kernel security update

CentOS Errata and Security Advisory CESA-2010:0394 Updated kernel packages that fix multiple security issues, several bugs, and add three enhancements are now available for Red Hat Enterprise Linux 4. The Red Hat Security Response Team has rated this update as having important security impact...

RedHat Update for kernel RHSA-2010:0398-01

Check for the Version of kernel OpenVAS Vulnerability Test RedHat Update for kernel RHSA-2010:0398-01 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the ter...

Memory corruption

The fbComposite function in fbpict.c in the Render extension in the X server in X.Org X11R7.1 allows remote authenticated users to cause a denial of service memory corruption and daemon crash or possibly execute arbitrary code via a crafted request, related to an incorrect macro definition...

libpangoft2 segfaults on forged font files

Array index error in the hbotlayoutbuildglyphclasses function in pango/opentype/hb-ot-layout.cc in Pango before 1.27.1 allows context-dependent attackers to cause a denial of service application crash via a crafted font file, related to building a synthetic Glyph Definition aka GDEF table by usin...

CentOS 5 : xerces-j2 (CESA-2009:1615)

Updated xerces-j2 packages that fix a security issue are now available for Red Hat Enterprise Linux 5. This update has been rated as having moderate security impact by the Red Hat Security Response Team. The xerces-j2 packages provide the Apache Xerces2 Java Parser, a high-performance XML parser....

Internet Explorer CDF Cross Domain Scripting (MS05-014; CVE-2005-0056)

Microsoft Internet Explorer employs the concept of security zones, which enables the browser to apply different security policies based on the origin of the content that is being rendered. For instance, separate restrictions may be set for remote content and for local content. As a rule, Internet...

Moderate: Red Hat Security Advisory: xerces-j2 security update

Updated xerces-j2 packages that fix a security issue are now available for Red Hat Enterprise Linux 5. This update has been rated as having moderate security impact by the Red Hat Security Response Team. The xerces-j2 packages provide the Apache Xerces2 Java Parser, a high-performance XML parser....

Mandriva Update for giftrans MDVA-2008:044 (giftrans)

Check for the Version of giftrans OpenVAS Vulnerability Test Mandriva Update for giftrans MDVA-2008:044 giftrans Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it...

Mandriva Update for giftrans MDVA-2008:044 (giftrans)

Check for the Version of giftrans OpenVAS Vulnerability Test Mandriva Update for giftrans MDVA-2008:044 giftrans Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it...

With GetHashes software get Windows System Hash password value-the value of vulnerability and early warning-the black bar safety net

For an intruder, get the Windows password is the entire attack process is crucial to a ring, have the system the original user password, will enable the network to penetrate and keep control more easily. Windows System Hash password values with LM-HASH and a NTLM-HASH value of the two parts, once...

Design/Logic Flaw

The XML parser in Xerces-C++ before 3.0.0 allows context-dependent attackers to cause a denial of service stack consumption and crash via an XML schema definition with a large maxOccurs value, which triggers excessive memory consumption during validation of an XML file...

Design/Logic Flaw

Software Update in Apple Mac OS X 10.5.1 allows remote attackers to execute arbitrary commands via a man-in-the-middle MITM attack between the client and the server, using a modified distribution definition file with the "allow-external-scripts" option...

CVE-2007-5863

CVE-2007-5863 concerns Apple OS X Software Update (10.5.1) where a MITM between client and server, using a modified distribution definition file with the “allow-external-scripts” option, allows remote command execution. Public sources in the connected set corroborate an Apple OS X Software Update...

CVE-2007-5863

Software Update in Apple Mac OS X 10.5.1 allows remote attackers to execute arbitrary commands via a man-in-the-middle MITM attack between the client and the server, using a modified distribution definition file with the "allow-external-scripts" option...

CVE-2002-2344: Undefined Security Weakness

Ensim WEBppliance 3.0 and 3.1 allows remote attackers to read mail intended for other users by defining an alias that is the target's email address...

Broiler erection of space to upload what the web server is not found-bug warning-the black bar safety net

I'm here to introduce two ultra-compactweb server. 1: a Small HTTP Server v3. 0 3 9 Operating environment: Win95/Win98/Win2000 Size: 93K, little was amazing!!!） Content Description: a compact WEB server, the footprint is very small, support CGI1. 1, SSI, AND PHP. 下载 地址...

CVE-2006-7105

PHP remote file inclusion vulnerability in libs/Smarty.class.php in Smarty 2.6.9 allows remote attackers to execute arbitrary PHP code via a URL in the filename parameter. NOTE: in the original disclosure, filename is used in a function definition, so this report is probably incorrect...

Windows Live OneCare Antivirus Detection

Windows Live OneCare antivirus, a commercial antivirus software package for Windows, is installed on the remote host; however, there is a problem with the install in that either its services are not running, or its engine and/or virus definition are out of date. %NASLMINLEVEL 999999 C Tenable...

Improper access control

Symantec Scan Engine 5.0.0.24, and possibly other versions before 5.1.0.7, stores sensitive log and virus definition files under the web root with insufficient access control, which allows remote attackers to obtain the information via direct requests...

[SA19323] RunIt "chpst" Multiple Groups Handling Security Issue

TITLE: RunIt "chpst" Multiple Groups Handling Security Issue SECUNIA ADVISORY ID: SA19323 VERIFY ADVISORY: http://secunia.com/advisories/19323/ CRITICAL: Less critical IMPACT: Privilege escalation WHERE: Local system SOFTWARE: runit 1.x http://secunia.com/product/8850/ DESCRIPTION: Tino Keitel ha...