apache-cxf: XML encryption backwards compatibility attacks

Apache CXF 2.5.x before 2.5.10, 2.6.x before CXF 2.6.7, and 2.7.x before CXF 2.7.4 does not verify that a specified cryptographic algorithm is allowed by the WS-SecurityPolicy AlgorithmSuite definition before decrypting, which allows remote attackers to force CXF to use weaker cryptographic...

CentOS Update for firefox CESA-2013:0271 centos6

Check for the Version of firefox OpenVAS Vulnerability Test CentOS Update for firefox CESA-2013:0271 centos6 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under...

Scientific Linux Security Update : firefox on SL5.x, SL6.x i386/x86_64 (20130219)

Several flaws were found in the processing of malformed web content. A web page containing malicious content could cause Firefox to crash or, potentially, execute arbitrary code with the privileges of the user running Firefox. CVE-2013-0775, CVE-2013-0780, CVE-2013-0782, CVE-2013-0783 It was foun...

Scientific Linux Security Update : exim on SL4.x, SL5.x i386/x86_64

A privilege escalation flaw was discovered in Exim. If an attacker were able to gain access to the 'exim' user, they could cause Exim to execute arbitrary commands as the root user. CVE-2010-4345 This update adds a new configuration file, '/etc/exim/trusted-configs'. To prevent Exim from running...

Security Update for Microsoft Silverlight (KB2690729)

This security update to Silverlight includes fixes outlined in KBs 2681578 and 2690729. This update is backward compatible with web applications built using previous versions of Silverlight...

AST-2011-011: Possible enumeration of SIP users due to differing authentication responses

Asterisk Project Security Advisory - AST-2011-011 +------------------------------------------------------------------------+ | Product | Asterisk | |--------------------+---------------------------------------------------| | Summary | Possible enumeration of SIP users due to | | | differing...

SuSE 11.1 Security Update : FUSE (SAT Patch Number 4095)

The following security issues were fixed : - FUSE allowed local users to create mtab entries with arbitrary pathnames, and consequently unmount any filesystem, via a symlink attack on the parent directory of the mountpoint of a FUSE filesystem. CVE-2010-3879 - Avoid mounting a directory including...

SuSE 11.1 Security Update : Libreoffice (SAT Patch Number 4082)

Maintenance update to LibreOffice-3.3.1. It adds some interesting features, fixes many bugs, including several security vulnerabilities. The previous OpenOfficeorg packages are also renamed to libreoffice. LibreOffice is continuation of the OpenOffice.org project. This update replaces the...

Old and Insecure, IE6 Still Popular in the Enterprise

Conventional wisdom has it that Microsoft’s Internet Explorer Web browser is on the way out: succumbing to the death of thousand cuts administered by plucky rivals like Mozilla’s Firefox, Google’s Chrome and even Opera. But data from Web security firm zScaler shows that the Old Blue Lady of the W...

Ubuntu 8.04 LTS / 8.10 : pygresql vulnerability (USN-870-1)

Steffen Joeris discovered that PyGreSQL 3.8 did not use PostgreSQL's safe string and bytea functions in its own escaping functions. As a result, applications written to use PyGreSQL's escaping functions are vulnerable to SQL injections when processing certain multi-byte character sequences. Becau...

DSA-1910-1 mysql-ocaml - missing escape function

Bulletin has no description...

DSA-1911-1 pygresql - missing escape function

Bulletin has no description...

[SECURITY] [DSA 1878-2] New devscripts packages fix regressions

------------------------------------------------------------------------ Debian Security Advisory DSA-1878-2 [email protected] http://www.debian.org/security/ Florian Weimer September 11, 2009 http://www.debian.org/security/faq -...

MDVA-2008:082 : timezone

Automatic mirror geolocation in drakxtools-backend in Mandriva Linux 2008.1 would fail for some locales, because it uses backward compatibility timezone names for which there were no zone.tab entries in timezone bug 40184, this makes software like urpmi to not select optimal mirrors in its...

MDVA-2008:082-1 : timezone

Automatic mirror geolocation in drakxtools-backend in Mandriva Linux 2008.1 would fail for some locales, because it uses backward compatibility timezone names for which there were no zone.tab entries in timezone bug 40184, this makes software like urpmi to not select optimal mirrors in its...

Mandriva Update for timezone MDVA-2008:082 (timezone)

Check for the Version of timezone OpenVAS Vulnerability Test Mandriva Update for timezone MDVA-2008:082 timezone Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it...

Microsoft researching new (secure) browser

Microsoft’s research unit is investing resources in a new Web browser that could eventually signal a shift away from the ubiquitous Internet Explorer. According to a research paper released this week, the project is called Gazelle and is positioned as a secure web browser constructed as a...

Microsoft Internet Explorer 56 Legacy Text Formatting - ActiveX Component Buffer Overflow

Microsoft Internet Explorer 56 Legacy Text Formatting - ActiveX Component Buffer Overflow source: https://www.securityfocus.com/bid/5558/info A buffer overflow vulnerability has been reported in Microsoft Internet Explorer's Legacy Text Formatting ActiveX control. The Legacy Text Formatting Activ...

Microsoft Internet Explorer 5/6 Legacy Text Formatting - ActiveX Component Buffer Overflow

source: https://www.securityfocus.com/bid/5558/info A buffer overflow vulnerability has been reported in Microsoft Internet Explorer's Legacy Text Formatting ActiveX control. The Legacy Text Formatting ActiveX control is used by Internet Explorer to display specially formatted text. Reportedly, t...

SQL Server Feature Pack

The Feature Pack is a collection of standalone install packages that provide additional value for SQL Server. It includes: Latest versions of redistributable components for SQL Server Latest versions of add-on providers for SQL Server Latest versions of backward compatibility components for SQL...