-2753 entry concerns RunawaySoft Haber portal 1.0, which stores sensitive information under the web root with insufficient access control. The underlying issue allows remote attackers to download a database via a direct request for data/xice.mdb, indicating a direct exposure of data t...

Debian DSA-1092-1 : mysql-dfsg-4.1 - programming error

Josh Berkus and Tom Lane discovered that MySQL 4.1, a popular SQL database, incorrectly parses a string escaped with mysqlrealescape which could lead to SQL injection. This problem does only exist in versions 4.1 and 5.0. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text a...

CentOS 4 : mysql (CESA-2006:0544)

Updated mysql packages that fix multiple security flaws are now available. This update has been rated as having important security impact by the Red Hat Security Response Team. MySQL is a multi-user, multi-threaded SQL database server. MySQL is a client/server implementation consisting of a serve...