CVE-2009-0362

filter.d/wuftpd.conf in Fail2ban 0.8.3 uses an incorrect regular expression that allows remote attackers to cause a denial of service forced authentication failures via a crafted reverse-resolved DNS name rhost entry that contains a substring that is interpreted as an IP address, a different...

Important: Red Hat Security Advisory: kernel security and bug fix update

Updated kernel packages that resolve several security issues and fix various bugs are now available for Red Hat Enterprise Linux 5. This update has been rated as having important security impact by the Red Hat Security Response Team. The kernel packages contain the Linux kernel, the core of any...

SWAT 4 - Multiple Denial of Service Vulnerabilities

// source: https://www.securityfocus.com/bid/30299/info SWAT 4 is prone to multiple remote denial-of-service vulnerabilities because the application fails to properly handle certain input. An attacker may exploit these issues to crash the affected application, denying service to legitimate users...

vsftpd security and bug fix update

2.0.5-12 - fix CVE-2007-5962: vsftpd memory leak when denyfile option is set - Resolves: 423001 2.0.5-11 - add new option to log login failures based on user list - Resolves: 345791 - fix userconfigdir option - Resolves: 400921 - allow usernames starting with '' or '.' - Resolves: 386561 - fix th...

Important: Red Hat Security Advisory: Red Hat Directory Server 7.1 Service Pack 4 security update

Red Hat Directory Server 7.1 Service Pack 4: an updated redhat-ds package that fixes a security issue and several bugs is now available. This update has been rated as having important security impact by the Red Hat Security Response Team. Red Hat Directory Server is an LDAPv3 compliant server. It...

Debian Security Advisory DSA 1456-1 (fail2ban)

The remote host is missing an update to fail2ban announced via advisory DSA 1456-1. OpenVAS Vulnerability Test $Id: deb14561.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 1456-1 fail2ban Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc...

Debian Security Advisory DSA 784-1 (courier)

The remote host is missing an update to courier announced via advisory DSA 784-1. A problem has been discovered in the Courier Mail Server. DNS failures were not handled properly when looking up Sender Policy Framework SPF records, which could allow attackers to cause memory corruption. The defau...

[SECURITY] Fedora 7 Update: fail2ban-0.8.0-9.fc7

Fail2ban scans log files like /var/log/pwdfail or /var/log/apache/errorlog and bans IP that makes too many password failures. It updates firewall rules to reject the IP address...

kernel security update

CentOS Errata and Security Advisory CESA-2007:0347 Updated kernel packages that fix security issues and bugs in the Red Hat Enterprise Linux 5 kernel are now available. This update has been rated as having important security impact by the Red Hat Security Response Team. The Linux kernel handles t...

CVE-2007-1724

Unspecified vulnerability in ReactOS 0.3.1 has unknown impact and attack vectors, related to a fix for "dozens of win32k bugs and failures," in which the fix itself introduces a vulnerability, possibly related to user-mode and kernel-mode copy failures...

CVE-2007-1724

Unspecified vulnerability in ReactOS 0.3.1 has unknown impact and attack vectors, related to a fix for "dozens of win32k bugs and failures," in which the fix itself introduces a vulnerability, possibly related to user-mode and kernel-mode copy failures...

CVE-2007-1724

Technical details about CVE-2007-1724 are not publicly provided in the supplied documents; the connected sources describe an unspecified ReactOS vulnerability with unknown impact and no concrete vectors. Monitor for updates.

Fedora Core 6 : texinfo-4.8-14.fc6 (2006-1203)

Sun Nov 5 2006 Miloslav Trmac - 4.8-14 - Remove off-line sorting from texindex fixes CVE-2006-4810 - Mon Oct 9 2006 Miloslav Trmac - 4.8-13 - Don't use mode 0666 for the texindex temporary files - Mon Oct 9 2006 Miloslav Trmac - 4.8-12 - Don't leave around temporary files used by texindex - Add...

DeluxeBB mutiple vulnerabilities

====================================================================== Advisory : DeluxeBB mutiple vulnerabilities Release Date : July 18th, 2006 Application : DeluxeBB Version : Deluxe 1.07 and previous versions Platform : PHP Vendor URL : http://www.deluxebb.com/ Authors : Jessica Hope...

CVE-2006-3378

passwd command in shadow in Ubuntu 5.04 through 6.06 LTS, when called with the -f, -g, or -s flag, does not check the return code of a setuid call, which might allow local users to gain root privileges if setuid fails in cases such as PAM failures or resource limits...

CVE-2006-3378

passwd command in shadow in Ubuntu 5.04 through 6.06 LTS, when called with the -f, -g, or -s flag, does not check the return code of a setuid call, which might allow local users to gain root privileges if setuid fails in cases such as PAM failures or resource limits...

DEBIAN-CVE-2006-3378

passwd command in shadow in Ubuntu 5.04 through 6.06 LTS, when called with the -f, -g, or -s flag, does not check the return code of a setuid call, which might allow local users to gain root privileges if setuid fails in cases such as PAM failures or resource limits...

CentOS 4 : mysql (CESA-2006:0544)

Updated mysql packages that fix multiple security flaws are now available. This update has been rated as having important security impact by the Red Hat Security Response Team. MySQL is a multi-user, multi-threaded SQL database server. MySQL is a client/server implementation consisting of a serve...

rasman.pm.txt

This file is part of the Metasploit Framework and may be redistributed according to the licenses defined in the Authors field below. In the case of an unknown or missing license, this file defaults to the same license as the core Framework dual GPLv2 and Artistic. The latest version of the...

RHEL 4 : mysql (RHSA-2006:0544)

Updated mysql packages that fix multiple security flaws are now available. This update has been rated as having important security impact by the Red Hat Security Response Team. MySQL is a multi-user, multi-threaded SQL database server. MySQL is a client/server implementation consisting of a serve...