RHEL 6 : kernel-rt (RHSA-2014:0913)

Updated kernel-rt packages that fix multiple security issues are now available for Red Hat Enterprise MRG 2.5. The Red Hat Security Response Team has rated this update as having Important security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity ratings,...

Important: Red Hat Security Advisory: kernel-rt security update

Updated kernel-rt packages that fix multiple security issues are now available for Red Hat Enterprise MRG 2.5. The Red Hat Security Response Team has rated this update as having Important security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity ratings,...

DLA-0015-1 linux-2.6 - security update

Bulletin has no description...

CVE-2014-4667

CVE-2014-4667 affects the Linux kernel: the sctp_association_free function in net/sctp/associola.c before version 3.15.2 fails to properly manage a specific backlog value, enabling remote attackers to trigger a denial of service (socket outage) via a crafted SCTP packet. The vulnerability is root...

Fedora 20 : kernel-3.14.9-200.fc20 (2014-7863)

The 3.14.9 stable update contains a number of important fixes across the tree. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without...

CentOS 4 : unzip (CESA-2007:0203)

Updated unzip packages that fix two security issues and various bugs are now available. This update has been rated as having low security impact by the Red Hat Security Response Team. The unzip utility is used to list, test, or extract files from a zip archive. A race condition was found in Unzip...

FreeBSD Ports: squidclamav

The remote host is missing an update to the system as announced in the referenced advisory. VID ce680f0a-eea6-11e1-8bd8-0022156e8794 OpenVAS Vulnerability Test $ Description: Auto generated from VID ce680f0a-eea6-11e1-8bd8-0022156e8794 Authors: Thomas Reinke Copyright: Copyright c 2012 E-Soft Inc...

CVE-2012-4667

Multiple cross-site scripting XSS vulnerabilities in SquidClamav 5.x before 5.8 allow remote attackers to inject arbitrary web script or HTML via the 1 url, 2 virus, 3 source, or 4 user parameter to a clwarn.cgi, b clwarn.cgi.deDE, c clwarn.cgi.enEN, d clwarn.cgi.frFR, e clwarn.cgi.ptBR, or f...

CVE-2012-4667

SquidClamav 5.x is vulnerable to multiple XSS flaws (notably via clwarn.cgi parameters: url, virus, source, user) due to improper sanitization of user input. These issues affect CGI scripts under cgi-bin/ and allow remote attackers to inject arbitrary script/HTML in victims’ browsers. The CVE has...

Scientific Linux Security Update : unzip on SL4.x i386/x86_64

A race condition was found in Unzip. Local users could use this flaw to modify permissions of arbitrary files via a hard link attack on a file while it was being decompressed CVE-2005-2475 A buffer overflow was found in Unzip command line argument handling. If a user could be tricked into running...

CVE-2010-4667

CVE-2010-4667 affects Coppermine Photo Gallery (CPG) prior to version 1.4.27. The vulnerability is a Cross-site Scripting (XSS) issue that allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. The official description notes no specifics on vectors, and the connec...

CVE-2009-4667

The CVE-2009-4667 entry concerns a SQL injection in WebMember 1.0 accessing form.php via the formID parameter. The vulnerability affects the form.php handler and can be triggered by an authenticated remote user, enabling arbitrary SQL execution. Affected software is WebMember 1.0; specific exploi...

CVE-2009-4667

SQL injection vulnerability in form.php in WebMember 1.0 allows remote authenticated users to execute arbitrary SQL commands via the formID parameter...

CVE-2009-4667

creationtimestamp| type| source ---|---|--- 2009-05-26 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/8810...

CVE-2008-4667

Directory traversal vulnerability in rss.php in ArabCMS 2.0 beta 1 allows remote attackers to include and execute arbitrary local files via a .. dot dot in the rss parameter...

CVE-2008-4667

CVE-2008-4667 affects ArabCMS 2.0 beta 1 (rss.php). The vulnerability is a directory traversal via a .. in the rss parameter, enabling remote attackers to include and execute local files. The NVD entry lists a High base score (7.5) with network access, low attack complexity, no authentication, an...

CVE-2008-4667

Directory traversal vulnerability in rss.php in ArabCMS 2.0 beta 1 allows remote attackers to include and execute arbitrary local files via a .. dot dot in the rss parameter...

CVE-2008-4667

creationtimestamp| type| source ---|---|--- 2008-09-29 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/6628...

SuSE 10 Security Update : Cups (ZYPP Patch Number 4667)

A buffer overflow in the xpdf code contained in cups could be exploited by attackers to potentially execute arbitrary code. CVE-2007-4352 / CVE-2007-5392 / CVE-2007-5393 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc...

CVE-2007-4667

CVE-2007-4667 affects Firebird before 2.0.2, describing an unspecified vulnerability in the Services API that allows remote attackers to cause a denial of service (CORE-1149). The record does not specify the exact root cause, exploit technique, or affected subcomponents beyond the Services API an...