Debian DSA-2587-1 : libcgi-pm-perl - HTTP header injection

It was discovered that the CGI module for Perl does not filter LF characters in the Set-Cookie and P3P headers, potentially allowing attackers to inject HTTP headers. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from...

Fedora 17 : librdmacm-1.0.17-0.gitc6bfc1c.1.fc17 (2012-19892)

Update to latest upstream version Adds rsocket support Fixes one CVE Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing...

SuSE 10 Security Update : flash-player (ZYPP Patch Number 8395)

This version upgrade of flash-player fixes multiple unspecified code execution vulnerabilities. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if description scriptid63279;...

[SECURITY] [DSA 2589-1] tiff security update

------------------------------------------------------------------------- Debian Security Advisory DSA-2589-1 [email protected] http://www.debian.org/security/ December 16, 2012 http://www.debian.org/security/faq - -------------------------------------------------------------------------...

[SECURITY] [DSA 2588-1] icedove security update

------------------------------------------------------------------------- Debian Security Advisory DSA-2588-1 [email protected] http://www.debian.org/security/ December 16, 2012 http://www.debian.org/security/faq - -------------------------------------------------------------------------...

Exim DKIM DNS Decoding Buffer Overflow (CVE-2012-5671)

A heap buffer overflow vulnerability has been reported in Exim DKIM...

Apache HTTP Server mod_rpaf Denial of Service (CVE-2012-3526)

A denial of service vulnerability has been reported in Apache's HTTP Server...

lighttpd Connection Header Parsing Denial of Service (CVE-2012-5533)

A denial-of-service vulnerability has been reported in lighttpd...

Mozilla Firefox Cross Domain Information Disclosure (CVE-2012-4192)

An information disclosure vulnerability has been reported in Mozilla Firefox. The vulnerability is due to a design weakness when handling a cross domain object. A remote attacker can exploit the vulnerability by enticing a user to open a specially crafted web page with an affected version of...

Apple QuickTime Targa File Buffer Overflow (CVE-2012-3755)

A buffer overflow vulnerability has been reported in Apple QuickTime. The vulnerability is due to a bounds-checking error. A remote attacker can exploit this vulnerability by enticing a user to process a specially crafted Targa file. Successful exploitation may lead to arbitrary code execution...

Apple QuickTime TeXML Style Element Text Specification Buffer Overflow (CVE-2012-3752)

A buffer overflow vulnerability has been reported in Apple QuickTime...

CA ARCserve Backup Authentication Service Denial of Service (CVE-2012-2972)

A denial of service vulnerability has been reported in the CA ARCserve Backup authentication service...

Trend Micro InterScan Messaging Security Suite Cross-site Scripting (CVE-2012-2995)

A cross-site-scripting vulnerability has been reported in Trend Micro InterScan Messaging Security Suite...

Adobe Flash Player OP_inclocal and OP_declocal Memory Corruption (APSB12-22; CVE-2012-5271)

A memory corruption vulnerability has been reported in Adobe Flash Player...

Symantec Messaging Gateway Directory Traversal (CVE-2012-4347)

Two directory traversal vulnerabilities exist in Symantec Messaging Gateway...

Novell File Reporter SRS Arbitrary File Retrieval (CVE-2012-4957)

A file retrieval vulnerability has been reported in Novell File Reporter. The vulnerability is due to lack of authorization on certain requests. A remote attacker can exploit this issue by sending a specially crafted request to the affected service. Successful exploitation could result in arbitra...

Adobe Photoshop PNG Image Processing Buffer Overflow (APSB12-20; CVE-2012-4170)

A heap buffer overflow vulnerability has been reported in Adobe Photoshop CS6...

TWiki 5.1.2 Command Execution

This security advisory alerts you of a potential security issue with TWiki installations: The %MAKETEXT% TWiki variable allows arbitrary shell command execution. The problem is caused by an underlying security issue in the Locale::Maketext CPAN module. Vulnerable Software Version Attack Vectors...

openSUSE: Security Advisory for Chromium (openSUSE-SU-2012:1637-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora Update for squashfs-tools FEDORA-2012-19227

Check for the Version of squashfs-tools OpenVAS Vulnerability Test Fedora Update for squashfs-tools FEDORA-2012-19227 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify ...