7229 matches found
RealPlayer 9 *nix Local Privilege Escalation Exploit
No description provided by source. / rp9-priv-esc.c A local privilege escalation attack against the community supported version of Real.com's Realplayer, version 9. Written by: Jon Hart warchild spoofed.org By default, configuration files are stored in $USER/.realnetworks/, but all the files in...
bluez-libs: SDP payload processing vulnerability
src/sdp.c in bluez-libs 3.30 in BlueZ, and other bluez-libs before 3.34 and bluez-utils before 3.34 versions, does not validate string length fields in SDP packets, which allows remote SDP servers to cause a denial of service or possibly have unspecified other impact via a crafted length field th...
[SECURITY] Fedora 8 Update: ruby-gnome2-0.17.0-0.2.rc1.fc8
This is a set of bindings for the GNOME-2.x libraries for use from Ruby...
[SECURITY] Fedora 8 Update: openldap-2.3.39-4.fc8
OpenLDAP is an open source suite of LDAP Lightweight Directory Access Protocol applications and development tools. LDAP is a set of protocols for accessing directory services usually phone book style information, but other information is possible over the Internet, similar to the way DNS Domain...
Design/Logic Flaw
Untrusted search path vulnerability in a certain Red Hat build script for Standards Based Linux Instrumentation for Manageability sblim libraries before 1-13a.el46.1 in Red Hat Enterprise Linux RHEL 4, and before 1-31.el52.1 in RHEL 5, allows local users to gain privileges via a malicious library...
CVE-2008-1951
Untrusted search path vulnerability in a certain Red Hat build script for Standards Based Linux Instrumentation for Manageability sblim libraries before 1-13a.el46.1 in Red Hat Enterprise Linux RHEL 4, and before 1-31.el52.1 in RHEL 5, allows local users to gain privileges via a malicious library...
CVE-2008-1951
CVE-2008-1951 is an untrusted search path vulnerability in sblim libraries on Red Hat Enterprise Linux: an attacker could place a malicious libc.so in a directory in the RPATH under /var/tmp, enabling local privilege escalation. The issue is demonstrated via a malicious libc.so used by tog-pegasu...
sblim: libraries built with insecure RPATH
Untrusted search path vulnerability in a certain Red Hat build script for Standards Based Linux Instrumentation for Manageability sblim libraries before 1-13a.el46.1 in Red Hat Enterprise Linux RHEL 4, and before 1-31.el52.1 in RHEL 5, allows local users to gain privileges via a malicious library...
sblim security update
1.31.0.1.el52.1 - Add oracle-enterprise-release.patch 1.31.el52.1 - Remove RPATH from shared libraries in sblim-cmpi-dns,fsvol,network, nfsv3,nfsv4,samba,syslog and create appropriate record in /etc/ld.so.conf.d CVE-2008-1951 Resolves: 446859...
PT-2008-1074 · Sblim +3 · Sblim-Cmpi-Nfsv3-Test +22
Name of the Vulnerable Software and Affected Versions: sblim-cmpi-base-test versions 1.5.4 through 1.5.5 sblim-cmpi-base-devel versions 1.5.4 through 1.5.5 sblim-cmpi-fsvol-test version 1.4.4 sblim-cmpi-fsvol-devel version 1.4.4 sblim-cmpi-network-test version 1.3.8 sblim-cmpi-network-devel versi...
phpmyadmin -- Cross Site Scripting Vulnerabilities
Secunia report: Some vulnerabilities have been reported in phpMyAdmin, which can be exploited by malicious people to conduct cross-site scripting attacks. Input passed via unspecified parameters to files in /libraries is not properly sanitised before being returned to the user. This can be...
Low: Red Hat Security Advisory: nss_ldap security and bug fix update
An updated nssldap package that fixes a security issue and several bugs is now available. This update has been rated as having low security impact by the Red Hat Security Response Team. The nssldap package contains the nssldap and pamldap modules. The nssldap module is a plug-in which allows...
libvorbis security update
CentOS Errata and Security Advisory CESA-2008:0271-01 Updated libvorbis packages that fix various security issues are now available for Red Hat Enterprise Linux 2.1. This update has been rated as having important security impact by the Red Hat Security Response Team. The libvorbis packages contai...
Fedora 9 : tkimg-1.3-0.10.20080505svn.fc9 (2008-3621)
Mon May 5 2008 Sergio Pascual - 1.3-0.10.20080505svn - New upstream source - Including fooConfig.sh files in -devel - Making symlinks of shared libraries in libdir - Removing file in ld.so.conf.d - Fixing bug 444872 Note that Tenable Network Security has extracted the preceding description block...
cdf3 -- Buffer overflow vulnerability
NASA Goddard Space Flight Center reports: The libraries for the scientific data file format, Common Data Format CDF version 3.2 and earlier, have the potential for a buffer overflow vulnerability when reading specially-crafted invalid CDF files. If successful, this could trigger execution of...
[SECURITY] Fedora 9 Update: libvorbis-1.2.0-4.fc9
Ogg Vorbis is a fully open, non-proprietary, patent- and royalty-free, general-purpose compressed audio format for audio and music at fixed and variable bitrates from 16 to 128 kbps/channel. The libvorbis package contains runtime libraries for use in programs that support Ogg Vorbis...
[SECURITY] Fedora 7 Update: libvorbis-1.1.2-4.fc7
Ogg Vorbis is a fully open, non-proprietary, patent-and royalty-free, general-purpose compressed audio format for audio and music at fixed and variable bitrates from 16 to 128 kbps/channel. The libvorbis package contains runtime libraries for use in programs that support Ogg Voribs...
[SECURITY] Fedora 8 Update: libvorbis-1.2.0-2.fc8
Ogg Vorbis is a fully open, non-proprietary, patent- and royalty-free, general-purpose compressed audio format for audio and music at fixed and variable bitrates from 16 to 128 kbps/channel. The libvorbis package contains runtime libraries for use in programs that support Ogg Vorbis...
libvorbis security update
CentOS Errata and Security Advisory CESA-2008:0270 Updated libvorbis packages that fix various security issues are now available for Red Hat Enterprise Linux 3, 4, and 5. This update has been rated as having important security impact by the Red Hat Security Response Team. The libvorbis packages...