RHEL 3 / 4 : redhat-release (EOL Notice) (RHSA-2011:0001)

This is the End Of Life notification for RHN Satellite Server 4. On December 31st, 2010, per the life cycle support policy, the version 4 series of Satellite and Proxy products exited Production Phase 2 marking the end of their support by Red Hat. Please reference the support policy here :...

CA20101231-01: Security Notice for CA ARCserve D2D

CA20101231-01: Security Notice for CA ARCserve D2D Issued: December 31, 2010 CA Technologies support is alerting customers to a security risk with CA ARCserve D2D. A vulnerability exists that can allow a remote attacker to execute arbitrary code. CA has issued an Information Solution to address t...

RealNetworks Releases Security Update for RealPlayer

RealNetworks, Inc. has released an update for RealPlayer to address multiple vulnerabilities. Exploitation of these vulnerabilities may allow an attacker to execute arbitrary code. US-CERT encourages users and administrators to review the RealNetworks notice released on December 10, 2010 and appl...

CA20101209-01: Security Notice for CA XOsoft

-----BEGIN PGP SIGNED MESSAGE----- CA20101209-01: Security Notice for CA XOsoft Issued: December 9, 2010 CA Technologies support is alerting customers to a security risk with CA XOsoft. A vulnerability exists that can allow a remote attacker to execute arbitrary code. CA has issued a patch to...

[USN-1029-1] OpenSSL vulnerabilities

=========================================================== Ubuntu Security Notice USN-1029-1 December 08, 2010 openssl vulnerabilities CVE-2008-7270, CVE-2010-4180 =========================================================== A security issue affects the following Ubuntu releases: Ubuntu 6.06 LTS...

Orbis CMS 1.0.2 - Arbitrary File Upload

'Orbis CMS' Arbitrary Script Execution Vulnerability CVE-2010-4313 Mark Stanislav - [email protected] I. DESCRIPTION --------------------------------------- A vulnerability exists in the 'Orbis CMS' filemanfileupload.php script that allows any authenticated user to upload a PHP script and...

Fedora 12 : php-pear-CAS-1.1.3-1.fc12 (2010-15970)

This release contains 3 security fixes for vulnerabilities in the proxy callback mechanism. These vulnerabilities only affect phpCAS clients that are running in proxy mode. The release is fully compatible with all versions 1.1.x versions. The changes are : Security Issue - CVE-2010-3690 phpCAS: X...

Microsoft ASP.NET - Auto-Decryptor File Download (MS10-070)

Microsoft ASP.NET - Auto-Decryptor File Download MS10-070 !/usr/bin/ruby -w aspxadchotextattack.rb Copyright c 2010 AmpliaSECURITY. All rights reserved http://www.ampliasecurity.com Agustin Azubel - [email protected] MS10-070 ASPX proof of concept Decrypt data using an auto decryptor...

[USN-996-1] Mako vulnerability

=========================================================== Ubuntu Security Notice USN-996-1 September 29, 2010 mako vulnerability CVE-2010-2480 =========================================================== A security issue affects the following Ubuntu releases: Ubuntu 10.04 LTS This advisory also...

Mandriva Update for rpmdrake MDVA-2010:200 (rpmdrake)

Check for the Version of rpmdrake OpenVAS Vulnerability Test Mandriva Update for rpmdrake MDVA-2010:200 rpmdrake Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it...

Mandriva Update for rpmdrake MDVA-2010:200 (rpmdrake)

Check for the Version of rpmdrake OpenVAS Vulnerability Test Mandriva Update for rpmdrake MDVA-2010:200 rpmdrake Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it...

RHEL 3 : redhat-release (EOL Notice) (RHSA-2010:0576)

This is the 3-month notification of the End Of Life plans for Red Hat Enterprise Linux 3. In accordance with the Red Hat Enterprise Linux Errata Support Policy, the regular 7 year life cycle of Red Hat Enterprise Linux 3 will end on October 31, 2010. After this date, Red Hat will discontinue the...

vBulletin - Critical Information Disclosure

Versions Affected: 3.8.6 Only! Info: Content publishing, search, security, and more—vBulletin has it all. Whether it’s available features, support, or ease-of-use, vBulletin offers the most for your money. Learn more about what makes vBulletin the choice for people who are serious about creating...

CVE-2010-0832

pammotd aka the MOTD module in libpam-modules before 1.1.0-2ubuntu1.1 in PAM on Ubuntu 9.10 and libpam-modules before 1.1.1-2ubuntu5 in PAM on Ubuntu 10.04 LTS allows local users to change the ownership of arbitrary files via a symlink attack on .cache in a user's home directory, related to "user...

[USN-959-1] PAM vulnerability

=========================================================== Ubuntu Security Notice USN-959-1 July 07, 2010 pam vulnerability CVE-2010-0832 =========================================================== A security issue affects the following Ubuntu releases: Ubuntu 9.10 Ubuntu 10.04 LTS This advisory...

2RSTUDIO SQL Injection

+Title: 2RSTUDIO Multiple SQL Injection Vulnerability + About : ============================================================================== Author : GlaDiaT0R Contact: thegl4di4t0rAThotmailDOTcom or berrahal.ryadhATgmailDOTcom Team : Tunisian Power Team Greetz : ALLAH ! , Boomrangvictim,...

OpenEMR Electronic Medical Record Software 3.2 - Multiple Vulnerabilities

Redspin Security Notice -- RSN-2010-01 Multiple vulnerabilities in OpenEMR Electronic Medical Record Software Overview ---------------- Quote from http://www.oemr.org/ OpenEMR is a free medical practice management, electronic medical records, prescription writing, and medical billing application...

OpenEMR Electronic Medical Record Software 3.2 - Multiple Vulnerabilities

OpenEMR Electronic Medical Record Software 3.2 - Multiple Vulnerabilities Redspin Security Notice -- RSN-2010-01 Multiple vulnerabilities in OpenEMR Electronic Medical Record Software Overview ---------------- Quote from http://www.oemr.org/ OpenEMR is a free medical practice management, electron...

CA20100608-01: Security Notice for CA PSFormX and WebScan ActiveX Controls

-----BEGIN PGP SIGNED MESSAGE----- CA20100608-01: Security Notice for CA PSFormX and WebScan ActiveX Controls Issued: June 8, 2010 CA Technologies support is alerting users to multiple security risks with the PSFormX and WebScan ActiveX controls previously available from the CA Global Security...

CA XOsoft Control Service entry_point.aspx Remote Code Execution

Added: 06/07/2010 CVE: CVE-2010-1223 BID: 39238 OSVDB: 63611 Background CA XOsoft is storage and recovery management software that includes applications for combined business continuity and disaster recovery. The CA XOsoft product family includes CA XOsoft Replication, CA XOsoft High Availability...