SuSE 10 Security Update : OpenSSL (ZYPP Patch Number 7174)

Specially crafted responses from SSL servers could cause a double-free bug in openssl's client implementation. Malicious servers could exploit that to crash programs use openssl for the SSL connection CVE-2010-2939. This has been fixed. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The tex...

Ubuntu: Security Advisory (USN-1003-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Ubuntu 6.06 LTS / 8.04 LTS / 9.04 / 9.10 / 10.04 LTS / 10.10 : openssl vulnerabilities (USN-1003-1)

It was discovered that OpenSSL incorrectly handled return codes from the bnwexpand function calls. A remote attacker could trigger this flaw in services that used SSL to cause a denial of service or possibly execute arbitrary code with application privileges. This issue only affected Ubuntu 6.06...

Mandriva Update for openssl MDVSA-2010:168 (openssl)

Check for the Version of openssl OpenVAS Vulnerability Test Mandriva Update for openssl MDVSA-2010:168 openssl Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it unde...

CVE-2010-2939

CVE-2010-2939 is a double-free vulnerability in OpenSSL’s client ssl3_get_key_exchange when using ECDH. A crafted private key with an invalid prime can cause a context-dependent crash and may allow arbitrary code execution. Affected OpenSSL versions include 1.0.0a, 0.9.8, 0.9.7 (and possibly othe...

Mac OS X 10.5.7 Update / Mac OS X Security Update 2009-002

The remote host is missing Mac OS X 10.5.7 Update / Mac OS X Security Update 2009-002. One or more of the following components are affected: Apache ATS BIND CFNetwork CoreGraphics Cscope CUPS Disk Images enscript Flash Player plug-in Help Viewer iChat International Components for Unicode IPSec...

Mandriva Security Advisory MDVSA-2009:323 (apache)

The remote host is missing an update to apache announced via advisory MDVSA-2009:323. OpenVAS Vulnerability Test $Id: mdksa2009323.nasl 6573 2017-07-06 13:10:50Z cfischer $ Description: Auto-generated from advisory MDVSA-2009:323 apache Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft In...

SLES10: Security update for Apache 2

The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: apache2 apache2-devel apache2-doc apache2-example-pages apache2-prefork apache2-worker More details may also be found by searching for the SuSE Enterprise...

SLES9: Security update for Apache 2

The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: apache2-devel apache2-doc apache2-example-pages apache2-prefork apache2-worker libapr0 apache2 For more information, please visit the referenced security...

SLES9: Security update for Apache 2

The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: apache2-devel apache2-doc apache2-example-pages apache2-prefork apache2-worker libapr0 apache2 For more information, please visit the referenced security...

Apache Server mod_proxy_ftp Wildcard Characters Cross-Site Scripting (CVE-2008-2939)

The Apache HTTP server is the most popular web server used on the Internet. The server is capable of being utilized with numerous different options and configurations, with a wide variety of plug-in modules which are loaded at run-time to extend its functionality. There exist a cross-site scripti...

SuSE9 Security Update : Apache 2 (YOU Patch Number 12258)

Missing sanity checks of FTP URLs allowed cross-site scripting XSS attacks via the modprodyftp module. CVE-2008-2939 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if description...

CVE-2009-2939

The postfix.postinst script in the Debian GNU/Linux and Ubuntu postfix 2.5.5 package grants the postfix user write access to /var/spool/postfix/pid, which might allow local users to conduct symlink attacks that overwrite arbitrary files...

CVE-2009-2939

CVE-2009-2939 affects Postfix on Debian/Ubuntu where the postinst script grants the postfix user write access to /var/spool/postfix/pid, enabling local users to perform symlink attacks that can overwrite arbitrary files. Connected advisories confirm the issue across multiple distributions and rep...

CVE-2009-2939

The postfix.postinst script in the Debian GNU/Linux and Ubuntu postfix 2.5.5 package grants the postfix user write access to /var/spool/postfix/pid, which might allow local users to conduct symlink attacks that overwrite arbitrary files...

CVE-2009-2939

The postfix.postinst script in the Debian GNU/Linux and Ubuntu postfix 2.5.5 package grants the postfix user write access to /var/spool/postfix/pid, which might allow local users to conduct symlink attacks that overwrite arbitrary files...

Security fix for the ALT Linux 9 package apache2 version 2.2.12-alt1

July 30, 2009 Aleksey Avdeev 2.2.12-alt1 - 2.2.12 - Security fixes CVE-2008-2939, CVE-2009-0023, CVE-2009-1191, CVE-2009-1195, CVE-2009-1890, CVE-2009-1891, CVE-2009-1955 and CVE-2009-1956 Closes: 20218, 20674 and 20760 - Add support new MIME types Closes: 11460...

Security fix for the ALT Linux 8 package apache2 version 2.2.12-alt1

July 30, 2009 Aleksey Avdeev 2.2.12-alt1 - 2.2.12 - Security fixes CVE-2008-2939, CVE-2009-0023, CVE-2009-1191, CVE-2009-1195, CVE-2009-1890, CVE-2009-1891, CVE-2009-1955 and CVE-2009-1956 Closes: 20218, 20674 and 20760 - Add support new MIME types Closes: 11460...

Mandrake Security Advisory MDVSA-2009:124 (apache)

The remote host is missing an update to apache announced via advisory MDVSA-2009:124. OpenVAS Vulnerability Test $Id: mdksa2009124.nasl 6573 2017-07-06 13:10:50Z cfischer $ Description: Auto-generated from advisory MDVSA-2009:124 apache Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft In...

Mandriva Linux Security Advisory : apache (MDVSA-2009:124-1)

Multiple vulnerabilities has been found and corrected in apache : Memory leak in the zlibstatefulinit function in crypto/comp/czlib.c in libssl in OpenSSL 0.9.8f through 0.9.8h allows remote attackers to cause a denial of service memory consumption via multiple calls, as demonstrated by initial S...