Microsoft .NET Framework JIT Compiler - Optimization NULL String Remote Code Execution

Microsoft .NET Framework JIT Compiler - Optimization NULL String Remote Code Execution source: https://www.securityfocus.com/bid/47834/info The Microsoft .NET Framework is prone to a remote code-execution vulnerability that affects the Just-In-Time JIT compiler optimization on x86 architectures...

Microsoft .NET Framework JIT Compiler - Optimization NULL String Remote Code Execution

source: https://www.securityfocus.com/bid/47834/info The Microsoft .NET Framework is prone to a remote code-execution vulnerability that affects the Just-In-Time JIT compiler optimization on x86 architectures. Successful exploits may allow an attacker to execute arbitrary code in the context of t...

Low: Red Hat Security Advisory: python security and bug fix update

Updated python packages that fix multiple security issues and three bugs are now available for Red Hat Enterprise Linux 4. The Red Hat Security Response Team has rated this update as having low security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity...

Experts Discuss Stuxnet's Long-Term Impact on Cybersecurity

Stuxnet has both fascinated and horrified the cybersecurity community throughout 2010. Its multiple zero-day exploits, stealth capabilities, and precise control over industrial machinery mark it as a prime example of advanced cyber threats. Stuxnet represents both a nightmare and a dream for...

SuSE 10 Security Update : gzip (ZYPP Patch Number 6793)

The following bug has been fixed : Specially crafted gzip archives could trigger integer overflows. Attackers could exploit that to crash gzip or potentially execute arbitrary code CVE-2010-0001. Only 64bit architectures are affected by this flaw. %NASLMINLEVEL 70300 C Tenable Network Security,...

Security fix for the ALT Linux 9 package openssl10 version 0.9.8o-alt1

Sept. 29, 2010 Dmitry V. Levin 0.9.8o-alt1 - Updated to 0.9.8o fixes CVE-2010-0742. - Fixed ssl/dtls1.h ABI breakage introduced in 0.9.8m. - Fixed 0.9.8m build regression on architectures where %lib != lib...

Debian: Security Advisory (DSA-2023-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Linux Kernel 2.6.x (x64) - Personality Handling Local Denial of Service

source: https://www.securityfocus.com/bid/38027/info The Linux kernel is prone to a local denial-of-service vulnerability. Attackers can exploit this issue to cause the affected kernel to crash, denying service to legitimate users. Versions prior to Linux kernel 2.6.33-rc6 are vulnerable. NOTE:...

SuSE9 Security Update : gzip (YOU Patch Number 12573)

The following bug has been fixed : - Specially crafted gzip archives could trigger integer overflows. Attackers could exploit that to crash gzip or potentially execute arbitrary code. CVE-2010-0001 Only 64bit architectures are affected by this flaw. %NASLMINLEVEL 70300 C Tenable Network Security,...

SuSE 10 Security Update : gzip (ZYPP Patch Number 6792)

The following bug has been fixed : Specially crafted gzip archives could trigger integer overflows. Attackers could exploit that to crash gzip or potentially execute arbitrary code CVE-2010-0001. Only 64bit architectures are affected by this flaw. %NASLMINLEVEL 70300 C Tenable Network Security,...

CentOS 5 : kernel (CESA-2008:1017)

Updated kernel packages that resolve several security issues and fix various bugs are now available for Red Hat Enterprise Linux 5. This update has been rated as having important security impact by the Red Hat Security Response Team. The kernel packages contain the Linux kernel, the core of any...

CentOS 5 : kernel (CESA-2008:0275)

Updated kernel packages that fix various security issues and several bugs are now available for Red Hat Enterprise Linux 5. This update has been rated as having important security impact by the Red Hat Security Response Team. The kernel packages contain the Linux kernel, the core of any Linux...

Windows Command Shell, Reverse All-Port TCP Stager

Spawn a piped command shell staged. Try to connect back to the attacker, on all possible ports 1-65535, slowly This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework module MetasploitModule CachedSize = 282 include...

GLSA-200907-03 : APR Utility Library: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-200907-03 APR Utility Library: Multiple vulnerabilities Multiple vulnerabilities have been discovered in the APR Utility Library: Matthew Palmer reported a heap-based buffer underflow while compiling search patterns in the...

Fedora 10 : apr-util-1.3.7-1.fc10 (2009-5969)

Update to upstream version 1.3.7, see: http://svn.apache.org/repos/asf/apr /apr-util/tags/1.3.7/CHANGES Security fixes: - CVE-2009-0023 Fix underflow in aprstrmatchprecompile. - CVE-2009-1955 Fix a denial of service attack against the aprxml interface using the 'billion laughs' entity expansion...

Fedora 9 : apr-util-1.2.12-7.fc9 (2009-6014)

Backport security fixes from upstream version 1.3.7: - CVE-2009-0023 Fix underflow in aprstrmatchprecompile. - CVE-2009-1955 Fix a denial of service attack against the aprxml interface using the 'billion laughs' entity expansion technique. - CVE-2009-1956 Fix off by one overflow in...

Fedora 11 : apr-util-1.3.7-1.fc11 (2009-6261)

Update to upstream version 1.3.7, see: http://svn.apache.org/repos/asf/apr /apr-util/tags/1.3.7/CHANGES Security fixes: - CVE-2009-0023 Fix underflow in aprstrmatchprecompile. - CVE-2009-1955 Fix a denial of service attack against the aprxml interface using the 'billion laughs' entity expansion...

Q&A: Chris Hoff on cloud computing

Chris Hoff, the former chief security architect at Unisys and the author of the consistently insightful and funny Rational Survivability blog, is among the most sought-after speakers in the security industry and an authority on cloud computing and virtualization security. In this interview, he...

MDVA-2008:006 : openafs

The previous openafs update MDKA-2007:124 was released to correct gcc compiler optimisations, however it only corrected the problem on 32bit platforms. This update fixes it for both 32bit and 64bit architectures. %NASLMINLEVEL 70300 @DEPRECATED@ This script has been deprecated as the associated...

DSA-1777-1 git-core - privilege escalation

Bulletin has no description...