Debian DSA-2151-1 : openoffice.org - several vulnerabilities

Several security related problems have been discovered in the OpenOffice.org package that allows malformed documents to trick the system into crashes or even the execution of arbitrary code. - CVE-2010-3450 During an internal security audit within Red Hat, a directory traversal vulnerability has...

[SECURITY] [DSA 2151-1] New OpenOffice.org packages fix several vulnerabilities

-------------------------------------------------------------------------- Debian Security Advisory DSA 2151-1 [email protected] http://www.debian.org/security/ Martin Schulze January 26th, 2011 http://www.debian.org/security/faq -...

SuSE 11 Security Update : kdelibs (SAT Patch Number 3450)

An invalid character reference causing a buffer overflow in khtml has been fixed in the kdelibs package. CVE-2009-1725 has been assigned to this issue. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from SuSE 11 update...

CVE-2009-3450

The CVE-2009-3450 entry describes multiple XSS vulnerabilities in WebCoreModule.ashx of RADactive I-Load before 2008.2.5.0. The issue stems from input parameters whose names begin with __ (double underscore), which bypasses the built‑in ASP.NET XSS protection and allows remote attackers to inject...

CVE-2008-3450

Unspecified vulnerability in the namefs kernel module in Sun Solaris 8 through 10 allows local users to gain privileges or cause a denial of service panic via unspecified vectors...

CVE-2008-3450

Unspecified vulnerability in the namefs kernel module in Sun Solaris 8 through 10 allows local users to gain privileges or cause a denial of service panic via unspecified vectors...

CVE-2008-3450

CVE-2008-3450 covers an unspecified vulnerability in Sun Solaris 8–10 the namefs kernel module that could allow local privilege escalation or cause a denial of service (panic). The issue centers on the namefs driver; multiple patches exist by Sun/Oracle to mitigate it across affected releases: 11...

Solaris 10 (x86) : 136717-01

SunOS 5.10x86: namefs driver. Date this patch was last updated by Sun : Jan/24/08 %NASLMINLEVEL 70300 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a recommended security fix. Disabled on 2011/10/24. C Tenable Network Security, Inc. if ! definedfunc"bnrando...

CVE-2007-3450

CVE-2007-3450 is a SQL injection vulnerability in the 6ALBlog project, affecting the file member.php . The flaw allows remote attackers to execute arbitrary SQL commands by supplying the attack payload in the member parameter. This vulnerability is confirmed in multiple sources (NVD/NVDA-style re...

CVE-2006-3450

CVE-2006-3450 corresponds to a memory-corruption vulnerability in Microsoft Internet Explorer (IE6/IE5 SP4) involving HTML layout and certain layout-positioning combinations. The root cause is improper handling of CSS/class-related content (e.g., document.getElementByID usage) which could allow r...

CVE-2005-3450

Unspecified vulnerability in the HTTP Server in Oracle Application Server 1.0 up to 9.0.2.3 has unknown impact and attack vectors, as identified by Oracle Vuln AS04...

CVE-2005-3450

Technical details about CVE-2005-3450 (affected component, impact, exploitability) are not provided in the supplied documents. Monitor for updates.

Solaris 9 (sparc) : 114971-03

SunOS 5.9: usr/kernel/fs/namefs Patch. Date this patch was last updated by Sun : Jul/29/08 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc'; include'compat.inc'; if...

Solaris 8 (x86) : 114985-02

SunOS 5.8x86: /usr/kernel/fs/namefs patch. Date this patch was last updated by Sun : Jul/29/08 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc'; include'compat.inc'; if...

Solaris 8 (sparc) : 114984-02

SunOS 5.8: /usr/kernel/fs/namefs patch. Date this patch was last updated by Sun : Jul/29/08 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc'; include'compat.inc'; if...