Gentoo Security Advisory GLSA 200807-14 (audit)

The remote host is missing updates announced in advisory GLSA 200807-14. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...

Gentoo Security Advisory GLSA 200710-11 (xfs)

The remote host is missing updates announced in advisory GLSA 200710-11. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...

Gentoo Security Advisory GLSA 200804-03 (openssh)

The remote host is missing updates announced in advisory GLSA 200804-03. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...

Gentoo Security Advisory GLSA 200807-10 (bacula)

The remote host is missing updates announced in advisory GLSA 200807-10. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Gentoo Security Advisory GLSA 200710-11 (xfs)

The remote host is missing updates announced in advisory GLSA 200710-11. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Gentoo Security Advisory GLSA 200710-18 (util-linux)

The remote host is missing updates announced in advisory GLSA 200710-18. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

IBM AIX 'swcons'不安全文件建立漏洞

BUGTRAQ ID: 30999 CNCAN ID：CNCAN-2008090411 IBM AIX是一款商业性质的操作系统。 IBM AIX 'swcons'不安全建立临时文件，本地攻击者可以利用漏洞以ROOT用户建立任意文件，可导致获得超级用户权限。 要运行'swcons'工具，必须本地用户属于'system'组成员。 IBM AIX 6.1 IBM AIX 5.3 IBM AIX 5.2 可参考如下补丁程序： IBM AIX 6.1 IBM IZ18341 http://www.ibm.com/support/docview.wss?uid=isg1IZ18341 IBM...

AIX 6.1 : bos.acct (U817175)

The remote host is missing AIX PTF U817175, which is related to the security of the package bos.acct. The iostat command contains an environment variable handling error. A local attacker may exploit this error to execute arbitrary code with root privileges because the command is setuid root. The...

openSUSE 10 Security Update : kernel (kernel-5339)

This kernel update fixes the following security problems: CVE-2008-2136: A problem in SIT IPv6 tunnel handling could be used by remote attackers to immediately crash the machine. CVE-2008-1615: On x8664 a denial of service attack could be used by local attackers to immediately panic / crash the...

openSUSE 10 Security Update : qemu (qemu-5270)

Local attackers could use raw formatted disk images to access the hosting environment. CVE-2008-2004 has been assigned to this issue. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update qemu-5270...

SuSE 10 Security Update : XEmacs (ZYPP Patch Number 5250)

Xemacs automatically loaded fast-lock files which allowed local attackers to execute arbitrary code as the user editing the associated files. CVE-2008-2142 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc. include'deprecatednasllevel.inc';...

openSUSE 10 Security Update : xemacs-packages (xemacs-packages-5249)

Xemacs automatically loaded fast-lock files which allowed local attackers to execute arbitrary code as the user editing the associated files CVE-2008-2142. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE...

SuSE 10 Security Update : Emacs (ZYPP Patch Number 5248)

Xemacs automatically loaded fast-lock files which allowed local attackers to execute arbitrary code as the user editing the associated files. CVE-2008-2142 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc. include'deprecatednasllevel.inc';...

openSUSE 10 Security Update : emacs (emacs-5247)

Xemacs automatically loaded fast-lock files which allowed local attackers to execute arbitrary code as the user editing the associated files CVE-2008-2142. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE...

PTeX: Multiple vulnerabilities

Background PTeX is a TeX distribution with Japanese support. It is used for creating and manipulating LaTeX documents. Description Multiple issues were found in the teTeX 2 codebase that PTeX builds upon GLSA 200709-17, GLSA 200711-26. PTeX also includes vulnerable code from the GD library GLSA...

[EXPL] SCO UnixWare Merge mcd Local Root (Exploit)

The following security advisory is sent to the securiteam mailing list, and can be found at the SecuriTeam web site: http://www.securiteam.com - - promotion The SecuriTeam alerts list - Free, Accurate, Independent. Get your security news from a reliable source...

Apple Mac OS X 2008-002更新修复多个安全漏洞

BUGTRAQ ID: 28304 CVECAN ID:...

Panda Internet Security/AntiVirus+Firewall 2008 - 'CPoint.sys' Memory Corruption

source: https://www.securityfocus.com/bid/28150/info Panda Internet Security/Antivirus+Firewall 2008 is prone to a vulnerability that allows local attackers to corrupt kernel memory. This vulnerability occurs because the application fails to sufficiently validate IOCTL requests. Local users may...

IPS-1 Updates against Adobe, Microsoft Windows, Microsoft DirectShow and OpenOffice.org Vulnerabilities

Vulnerabilities in versions of Adobe, Microsoft Windows, Microsoft DirectShow and OpenOffice.org would, if exploited, might allow remote or local attackers to execute arbitrary code on a vulnerable system...

Linux Kernel copy_from_user_mmap_sem()函数内存访问漏洞

BUGTRAQ ID: 27796 CVECAN ID: CVE-2008-0010 Linux Kernel是开放源码操作系统Linux所使用的内核。 Linux Kernel的实现上存在漏洞，本地攻击者可能利用此漏洞获取内核内存的敏感信息。 Linux Kernel的fs/splice.c文件中的copyfromusermmapsem函数未经验证用户提供的指针便使用copyfromuserinatomic拷贝了用户进程内存中的数据： ---8--- fs/splice.c:1188 ---8--- partial = copyfromuserinatomicdst, src, n;...