USN-1652-1: Linux kernel (Oneiric backport) vulnerabilities

Brad Spengler discovered a flaw in the Linux kernel's uname system call. An unprivileged user could exploit this flaw to read kernel stack memory. CVE-2012-0957 Rodrigo Freire discovered a flaw in the Linux kernel's TCP illinois congestion control algorithm. A local attacker could use this to cau...

USN-1648-1: Linux kernel vulnerabilities

Brad Spengler discovered a flaw in the Linux kernel's uname system call. An unprivileged user could exploit this flaw to read kernel stack memory. CVE-2012-0957 Rodrigo Freire discovered a flaw in the Linux kernel's TCP illinois congestion control algorithm. A local attacker could use this to cau...

USN-1646-1: Linux kernel vulnerabilities

Brad Spengler discovered a flaw in the Linux kernel's uname system call. An unprivileged user could exploit this flaw to read kernel stack memory. CVE-2012-0957 Rodrigo Freire discovered a flaw in the Linux kernel's TCP illinois congestion control algorithm. A local attacker could use this to cau...

USN-1645-1: Linux kernel (OMAP4) vulnerabilities

Brad Spengler discovered a flaw in the Linux kernel's uname system call. An unprivileged user could exploit this flaw to read kernel stack memory. CVE-2012-0957 Dmitry Monakhov reported a race condition flaw the Linux ext4 filesystem that can expose stale data. An unprivileged user could exploit...

USN-1643-1: Perl vulnerabilities

It was discovered that the decodexs function in the Encode module is vulnerable to a heap-based buffer overflow via a crafted Unicode string. An attacker could use this overflow to cause a denial of service. CVE-2011-2939 It was discovered that the 'new' constructor in the Digest module is...

CentOS 5 / 6 : libxml2 (CESA-2012:1512)

Updated libxml2 packages that fix one security issue are now available for Red Hat Enterprise Linux 5 and 6. The Red Hat Security Response Team has rated this update as having important security impact. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating,...

Nagios XI Network Monitor 2011R1.9 SQL Injection Vulnerability

Nagios XI Network Monitor version 2011R1.9 suffers from a remote blind SQL injection vulnerability. ======= Summary ======= Name: Nagios XI Network Monitor - Blind SQL Injection Release Date: 30 November 2012 Reference: NGS00194 Discoverer: Daniel Compton Vendor: Nagios Vendor Reference: 0000282...

Mandriva Linux Security Advisory : libssh (MDVSA-2012:175)

Multiple double free, buffer overflow, invalid free and improper overflow checks vulnerabilities was found and corrected in libssh CVE-2012-4559, CVE-2012-4560, CVE-2012-4561, CVE-2012-4562. The updated packages have been upgraded to the 0.5.3 version which is not affected by these issues...

Symantec Messaging Gateway 9.5 Log File Download Vulnerability

This module will download a file of your choice against Symantec Messaging Gateway. This is possible by exploiting a directory traversal vulnerability when handling the 'logFile' parameter, which will load an arbitrary file as an attachment. Note that authentication is required in order to...

Linux Kernel hypervkvpd 'hv_kvp_daemon.c' Netlink报文处理拒绝服务漏洞

Bugtraq ID:56710 CVE ID:CVE-2012-5532 Linux是一款开源的操作系统。 当处理伪造的Netlink报文时，会导致hypervkvpd退出，本地攻击者可以利用漏洞发送非零nlpid源地址Netlink消息使系统崩溃。 0 Linux kernel 2.6.x 厂商解决方案 用户可参考如下厂商提供的安全公告获得补丁信息： https://git.kernel.org/?p=linux/kernel/git/gregkh/char-misc.git;a=commit;h=95a69adab9acfc3981c504737a2b6578e4d846ef...

Google Chrome < 23.0.1271.95 Multiple Vulnerabilities

The version of Google Chrome installed on the remote host is earlier than 23.0.1271.95 and is, therefore, affected by the following vulnerabilities : - A use-after-free error exists related to media source handling. CVE-2012-5137 - An unspecified error exists related to file path handling...

CVE-2012-5530

The 1 pcmd and 2 pmlogger init scripts in Performance Co-Pilot PCP before 3.6.10 allow local users to overwrite arbitrary files via a symlink attack on a /var/tmp/ temporary file...

CVE-2012-3271

HP iLO3 before 1.50 and iLO4 before 1.13 are affected by an unspecified information-disclosure vulnerability (CVE-2012-3271). Remote attackers could obtain sensitive information via unknown vectors. HP’s security bulletin and multiple vulnerability feeds attribute a CVSS v2 base score of 9.3 (HIG...

CVE-2012-4841

CVE-2012-4841 affects Tivoli Endpoint Manager for Remote Control Broker, versions 8.2 and earlier (up to 8.2.1- TIV-TEMRC821-IF0002). The vulnerability is described as unspecified and allows remote attackers to cause a denial of service through unknown vectors. Connected sources corroborate the t...

CVE-2012-5530

CVE-2012-5530 affects Performance Co-Pilot (PCP) components prior to 3.6.10. The vulnerability arises from the init scripts (pcmd and pmlogger) that allow local users to overwrite arbitrary files via a symlink attack on a /var/tmp/##### temporary file. The issue is specifically tied to the file-s...

SuSE 10 Security Update : Mozilla Firefox (ZYPP Patch Number 8381)

Mozilla Firefox has been updated to the 10.0.11 ESR security release, which fixes various bugs and security issues. - Security researcher miaubiz used the Address Sanitizer tool to discover a series critically rated of use-after-free, buffer overflow, and memory corruption issues in shipped...

libxml2 security update

2.7.6-8.0.1.el63.4 - Update doc/redhat.gif in tarball - Add libxml2-oracle-enterprise.patch and update logos in tarball 2.7.6-8.el63.4 - fix out of range heap access CVE-2012-5134...

CVE-2012-6608

creationtimestamp| type| source ---|---|--- 2012-11-29 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/38078...

Fedora 17 : perl-CGI-3.51-7.fc17 (2012-18318)

Fix CVE-2012-5526 escape new-lines in Set-Cookie and P3P HTTP response headers properly. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible...

Fedora Update for cgit FEDORA-2012-18464

Check for the Version of cgit OpenVAS Vulnerability Test Fedora Update for cgit FEDORA-2012-18464 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms o...