Adobe Flash Media Server未明RPC调用特权提升漏洞

Bugraq ID: 34790 CVE ID：CVE-2009-1365 CNCVE ID：CNCVE-20091365 Adobe Flash Media Server是一款流视频和实时通信领域的解决方案，可提供网上视频直播服务。 Adobe Flash Media Server存在一个未明安全问题，远程攻击者可以利用漏洞以应用程序权限执行任意指令。 目前没有详细漏洞细节提供。 Adobe Flash Media Streaming Server 3.5.1 Adobe Flash Media Server 3.5.1 Adobe Flash Media Server 3.0.3...

Microsoft Office Excel Remote Memory Corruption Vulnerability

Microsoft Office Excel Remote Memory Corruption Vulnerability 2009.April.14 Fortinet's FortiGuard Global Security Research Team Discovers Vulnerability in Microsoft Office Excel. Summary: ======== A memory corruption vulnerability exists in Microsoft Office Excel which allows a remote attacker to...

Ubuntu Update for mysql-dfsg-5.0 vulnerabilities USN-559-1

Ubuntu Update for Linux kernel vulnerabilities USN-559-1 OpenVAS Vulnerability Test $Id: gbubuntuUSN5591.nasl 7969 2017-12-01 09:23:16Z santu $ Ubuntu Update for mysql-dfsg-5.0 vulnerabilities USN-559-1 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH,...

Cisco IOS SSL会话终止远程拒绝服务漏洞

BUGTRAQ ID: 31365 CVE ID: CVE-2008-3798 CNCVE ID：CNCVE-20083798 Cisco IOS是一款流行的网络操作系统。 Cisco IOS在处理SSL会话终止时存在问题，远程攻击者可以利用漏洞对服务进行拒绝服务攻击。 此漏洞不需要合法的信任凭证，如用户名，密码或证书，SSL协议使用TCP作为传输协议，所以需要三次TCP握手完成后来进行此攻击，可减低漏洞的危险性。通过伪造的IP地址可利用此漏洞。 运行基于SSL服务的Cisco IOS软件在进行SSL会话终止时导致服务崩溃。 此漏洞的Cisco bug ID为CSCsj85065，CVE...

Cisco IOS MPLS转发架构远程拒绝服务漏洞

BUGTRAQ ID: 31360 CVE ID: CVE-2008-3804 CNCVE ID：CNCVE-20083804 Cisco IOS是一款流行的网络操作系统。 新版本的Cisco IOS软件中，一种新的报文转发架构提高了可量测性和性能，MFI转发架构针对用户透明。MFI管理用于转发的MPLS数据结构，并用于替代老的LFIB实现。Cisco IOS MFI实现处理特殊构建的报文时存在漏洞，可导致拒绝服务攻击。...

Ingres用户认证非授权访问漏洞

BUGTRAQ ID: 26959 CVECAN ID: CVE-2007-6334 Ingres是很多CA产品默认所使用的数据库后端。 Windows平台上的Ingres数据库为之后连接的用户分配了与第一个连接用户相同的权限和身份，这允许远程攻击者获得非授权访问。仅在运行于Microsoft IIS Web服务器上且启用了集成Windows认证（IWA）选项的情况下才会出现这个漏洞。 Ingres Corporation Ingres Database 2.6 Ingres Corporation Ingres Database 2.5 厂商补丁： Ingres Corporation...

Cisco防火墙服务模块中应用程序检测拒绝服务漏洞

BUGTRAQ ID: 26941 CVE ID：CVE-2007-5584 CNCVE ID:CNCVE-20075584 Cisco Firewall Services Module FWSM是一款思科公司提供的防火墙服务模块，集成在Cisco Catalyst 6500交换机和Cisco 7600系列路由器上。 Cisco Firewall Services Module FWSM包含的第7层应用程序检测处理上存在问题，远程攻击者可以利用漏洞使FWSM模块重载，造成拒绝服务攻击。...

SuSE 10 Security Update : gpg (ZYPP Patch Number 2994)

When printing a text stream with a GPG signature it was possible for an attacker to create a stream with 'unsigned text, signed text' where both unsigned and signed text would be shown without distinction which one was signed and which part wasn't. This is tracked by the Mitre CVE ID CVE-2007-126...

SuSE 10 Security Update : gpg2 (ZYPP Patch Number 1834)

It is possible to crash denial of service the GNU Privacy Guard gpg by supplying a specifically crafted message specifying a very large UID, which leads to an out of memory situation or an integer overflow. It is unclear if this problem can be exploited to execute code. This issue is tracked by t...

SuSE 10 Security Update : mozilla-nss,mozilla-nss-devel (ZYPP Patch Number 2067)

A security problem in the SSL handling of the NSS libraries was found : If an RSA key with exponent 3 is used it may be possible to forge a PKCS verify the certificate if they are not checking for excess data in the RSA exponentiation result of the signature. This bug is tracked by the Mitre CVE ...

openSUSE 10 Security Update : gpg (gpg-1664)

It is possible to crash denial of service the GNU Privacy Guard gpg by supplying a specifically crafted message specifying a very large UID, which leads to an out of memory situation or an integer overflow. It is unclear if this problem can be exploited to execute code. This issue is tracked by t...

openSUSE 10 Security Update : gpg2 (gpg2-1835)

It is possible to crash denial of service the GNU Privacy Guard gpg by supplying a specifically crafted message specifying a very large UID, which leads to an out of memory situation or an integer overflow. It is unclear if this problem can be exploited to execute code. This issue is tracked by t...

openSUSE 10 Security Update : asterisk (asterisk-1676)

A security problem was fixed in the IAX2 channel driver of Asterisk that could be used by remote users to execute code or at least crash Asterisk. This issue is tracked by the Mitre CVE ID CVE-2006-2898. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks ...

[SECURITY] [DSA 1331-1] New php4 packages fix arbitrary code execution

-------------------------------------------------------------------------- Debian Security Advisory DSA 1331-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff July 7th, 2007 http://www.debian.org/security/faq -...

SUSE-SA:2006:043: apache,apache2

The remote host is missing the patch for the advisory SUSE-SA:2006:043 apache,apache2. The following security problem was fixed in the Apache and Apache 2 web servers: modrewrite: Fix an off-by-one security problem in the ldap scheme handling. For some RewriteRules this could lead to a pointer...

SUSE-SA:2006:073: mono-core

The remote host is missing the patch for the advisory SUSE-SA:2006:073 mono-core. Sebastian Krahmer of SUSE Security found that the Mono System.Xml.Serialization class contained a /tmp race which potentially allows local attackers to execute code as the user using the Serialization method. This i...

SUSE-SA:2006:032: sendmail

The remote host is missing the patch for the advisory SUSE-SA:2006:032 sendmail. The Mail Transfer Agent sendmail has a remote exploitable problem, where a specially crafted MIME messages can crash sendmail and block queue processing. This issue is tracked by the Mitre CVE ID CVE-2006-1173 and CE...

CVE-2006-6897

Technical details for CVE-2006-6897 are not publicly provided in the connected documents you supplied. Monitor for updates.

SUSE-SA:2006:025: cyrus-sasl-digestmd5

The remote host is missing the patch for the advisory SUSE-SA:2006:025 cyrus-sasl-digestmd5. If a server or client is using DIGEST-MD5 authentication via the cyrus-sasl libraries it is possible to cause a denial of service attack against the other side client or server by leaving out the 'realm='...

SUSE-SA:2006:016: xorg-x11-server

The remote host is missing the patch for the advisory SUSE-SA:2006:016 xorg-x11-server. A programming flaw in the X.Org X Server allows local attackers to gain root access when the server is setuid root, as is the default in SUSE Linux 10.0. This flaw was spotted by the Coverity project. Only SUS...