USN-1849-1: Linux kernel (Raring HWE) vulnerability

Kees Cook discovered a flaw in the Linux kernel's iSCSI subsystem. A remote unauthenticated attacker could exploit this flaw to cause a denial of service system crash or potentially gain administrative privileges. CVE-2013-2850 An flaw was discovered in the Linux kernel's perfevents interface. A...

Debian DSA-2669-1 : linux - privilege escalation/denial of service/information leak

Several vulnerabilities have been discovered in the Linux kernel that may lead to a denial of service, information leak or privilege escalation. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2013-0160 vladz reported a timing leak with the /dev/ptmx...

DSA-2669-1 linux - several

Bulletin has no description...

Debian Security Advisory DSA 2669-1 (linux - privilege escalation/denial of service/information leak)

Several vulnerabilities have been discovered in the Linux kernel that may lead to a denial of service, information leak or privilege escalation. The Common Vulnerabilities and Exposures project identifies the following problems: CVE-2013-0160 vladz reported a timing leak with the /dev/ptmx...

CVE-2013-3229

The iucvsockrecvmsg function in net/iucv/afiucv.c in the Linux kernel before 3.9-rc7 does not initialize a certain length variable, which allows local users to obtain sensitive information from kernel stack memory via a crafted recvmsg or recvfrom system call...

BELL-CVE-2013-3229 CVE-2013-3229 does not affect BellSoft software

Bulletin has no description...

CVE-2013-3229

CVE-2013-3229 affects the Linux kernel and is caused by iucv_sock_recvmsg in net/iucv/af_iucv.c not initializing a length variable, enabling local attackers to read kernel stack memory via crafted recvmsg/recvfrom calls. Affected version: kernel builds before 3.9-rc7. Consequences: information di...

CVE-2012-3229

CVE-2012-3229 affects Oracle Siebel CRM 8.1.1 specifically the Siebel UI Framework, Siebel Documentation subcomponent. The vulnerability allows remote authenticated attackers to achieve unauthorized read access to a subset of Siebel UI Framework data via HTTP. No exploitation details or patch ver...

Apple Safari safari-extension:// URL处理遍历远程代码执行漏洞

CVE ID: CVE-2011-3229 Safari是苹果计算机的最新作业系统Mac OS X中的浏览器，使用了KDE的KHTML作为浏览器的运算核心。 Safari在处理safari-extension:// URL时存在目录遍历问题，浏览恶意网站可导致执行任意Javascript代码。 Apple Mac OS X 10.6.8 Apple Mac OS X Server v10.6.8 Microsoft Vista Microsoft Windows 7 Apple OS X Lion 10.7.2 Apple OS X Lion Server 10.7.2 厂商补丁：...

APPLE-SA-2011-10-12-4 Safari 5.1.1

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 APPLE-SA-2011-10-12-4 Safari 5.1.1 Safari 5.1.1 is now available and addresses the following: Safari Available for: Mac OS X v10.6.8, Mac OS X Server v10.6.8, OS X Lion v10.7.2, OS X Lion Server v10.7.2, Windows 7, Vista, XP SP2 or later Impact:...

CVE-2011-3229

CVE-2011-3229 describes a directory-traversal in Safari’s handling of safari-extension:// URLs, enabling remote attackers to execute arbitrary JavaScript within the context of installed Safari Extensions. Affected: Safari 5.0 and later on Mac OS X and Windows (per OpenVAS/PacketStorm references),...

Microsoft Windows SChannel客户端证书处理拒绝服务漏洞（MS10-085）

BUGTRAQ ID: 43780 CVE ID: CVE-2010-3229 Microsoft Windows是微软发布的非常流行的操作系统。 Windows的SChannel实现在SSL/TLS握手期间处理协议请求之前没有检查逻辑情况，如果远程攻击者向承载着启用了SSL的网站的IIS服务器发送了特制的客户端证书请求，就会导致LSASS服务停止响应和系统重启。 Microsoft Windows Vista SP2 Microsoft Windows Vista SP1 Microsoft Windows Server 2008 SP2 Microsoft Windows Serve...

CVE-2010-3229

CVE-2010-3229 is a TLSv1/SSL denial-of-service flaw in Microsoft Windows’ SChannel when IIS 7.x hosts SSL websites. The vulnerability arises from SChannel failing to check a condition before processing client certificates during SSL/TLS handshakes, allowing a remote attacker to cause LSASS to sto...

Debian DSA-1900-1 : postgresql-7.4, postgresql-8.1, postgresql-8.3, postgresql-8.4 - several vulnerabilities

Several vulnerabilities have been discovered in PostgreSQL, a SQL database system. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2009-3229 Authenticated users can shut down the backend server by re-LOAD-ing libraries in $libdir/plugins, if any librarie...

Mandriva Security Advisory MDVSA-2009:251-1 (postgresql8.2)

The remote host is missing an update to postgresql8.2 announced via advisory MDVSA-2009:251-1. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only O...

SuSE Security Summary SUSE-SR:2009:017

The remote host is missing updates announced in advisory SUSE-SR:2009:017. SuSE Security Summaries are short on detail when it comes to the names of packages affected by a particular bug. Because of this, while this test will detect out of date packages, it cannot tell you what bugs impact which...

SLES10: Security update for PostgreSQL

The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: postgresql postgresql-contrib postgresql-devel postgresql-docs postgresql-libs postgresql-pl postgresql-server More details may also be found by searching fo...

SLES11: Security update for PostgreSQL

The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: postgresql postgresql-contrib postgresql-docs postgresql-libs postgresql-server More details may also be found by searching for the SuSE Enterprise Server 11...

Debian Security Advisory DSA 1900-1 (postgresql-7.4, postgresql-8.1, postgresql-8.3, postgresql-8.4)

The remote host is missing an update to postgresql-7.4, postgresql-8.1, postgresql-8.3, postgresql-8.4 announced via advisory DSA 1900-1. OpenVAS Vulnerability Test $Id: deb19001.nasl 6615 2017-07-07 12:09:52Z cfischer $ Description: Auto-generated from advisory DSA 1900-1 postgresql-7.4,...

openSUSE 10 Security Update : postgresql (postgresql-6502)

Multiple security vulnerabilities have been fixed in PostgrSQL - CVE-2009-3229: allows remote authenticated users to cause a denial of service - CVE-2009-3230: allows remote authenticated users to gain higher privileges - CVE-2009-3231: when using LDAP authentication with anonymous binds, allows...