CentOS Update for java CESA-2013:0165 centos5

The remote host is missing an update for the SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

Fedora 17 : php-ZendFramework-1.12.1-1.fc17 (2013-0057)

Fixes for security relevant issue CVE-2012-5657 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues...

vino security update

2.28.1-8 - Remove spurious 'e' from glib2-devel requirement 2.28.1-7 - Bump version number 2.28.1-6 - Bump version number 2.28.1-5 - Add reachability.patch Remove UI about whether the is only reachable locally or not. Fix for CVE-2011-1164 - Bug 553477 2.28.1-5 - Add upnp.patch Fix for...

Digium Asterisk HTTP Management Interface Stack Overflow (CVE-2012-5976; CVE-2013-2686)

A stack overflow vulnerability has been reported in Digium Asterisk. The vulnerability is due to an unchecked memory allocation on the stack, which can result in a stack overflow or writing of attacker-controlled data to arbitrary memory locations. A remote attacker can use this vulnerability by...

CVE-2012-6113

This CVE affects PHP 5.3.9–5.3.13 where the openssl_encrypt() code path in ext/openssl/openssl.c fails to initialize a variable, enabling a remote attacker to read sensitive memory contents by supplying zero-length input data. The issue is a memory disclosure vulnerability. Public references indi...

CVE-2012-5185

Directory traversal vulnerability in the Olive Toast Documents Pro File Viewer formerly Files HD app before 1.11.1 for iOS allows remote attackers to read or delete files by leveraging guest access...

CVE-2012-6396

Cisco NX-OS on Nexus 7000 series switches has a vulnerability where improper handling of certain line-card replacements can allow remote authenticated users to cause a denial of service (memory consumption) by crafting a configuration that references interfaces that do not exist on the new card (...

CVE-2012-5184

Documents Pro (Olive Toast Software Ltd) for iOS is affected by a Cross-site scripting (XSS) vulnerability in the file viewer prior to version 1.11.1. The issue allows an attacker to inject arbitrary web script or HTML via unspecified vectors when the app is used through a web browser, potentiall...

CVE-2012-5185

CVE-2012-5185 affects Olive Toast Documents Pro (formerly Files HD) on iOS, prior to version 1.11.1, via a directory traversal vulnerability that lets a guest user read or delete files. Root cause is improper path handling exposing file system access. Affected product versions: Documents Pro/File...

[SECURITY] [DSA 2605-2] asterisk regression update

------------------------------------------------------------------------- Debian Security Advisory DSA-2605-2 [email protected] http://www.debian.org/security/ Thijs Kinkhorst January 19, 2013 http://www.debian.org/security/faq -...

CVE-2012-6395

Cisco ASA devices running firmware 8.4 are affected by an input validation issue for UNC share pathnames. The vulnerability allows remote authenticated users to trigger a denial of service (device crash) due to improper validation of unspecified input. No explicit exploit details are provided in ...

CVE-2012-6359

IBM TFIM and TFIMBG are affected by CVE-2012-6359: versions 6.2.0 before 6.2.0.11, 6.2.1 before 6.2.1.3, and 6.2.2 before 6.2.2.2 do not verify that OpenID attributes are signed in SREG/AX, allowing unsigned attributes to be inserted and potentially spoofed by an attacker. The issue can be exploi...

CVE-2012-6360

CVE-2012-6360 affects IBM Intelligent Operations Center (IOC) 1.5.0. The issue is a cross-site scripting (XSS) vulnerability where incoming event data fields can inject arbitrary JavaScript/HTML, leading to potential web UI script execution. IBM describes the affected product as IOC version 1.5.0...

CVE-2012-5717

CVE-2012-5717 affects Cisco ASA devices running firmware 8.x through 8.4(1). The issue is a flaw in the management of remote SSH sessions, allowing an authenticated remote user to cause a denial of service by establishing multiple concurrent SSH sessions, potentially crashing the device. Connecte...

CVE-2012-6088

The rpmpkgRead function in lib/package.c in RPM 4.10.x before 4.10.2 does not return an error code in certain situations involving an "unparseable signature," which allows remote attackers to bypass RPM signature checks via a crafted package...

CVE-2012-2124

functions/imapgeneral.php in SquirrelMail, as used in Red Hat Enterprise Linux RHEL 4 and 5, does not properly handle 8-bit characters in passwords, which allows remote attackers to cause a denial of service disk consumption by making many IMAP login attempts with different usernames, leading to...

CVE-2012-5656

CVE-2012-5656 concerns Inkscape ≤ 0.48.3 (up to 0.48.4) where the rasterization of SVGs can be abused via an XML external entity (XXE) in a crafted SVG, allowing a local attacker to read arbitrary files. The issue stems from the rasterization path processing external entities. Public advisories c...

CVE-2012-5531

CVE-2012-5531 : Multiple cross-site scripting (XSS) vulnerabilities in GateIn Portal, part of JBoss Enterprise Portal Platform 5.2.2. The issues allow remote attackers to inject arbitrary script/HTML via unspecified vectors. Public references indicate a Red Hat security update (RHSA-2013-0141) ad...

CVE-2012-5875

CVE-2012-5875 affects Firefly Media Server 1.0.0.1359. The issue is a NULL pointer dereference caused by improper handling of HTTP headers (Connection, Accept-Language, User-Agent, Host, protocol version, and HTTP protocol version), enabling remote denial of service. Exploitation details are desc...

CVE-2012-2124

CVE-2012-2124 affects SquirrelMail’s imap_general.php used in RHEL 4/5; improper handling of 8-bit password characters allows remote attackers to cause DoS by spamming IMAP login attempts, creating many preference files. Root cause: an incorrect fix for CVE-2010-2813. Mitigation/fix references ap...