[SECURITY] [DSA 1137-1] New tiff packages fix several vulnerabilities

-------------------------------------------------------------------------- Debian Security Advisory DSA 1137-1 [email protected] http://www.debian.org/security/ Martin Schulze August 2nd, 2006 http://www.debian.org/security/faq -...

[SA21279] Sun Fire T2000 Incorrect DSA Signature Verification

---------------------------------------------------------------------- Hardcore Disassembler / Reverse Engineer Wanted! Want to work with IDA and BinDiff? Want to write PoC's and Exploits? Your nationality is not important. We will get you a work permit, find an apartment, and offer a relocation...

Sun Fire T2000 protection bypass

Incorrect DSA signature verification...

CVE-2006-3968

The crypto provider in Sun Solaris 10 3/05 HW2 without patch 121236-01, when running on Sun Fire T2000 platforms, incorrectly verifies a DSA signature, which might prevent applications from detecting that the data has been modified...

CVE-2006-3968

The crypto provider in Sun Solaris 10 3/05 HW2 without patch 121236-01, when running on Sun Fire T2000 platforms, incorrectly verifies a DSA signature, which might prevent applications from detecting that the data has been modified...

CVE-2006-3968

CVE-2006-3968 affects Sun Solaris 10 (3/05 HW2) on Sun Fire T2000 platforms. The crypto provider fails to correctly verify DSA signatures, which might allow data modification to go undetected. Root cause is incorrect DSA signature verification in the Solaris crypto provider when running on affect...

CVE-2006-3968: Undefined Security Weakness

The crypto provider in Sun Solaris 10 3/05 HW2 without patch 121236-01, when running on Sun Fire T2000 platforms, incorrectly verifies a DSA signature, which might prevent applications from detecting that the data has been modified...

DSA-1125 drupal - several

Bulletin has no description...

[SECURITY] [DSA 1123-1] New libdumb packages fix arbitrary code execution

-------------------------------------------------------------------------- Debian Security Advisory DSA 1123-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff July 24th, 2006 http://www.debian.org/security/faq -...

EEYE: McAfee ePolicy Orchestrator Remote Compromise

McAfee ePolicy Orchestrator Remote Compromise Release Date: July 13, 2006 Severity: High Remote Code Execution Vendor: McAfee Systems Affected: McAfee Common Management EPO Agent versions below version 3.5.5.438 Overview: McAfee ePolicy Orchestrator is the remote security management software for...

CentOS 3 / 4 : openssl (CESA-2005:800)

Updated OpenSSL packages that fix various security issues are now available. This update has been rated as having moderate security impact by the Red Hat Security Response Team. OpenSSL is a toolkit that implements Secure Sockets Layer SSL v2/v3 and Transport Layer Security TLS v1 protocols as we...

[SECURITY] [DSA 1101-1] New courier packages fix denial of service

-------------------------------------------------------------------------- Debian Security Advisory DSA 1101-1 [email protected] http://www.debian.org/security/ Martin Schulze June 23rd, 2006 http://www.debian.org/security/faq -...

CVE-2006-2653

Cross-site scripting XSS vulnerability in loginerror.shtml for D-Link DSA-3100 allows remote attackers to inject arbitrary HTML or web script via an encoded uname parameter...

CVE-2006-2653

Cross-site scripting XSS vulnerability in loginerror.shtml for D-Link DSA-3100 allows remote attackers to inject arbitrary HTML or web script via an encoded uname parameter...

CVE-2006-2653

CVE-2006-2653 is an XSS vulnerability in D-Link DSA-3100, specifically in login_error.shtml, allowing remote attackers to inject arbitrary HTML or web scripts via an encoded uname parameter. Affected product: D-Link DSA-3100; vulnerable component: login_error.shtml handling of uname; impact descr...

D-Link Airspot DSA-3100 Gateway - 'Login_error.SHTML' Cross-Site Scripting

source: https://www.securityfocus.com/bid/18168/info The D-Link Airspot DSA-3100 Gateway device is prone to a cross-site scripting vulnerability. This issue is due to a failure to properly sanitize user-supplied input. An attacker may leverage this issue to have arbitrary script code execute in t...

D-Link Airspot DSA-3100 Gateway - Login_error.SHTML Cross-Site Scripting

D-Link Airspot DSA-3100 Gateway - Loginerror.SHTML Cross-Site Scripting source: https://www.securityfocus.com/bid/18168/info The D-Link Airspot DSA-3100 Gateway device is prone to a cross-site scripting vulnerability. This issue is due to a failure to properly sanitize user-supplied input. An...

D-Link DSA-3100 wireless access point crossite scripting

Crossite scriptign with username on authentication page...

CVE-2006-2653: Undefined Security Weakness

Cross-site scripting XSS vulnerability in loginerror.shtml for D-Link DSA-3100 allows remote attackers to inject arbitrary HTML or web script via an encoded uname parameter...

D-Link DSA-3100 Cross-Site Scripting

D-Link DSA-3100 Cross-Site Scripting Tested on D-Link DSA-3100 Discovered by: jaime.blascoateazeldot.es http://www.eazel.es Description: D-Link DSA-3100 Airspot Gateway is vulnerable to a security vulnerability that allow Cross-Site Scripting attacks. Due to improper filtering, a remote attacker...