Important: Red Hat Security Advisory: katello security update

Updated katello packages that fix one security issue are now available for Red Hat Subscription Asset Manager. The Red Hat Security Response Team has rated this update as having important security impact. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity ratin...

Scientific Linux Security Update : jdk (java) on SL3.x, SL4.x i386/x86_64

NOTE: This combination of rpm's replaces j2sdk-1.4.2 with jdk-1.5.0. So your java will change from version 1.4.2 to 1.5.0. We apologize if this causes any problems, but it needed to be done for security reasons. A flaw in the applet caching mechanism of the Java Runtime Environment JRE did not...

CVE-2011-3503

CVE-2011-3503 describes an untrusted search path vulnerability in eSignal 10.6.2425.1208 (and possibly other versions), where local/possibly remote attackers could cause arbitrary code execution through a Trojan horse JRS_UT.dll placed in the same directory as a .quo file. The affected component ...

Oracle Solaris su NULL Pointer

From http://cvs.opensolaris.org/source/xref/onnv/onnv-gate/usr/src/cmd/su/su.c 521 for j = 0; initenvj != 0; j++ 1 522 if initvar = getenvinitenvj 2 ... 535 else 536 var = char 537 mallocstrleninitenvj 3 538 + strleninitvar 539 + 2; 540 void strcpyvar, initenvj; 4 'su' when creating new environme...

CVE-2010-3503

creationtimestamp| type| source ---|---|--- 2010-10-13 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/15245...

Oracle Solaris - su Crash

Oracle Solaris - su Crash From http://cvs.opensolaris.org/source/xref/onnv/onnv-gate/usr/src/cmd/su/su.c 521 for j = 0; initenvj != 0; j++ 1 522 if initvar = getenvinitenvj 2 ... 535 else 536 var = char 537 mallocstrleninitenvj 3 538 + strleninitvar 539 + 2; 540 void strcpyvar, initenvj; 4 'su'...

Oracle Solaris - 'su' Crash

From http://cvs.opensolaris.org/source/xref/onnv/onnv-gate/usr/src/cmd/su/su.c 521 for j = 0; initenvj != 0; j++ 1 522 if initvar = getenvinitenvj 2 ... 535 else 536 var = char 537 mallocstrleninitenvj 3 538 + strleninitvar 539 + 2; 540 void strcpyvar, initenvj; 4 'su' when creating new environme...

CVE-2009-3503

CVE-2009-3503: Multiple SQL injection vulnerabilities in BPowerHouse BPHolidayLettings 1.0 (search.aspx) allow remote attackers to execute arbitrary SQL commands via the (1) rid and (2) tid parameters. Affected component/function: search.aspx in BPHolidayLettings 1.0. Root cause: improper validat...

CVE-2009-3503

creationtimestamp| type| source ---|---|--- 2009-09-22 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/9841...

RHEL 4 / 5 : java-1.5.0-ibm (RHSA-2007:0829)

Updated java-1.5.0-ibm packages that correct several security issues are now available for Red Hat Enterprise Linux 4 Extras and 5 Supplementary. This update has been rated as having critical security impact by the Red Hat Security Response Team. IBM's 1.5.0 Java release includes the IBM Java 2...

Gentoo Security Advisory GLSA 200709-15 (jrockit-jdk-bin)

The remote host is missing updates announced in advisory GLSA 200709-15. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2008-3503

Plain Black WebGUI prior to 7.5.13 has an RSSFromParent flaw that does not restrict CS RSS feed view access, enabling remote disclosure of Collaboration System data. A fix is available in 7.5.13 (beta released) and later versions; upgrade to mitigate. Technical details: affected product/component...

Foxit WAC Remote Access Server 2.0 Build 3503 - Heap Buffer Overflow

Foxit WAC Remote Access Server 2.0 Build 3503 - Heap Buffer Overflow source: https://www.securityfocus.com/bid/27873/info Foxit WAC Remote Access Server is prone to a heap-based buffer-overflow vulnerability. Successfully exploiting this issue may allow remote attackers to execute arbitrary code ...

Foxit WAC Server 2.0 Build 3503 - Denial of Service

Foxit WAC Server 2.0 Build 3503 - Denial of Service source: https://www.securityfocus.com/bid/27142/info Foxit WAC Server is prone to a denial-of-service vulnerability because the application fails to perform adequate boundary checks on user-supplied data. An attacker can exploit this issue to...

Foxit WAC Server 2.0 Build 3503 - Denial of Service

source: https://www.securityfocus.com/bid/27142/info Foxit WAC Server is prone to a denial-of-service vulnerability because the application fails to perform adequate boundary checks on user-supplied data. An attacker can exploit this issue to crash the affected application, denying service to...

Mac OS X : Java for Mac OS X 10.4 Release 6

The remote Mac OS X 10.4 host is running a version of Java for Mac OS X that is older than release 6. The remote version of this software contains several security vulnerabilities that may allow a rogue Java applet to escalate its privileges and to add or remove arbitrary items from the user's...

Cross site scripting

The javadoc tool in Cosminexus Developer's Kit for Java in Cosminexus 7 and 7.5 can generate HTML documents that contain cross-site scripting XSS vulnerabilities, which allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. NOTE: this is probably the same issue as...

CVE-2007-3503

The Javadoc tool in Sun JDK 6 and JDK 5.0 Update 11 can generate HTML documentation pages that contain cross-site scripting XSS vulnerabilities, which allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2007-3503

The CVE-2007-3503 issue affects Sun JDK 6 and JDK 5.0 Update 11 where the Javadoc tool can generate HTML documentation pages containing cross-site scripting (XSS). A remote attacker could inject arbitrary web script or HTML via unspecified vectors. Supported documents note this as part of broader...

CVE-2006-3503

CVE-2006-3503: Integer overflow in Apple Mac OS X ImageIO (reported for 10.4.7) allows user-assisted attackers to crash or potentially execute arbitrary code via a crafted GIF image. Affected: Mac OS X 10.4.7/ImageIO; vector involves malformed GIFs; impact includes denial of service and possible ...