[SECURITY] Fedora 13 Update: bind-dyndb-ldap-0.1.0-0.10.a1.20091210git.fc13

This package provides an LDAP back-end plug-in for BIND. It features support for dynamic updates and internal caching, to lift the load off of your LDAP server...

Foxit Reader 4.1.1 - Local Stack Buffer Overflow

Exploit Title : Foxit 4.1.1 Date : 13/11/2010 Author : Sud0 Bug found by : dookie Original POC : https://www.exploit-db.com/exploits/15514/ Software Link : http://www.foxitsoftware.com/downloads/index.php Version : 4.1.1 OS : Windows Tested on : XP SP3 En VirtualBox Type of vuln : EIP / SEH Thank...

MS10-087 Microsoft Word RTF pFragments Stack Buffer Overflow (File Format)

This module exploits a stack-based buffer overflow in the handling of the 'pFragments' shape property within the Microsoft Word RTF parser. All versions of Microsoft Office 2010, 2007, 2003, and XP prior to the release of the MS10-087 bulletin are vulnerable. This module does not attempt to explo...

VulnCheck KEV: CVE-2010-3962

Microsoft Internet Explorer contains an uninitialized memory corruption vulnerability that could allow for remote code execution. The impacted product could be end-of-life EoL and/or end-of-service EoS. Users should discontinue product utilization...

security update

CentOS Errata and Security Advisory CESA-2010:0817 Merged security bulletin from advisories: https://lists.centos.org/pipermail/centos-announce/2010-November/079303.html Affected packages: Upstream details at: https://access.redhat.com/errata/RHSA-2010:0817...

PT-2010-4128

Name of the Vulnerable Software and Affected Versions SonicWALL SSL-VPN End-Point Interrogator/Installer versions prior to 10.5.2 SonicWALL SSL-VPN End-Point Interrogator/Installer version 10.0.5 before hotfix 3 Description The issue is related to a stack-based buffer overflow in the ActiveX...

CVE-2010-2583: Improper Restriction of Operations within the Bounds of a Memory Buffer

Stack-based buffer overflow in SonicWALL SSL-VPN End-Point Interrogator/Installer ActiveX control Aventail.EPInstaller before 10.5.2 and 10.0.5 hotfix 3 allows remote attackers to execute arbitrary code via long 1 CabURL and 2 Location arguments to the Install3rdPartyComponent method...

Fedora 12 : freetype-2.3.11-6.fc12 (2010-15785)

Mon Oct 4 2010 Marek Kasik 2.3.11-6 - Add freetype-2.3.11-CVE-2010-2805.patch Fix comparison. - Add freetype-2.3.11-CVE-2010-2806.patch Protect against negative stringsize. Fix comparison. - Add freetype-2.3.11-CVE-2010-2808.patch Check the total length of collected POST segments. - Add...

RHEL 3 : redhat-release (EOL Notice) (RHSA-2010:0817)

This is the End Of Life notification for Red Hat Enterprise Linux 3. In accordance with the Red Hat Enterprise Linux Errata Support Policy, the regular 7 year life cycle of Red Hat Enterprise Linux 3 has ended. Red Hat has discontinued the regular subscription services for Red Hat Enterprise Linu...

[SECURITY] Fedora 14 Update: bind-dyndb-ldap-0.1.0-0.14.b.fc14

This package provides an LDAP back-end plug-in for BIND. It features support for dynamic updates and internal caching, to lift the load off of your LDAP server...

RHEL 3 : redhat-release (EOL Notice) (RHSA-2010:0734)

This is the 1-month notification of the End Of Life plans for Red Hat Enterprise Linux 3. In accordance with the Red Hat Enterprise Linux Errata Support Policy, the regular 7 year life cycle of Red Hat Enterprise Linux 3 will end on October 31, 2010. After this date, Red Hat will discontinue the...

CVE-2010-2535

Multiple cross-site scripting XSS vulnerabilities in the Back End in Joomla! 1.5.x before 1.5.20 allow remote authenticated users to inject arbitrary web script or HTML via administrator screens...

CVE-2010-2535: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in the Back End in Joomla! 1.5.x before 1.5.20 allow remote authenticated users to inject arbitrary web script or HTML via administrator screens...

PT-2010-4088

Name of the Vulnerable Software and Affected Versions Joomla! versions 1.5.x through 1.5.19 Description The issue allows remote authenticated users to inject arbitrary web script or HTML via administrator screens in the Back End, due to multiple cross-site scripting XSS vulnerabilities...

security update

CentOS Errata and Security Advisory CESA-2010:0734 Merged security bulletin from advisories: https://lists.centos.org/pipermail/centos-announce/2010-October/079194.html Affected packages: Upstream details at: https://access.redhat.com/errata/RHSA-2010:0734...

D-Link i2eye Video Conference AutoAnswer (WDBRPC)

This module can be used to enable auto-answer mode for the D-Link i2eye video conferencing system. Once this setting has been flipped, the device will accept incoming video calls without acknowledgement. The NetMeeting software included in Windows XP can be used to connect to this device. The i2e...

LM Starmail Paidmail SQLi and RFI Vulnerabilities

LM Starmail Paidmail is prone to SQL injection SQLi and remote file inclusion RFI vulnerabilities. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...

TYPO3 Back-end 'index.php' 'redirect_url' Redirect

The installed version of TYPO3 fails to validate input passed to the 'redirecturl' parameter of the back-end 'index.php' script before issuing a redirect. An attacker can exploit this issue to conduct phishing attacks by tricking users into visiting malicious websites. The installed version is al...

RHEL 3 : redhat-release (EOL Notice) (RHSA-2010:0576)

This is the 3-month notification of the End Of Life plans for Red Hat Enterprise Linux 3. In accordance with the Red Hat Enterprise Linux Errata Support Policy, the regular 7 year life cycle of Red Hat Enterprise Linux 3 will end on October 31, 2010. After this date, Red Hat will discontinue the...

Null pointer dereference

The clientautoresp function in familyicbm.c in the oscar protocol plugin in libpurple in Pidgin before 2.7.2 allows remote authenticated users to cause a denial of service NULL pointer dereference and application crash via an X-Status message that lacks the expected end tag for a 1 desc or 2 titl...