Asterisk - ast_parse_digest() Stack Buffer Overflow (PoC)

Asterisk - astparsedigest Stack Buffer Overflow PoC =========================== Description =========================== There is a remotely exploitable stack buffer overflow in HTTP digest authentication handling in Asterisk. This vulnerability includes the possibility of code execution with plen...

FreeBSD Security Advisory (FreeBSD-SA-11:07.chroot.asc)

The remote host is missing an update to the system as announced in the referenced advisory FreeBSD-SA-11:07.chroot.asc SPDX-FileCopyrightText: 2012 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

Cyberoam Central Console 2.00.2 - Remote File Inclusion

Cyberoam Central Console 2.00.2 - Remote File Inclusion Title: ====== Cyberoam Central Console v2.00.2 - File Include Vulnerability Date: ===== 2012-02-08 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=405 VL-ID: ===== 405 Introduction: ============= Cyberoam Central...

Security fix for the ALT Linux 5 package fetchmail version 6.3.21-alt1.0.M50P.1

Dec. 1, 2011 Gleb Fotengauer-Malinovskiy 6.3.21-alt1.0.M50P.1 - Backport to p5 branch CVE-2011-1947...

osCSS2 "_ID" parameter Local file inclusion

Advisory: osCSS2 "ID" parameter Local file inclusion Advisory ID: SSCHADV2011-034 Author: Stefan Schurtz Affected Software: Successfully tested on osCSS2 2.1.0 latest version Vendor URL: http://oscss.org/ Vendor Status: Fixed in svn branche 2.1.0 and reported in develop version 2.1.1...

osCSS2 2.1.0 Local File Inclusion

Advisory: osCSS2 "ID" parameter Local file inclusion Advisory ID: SSCHADV2011-034 Author: Stefan Schurtz Affected Software: Successfully tested on osCSS2 2.1.0 latest version Vendor URL: http://oscss.org/ Vendor Status: Fixed in svn branche 2.1.0 and reported in develop version 2.1.1...

FreeBSD Security Advisory (FreeBSD-SA-11:04.compress.asc)

The remote host is missing an update to the system as announced in the referenced advisory FreeBSD-SA-11:04.compress.asc ADV FreeBSD-SA-11:04.compress.asc OpenVAS Vulnerability Test $ Description: Auto generated from ADV FreeBSD-SA-11:04.compress.asc Authors: Thomas Reinke Copyright: Copyright c...

Security fix for the ALT Linux 5 package pidgin-mini version 2.10.0-alt0.M50P.1

Oct. 3, 2011 Gleb Fotengauer-Malinovskiy 2.10.0-alt0.M50P.1 - Backport to p5 branch new version, CVE-2011-2485...

Security fix for the ALT Linux 6 package cyrus-imapd version 2.4.11-alt0.M60P.1

Sept. 14, 2011 Andrey Cherepanov 2.4.11-alt0.M60P.1 - Backport to p6 branch fixes CVE-2011-3208...

Security fix for the ALT Linux 5 package pidgin-mini version 2.9.0-alt2.M50P.1

Aug. 23, 2011 Gleb Fotengauer-Malinovskiy 2.9.0-alt2.M50P.1 - backport to p5 branch CVE-2011-2485...

roundcube -- XSS vulnerability

RoundCube development Team reports: We just published a new release which fixes a recently reported XSS vulnerability as an update to the stable 0.5 branch. Please update your installations with this new version or patch them with the fix which is also published in the downloads section or our...

dbus security update

1:1.2.24-5 - Merge changes from RHEL-6 branch: Drop default patch fuzz Merge CVE-2010-4352.patch from RHEL-60-Z - Apply patches for CVE-2011-2200 - Resolves: 725313...

Fedora 14 : apr-1.4.5-1.fc14 (2011-6918)

Move to 1.4.x branch. Various bug fixes since 1.4.2. Security: CVE-2011-0419 Reimplement aprfnmatch from scratch using a non-recursive algorithm; now has improved compliance with the fnmatch spec. Note: 1.4.3 was never officially released. Fix CVE-2011-1928 introduced in 1.4.4. Note that Tenable...

FreeBSD-SA-11:01.mountd

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ============================================================================= FreeBSD-SA-11:01.mountd Security Advisory The FreeBSD Project Topic: Network ACL mishandling in mountd8 Category: core Module: mountd Announced: 2011-04-20 Credits: Ruslan...

Security fix for the ALT Linux 5 package subversion version 1.6.16-alt0.M50P.1

April 18, 2011 Gleb Fotengauer-Malinovskiy 1.6.16-alt0.M50P.1 - Backport to p5 branch fixes CVE-2011-0715...

[SECURITY] Fedora 13 Update: loggerhead-1.18.1-1.fc13

Loggerhead is a WSGI app that provides a web interface to the Bazaar version control system. It can be used to navigate a branch history, view who changed lines in a file, look at patches, and perform searches...

[SECURITY] Fedora 15 Update: loggerhead-1.18.1-1.fc15

Loggerhead is a WSGI app that provides a web interface to the Bazaar version control system. It can be used to navigate a branch history, view who changed lines in a file, look at patches, and perform searches...

Thousands of Bank of America Accounts Hacked !

Thousands of Bank of America customers' account information could be in jeopardy after a major security breach. Christy Clark went to a Royal Oak drug store Friday, but when her debit card was declined, she knew something was wrong. "I was very embarrassed," Clark said. She went straight to the...

Kunena SQL Injection Vulnerability & Information Leakage

Vendor/Product: Kunena Vulnerable Versions: 1.5.14; 1.6.3 Vulnerability Type: SQL Injection & information leakage Risk level: High Vulnerability Details: Because parameterized queries were not used, and adequate input sanitization was not done on the catids parameter on the advanced search page, ...

Ahmedabad Police register FIR in email hacking case !

The city crime branch hasregistered an FIR based on allegation by Rais Khan, a formeraide of social activist Teesta Setalwad, that his emailaccount was hacked. "An FIR has been registered in connection with thealleged hacking of email account of Khan," DCP crime branchHimanshu Shukla told PTI. Th...