SuSE9 Security Update : IBM Java 5 JRE and SDK (YOU Patch Number 12659)

This update brings IBM Java 5 to Service Release 12 Fixpack 2. It fixes quite a large number of security problems and other bugs. The security issues are tracked by the following CVE ids : - CVE-2010-1321 CVE-2010-3541 CVE-2010-3548 CVE-2010-3549 CVE-2010-3550 CVE-2010-3551 CVE-2010-3556...

RHEL 4 / 5 : java-1.5.0-ibm (RHSA-2010:0807)

Updated java-1.5.0-ibm packages that fix several security issues are now available for Red Hat Enterprise Linux 4 Extras and 5 Supplementary. The Red Hat Security Response Team has rated this update as having critical security impact. Common Vulnerability Scoring System CVSS base scores, which gi...

openSUSE Security Update : java-1_6_0-sun (openSUSE-SU-2010:0754-1)

Sun Java 1.6.0 was updated to Security Update U22. The release notes for this release are on: http://www.oracle.com/technetwork/java/javase/6u22releasenotes-176121. html Security advisory page for this update: http://www.oracle.com/technetwork/topics/security/javacpuoct2010-17625 8.html Following...

CVE-2010-3559

Unspecified vulnerability in the Sound component in Oracle Java SE and Java for Business 6 Update 21, 5.0 Update 25, 1.4.227, and 1.3.128 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors. NOTE: the previous information was obtained from the Octobe...

CVE-2010-3559

CVE-2010-3559 affects Oracle Java SE/Java for Business (6u21, 5.0u25, 1.4.2_27, 1.3.1_28). The SUSE entry describes an unspecified vulnerability in the Sound component tied to a likely incorrect sign extension in HeadspaceSoundbank.nGetName, enabling a buffer overflow via a crafted BANK record an...

Oracle Java SE Multiple Vulnerabilities (October 2010 CPU)

The version of Oracle formerly Sun Java SE or Java for Business installed on the remote host is earlier than 6 Update 22 / 5.0 Update 26 / 1.4.228. Such versions are potentially affected by security issue in the following components : - CORBA - Deployment - Deployment Toolkit - Java 2D - Java Web...

Mandriva Linux Security Advisory : php (MDVSA-2009:302)

Some vulnerabilities were discovered and corrected in php-5.3.1 : - Added maxfileuploads INI directive, which can be set to limit the number of file uploads per-request to 20 by default, to prevent possible DOS via temporary file exhaustion. Ilia - Added missing sanity checks around exif...

CVE-2009-3559

CVE-2009-3559 corresponds to a PHP 5.3.x issue where PHP 5.3.x before 5.3.1 does not recognize the safe_mode_include_dir directive. According to SUSE and Mandriva advisories, this affects PHP 5.3.0–5.3.0.x prior to 5.3.1 and is linked to a safe_mode_include_dir bypass/bypass-like condition causin...

CVE-2008-3559

CVE-2008-3559 describes multiple XSS vulnerabilities in KAPhotoservice . The affected endpoints are search.asp (via the filename parameter) and order.asp (via the page parameter), allowing remote attackers to inject arbitrary web script or HTML. The root cause is unvalidated/reflected user input ...

CVE-2008-3559

creationtimestamp| type| source ---|---|--- 2008-08-06 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/32185 2008-08-06 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/32184...

Debian: Security Advisory (DSA-1048-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2007-3559

The CVE-2007-3559 affects PHP-Fusion 6.01.9 and 6.01.10, specifically the infusions/shoutbox_panel/shoutbox_panel.php component. The vulnerability is a Cross-Site Scripting (XSS) issue related to the FUSION_QUERY constant when guest posts are enabled, allowing remote authenticated users to inject...

Solaris 10 (x86) : 119167-43 (deprecated)

Sun Java System App Server Enterprise Ed 8.1 2005Q1, x86 Patch32. Date this patch was last updated by Sun : Oct/18/11 This plugin has been deprecated and either replaced with individual 119167 patch-revision plugins, or deemed non-security related. %NASLMINLEVEL 70300 C Tenable Network Security,...

Solaris 9 (sparc) : 119166-43

Sun Java System App Server Enterprise Ed 8.1 2005Q1, Solaris Patch. Date this patch was last updated by Sun : Oct/18/11 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc';...

Solaris 8 (sparc) : 119166-43

Sun Java System App Server Enterprise Ed 8.1 2005Q1, Solaris Patch. Date this patch was last updated by Sun : Oct/18/11 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc';...

Debian DSA-1048-1 : asterisk - several vulnerabilities

Several problems have been discovered in Asterisk, an Open Source Private Branch Exchange telephone control center. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2005-3559 Adam Pointon discovered that due to missing input sanitising it is possible to...

[SECURITY] [DSA 1048-1] New Asterisk packages fix arbitrary code execution

-------------------------------------------------------------------------- Debian Security Advisory DSA 1048-1 [email protected] http://www.debian.org/security/ Martin Schulze May 1st, 2006 http://www.debian.org/security/faq -...

CVE-2005-3559

Directory traversal vulnerability in vmail.cgi in Asterisk 1.0.9 through 1.2.0-beta1 allows remote attackers to access WAV files via a .. dot dot in the folder parameter...

CVE-2005-3559

CVE-2005-3559 is a directory traversal vulnerability in vmail.cgi of Asterisk, affecting 1.0.9 through 1.2.0-beta1 and enabling remote access to WAV files via a .. in the folder parameter. The issue is documented across multiple feeds (Debian DSA-1048-1 and SUSE/Nessus entries) with remediation g...