Microsoft Security Bulletin MS10-083 - Important Vulnerability in COM Validation in Windows Shell and WordPad Could Allow Remote Code Execution (2405882)

Microsoft Security Bulletin MS10-083 - Important Vulnerability in COM Validation in Windows Shell and WordPad Could Allow Remote Code Execution 2405882 Published: October 12, 2010 Version: 1.0 General Information Executive Summary This security update resolves a privately reported vulnerability i...

Microsoft Security Bulletin MS10-073 - Important Vulnerabilities in Windows Kernel-Mode Drivers Could Allow Elevation of Privilege (981957)

Microsoft Security Bulletin MS10-073 - Important Vulnerabilities in Windows Kernel-Mode Drivers Could Allow Elevation of Privilege 981957 Published: October 12, 2010 Version: 1.0 General Information Executive Summary This security update resolves several publicly disclosed vulnerabilities in the...

Fedora 13 : seamonkey-2.0.8-1.fc13 (2010-15115)

Update to new upstream SeaMonkey version 2.0.8, fixing multiple security issues detailed in the upstream advisories : http://www.mozilla.org/security/known-vulnerabilities/seamonkey20.html seamonkey2.0.7 Upstream release notes : - http://www.seamonkey-project.org/releases/seamonkey2.0.8 / -...

LightOpenCMS 'smarty.php' LFI Vulnerability

LightOpenCMS is prone to a local file include LFI vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit this vulnerability to obtain potentially sensitive information and execute arbitrary local scripts in the context of the webserver process. This may...

Fedora 14 : seamonkey-2.0.8-1.fc14 (2010-15135)

Update to new upstream SeaMonkey version 2.0.8, fixing multiple security issues detailed in the upstream advisories : http://www.mozilla.org/security/known-vulnerabilities/seamonkey20.html seamonkey2.0.7 Upstream release notes : - http://www.seamonkey-project.org/releases/seamonkey2.0.8 / -...

MS10-065: Description of the security update for Internet Information Services ASP: September 14, 2010

None None...

Fedora 14 : sunbird-1.0-0.28.b2pre.fc14 / thunderbird-3.1.3-1.fc14 (2010-14396)

Update to new upstream Thunderbird version 3.1.3, fixing multiple security issues detailed in the upstream advisory: http://www.mozilla.org/security /known-vulnerabilities/thunderbird31.htmlthunderbird3.1.3 Update also includes sunbird package rebuilt against new version of Thunderbird. Note that...

Fedora 13 : sunbird-1.0-0.28.b2pre.fc13 / thunderbird-3.1.3-1.fc13 (2010-14351)

Update to new upstream Thunderbird version 3.1.3, fixing multiple security issues detailed in the upstream advisory: http://www.mozilla.org/security /known-vulnerabilities/thunderbird31.htmlthunderbird3.1.3 Update also includes sunbird package rebuilt against new version of Thunderbird. Note that...

Fedora 14 : firefox-3.6.7-1.fc14 / xulrunner-1.9.2.7-2.fc14 (2010-13960)

Update to new upstream Firefox version 3.6.7, fixing multiple security issues detailed in the upstream advisories: http://www.mozilla.org/security/known- vulnerabilities/firefox36.htmlfirefox3.6.7 Note that Tenable Network Security has extracted the preceding description block directly from the...

Multiple Vulnerabilities Found by PROTOS IPSec Test Suite - Cisco Systems

Multiple Cisco products contain vulnerabilities in the processing of IPSec IKE Internet Key Exchange messages. These vulnerabilities were identified by the University of Oulu Secure Programming Group OUSPG "PROTOS" Test Suite for IPSec and can be repeatedly exploited to produce a denial of servic...

Shadowserver Starts Free Binary-Checking Service

A non-profit group that tracks malicious activity online has just started a new free service that enables users to check executable files against a database of known good applications and to help determine whether a given file is malicious. The service, offered by the Shadowserver Foundation, is ...

Microsoft Security Bulletin MS10-050 - Important Vulnerability in Windows Movie Maker Could Allow Remote Code Execution (981997)

Microsoft Security Bulletin MS10-050 - Important Vulnerability in Windows Movie Maker Could Allow Remote Code Execution 981997 Published: August 10, 2010 Version: 1.0 General Information Executive Summary This security update resolves a privately reported vulnerability in Windows Movie Maker. The...

ClearSite RFI Vulnerability (Aug 2010) - Active Check

ClearSite is prone to a remote file include RFI vulnerability because it fails to sufficiently sanitize user-supplied input. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

Microsoft Security Bulletin MS10-055 - Critical Vulnerability in Cinepak Codec Could Allow Remote Code Execution (982665)

Microsoft Security Bulletin MS10-055 - Critical Vulnerability in Cinepak Codec Could Allow Remote Code Execution 982665 Published: August 10, 2010 Version: 1.0 General Information Executive Summary This security update resolves a privately reported vulnerability in Cinepak Codec. The vulnerabilit...

Default Password (0p3nm35h) for 'root' Account

The account 'root' on the remote host has the password '0p3nm35h'. An attacker may leverage this issue to gain total control of the affected system. Note that some network devices are known to use these credentials by default. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. account = "root";...

MS10-024: Description of the security update for Windows SMTP Service: April 13, 2010 and July 13, 2010

None None...

Fedora 11 : java-1.6.0-openjdk-1.6.0.0-34.b17.fc11 (2010-6039)

Add latest security patches. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVEL 70300 C...

Fedora 13 : Miro-2.5.4-3.fc13 / firefox-3.6.2-1.fc13 / galeon-2.0.7-25.fc13 / etc (2010-5202)

Update to new upstream Firefox version 3.6.2, fixing a security issue detailed in the upstream advisory: http://www.mozilla.org/security/known- vulnerabilities/firefox36.htmlfirefox3.6.2 Update also includes all packages depending on gecko-libs rebuilt against new version of Firefox / XULRunner...

Fedora 13 : seamonkey-2.0.5-1.fc13 (2010-10363)

Update to new upstream SeaMonkey version 2.0.5, fixing multiple security issues detailed in the upstream advisories: http://www.mozilla.org/security/known- vulnerabilities/seamonkey20.htmlseamonkey2.0.5 CVE-2010-1121 CVE-2010-1200 CVE-2010-1201 CVE-2010-1202 CVE-2010-1203 CVE-2010-0183...

Google Won't Allow Out-of-Date Chrome Plug-Ins

Google security engineers announced that Chrome would refuse to run plug-ins if they were found to be out of date, and thus, potentially vulnerable to exploitation of known bugs. Read the full article. Computerworld...