Symantec Ghost: Local access vulnerabilities in Database

SUMMARY Symantec engineers updated the db component to address three local access vulnerabilities discovered in the database installed with Symantec Ghost and the Central Management Console in Symantec Ghost Solutions Suite SGSS 1.0. Exploitation of any of these issues requires physical access to...

CVE-2006-0430

Certain configurations of BEA WebLogic Server and WebLogic Express 9.0, 8.1 through SP5, and 7.0 through SP6, when connection filters are enabled, cause the server to run more slowly, which makes it easier for remote attackers to cause a denial of service server slowdown...

CVE-2006-0432

CVE-2006-0432 concerns BEA WebLogic Server and WebLogic Express 9.0. The available connected documents indicate that when an Administrator uses the WebLogic Administration Console to add custom security policies, incorrect policies can be created, which prevents the server from properly protectin...

CVE-2006-0429

BEA WebLogic Server and WebLogic Express 9.0 causes new security providers to appear active even if they have not been activated by a server reboot, which could cause an administrator to perform inappropriate, security-relevant actions...

CVE-2006-0432

Unspecified vulnerability in BEA WebLogic Server and WebLogic Express 9.0, when an Administrator uses the WebLogic Administration Console to add custom security policies, causes incorrect policies to be created, which prevents the server from properly protecting JNDI resources...

Buffer overflow

Buffer overflow in YGPPicFinder.DLL in AOL You've Got Pictures YGP Picture Finder Tool ActiveX Control, as used in AOL 8.0, 8.0 Plus, and 9.0 Classic, allows remote attackers to execute arbitrary code via unspecified vectors...

CVE-2006-0316

Buffer overflow in YGPPicFinder.DLL in AOL You've Got Pictures YGP Picture Finder Tool ActiveX Control, as used in AOL 8.0, 8.0 Plus, and 9.0 Classic, allows remote attackers to execute arbitrary code via unspecified vectors...

AOL You've Got Pictures ActiveX control buffer overflow

Overview The AOL You've Got Pictures service contains a buffer overflow that may allow a remote attacker to execute arbitrary code or cause a denial-of-service condition. Description AOL You've Got Pictures provides digital photography storage and manipulation services for AOL users. There is a...

SUSE-SA:2005:070: ipsec-tools,freeswan,openswan

The remote host is missing the patch for the advisory SUSE-SA:2005:070 ipsec-tools,freeswan,openswan. Openswan, Freeswan and raccoon ipsec-tools have been updated to fix crashes in aggressive mode. An attacker might send specially crafted packets that can crash racoon or Pluto. The ipsec-tools /...

Slackware 10.0 / 10.1 / 10.2 / 8.1 / 9.0 / 9.1 / current : elm mailer (SSA:2005-311-01)

New Elm packages are available for Slackware 8.1, 9.0, 9.1, 10.0, 10.1, 10.2, and -current to fix a security issue. A buffer overflow in the parsing of the Expires header could allow arbitrary code to be executed as the user running Elm. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The...

imapd

New imapd packages are available for Slackware 8.1, 9.0, 9.1, 10.0, 10.1, 10.2, and -current to fix an alleged security issue. See the details below for more information. Also, new Pine packages are provided since these are built together... why not? Might as well upgrade that too, while I'm fixi...

lynx

New Lynx packages are available for Slackware 8.1, 9.0, 9.1, 10.0, 10.1, 10.2, and -current to fix a security issue. An overflow could result in the execution of arbitrary code when using Lynx to connect to a malicious NNTP server. More details about this issue may be found in the Common...

CVE-2005-3451

Unspecified vulnerability in SQLReportWriter in Oracle Application Server 9.0 up to 9.0.2.1 has unknown impact and attack vectors, as identified by Oracle Vuln AS10...

CVE-2005-3322

CVE-2005-3322 affects Squid running on SUSE Linux 9.0. The issue is described as an unspecified vulnerability that allows remote attackers to cause a denial of service (crash) via HTTPS (SSL). The public sources do not provide a concrete root cause, exploit details, or explicit remediation steps ...

SUSE-SA:2005:016: Mozilla Firefox

The remote host is missing the patch for the advisory SUSE-SA:2005:016 Mozilla Firefox. This security update for Mozilla Firefox fixes following problems: - CVE-2005-0231: 'Fire tabbing' The javascript security manager usually prevents that a javascript: URL from one host is opened in a window...

SUSE-SA:2005:059: RealPlayer

The remote host is missing the patch for the advisory SUSE-SA:2005:059 RealPlayer. The following security issue in RealPlayer was fixed: - A format string bug in the RealPix .rp file format parser CVE-2005-2710. This bug allowed remote attackers to execute arbitrary code by supplying a specially...

Slackware 10.0 / 10.1 / 9.0 / 9.1 / current : gaim (SSA:2005-242-03)

New gaim packages are available for Slackware 9.0, 9.1, 10.0, 10.1, and -current to fix some security issues. including: AIM/ICQ away message buffer overflow AIM/ICQ non-UTF-8 filename crash Gadu-Gadu memory alignment bug Sites that use GAIM should upgrade to the new version. %NASLMINLEVEL 70300 ...

gaim

New gaim packages are available for Slackware 9.0, 9.1, 10.0, 10.1, and -current to fix some security issues. including: AIM/ICQ away message buffer overflow AIM/ICQ non-UTF-8 filename crash Gadu-Gadu memory alignment bug Sites that use GAIM should upgrade to the new version. More details about...

CVE-2002-2089

CVE-2002-2089 is a vulnerability in Solaris 9.0 where the rcp component suffers a buffer overflow, exploitable by a local user via a long command line argument, potentially allowing arbitrary code execution. The description across sources consistently identifies a local-privilege impact with the ...

SUSE-SA:2005:044: kernel

The remote host is missing the patch for the advisory SUSE-SA:2005:044 kernel. The Linux kernel is the core component of the Linux system. This update fixes various security as well as non-security problems discovered since the last round of kernel updates. Not all kernels are affected by all the...