[SECURITY] [DSA 2298-2] apache2 regression fix

------------------------------------------------------------------------- Debian Security Advisory DSA-2298-2 [email protected] http://www.debian.org/security/ Stefan Fritsch September 05, 2011 http://www.debian.org/security/faq -...

[SECURITY] [DSA 2298-1] apache2 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-2298-1 [email protected] http://www.debian.org/security/ Stefan Fritsch August 29, 2011 http://www.debian.org/security/faq -...

DSA-2298-1 apache2 - denial of service

Bulletin has no description...

Mozilla Firefox 5.0 Multiple Vulnerabilities

Binary data 801346.prm...

Fedora Update for libsoup FEDORA-2011-9763

The remote host is missing an update for the SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

SuSE9 Security Update : IBM Java5 JRE and SDK (YOU Patch Number 12810)

IBM Java 1.5.0 SR12 FP5 has been released fixing bugs and security issues. The following security issues were fixed : - Unspecified vulnerability in the Java Runtime Environment JRE component in Oracle Java SE 6 Update 25 and earlier, 5.0 Update 29 and earlier, and 1.4.231 and earlier allows remo...

Debian DSA-2284-1 : opensaml2 - implementation error

Juraj Somorovsky, Andreas Mayer, Meiko Jensen, Florian Kohlar, Marco Kampmann and Joerg Schwenk discovered that Shibboleth, a federated web single sign-on system is vulnerable to XML signature wrapping attacks. More details can be found in the Shibboleth advisory. %NASLMINLEVEL 70300 C Tenable...

JVN#86220950: Google Search Appliance vulnerable to cross-site scripting

Google Search Appliance from Google is a product that provides searching services for an intranet service or a website. Google Search Appliance contains a cross-site scripting vulnerability. Impact An arbitrary script may executed on the user's web browser. Solution Update the software Update to...

Mozilla Firefox 5.0 / Microsoft Internet Explorer 8.0 Denial Of Service

Firefox 5.0 & Internet Explorer 8.0 - Access Violation Exception and Unknown Exception Exploit Title: Firefox 5.0 & Internet Explorer 8.0 - Access Violation Exception and Unknown Exception Google Dork: N/A Date: 7/12/2011 Author: r45c4l Software Link: www.firefox.com and IE is shiped with Windows...

Microsoft IIS FTP Server <= 7.0 Stack Exhaustion DoS [MS09-053]

Exploit for windows platform in category dos / poc Exploit Title: MS09-053 Microsoft IIS FTP Server Software Link: http://www.microsoft.com/ Version: 5.0 - 7.0 Tested on: unpatched version of windows xp & 2k3 This file is part of the Metasploit Framework and may be subject to redistribution and...

[slackware-security] mozilla-firefox

New mozilla-firefox packages are available for Slackware 13.0, 13.1, 13.37, and -current to fix security issues. Here are the details from the Slackware 13.37 ChangeLog: patches/packages/mozilla-firefox-5.0-i486-1slack13.37.txz: Upgraded. This release contains security fixes and improvements. For...

Mozilla Firefox 5.0 DLL Hijacking Exploit(softokn3.dll)

Exploit for windows platform in category local exploits Title: Mozilla Firefox 5.0 DLL Hijacking Exploitsoftokn3.dll Software:www.mozilla-europe.org/es/ Version: 5.0 Tested on: Windows Author: PoisonCode Published: 2011-06-23 CVE-ID: | \ / | | | | | | | | / \ \ / / | | | | '| | | | | | | | | / |...

[ MDVSA-2011:100 ] cyrus-imapd

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Mandriva Linux Security Advisory MDVSA-2011:100 http://www.mandriva.com/security/ Package : cyrus-imapd Date : May 24, 2011 Affected: 2009.0, 2010.1, Corporate 4.0, Enterprise Server 5.0 Problem Description: A vulnerability has been identified and fix...

Design/Logic Flaw

tftpserver.exe in HP Intelligent Management Center IMC 5.0 before E0101L02 allows remote attackers to execute arbitrary code via a 1 large or 2 invalid opcode field, related to a function pointer table...

Stack overflow

Stack-based buffer overflow in img.exe in HP Intelligent Management Center IMC 5.0 before E0101L02 allows remote attackers to execute arbitrary code via a crafted length field in a packet...

CVE-2011-1848

Stack-based buffer overflow in img.exe in HP Intelligent Management Center IMC 5.0 before E0101L02 allows remote attackers to execute arbitrary code via a crafted length field in a packet...

CVE-2011-1854

CVE-2011-1854 is an HP IMC 5.0 vulnerability (before E0101L02) in the imcsyslogdm.exe component, where processing oversized syslog packets triggers a use-after-free and remote code execution. The issue is documented by multiple sources (NVD entry, Red Hat advisory, Nessus plugin HP_IMC_MULTIPLE_C...

CVE-2011-1853

HP Intelligent Management Center (IMC) 5.0 before E0101L02 is vulnerable to CVE-2011-1853 via tftpserver.exe, where handling a large or invalid opcode field (related to a function pointer table) can allow remote arbitrary code execution. Affected product line: HP IMC 5.0 (E0101) and earlier; impa...

CVE-2011-1850

CVE-2011-1850 refers to a stack-based buffer overflow in HP Intelligent Management Center (IMC) 5.0, specifically in the dbman.exe logging functionality. The vulnerability allows remote attackers to execute arbitrary code via vectors related to a received action, with impact described as remote c...

CVE-2011-1848

HP Intelligent Management Center (IMC) 5.0 before E0101L02 is affected by CVE-2011-1848 due to a stack-based buffer overflow in the img.exe component when processing a crafted length field in a packet, allowing remote code execution. Red Hat and other advisories reiterate this vulnerability in IM...