openSUSE Security Update : kernel (kernel-951)

This kernel update for openSUSE 11.0 fixes some bugs and several security problems. The following security issues are fixed: A local denial of service problem in the splice2 system call. CVE-2009-1630: The nfspermission function in fs/nfs/dir.c in the NFS client implementation in the Linux kernel...

Fedora 11 : poppler-0.10.7-2.fc11 (2009-6972)

An update to the latest stable upstream release fixing many bugs, as well as addressing several security issues. Release announcement, http://lists.freedesktop.org/archives/poppler/2009-May/004721.html Note that Tenable Network Security has extracted the preceding description block directly from...

CVE-2009-2446

Multiple format string vulnerabilities in the dispatchcommand function in libmysqld/sqlparse.cc in mysqld in MySQL 4.0.0 through 5.0.83 allow remote authenticated users to cause a denial of service daemon crash and possibly have unspecified other impact via format string specifiers in a database...

Dowd, Hawkes Win Google Native Client Attack Contest

Mark Dowd and Ben Hawkes, two well-known security researchers, have won a contest put on by Google to find exploitable security flaws in the company’s Native Client system. The pair discovered 12 exploitable issues, seven more than the next most successful team. Dowd, a researcher in IBM ISS’s...

CVE-2009-2285

Buffer underflow in the LZWDecodeCompat function in libtiff 3.8.2 allows context-dependent attackers to cause a denial of service crash via a crafted TIFF image, a different vulnerability than CVE-2008-2327...

RHEL 4 : kernel (RHSA-2009:1132)

Updated kernel packages that fix several security issues and various bugs are now available for Red Hat Enterprise Linux 4. This update has been rated as having important security impact by the Red Hat Security Response Team. The kernel packages contain the Linux kernel, the core of any Linux...

CVE-2009-2260

stardict 3.0.1, when Enable Net Dict is configured, sends the contents of the clipboard to a dictionary server, which allows remote attackers to obtain sensitive information by sniffing the network...

CVE-2008-6838

Cross-site scripting XSS vulnerability in search.php in Zoph 0.7.2.1 allows remote attackers to inject arbitrary web script or HTML via the off parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

Fedora Core 10 FEDORA-2009-5412 (openssl)

The remote host is missing an update to openssl announced via advisory FEDORA-2009-5412. Note: This VT has been deprecated and is therefore no longer functional. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by th...

Fedora Core 10 FEDORA-2009-5412 (openssl)

The remote host is missing an update to openssl announced via advisory FEDORA-2009-5412. OpenVAS Vulnerability Test $Id: fcore20095412.nasl 6624 2017-07-10 06:11:55Z cfischer $ Description: Auto-generated from advisory FEDORA-2009-5412 openssl Authors: Thomas Reinke Copyright: Copyright c 2009...

Fedora Core 9 FEDORA-2009-5423 (openssl)

The remote host is missing an update to openssl announced via advisory FEDORA-2009-5423. OpenVAS Vulnerability Test $Id: fcore20095423.nasl 6624 2017-07-10 06:11:55Z cfischer $ Description: Auto-generated from advisory FEDORA-2009-5423 openssl Authors: Thomas Reinke Copyright: Copyright c 2009...

Fedora Core 9 FEDORA-2009-5423 (openssl)

The remote host is missing an update to openssl announced via advisory FEDORA-2009-5423. Note: This VT has been deprecated and is therefore no longer functional. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by th...

Fedora Core 11 FEDORA-2009-5452 (openssl)

The remote host is missing an update to openssl announced via advisory FEDORA-2009-5452. Note: This VT has been deprecated and is therefore no longer functional. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by th...

Fedora 11 : openssl-0.9.8k-5.fc11 (2009-5452)

Security update fixing DoS bugs in DTLS code. CVE-2009-1377 CVE-2009-1378 CVE-2009-1379 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible witho...

Fedora 10 : openssl-0.9.8g-14.fc10 (2009-5412)

Security update fixing DoS bugs in DTLS code. CVE-2009-1377 CVE-2009-1378 CVE-2009-1379 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible witho...

CVE-2009-2125: Undefined Security Weakness

deletebug.php in Elvin before 1.2.1 does not require administrative privileges, which allows remote authenticated users to bypass intended access restrictions and delete arbitrary bugs...

openSUSE 10 Security Update : seamonkey (seamonkey-6310)

The Mozilla SeaMonkey browser suite was updated to version 1.1.16, fixing various bugs and security issues : - Security update to 1.1.16 - MFSA 2009-12/CVE-2009-1169 bmo460090,485217 Crash and remote code execution in XSL transformation - MFSA 2009-14/CVE-2009-1303/CVE-2009-1305 Crashes with...

Month of Twitter Bugs Coming in July

A security researcher who specializes in browser and Web 2.0 vulnerabilities plans to use the month of July to expose serious vulnerabilities in the Twitter ecosystem. The Month of Twitter Bugs, a project which launches on July 1, is the handiwork of Aviv Raff. It will disclose a combination of...

Nate Lawson on Crypto Flaws, Web Application Security and Selling Hardware Bugs

Dennis Fisher talks with Nate Lawson of Root Labs about the proliferation of crypto flaws in Web applications and the market for hardware security bugs. Download Subscribe to the Digital Underground podcast on Podcast audio courtesy of sykboy65...

Mozilla Foundation Security Advisory 2009-31

Mozilla Foundation Security Advisory 2009-31 Title: XUL scripts bypass content-policy checks Impact: Low Announced: June 11, 2009 Reporter: Wladimir Palant Products: Firefox, Thunderbird, SeaMonkey Fixed in: Firefox 3.0.11 Description Mozilla add-on developer and community member Wladimir Palant...