Mandriva Update for util-linux MDKSA-2007:053 (util-linux)

Check for the Version of util-linux OpenVAS Vulnerability Test Mandriva Update for util-linux MDKSA-2007:053 util-linux Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modif...

Mandriva Update for clamav MDKSA-2007:172 (clamav)

Check for the Version of clamav OpenVAS Vulnerability Test Mandriva Update for clamav MDKSA-2007:172 clamav Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under t...

kernel security and bug fix update

2.6.9-78.0.17.0.1.EL - fix entropy flag in bnx2 driver to generate entropy pool John Sobecki orabug 5931647 - fix skb alignment that was causing sendto to fail with EFAULT Olaf Kirch orabug 6845794 - fix enomem due to larger mtu size page alloc Zach Brown orabug 5486128 - fix percpu api bugon wit...

Safari 3.2.1 Null Dereference

Safari 3.2.1 for windows safariUrl protocol Handler abussenull Deference Vendor:http://www.apple.com original advisore:http://lostmon.blogspot.com/2009/01/ safari-321-for-windows-safariurl.html vendor notify:YES Exploit available: Private This article is a "second" part of :...

kernel: sctp: fix potential panics in the SCTP-AUTH API

net/sctp/socket.c in the Stream Control Transmission Protocol sctp implementation in the Linux kernel before 2.6.26.4 does not verify that the SCTP-AUTH extension is enabled before proceeding with SCTP-AUTH API functions, which allows attackers to cause a denial of service NULL pointer dereferenc...

Gentoo Security Advisory GLSA 200511-03 (giflib)

The remote host is missing updates announced in advisory GLSA 200511-03. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...

GnuTLS < 2.2.4 vulnerability (Windows)

The remote host is probably affected by the vulnerabilities described in CVE-2008-1948, CVE-2008-1949, CVE-2008-1950 GnuTLS 2.2.4 vulnerability Impact CVE-2008-1948 The gnutlsservernamerecvparams function in lib/extservername.c in libgnutls in gnutls-serv in GnuTLS before 2.2.4 does not properly...

Design/Logic Flaw

Unspecified vulnerability in the event port implementation in Sun Solaris 10 allows local users to cause a denial of service panic by submitting and retrieving user-defined events, probably related to a NULL dereference...

CVE-2008-2706

Unspecified vulnerability in the event port implementation in Sun Solaris 10 allows local users to cause a denial of service panic by submitting and retrieving user-defined events, probably related to a NULL dereference...

CVE-2008-2706

Unspecified vulnerability in the event port implementation in Sun Solaris 10 allows local users to cause a denial of service panic by submitting and retrieving user-defined events, probably related to a NULL dereference...

GNUTLS-SA-2008-1-2 GnuTLS null-pointer dereference

The gnutlsrecvclientkxmessage function in lib/gnutlskx.c in libgnutls in gnutls-serv in GnuTLS before 2.2.4 continues to process Client Hello messages within a TLS message after one has already been processed, which allows remote attackers to cause a denial of service NULL dereference and crash v...

Single MySQL worker can be crashed (NULL deref) with certain SELECT statements

MySQL 5.x before 5.0.36 allows local users to cause a denial of service database crash by performing informationschema table subselects and using ORDER BY to sort a single-row result, which prevents certain structure elements from being initialized and triggers a NULL dereference in the filesort...

krb5: uninitialized pointer use in krb5kdc

KDC in MIT Kerberos 5 krb5kdc does not set a global variable for some krb4 message types, which allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via crafted messages that trigger a NULL pointer dereference or double-free...

NULL dereference in iwl driver

The iwlsetrate function in compatible/iwl3945-base.c in iwlwifi 1.1.21 and earlier dereferences an iwlgethwmode return value without checking for NULL, which might allow remote attackers to cause a denial of service kernel panic via unspecified vectors during module initialization...

CVE-2008-0944

Ipswitch Instant Messaging IM 2.0.8.1 and earlier allows remote attackers to cause a denial of service NULL dereference and application crash via a version field containing zero...

CVE-2008-0944

Ipswitch Instant Messaging IM 2.0.8.1 and earlier allows remote attackers to cause a denial of service NULL dereference and application crash via a version field containing zero...

DEBIAN-CVE-2008-0672

The processchatinput function in TinTin++ 1.97.9 and WinTin++ 1.97.9 allows remote attackers to cause a denial of service application crash via a YES message without a newline character, which triggers a NULL dereference...

Out-of-bounds

The processchatinput function in TinTin++ 1.97.9 and WinTin++ 1.97.9 allows remote attackers to cause a denial of service application crash via a YES message without a newline character, which triggers a NULL dereference...

CVE-2008-0672

The processchatinput function in TinTin++ 1.97.9 and WinTin++ 1.97.9 allows remote attackers to cause a denial of service application crash via a YES message without a newline character, which triggers a NULL dereference...

CVE-2008-0672

The processchatinput function in TinTin++ 1.97.9 and WinTin++ 1.97.9 allows remote attackers to cause a denial of service application crash via a YES message without a newline character, which triggers a NULL dereference...