4797 matches found
RHEL 4 : mysql (RHSA-2010:0824)
Updated mysql packages that fix three security issues are now available for Red Hat Enterprise Linux 4. The Red Hat Security Response Team has rated this update as having moderate security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity ratings, are...
MySQL: crash when loading data into geometry function PolyFromWKB() (MySQL Bug#51875)
The Gislinestring::initfromwkb function in sql/spatial.cc in MySQL 5.1 before 5.1.51 allows remote authenticated users to cause a denial of service server crash by calling the PolyFromWKB function with Well-Known Binary WKB data containing a crafted number of 1 line strings or 2 line points...
MySQL: crash when loading data into geometry function PolyFromWKB() (MySQL Bug#51875)
The Gislinestring::initfromwkb function in sql/spatial.cc in MySQL 5.1 before 5.1.51 allows remote authenticated users to cause a denial of service server crash by calling the PolyFromWKB function with Well-Known Binary WKB data containing a crafted number of 1 line strings or 2 line points...
[slackware-security] seamonkey
New seamonkey packages are available for Slackware 12.2, 13.0, 13.1, and -current to fix security issues. Here are the details from the Slackware 13.1 ChangeLog: patches/packages/seamonkey-2.0.9-i486-1slack13.1.txz: Upgraded. This release fixes some more security vulnerabilities. For more...
Microsoft Security Bulletin MS10-073 - Important Vulnerabilities in Windows Kernel-Mode Drivers Could Allow Elevation of Privilege (981957)
Microsoft Security Bulletin MS10-073 - Important Vulnerabilities in Windows Kernel-Mode Drivers Could Allow Elevation of Privilege 981957 Published: October 12, 2010 Version: 1.0 General Information Executive Summary This security update resolves several publicly disclosed vulnerabilities in the...
Microsoft Security Bulletin MS10-083 - Important Vulnerability in COM Validation in Windows Shell and WordPad Could Allow Remote Code Execution (2405882)
Microsoft Security Bulletin MS10-083 - Important Vulnerability in COM Validation in Windows Shell and WordPad Could Allow Remote Code Execution 2405882 Published: October 12, 2010 Version: 1.0 General Information Executive Summary This security update resolves a privately reported vulnerability i...
Fedora 13 : seamonkey-2.0.8-1.fc13 (2010-15115)
Update to new upstream SeaMonkey version 2.0.8, fixing multiple security issues detailed in the upstream advisories : http://www.mozilla.org/security/known-vulnerabilities/seamonkey20.html seamonkey2.0.7 Upstream release notes : - http://www.seamonkey-project.org/releases/seamonkey2.0.8 / -...
LightOpenCMS 'smarty.php' LFI Vulnerability
LightOpenCMS is prone to a local file include LFI vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit this vulnerability to obtain potentially sensitive information and execute arbitrary local scripts in the context of the webserver process. This may...
Fedora 14 : seamonkey-2.0.8-1.fc14 (2010-15135)
Update to new upstream SeaMonkey version 2.0.8, fixing multiple security issues detailed in the upstream advisories : http://www.mozilla.org/security/known-vulnerabilities/seamonkey20.html seamonkey2.0.7 Upstream release notes : - http://www.seamonkey-project.org/releases/seamonkey2.0.8 / -...
MS10-065: Description of the security update for Internet Information Services ASP: September 14, 2010
None None...
Fedora 13 : sunbird-1.0-0.28.b2pre.fc13 / thunderbird-3.1.3-1.fc13 (2010-14351)
Update to new upstream Thunderbird version 3.1.3, fixing multiple security issues detailed in the upstream advisory: http://www.mozilla.org/security /known-vulnerabilities/thunderbird31.htmlthunderbird3.1.3 Update also includes sunbird package rebuilt against new version of Thunderbird. Note that...
Fedora 14 : sunbird-1.0-0.28.b2pre.fc14 / thunderbird-3.1.3-1.fc14 (2010-14396)
Update to new upstream Thunderbird version 3.1.3, fixing multiple security issues detailed in the upstream advisory: http://www.mozilla.org/security /known-vulnerabilities/thunderbird31.htmlthunderbird3.1.3 Update also includes sunbird package rebuilt against new version of Thunderbird. Note that...
Fedora 14 : firefox-3.6.7-1.fc14 / xulrunner-1.9.2.7-2.fc14 (2010-13960)
Update to new upstream Firefox version 3.6.7, fixing multiple security issues detailed in the upstream advisories: http://www.mozilla.org/security/known- vulnerabilities/firefox36.htmlfirefox3.6.7 Note that Tenable Network Security has extracted the preceding description block directly from the...
Multiple Vulnerabilities Found by PROTOS IPSec Test Suite - Cisco Systems
Multiple Cisco products contain vulnerabilities in the processing of IPSec IKE Internet Key Exchange messages. These vulnerabilities were identified by the University of Oulu Secure Programming Group OUSPG "PROTOS" Test Suite for IPSec and can be repeatedly exploited to produce a denial of servic...
Shadowserver Starts Free Binary-Checking Service
A non-profit group that tracks malicious activity online has just started a new free service that enables users to check executable files against a database of known good applications and to help determine whether a given file is malicious. The service, offered by the Shadowserver Foundation, is ...
Microsoft Security Bulletin MS10-055 - Critical Vulnerability in Cinepak Codec Could Allow Remote Code Execution (982665)
Microsoft Security Bulletin MS10-055 - Critical Vulnerability in Cinepak Codec Could Allow Remote Code Execution 982665 Published: August 10, 2010 Version: 1.0 General Information Executive Summary This security update resolves a privately reported vulnerability in Cinepak Codec. The vulnerabilit...
Microsoft Security Bulletin MS10-050 - Important Vulnerability in Windows Movie Maker Could Allow Remote Code Execution (981997)
Microsoft Security Bulletin MS10-050 - Important Vulnerability in Windows Movie Maker Could Allow Remote Code Execution 981997 Published: August 10, 2010 Version: 1.0 General Information Executive Summary This security update resolves a privately reported vulnerability in Windows Movie Maker. The...
ClearSite RFI Vulnerability (Aug 2010) - Active Check
ClearSite is prone to a remote file include RFI vulnerability because it fails to sufficiently sanitize user-supplied input. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...
Default Password (0p3nm35h) for 'root' Account
The account 'root' on the remote host has the password '0p3nm35h'. An attacker may leverage this issue to gain total control of the affected system. Note that some network devices are known to use these credentials by default. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. account = "root";...