CVE-2006-2712

Secure Elements Class 5 AVR aka C5 EVM client and server before 2.8.1 do not verify the integrity of a message digest, which allows remote attackers to modify and replay messages...

CVE-2006-2712

The CVE affects Secure Elements Class 5 AVR (C5 EVM) client and server prior to version 2.8.1. Root cause: lack of verification of the message digest integrity, enabling remote attackers to modify and replay messages. Exploitation stated as remote over a network; no further exploit details or fix...

SUSE Security Announcement: pwdutils, shadow (SUSE-SA:2005:064)

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 SUSE Security Announcement Package: pwdutils, shadow Announcement ID: SUSE-SA:2005:064 Date: Fri, 04 Nov 2005 14:00:00 +0000 Affected Products: SUSE LINUX 10.0 SUSE LINUX 9.3 SUSE LINUX 9.2 SUSE LINUX 9.1 SuSE Linux 9.0 SuSE Linux Desktop 1.0 SuSE Lin...

[Full-disclosure] SUSE Security Announcement: cvs (SUSE-SA:2005:024)

-----BEGIN PGP SIGNED MESSAGE----- SUSE Security Announcement Package: cvs Announcement-ID: SUSE-SA:2005:024 Date: Monday, Apr 18st 2005 13:30 MEST Affected products: 8.2, 9.0, 9.1, 9.2, 9.3 SUSE CORE 9 for x86 SuSE Linux Enterprise Server 8, 9 UnitedLinux 1.0 School-Server 1 Open-Enterprise-Serv...

SuSE-SA:2004:015: cvs

The remote host is missing the patch for the advisory SuSE-SA:2004:015 cvs. The Concurrent Versions System CVS offers tools which allow developers to share and maintain large software projects. Various remotely exploitable conditions have been found during a source code review of CVS done by Stef...

SUSE-SA:2003:042: mysql

The remote host is missing the patch for the advisory SUSE-SA:2003:042 mysql. A remotely exploitable buffer overflow within the authentication code of MySQL has been reported. This allows remote attackers who have access to the 'User' table to execute arbitrary commands as mysql user. The list of...

SuSE-SA:2003:046: sane

The remote host is missing the patch for the advisory SuSE-SA:2003:046 sane. The sane Scanner Access Now Easy package provides access to scanners either locally or remotely over the network. Several bugs in sane were fixed to avoid remote denial-of-service attacks. These attacks can even be...

SUSE-SA:2003:024: openssl

The remote host is missing the patch for the advisory SUSE-SA:2003:024 openssl. Researchers from the University of Stanford have discovered certain weaknesses in OpenSSL's RSA decryption algorithm. It allows remote attackers to compute the private RSA key of a server by observing its timing...

SuSE-SA:2003:044: thttpd

The remote host is missing the patch for the advisory SuSE-SA:2003:044 thttpd. Two vulnerabilities were found in the 'tiny' web-server thttpd. The first bug is a buffer overflow that can be exploited remotely to overwrite the EBP register of the stack. Due to memory-alignment of the stack done by...

SuSE-SA:2004:013: cvs

The remote host is missing the patch for the advisory SuSE-SA:2004:013 cvs. The Concurrent Versions System CVS offers tools which allow developers to share and maintain large software projects. Stefan Esser reported buffer overflow conditions within the cvs program. They allow remote attackers to...

SUSE-SA:2003:028: cups

The remote host is missing the patch for the advisory SUSE-SA:2003:028 cups. The well known Common Unix Printing System CUPS was found vulnerable to a remote Denial of Service attack. The CUPS daemon will stop serving clients if the second carriage return in a request is not sent to complete the...

CVE-2002-0671

Pingtel xpressa SIP-based voice-over-IP phone 1.2.5 through 1.2.7.4 downloads phone applications from a web site but can not verify the integrity of the applications, which could allow remote attackers to install Trojan horse applications via DNS spoofing...

MDKSA-2001:020 - cups update

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Linux-Mandrake Security Update Advisory Package name: cups Date: February 1st, 2001 Advisory ID: MDKSA-2001:020 Affected versions: 7.2 Problem Description: A problem exists in all versions of CUPS prior to 1.1.5 with the httpGets function. It could go...

MDKSA-2000:034 MandrakeUpdate update

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Linux-Mandrake Security Update Advisory Package name: MandrakeUpdate Date: August 12th, 2000 Advisory ID: MDKSA-2000:034 Affected versions: 6.0, 6.1, 7.0, 7.1 Problem Description: There is a possible race condition in MandrakeUpdate that has the...

MDKSA-2000:020 usermode update

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Linux-Mandrake Security Update Advisory Package name: usermode Date: July 18th, 2000 Advisory ID: MDKSA-2000:020 Affected versions: 7.1 Problem Description: A bug existed in the usermode package that permitted users to reboot or halt the system withou...