SuSE 11 Security Update : Linux kernel (SAT Patch Numbers 1212 / 1218 / 1219)

The SUSE Linux Enterprise 11 Kernel was updated to 2.6.27.29 fixing various bugs and security issues. The following security issues were fixed : - A missing NULL pointer check in the socket sendpage function can be used by local attackers to gain root privileges. CVE-2009-2692 - A kernel stack...

Insecure Saving Of Downloadable File In Mozilla Firefox (Linux)

This host is installed with Mozilla Firefox and is prone to insecure saving of downloadable file. OpenVAS Vulnerability Test $Id: secpodfirefoxinsecuresavingdownloadfile.nasl 5055 2017-01-20 14:08:39Z teissa $ Insecure Saving Of Downloadable File In Mozilla Firefox Linux Authors: Sharath S...

Linux Kernel 2.6.31 - perf_counter_open() Local Buffer Overflow

Linux Kernel 2.6.31 - perfcounteropen Local Buffer Overflow source: https://www.securityfocus.com/bid/36423/info The Linux kernel is prone to a local buffer-overflow vulnerability because it fails to perform adequate boundary checks on user-supplied data. Local attackers may be able to exploit th...

McAfee SmartFilter信息泄漏漏洞

Bugraq ID: 35756 CVE ID：CVE-2009-2312 CVE-2009-2429 CNCVE ID：CNCVE-20092312 CNCVE-20092429 McAfee SmartFilter是一款网站过滤解决方案。 McAfee SmartFilter存在设计问题，本地攻击者可以利用漏洞获得敏感信息。 用于proxy服务器验证的SmartFilter user ID的用户名和明文文本密码保存在c:\Program Files\Secure Computing\Smartfilter...

openSUSE Security Update : sblim-sfcb (sblim-sfcb-505)

A tmp file race condition in the genSslCerts.sh helper script could be used by local attackers to gain root privileges. CVE-2009-0416 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update...

openSUSE Security Update : gtk2 (gtk2-583)

A SUSE specific patch to GTK2 accidentally added a relative search path for gtk modules therefore allowed local attackers have gtk programs load modules from untrusted places CVE-2009-0848. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin...

Microsoft Virtual PC and Virtual Server Privilege Escalation Vulnerability

Description Microsoft Virtual PC and Virtual Server are prone to a privilege-escalation vulnerability caused by an error in decoding privileged instructions. Note that this issue affects only systems that do not use hardware-assisted virtualization. Successful exploits may allow local attackers t...

ClamAV 'clamav-milter' Initscript文件权限漏洞

Bugraq ID: 34818 CNCAN ID：CNCAN-2009050603 ClamAV是一款基于unix下的反病毒应用程序。 ClamAV 'clamav-milter' Initscript文件权限设置存在问题，本地攻击者可以利用漏洞进行拒绝服务攻击。 攻击者可以利用漏洞修改部分目录下的文件，导致影响系统完整性并对系统进行进一步攻击。 Clam Anti-Virus ClamAV 0.95.1 厂商解决方案 Ubuntu系统用户可参考如下升级程序： Ubuntu Ubuntu Linux 9.04 amd64 Ubuntu...

PostgreSQL Low Cost Function Information Disclosure Vulnerability

PostgreSQL is prone to an information disclosure vulnerability. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Mandriva Linux Security Advisory : kernel (MDVSA-2008:043)

A flaw in the vmsplice system call did not properly verify address arguments passed by user-space processes, which allowed local attackers to overwrite arbitrary kernel memory and gain root privileges. Mandriva urges all users to upgrade to these new kernels immediately as this flaw is being...

Debian Security Advisory DSA 1767-1 (multipath-tools)

The remote host is missing an update to multipath-tools announced via advisory DSA 1767-1. OpenVAS Vulnerability Test $Id: deb17671.nasl 6615 2017-07-07 12:09:52Z cfischer $ Description: Auto-generated from advisory DSA 1767-1 multipath-tools Authors: Thomas Reinke Copyright: Copyright c 2009...

Debian: Security Advisory (DSA-1767-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] [DSA 1767-1] New multipath-tools packages fix denial of service

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - -------------------------------------------------------------------------- Debian Security Advisory DSA-1767-1 [email protected] http://www.debian.org/security/ Nico Golde April 9th, 2009 http://www.debian.org/security/faq -...

[SECURITY] [DSA 1767-1] New multipath-tools packages fix denial of service

-------------------------------------------------------------------------- Debian Security Advisory DSA-1767-1 [email protected] http://www.debian.org/security/ Nico Golde April 9th, 2009 http://www.debian.org/security/faq -...

Mandriva Update for kernel MDVSA-2008:043 (kernel)

Check for the Version of kernel OpenVAS Vulnerability Test Mandriva Update for kernel MDVSA-2008:043 kernel Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under t...

Gentoo Security Advisory GLSA 200903-41 (gedit)

The remote host is missing updates announced in advisory GLSA 200903-41. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...

PostgreSQL 8.3.6 - Low Cost Function Information Disclosure

source: https://www.securityfocus.com/bid/34069/info PostgreSQL is prone to an information-disclosure vulnerability. Local attackers can exploit this issue to obtain sensitive information that may lead to further attacks. PostgreSQL 8.3.6 is vulnerable; other versions may also be affected. CREATE...

PostgreSQL 8.3.6 - Low Cost Function Information Disclosure

PostgreSQL 8.3.6 - Low Cost Function Information Disclosure source: https://www.securityfocus.com/bid/34069/info PostgreSQL is prone to an information-disclosure vulnerability. Local attackers can exploit this issue to obtain sensitive information that may lead to further attacks. PostgreSQL 8.3....

Mandrake Security Advisory MDVSA-2009:063 (eog)

The remote host is missing an update to eog announced via advisory MDVSA-2009:063. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only OR GPL-3.0-on...

Mandrake Security Advisory MDVSA-2009:048-2 (epiphany)

The remote host is missing an update to epiphany announced via advisory MDVSA-2009:048-2. OpenVAS Vulnerability Test $Id: mdksa20090482.nasl 6573 2017-07-06 13:10:50Z cfischer $ Description: Auto-generated from advisory MDVSA-2009:048-2 epiphany Authors: Thomas Reinke Copyright: Copyright c 2009...