[BSA-037] Security Update for subversion

Peter Samuelson uploaded new packages for subversion which fixed the following security problems: CVE-2011-1752 Subversions moddavsvn Apache HTTPD server module will dereference a NULL pointer if asked to deliver baselined WebDAV resources...

[SECURITY] [DSA 2275-1] openoffice.org security update

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - ------------------------------------------------------------------------- Debian Security Advisory DSA-2275-1 [email protected] http://www.debian.org/security/ Nico Golde July 7, 2011 http://www.debian.org/security/faq -...

http-google-malware NSE Script

Checks if hosts are on Google's blacklist of suspected malware and phishing servers. These lists are constantly updated and are part of Google's Safe Browsing service. To do this the script queries the Google's Safe Browsing service and you need to have your own API key to access Google's Safe...

CVE-2011-1224

IBM WebSphere MQ 6.0 before 6.0.2.11 and 7.0 before 7.0.1.5 does not use the CRL Distribution Points CDP certificate extension, which might allow man-in-the-middle attackers to spoof an SSL partner via a revoked certificate for a 1 client, 2 queue manager, or 3 application...

Code injection

IBM WebSphere MQ 6.0 before 6.0.2.11 and 7.0 before 7.0.1.5 does not use the CRL Distribution Points CDP certificate extension, which might allow man-in-the-middle attackers to spoof an SSL partner via a revoked certificate for a 1 client, 2 queue manager, or 3 application...

CVE-2011-1224

IBM WebSphere MQ 6.0 before 6.0.2.11 and 7.0 before 7.0.1.5 do not use the CRL Distribution Points (CDP) certificate extension, which might allow man-in-the-middle attackers to spoof an SSL partner via a revoked certificate for a (1) client, (2) queue manager, or (3) application. No further techn...

CVE-2011-1224

IBM WebSphere MQ 6.0 before 6.0.2.11 and 7.0 before 7.0.1.5 does not use the CRL Distribution Points CDP certificate extension, which might allow man-in-the-middle attackers to spoof an SSL partner via a revoked certificate for a 1 client, 2 queue manager, or 3 application...

[SECURITY] [DSA 2273-1] icedove security update

------------------------------------------------------------------------- Debian Security Advisory DSA-2273-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff July 06, 2011 http://www.debian.org/security/faq -...

DSA-2273-3 icedove - multiple issues

Bulletin has no description...

[SECURITY] [DSA 2271-1] curl security update

------------------------------------------------------------------------- Debian Security Advisory DSA-2271-1 [email protected] http://www.debian.org/security/ Giuseppe Iuculano July 02, 2011 http://www.debian.org/security/faq -...

[BSA-038] Security Update for icedove

Christoph Göhre uploaded new packages for icedove which fixed the following security problems: CVE-2011-0083 Use-after-free vulnerability in the nsSVGPathSegList::ReplaceItem function in the implementation of SVG element lists allows remote attackers to cause a denial of service application crash...

Valve Steam Client Application v1559/1559 Local Privilege Escalation

Summary Steam is a digital distribution, digital rights management, multiplayer and communications platform developed by Valve Corporation. It is used to distribute games and related media online, from small independent developers to larger software houses. Steam also has community features,...

Valve Steam Client Application v1559/1559 Local Privilege Escalation

Valve Steam Client Application v1559/1559 Local Privilege Escalation Vendor: Valve Corporation Product web page: http://www.steampowered.com Affected version: Built: Jun 1, 2011 at 15:31:24 Steam API: v010 Steam package versions 1559 / 1559 File version: 1.0.968.628 Summary: Steam is a digital...

Valve Steam Client Application v1559/1559 Local Privilege Escalation

Exploit for windows platform in category local exploits Valve Steam Client Application v1559/1559 Local Privilege Escalation Vendor: Valve Corporation Product web page: http://www.steampowered.com Affected version: Built: Jun 1, 2011 at 15:31:24 Steam API: v010 Steam package versions 1559 / 1559...

Valve Steam Client Application 1559/1559 - Local Privilege Escalation

Valve Steam Client Application v1559/1559 Local Privilege Escalation Vendor: Valve Corporation Product web page: http://www.steampowered.com Affected version: Built: Jun 1, 2011 at 15:31:24 Steam API: v010 Steam package versions 1559 / 1559 File version: 1.0.968.628 Summary: Steam is a digital...

Back-and-Forth to Continue Between Macdefender and Apple

There is a serious game of back-and-forth going on between the security team over at Apple and the developers of the Macdefender malware. As reported by Threatpost, Apple deployed a patch to remedy the troubling fake AV, then shortly after that, the developers of Macdefender altered their methods...

Mandriva Linux Security Advisory : gimp (MDVSA-2011:103)

Multiple vulnerabilities was discovered and fixed in gimp : Stack-based buffer overflow in the 'LIGHTING EFFECTS LIGHT' plugin in GIMP 2.6.11 allows user-assisted remote attackers to cause a denial of service application crash or possibly execute arbitrary code via a long Position field in a plug...

DSA-2249-1 jabberd14 - denial of service

Bulletin has no description...

Hacking Demo On Facebook Photos Leads To Arrest and Privacy Questions

A public demonstration of a weakness in Facebook’s account security has attracted the attention of law enforcement in Australia and raised questions about the ability of social networks to protect user data. Security researcher Christian Heinrich conducted a brute force attack against the Faceboo...

[BSA-036] Security Update for exim4

Andreas Metzler uploaded new packages for exim4 which fixed the following security problems: CVE-2011-1407 command injection attack in DKIM processing code For the lenny-backports distribution the problems have been fixed in version 4.72-6+squeeze2bpo50+1. For the stable distribution squeeze, thi...