MDVA-2008:082 : timezone

Automatic mirror geolocation in drakxtools-backend in Mandriva Linux 2008.1 would fail for some locales, because it uses backward compatibility timezone names for which there were no zone.tab entries in timezone bug 40184, this makes software like urpmi to not select optimal mirrors in its...

Mandriva Linux Security Advisory : bind (MDVSA-2008:139)

A weakness was found in the DNS protocol by Dan Kaminsky. A remote attacker could exploit this weakness to spoof DNS entries and poison DNS caches. This could be used to misdirect users and services; i.e. for web and email traffic CVE-2008-1447. This update provides the latest stable BIND release...

CVE-2009-1325

creationtimestamp| type| source ---|---|--- 2009-04-13 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/8416 2009-04-13 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/8407 2009-04-13 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/8404 2009-04-13...

Ubuntu Update for linux, linux-source-2.6.15/20/22 vulnerabilities USN-637-1

Ubuntu Update for Linux kernel vulnerabilities USN-637-1 OpenVAS Vulnerability Test $Id: gbubuntuUSN6371.nasl 7969 2017-12-01 09:23:16Z santu $ Ubuntu Update for linux, linux-source-2.6.15/20/22 vulnerabilities USN-637-1 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networ...

Ubuntu Update for bind9 vulnerability USN-622-1

Ubuntu Update for Linux kernel vulnerabilities USN-622-1 OpenVAS Vulnerability Test $Id: gbubuntuUSN6221.nasl 7969 2017-12-01 09:23:16Z santu $ Ubuntu Update for bind9 vulnerability USN-622-1 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH,...

Ubuntu: Security Advisory (USN-637-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Ubuntu: Security Advisory (USN-622-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Update Protections against Recent Malware Threats (22-Mar-09)

The update includes new protections against 2 recent malware threats:iWonBar - iWonBar is a toolbar the hijacks the browser. It alters the Internet Explorer settings unexpectedly, tracks the user web activities and hijacks the user searches to its controlling server...

CVE-2009-1071

creationtimestamp| type| source ---|---|--- 2009-03-18 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/8236 2009-09-10 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/9628...

Burst a few over-active Defense method-vulnerability warning-the black bar safety net

Generally the Trojan is added from the start is antivirus software active defense, or 3 6 0 intercept,a few days ago in an online found several registry since the start of the method,the effect is also good,can be considered currently active Defense of a large Dead Space,even of micro-point turne...

CVE-2009-0545

creationtimestamp| type| source ---|---|--- 2009-02-09 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/8023 2018-05-29 15:50:33+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/unix/webapp/zeroshellexec.rb 2024-10-25 00:00:00+00:00| seen| The...

Surat Diamond Blind SQL Injection

Blind sql injection found at URL: http://www.suratdiamond.com/prodcriteria.aspx Entity: matid Security Risk: It is possible to view, modify or delete database entries and tables Below are the tables found on the database admin uid username userpass 1 admin removed brochureimage Carat CartMaster...

SUSE: Security Advisory for bind (SUSE-SA:2009:005)

The remote host is missing updates announced in advisory SUSE-SA:2009:005. Copyright C 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software...

Ubuntu: Security Advisory (USN-706-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

USN-706-1: Bind vulnerability

It was discovered that Bind did not properly perform signature verification. When DNSSEC with DSA signatures are in use, a remote attacker could exploit this to bypass signature validation to spoof DNS entries and poison DNS caches. Among other things, this could lead to misdirected email and web...

CVE-2008-5783

creationtimestamp| type| source ---|---|--- 2008-11-08 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/7063 2008-11-08 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/7069...

SuSE 10 Security Update : OpenSSH (ZYPP Patch Number 5627)

Due to a faulty signal handler repeated login attempts could exhaust the maximum allowed connections and prevent further logins. CVE-2008-4109 A problem where utmp entries where not deleted when users logged out was also fixed. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text...

Simple PHP Blog config/users.php Arbitrary User Password Hash Disclosure

The version of Simple PHP Blog installed on the remote host allows an unauthenticated, remote attacker to retrieve information about non-admin users defined to the application, including their user names and password hashes, which could in turn be used to gain access to the application. While the...

CVE-2004-1553

creationtimestamp| type| source ---|---|--- 2008-09-03 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/6357 2008-09-10 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/6420...

USN-637-1: Linux kernel vulnerabilities

It was discovered that there were multiple NULL-pointer function dereferences in the Linux kernel terminal handling code. A local attacker could exploit this to execute arbitrary code as root, or crash the system, leading to a denial of service. CVE-2008-2812 The dochangetype routine did not...