Scientific Linux Security Update : rdma on SL6.x i386/x86_64 (20130221)

A denial of service flaw was found in the way ibacm managed reference counts for multicast connections. An attacker could send specially crafted multicast packets that would cause the ibacm daemon to crash. CVE-2012-4517 It was found that the ibacm daemon created some files with world-writable...

Tunnelblick - Setuid Privilege Escalation (Metasploit)

This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit web site for more information on licensing and terms of use. http://metasploit.com/ require 'msf/core' require 'rex' require 'msf/core/post/common' require...

CVE-2012-4284

creationtimestamp| type| source ---|---|--- 2013-03-05 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/24579 2018-05-29 15:50:33+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/osx/local/setuidviscosity.rb 2025-02-06 03:13:40+00:00| seen|...

RedHat Update for cups RHSA-2013:0580-01

The remote host is missing an update for the SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

Fedora Update for mate-settings-daemon FEDORA-2013-2766

The remote host is missing an update for the SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

RHEL 5 / 6 : openssl (RHSA-2013:0587)

The remote Redhat Enterprise Linux 5 / 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2013:0587 advisory. OpenSSL is a toolkit that implements the Secure Sockets Layer SSL v2/v3 and Transport Layer Security TLS v1 protocols, as well as a...

Debian DSA-2637-1 : apache2 - several issues

Several vulnerabilities have been found in the Apache HTTPD server. - CVE-2012-3499 The modules modinfo, modstatus, modimagemap, modldap, and modproxyftp did not properly escape hostnames and URIs in HTML output, causing cross site scripting vulnerabilities. - CVE-2012-4558 Modproxybalancer did n...

[SECURITY] [DSA 2637-1] apache2 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-2637-1 [email protected] http://www.debian.org/security/ Stefan Fritsch March 04, 2013 http://www.debian.org/security/faq -...

CVE-2012-3411

CVE-2012-3411 affects dnsmasq when used with certain libvirt configurations. Dnsmasq versions earlier than 2.63test1 can reply to requests from prohibited interfaces, enabling a remote attacker to trigger a denial-of-service via a spoofed DNS query (traffic amplification). Public-affecting adviso...

Important: Red Hat Security Advisory: jbosssx security update

An update for JBoss Enterprise BRMS Platform 5.3.1, JBoss Enterprise Portal Platform 4.3.0 CP07 and 5.2.2, and JBoss Enterprise SOA Platform 4.2.0 CP05, and 4.3.0 CP05 which fixes one security issue is now available from the Red Hat Customer Portal. The Red Hat Security Response Team has rated th...

Debian Security Advisory DSA 2637-1 (apache2 - several issues)

Several vulnerabilities have been found in the Apache HTTPD server. CVE-2012-3499 The modules modinfo, modstatus, modimagemap, modldap, and modproxyftp did not properly escape hostnames and URIs in HTML output, causing cross site scripting vulnerabilities. CVE-2012-4558 Modproxybalancer did not...

Fedora 18 : mate-settings-daemon-1.5.4-3.fc18 (2013-2784)

Various bugfixes. Fix CVE2012-5560 mate-settings-daemon-1.5.3-3.fc17 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing...

Fedora 17 : mate-settings-daemon-1.5.4-3.fc17 (2013-2766)

Various bugfixes. Fix CVE2012-5560 mate-settings-daemon-1.5.3-3.fc17 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing...

Debian DSA-2636-2 : xen - several vulnerabilities

Multiple vulnerabilities have been discovered in the Xen hypervisor. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2012-4544 Insufficient validation of kernel or ramdisk sizes in the Xen PV domain builder could result in denial of service. -...

[SECURITY] [DSA 2636-2] xen regression update

------------------------------------------------------------------------- Debian Security Advisory DSA-2636-2 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff March 03, 2013 http://www.debian.org/security/faq -...

RealNetworks RealPlayer URL Parsing Stack Buffer Overflow (CVE-2012-5691)

A stack buffer overflow vulnerability exists in RealNetworks RealPlayer. Successful exploitation can result in arbitrary code execution in the context of the currently logged in user...

Portable SDK for UPnP Devices libupnp Device Service Name Stack Buffer Overflow (CVE-2012-5958)

A stack buffer overflow vulnerability exists in Intel SDK for UPnP and Portable SDK for UPnP. The vulnerability is due to a boundary error while parsing uuid:schemas:device service name strings in the uniqueservicename function called from SSDP protocol parser.Remote unauthenticated attackers can...

Apple iTunes m3u Playlist Multiple Buffer Overflows - High Confidence (CVE-2012-0677)

Multiple buffer overflow vulnerabilities have been reported in Apple iTunes. The vulnerabilities are due to a bounds checking error in iTunes while handling specially crafted .m3u files. A remote attacker can exploit this issue by enticing a target user to open a specially crafted .m3u file with ...

CVE-2012-1016

CVE-2012-1016 affects MIT Kerberos 5 PKINIT in the KDC, where pkinit_server_return_padata may mis-handle an agility KDF check under crafted Draft 9 requests, enabling a remote attacker to trigger a NULL pointer dereference and daemon crash (DoS). Affected: krb5 PKINIT prior to version 1.10.4. Mit...

CVE-2012-6026

The CVE-2012-6026 entry concerns the HTTP Profiler on Cisco Aironet Access Points running software version 15.2 and earlier. The root cause is improper buffer management in the HTTP Profiler, allowing remote attackers to cause a denial of service (device reload) via crafted HTTP requests (Bug ID ...