GLSA-201207-06 : JRuby: Denial of Service

The remote host is affected by the vulnerability described in GLSA-201207-06 JRuby: Denial of Service JRuby does not properly randomize hash functions to protect against hash collision attacks. Impact : A remote attacker could send a specially crafted input, possibly resulting in a Denial of...

GLSA-201206-28 : TeX Live: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-201206-28 TeX Live: Multiple vulnerabilities Multiple vulnerabilities have been discovered in texlive-core. Please review the CVE identifiers referenced below for details. Impact : These vulnerabilities might allow user-assisted...

GLSA-201206-35 : nbd: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-201206-35 nbd: Multiple vulnerabilities Multiple vulnerabilities have been discovered in nbd. Please review the CVE identifiers referenced below for details. Impact : nbd allows remote attackers to cause a denial of service NULL...

GLSA-201206-27 : mini_httpd: Arbitrary code execution

The remote host is affected by the vulnerability described in GLSA-201206-27 minihttpd: Arbitrary code execution minihttpd does not properly check for shell escapes when parsing HTTP requests. Impact : A remote attacker could send specially crafted HTTP requests, possibly resulting in execution o...

GLSA-201203-18 : Minitube: Insecure temporary file usage

The remote host is affected by the vulnerability described in GLSA-201203-18 Minitube: Insecure temporary file usage Tom Pruina reported that Minitube does not handle temporary files securely. Impact : A local attacker could perform symlink attacks to overwrite arbitrary files with the privileges...

Oracle Java SE CVE-2012-1723 Remote Code Execution Vulnerability

Description Oracle Java SE is prone to a remote code execution vulnerability in Java Runtime Environment. The vulnerability can be exploited over multiple protocols. This issue affects the 'Hotspot' sub-component. This vulnerability affects the following supported versions: 7 Update 4, 6 Update 3...

Intel CPU Hardware Local Privilege Escalation Vulnerability

Description 64-bit operating systems and virtualization software running on Intel CPU hardware are prone to a local privilege-escalation vulnerability. Attackers can exploit this issue to escalate privileges and execute arbitrary code with kernel-level privileges or to do a guest-to-host virtual...

GLSA-201203-01 : spamdyke: Arbitrary code execution

The remote host is affected by the vulnerability described in GLSA-201203-01 spamdyke: Arbitrary code execution Boundary errors related to the 'snprintf' and 'vsnprintf' functions in spamdyke could cause a buffer overflow. Impact : A remote attacker could possibly execute arbitrary code or cause ...

GLSA-201203-08 : libxslt: Denial of Service

The remote host is affected by the vulnerability described in GLSA-201203-08 libxslt: Denial of Service An out of bounds read error has been found in libxslt/pattern.c in libxslt. Impact : A remote attacker could entice a user to process an XML file using a specially crafted XSLT stylesheet in an...

GLSA-201202-08 : stunnel: Arbitrary code execution

The remote host is affected by the vulnerability described in GLSA-201202-08 stunnel: Arbitrary code execution An unspecified heap vulnerability was discovered in stunnel. Impact : The vulnerability may possibly be leveraged to perform remote code execution or a Denial of Service attack. Workarou...

libpng chunk decompression integer overflow vulnerability

Overview The libpng library contains an integer overflow vulnerability that may allow a remote, unauthenticated attacker to execute arbitrary code on a vulnerable system. Description The Portable Network Graphics PNG image format is used as an alternative to other image formats such as the Graphi...

Oracle Java SE Remote Java Runtime Environment Code Execution Vulnerability

Description Oracle Java SE is prone to a remote code execution vulnerability in Java Runtime Environment. An attacker can exploit this issue to bypass the Java sandbox restriction and execute arbitrary code. This vulnerability affects the following supported versions: 7 Update 2, 6 Update 30, 5.0...

[ GLSA 201201-18 ] bip: Multiple vulnerabilities

Gentoo Linux Security Advisory GLSA 201201-18 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - http://security.gentoo.org/ - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Severity:...

[ GLSA 201201-04 ] Logsurfer: Arbitrary code execution

Gentoo Linux Security Advisory GLSA 201201-04 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - http://security.gentoo.org/ - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Severity:...

GLSA-201201-11 : Firewall Builder: Privilege escalation

The remote host is affected by the vulnerability described in GLSA-201201-11 Firewall Builder: Privilege escalation Two vulnerabilities in Firewall Builder allow the iptables and fwbinstall scripts to use temporary files insecurely. Impact : A local attacker could possibly overwrite arbitrary fil...

GLSA-201201-07 : NX Server Free Edition, NX Node: Privilege escalation

The remote host is affected by the vulnerability described in GLSA-201201-07 NX Server Free Edition, NX Node: Privilege escalation NX Server Free Edition and NX Node use nxconfigure.sh, a setuid script containing an unspecified vulnerability. Impact : A local attacker could gain escalated...

[ GLSA 201111-03 ] OpenTTD: Multiple vulnerabilities

Gentoo Linux Security Advisory GLSA 201111-03 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - http://security.gentoo.org/ - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Severity:...

Adobe Flash Player CVE-2011-2452 Remote Memory Corruption Vulnerability

Description Adobe Flash Player is prone to an unspecified remote memory-corruption vulnerability. An attacker can exploit this issue to execute arbitrary code in the context of the user running the affected application. Failed exploit attempts will likely result in denial-of-service conditions...

[ GLSA 201110-23 ] Apache mod_authnz_external: SQL injection

Gentoo Linux Security Advisory GLSA 201110-23 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - http://security.gentoo.org/ - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Severity:...

GLSA-201110-24 : Squid: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-201110-24 Squid: Multiple vulnerabilities Multiple vulnerabilities have been discovered in Squid. Please review the CVE identifiers referenced below for details. Impact : Remote unauthenticated attackers may be able to execute...