8233 matches found
openSUSE Security Update : libmysqlclient-devel (openSUSE-SU-2010:0198-1)
This update fixes several security issues in mysql : - checking server certificates CVE-2009-4028 - error handling in subqueries CVE-2009-4019 - preserving nullvalue flag in GeomFromWKB CVE-2009-4019 - symlink behavior fixed CVE-2008-7247 - symlink behavior refixed CVE-2009-4030 %NASLMINLEVEL 703...
Research Software Secures Hypervisor Behavior
Researchers from North Carolina State University have developed new techniques and software that may be the key to resolving cloud computing and virtualization security concerns and boosting confidence in the sector. Read the full article. ScienceDaily...
Introduction to Malware Analysis
In this video, Lenny Zeltser, a SANS instructor, outlines the basic concepts of reverse engineering malware, describing the process of analyzing the code and the behavior of the malware...
Mandriva Update for rpmdrake MDVA-2010:113 (rpmdrake)
Check for the Version of rpmdrake OpenVAS Vulnerability Test Mandriva Update for rpmdrake MDVA-2010:113 rpmdrake Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it...
Novell eDirectory LDAP NULL Search Parameter Buffer Overflow (CVE-2008-1809)
Novell eDirectory is a set of services based on the Lightweight Directory Access Protocol LDAP. The eDirectory LDAP server uses TCP port 389 for clear text LDAP communication. There exists a heap buffer overflow vulnerability in Novell eDirectory. The flaw is due to an incorrect calculation when...
Microsoft Internet Explorer TIME2 Behavior Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Microsoft Internet Explorer. User interaction is required to exploit this vulnerability in that the target must visit a malicious web page. The issue is located within the CTimeAction object. Durin...
Memory corruption
Use-after-free vulnerability in mstime.dll in Microsoft Internet Explorer 8 allows remote attackers to execute arbitrary code via vectors related to the TIME2 behavior, the CTimeAction object, and destruction of markup, leading to memory corruption, aka "HTML Object Memory Corruption Vulnerabilit...
Solaris Update for behavior 125556-07
Check for the Version of behavior OpenVAS Vulnerability Test Solaris Update for behavior 125556-07 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms ...
Solaris Update for behavior 125556-07
Check for the Version of behavior OpenVAS Vulnerability Test Solaris Update for behavior 125556-07 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms ...
Solaris Update for behavior 125555-07
Check for the Version of behavior OpenVAS Vulnerability Test Solaris Update for behavior 125555-07 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms ...
Solaris Update for behavior 125555-07
Check for the Version of behavior OpenVAS Vulnerability Test Solaris Update for behavior 125555-07 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms ...
2 0 1 0 active and the behavior of the method-vulnerability warning-the black bar safety net
2 0 1 0 active and the behavior of the method Third-generation anti-virus active and the behavior of the powerful not say, in fact, many large cattle are in fact found a method. Just don't put out, a small cool tan through the small bear's Guide is a bat you can get. Coincidence, in the login 97a...
PostNuke ContentExpress Module Blind Sql Injection Vulnerability
Exploit for unknown platform in category web applications ================================================================ PostNuke ContentExpress Module Blind Sql Injection Vulnerability ================================================================ Date: 17/03/2010 Software Link:...
InterWoven WorkDocs XSS Cross-Site Scripting
Interwoven WorkDocs is a document management tool for the enterprise. There is a cross-site scripting vulnerability within Interwoven WorkDocs. It is possible for a malicious attacker to inject script code into malformed URL which may eventually lead to many different attack scenarios including t...
Mandriva Update for xinit MDVA-2010:037 (xinit)
Check for the Version of xinit OpenVAS Vulnerability Test Mandriva Update for xinit MDVA-2010:037 xinit Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...
Mandriva Update for xinit MDVA-2010:037 (xinit)
Check for the Version of xinit OpenVAS Vulnerability Test Mandriva Update for xinit MDVA-2010:037 xinit Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...
kernel: megaraid_sas permissions in sysfs
The dbglvl file for the megaraidsas driver in the Linux kernel before 2.6.27 has world-writable permissions, which allows local users to change the 1 behavior and 2 logging level of the driver by modifying this file...
PT-2010-2253 · Microsoft · Internet Explorer
Name of the Vulnerable Software and Affected Versions: Microsoft Internet Explorer 8 Description: A use-after-free issue allows remote attackers to execute arbitrary code via vectors related to the TIME2 behavior, the CTimeAction object, and destruction of markup, leading to memory corruption. Th...
Some Advice for Howard Schmidt
It’s been little more than 24 hours since President Obama named Howard Schmidt his White House Cybersecurity Coordinator, but it didn’t take nearly that long for just about everyone with any interest in security to line up on one side or the other of the “he has no chance/he’ll save the Internet”...
Yahoo! Messenger File Transfer Filename Spoofing (CVE-2005-0243)
Yahoo Messenger is a service providing instant messages, similar to MSN Messenger and ICQ. Yahoo! Messenger allows users to see when their friends come online, send instant messages, join chat rooms, and exchange files. There exists a vulnerability in the way Yahoo! Messenger displays file names ...