SuSE 10 Security Update : Sun Java 1.4.2 (ZYPP Patch Number 5852)

The version update to SUN Java 1.4.2sr19 fixes numerous security issues such as privilege escalations. CVE-2008-5360 / CVE-2008-5359 / CVE-2008-5358 / CVE-2008-5357 / CVE-2008-5356 / CVE-2008-5344 / CVE-2008-5343 / CVE-2008-5342 / CVE-2008-5341 / CVE-2008-5340 / CVE-2008-5339 / CVE-2008-2086 /...

RHEL 5 : java-1.5.0-sun (RHSA-2008:1025)

The remote Redhat Enterprise Linux 5 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2008:1025 advisory. - Java Web Start File Inclusion via System Properties Override CVE-2008-2086 - JavaWebStart allows unauthorized network connections...

Fedora 10 : java-1.6.0-openjdk-1.6.0.0-7.b12.fc10 (2008-10913)

OpenJDK security patches applied. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVEL 70300 ...

SuSE Security Summary SUSE-SR:2009:006

The remote host is missing updates announced in advisory SUSE-SR:2009:006. SuSE Security Summaries are short on detail when it comes to the names of packages affected by a particular bug. Because of this, while this test will detect out of date packages, it cannot tell you what bugs impact which...

Fedora Update for java-1.6.0-openjdk FEDORA-2008-10860

The remote host is missing an update for the SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

Ubuntu USN-713-1 (openjdk-6)

The remote host is missing an update to openjdk-6 announced via advisory USN-713-1. OpenVAS Vulnerability Test $Id: ubuntu7131.nasl 7969 2017-12-01 09:23:16Z santu $ $Id: ubuntu7131.nasl 7969 2017-12-01 09:23:16Z santu $ Description: Auto-generated from advisory USN-713-1 openjdk-6 Authors: Thoma...

Ubuntu: Security Advisory (USN-713-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[USN-713-1] openjdk-6 vulnerabilities

=========================================================== Ubuntu Security Notice USN-713-1 January 27, 2009 openjdk-6 vulnerabilities CVE-2008-5347, CVE-2008-5348, CVE-2008-5349, CVE-2008-5350, CVE-2008-5351, CVE-2008-5352, CVE-2008-5353, CVE-2008-5354, CVE-2008-5358, CVE-2008-5359, CVE-2008-53...

RedHat Security Advisory RHSA-2009:0015

The remote host is missing updates announced in advisory RHSA-2009:0015. The IBM 1.6.0 Java release includes the IBM Java 2 Runtime Environment and the IBM Java 2 Software Development Kit. This update fixes several vulnerabilities in the IBM Java 2 Runtime Environment and the IBM Java 2 Software...

SUSE: Security Advisory for Sun Java (SUSE-SA:2009:001)

The remote host is missing updates announced in advisory SUSE-SA:2009:001. Copyright C 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software...

openSUSE 10 Security Update : java-1_6_0-sun (java-1_6_0-sun-5876)

The version update to SUN Java 1.6.011-b03 fixes numerous security issues such as privilege escalations. CVE-2008-5360, CVE-2008-5359, CVE-2008-5358, CVE-2008-5357, CVE-2008-5356, CVE-2008-5344, CVE-2008-5343, CVE-2008-5342, CVE-2008-5341, CVE-2008-5340, CVE-2008-5339, CVE-2008-2086, CVE-2008-535...

Fedora 9 : java-1.6.0-openjdk-1.6.0.0-0.20.b09.fc9 (2008-10860)

OpenJDK security patches applied. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVEL 70300 ...

CVE-2008-5352

CVE-2008-5352: Integer overflow in Pack200 jar unpacking in unpack200 (unpack.dll) used by Java Runtime Environment (JRE) for Sun JDK/JRE. Affected: JRE/JDK 6 Update 10 and earlier, and JDK/JRE 5.0 Update 16 and earlier. The overflow in the heap-based buffer can allow untrusted applications and a...

openSUSE 10 Security Update : courier-authlib (courier-authlib-5352)

This update of courier-authlib fixes a bug that allowed SQL injections. CVE-2008-2667 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update courier-authlib-5352. The text description of this plugin ...

Microsoft Windows LSASS LPC请求本地权限提升漏洞（MS08-002）

BUGTRAQ ID: 27099 CVECAN ID: CVE-2007-5352 Microsoft Windows是微软发布的非常流行的操作系统。 Windows的LSASS过程没有正确地处理特制LPC请求，当LSASS进程收到特制的LPC请求时，攻击者就可以以提升的权限运行代码，成功利用此漏洞的攻击者可以完全控制受影响的系统。攻击者可随后安装程序；查看、更改或删除数据；或者创建拥有完全用户权限的新帐户。 Microsoft Windows XP SP2 Microsoft Windows Server 2003 SP2 Microsoft Windows Server 2003...

CVE-2007-5352

CVE-2007-5352 is a local privilege-escalation vulnerability in Microsoft Windows LSASS. The root cause is LSASS’s improper handling of specially crafted LPC requests, which could allow a local attacker to execute code with SYSTEM privileges and take full control of the affected system. Affected p...

Microsoft Windows LSASS privilege escalation vulnerability

Overview The Windows LSASS service contains privilege escalation vulnerability. Description The Windows Local Security Authority Subsystem Service LSASS is a process that enforces the local security policy. Per Microsoft Security Bulletin MS08-002: An elevation of privilege vulnerability exists i...

MS08-002: Vulnerability in LSASS Could Allow Local Elevation of Privilege (943485)

The remote host is running version of Windows and LSASS that could allow a local user to gain elevated privileged. An attacker who has the ability to execute arbitrary commands on the remote host may exploit this flaw to gain SYSTEM privileges. C Tenable Network Security, Inc. include"compat.inc"...

CVE-2006-5352

CVE-2006-5352 pertains to Oracle Application Express 1.5–1.6.1 with multiple unspecified vulnerabilities. Connected data indicates that Oracle Application Express prior to 2.2.1 was addressed by a security update that fixed 35 issues, 25 of which may be remotely exploitable without authentication...