152 matches found
[SECURITY] [DSA 1681-1] New Linux 2.6.24 packages fix several vulnerabilities
---------------------------------------------------------------------- Debian Security Advisory DSA-1681-1 [email protected] http://www.debian.org/security/ Dann Frazier, Alexander Prinsier December 04, 2008 http://www.debian.org/security/faq -...
Fedora 9 : kernel-2.6.26.6-79.fc9 (2008-8929)
Update kernel from version 2.6.26.5 to 2.6.26.6: http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.26.6 CVE-2008-3831 An IOCTL in the i915 driver was not properly restricted to users with the proper capabilities to use it. CVE-2008-4410 The vmiwriteldtentry function in...
Fedora 8 : kernel-2.6.26.6-49.fc8 (2008-8980)
Update kernel from version 2.6.26.5 to 2.6.26.6: http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.26.6 CVE-2008-3831 An IOCTL in the i915 driver was not properly restricted to users with the proper capabilities to use it. CVE-2008-4410 The vmiwriteldtentry function in...
openSUSE 10 Security Update : kernel (kernel-5700)
The openSUSE 10.3 kernel was update to 2.6.22.19. This includes bugs and security fixes. CVE-2008-4576: Fixed a crash in SCTP INIT-ACK, on mismatch between SCTP AUTH availability. This might be exploited remotely for a denial of service crash attack. CVE-2008-3528: The ext234 filesystem code fail...
CVE-2008-4576
CVE-2008-4576 affects the Linux kernel SCTP implementation prior to 2.6.25.18. A remote attacker can trigger a denial of service by sending an INIT-ACK that states the peer does not support AUTH, causing sctp_process_init to clean up active transports and, when the T1-Init timer expires, to trigg...
CVE-2007-4576
CVE-2007-4576 is a reserved duplicate and is not used.
Fedora 7 : hsqldb-1.8.0.8-1jpp.5.fc7 (2007-4119)
Backporting a fix for CVE-2007-4576. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVEL 703...
CVE-2006-4576
The vulnerability CVE-2006-4576 is an XSS in The Address Book 1.04e where remote attackers can inject arbitrary web script by uploading an HTML file with a GIF/JPG extension, which is then rendered by Internet Explorer. The provided connected documents confirm the affected product/version and the...
CVE-2005-4576
CVE-2005-4576 affects Fatwire UpdateEngine (UpdateEngine) 6.2 and earlier. The vulnerability is multiple cross-site scripting (XSS) flaws exploitable via the parameters COUNTRYNAME, EMAIL, and FUELAP_TEMPLATENAME, allowing remote attackers to inject arbitrary web script or HTML. The available doc...
