SuSE9 Security Update : glibc (YOU Patch Number 12641)

Several security issues were fixed : - Integer overflow causing arbitrary code execution in ld.so --verify mode could be induced by a specially crafted binary. CVE-2010-0830 - The addmntent function would not escape the newline character properly, allowing the user to insert arbitrary newlines to...

Syscan

Asia One of Asia’s premiere security events, Syscan pitches its tent in some of the current and emerging IT capitals in the region, including Singapore, Hangzhou, Taipei, and Ho Chi Minh City with top tier security researchers, Black Hat style presentations, a capture the flag tournament and more...

Spam Botnet Gaining Traction

Upping its output of spam by nearly 5 percent in recent weeks, a new botnet called Festi has grabbed the attention of researchers, cracking the list of top 10 most prolific spamming botnets. The botnet has apparently pumped up the volume of spam by recruiting more bots, about 60 percent of which...

QQ

QQ is a common Instant Messenger in east Asia. QQ Instant Messenger allows instant peer-to-peer file transfers, SMS sending and chatting with online friends. There are cases in which certain traffic, although not intended for malicious use, is very unsafe, since it may transfer shellcode which is...

[Full-disclosure] iDefense Security Advisory 04.17.07: McAfee VirusScan On-Access Scanner Long Unicode File Name Buffer Overflow

McAfee VirusScan On-Access Scanner Long Unicode File Name Buffer Overflow iDefense Security Advisory 04.17.07 http://labs.idefense.com/intelligence/vulnerabilities/ Apr 17, 2007 I. BACKGROUND McAfee VirusScan is an AntiVirus application that offers protection against the latest computer virus...

[Full-disclosure] Lizardtech DjVu Browser Plug-in - Multiple Vulnerabilities

======================================================================== = Lizardtech DjVu Browser Plug-in - Multiple Vulnerabilities = = Vendor Website: = http://www.lizardtech.com/ = = Affected Version: = Windows DjVu Browser Plug-in 6.1.1 = = Public disclosure on February 15th 2007...

Vulnerability in the way [email protected] handles MS-Logon Authentication.

AGR IT Advisory May 2, 2006 AGR-ADV-2006-01 TITLE: Vulnerability in the way [email protected] handles MS-Logon Authentication. Overview Deon Force discovered a vulnerability in Ultr@VNC 1.0.1 and earlier versions with MS-Logon I and MS-Logon II authentication that may allow attackers to crack the...

Design/Logic Flaw

Unspecified vulnerability in the Financials for Asia/Pacific component in Oracle E-Business Suite and Applications 11.5.9 has unknown impact and attack vectors. component, aka Vuln APPS02...

CVE-2006-1881

Unspecified vulnerability in the Financials for Asia/Pacific component in Oracle E-Business Suite and Applications 11.5.9 has unknown impact and attack vectors. component, aka Vuln APPS02...

CVE-2006-1881

Unspecified vulnerability in the Financials for Asia/Pacific component in Oracle E-Business Suite and Applications 11.5.9 has unknown impact and attack vectors. component, aka Vuln APPS02...

CVE-2006-1881

CVE-2006-1881 affects Oracle E-Business Suite and Applications 11.5.9 — Financials for Asia/Pacific component. The vulnerability is described as unspecified with unknown impact and attack vectors (APPS02). The NVD entry lists a high base score (CVSSv2 10.0) but provides no concrete exploitation d...