[SECURITY] [DLA 120-1] xorg-server security update

Package : xorg-server Version : 2:1.7.7-18+deb6u1 CVE ID : CVE-2014-8091 CVE-2014-8092 CVE-2014-8093 CVE-2014-8094 CVE-2014-8095 CVE-2014-8096 CVE-2014-8097 CVE-2014-8098 CVE-2014-8099 CVE-2014-8100 CVE-2014-8101 CVE-2014-8102 Ilja van Sprundel of IOActive discovered several security issues in th...

Updated x11-server packages fix security vulnerabilities

Ilja van Sprundel of IOActive discovered several security issues in the X.org X server, which may lead to privilege escalation or denial of service CVE-2014-8091, CVE-2014-8092, CVE-2014-8093, CVE-2014-8094, CVE-2014-8095, CVE-2014-8096, CVE-2014-8097, CVE-2014-8098, CVE-2014-8099, CVE-2014-8100,...

Oracle Linux 6 / 7 : xorg-x11-server (ELSA-2014-1983)

The remote Oracle Linux 6 / 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2014-1983 advisory. 1.15.0-7.0.1.el70.3 - Invalid BUGRETURNVAL fix, upstream patch orabug 18896390 1.15.0-7.3 - CVE fixes for: CVE-2014-8099, CVE-2014-8098,...

Debian DSA-3095-1 : xorg-server - security update

Ilja van Sprundel of IOActive discovered several security issues in the X.org X server, which may lead to privilege escalation or denial of service. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Debian Security...

CentOS 6 / 7 : xorg-x11-server (CESA-2014:1983)

Updated xorg-x11-server packages that fix multiple security issues are now available for Red Hat Enterprise Linux 6 and 7. Red Hat Product Security has rated this update as having Important security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity ratings...

CentOS 5 : xorg-x11-server (CESA-2014:1982)

Updated xorg-x11-server packages that fix multiple security issues are now available for Red Hat Enterprise Linux 5. Red Hat Product Security has rated this update as having Important security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity ratings, are...

Scientific Linux Security Update : xorg-x11-server on SL5.x i386/x86_64 (20141211)

Multiple integer overflow flaws and out-of-bounds write flaws were found in the way the X.Org server calculated memory requirements for certain X11 core protocol and GLX extension requests. A malicious, authenticated client could use either of these flaws to crash the X.Org server or, potentially...

Important: Red Hat Security Advisory: xorg-x11-server security update

Updated xorg-x11-server packages that fix multiple security issues are now available for Red Hat Enterprise Linux 5. Red Hat Product Security has rated this update as having Important security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity ratings, are...

xorg-x11-server security update

1.1.1-48.107.0.1.el511 - Added oracle-enterprise-detect.patch - Replaced 'Red Hat' in spec file 1.1.1-48.107 - CVE-2014-8091 denial of service due to unchecked malloc in client authentication 1168680 - CVE-2014-8092 integer overflow in X11 core protocol requests when calculating memory needs for...

[SECURITY] [DSA 3095-1] xorg-server security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3095-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff December 10, 2014 http://www.debian.org/security/faq -...

CVE-2014-8100

The Render extension in XFree86 4.0.1, X.Org X Window System aka X11 or X X11R6.7, and X.Org Server aka xserver and xorg-server before 1.16.3 allows remote authenticated users to cause a denial of service out-of-bounds read or write or possibly execute arbitrary code via a crafted length or index...

CVE-2014-8100

CVE-2014-8100 affects X.Org X Server (and the X Render extension) prior to 1.16.3. A crafted length/index value to multiple Render-related handlers can trigger out-of-bounds read/write, enabling remote authenticated users to cause denial of service or potentially execute arbitrary code. Affected ...

Debian: Security Advisory (DSA-3095-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

iPlanet Certificate Management System 4.2 - Directory Traversal

No description provided by source. source: http://www.securityfocus.com/bid/1839/info Acquiring access to known files outside of the web root is possible through directory traversal techniques in both iPlanet Certificate Management System CMS. This is made possible through the use of ../ in a HTT...

SuSE 10 Security Update : IBM Java 1.6.0 (ZYPP Patch Number 8100)

IBM Java 1.5.0 has been updated to SR13-FP1, fixing various security issues. More information can be found on : http://www.ibm.com/developerworks/java/jdk/alerts/ %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc. if NASLLEVEL 3000 exit0;...

BlueCoat Proxy 8100 Series Bypass

Title : ByPass a BlueCoat Proxy 8100 Serie authentification request AND eventually the 3rd party url filtering solution Date : 14/08/2009 Author : Antoine Santo Test one : Try to browse http://www.fcnantes.com/ Result : I need an Account GET http://www.fcnantes.com/ HTTP/1.1 Host: www.fcnantes.co...

CVE-2009-0728

creationtimestamp| type| source ---|---|--- 2009-02-23 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/8100...

AIX 610000 : U814471

The remote host is missing AIX PTF U814471 which is related to the security of the package printers.hplj-8100.rte You should install this PTF for your system to be up-to-date. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. if ! definedfunc"bnrandom" exit0; include'deprecatednasllevel.inc';...

CVE-2003-1515

Technical details about CVE-2003-1515 are not publicly provided in the supplied connected documents. Monitor for updates.

CVE-2003-1515

Origo ASR-8100 ADSL Router 3.21 has an administration service running on port 254 that does not require a password, which allows remote attackers to cause a denial of service by restoring the factory defaults...