USN-1122-2: Thunderbird vulnerabilities

USN-1122-1 fixed vulnerabilities in Thunderbird for Lucid and Maverick. This update provides the corresponding fixes for Natty. Original advisory details: It was discovered that there was a vulnerability in the memory handling of certain types of content. An attacker could exploit this to possibl...

openSUSE Security Update : gimp (openSUSE-SU-2011:0162-1)

Four buffer overflows have been fixed in gimp and its plugins. CVE-2010-4540-CVE-2010-4543 have been assigned to these issues. - CVE-2010-4540: CVSS v2 Base Score: 4.3 AV:N/AC:M/Au:N/C:N/I:N/A:P: Buffer Errors CWE-119 - CVE-2010-4541: CVSS v2 Base Score: 4.3 AV:N/AC:M/Au:N/C:N/I:N/A:P: Buffer...

CentOS 4 : gstreamer-plugins (CESA-2011:0477)

Updated gstreamer-plugins packages that fix two security issues are now available for Red Hat Enterprise Linux 4. The Red Hat Security Response Team has rated this update as having important security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity rating...

RHEL 4 : gstreamer-plugins (RHSA-2011:0477)

The remote Redhat Enterprise Linux 4 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2011:0477 advisory. - libmodplug: Integer overflow when reading samples of AMF files CVE-2006-4192 - libmodplug: ReadS3M stack overflow vulnerability...

Important: Red Hat Security Advisory: gstreamer-plugins security update

Updated gstreamer-plugins packages that fix two security issues are now available for Red Hat Enterprise Linux 4. The Red Hat Security Response Team has rated this update as having important security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity rating...

gstreamer-plugins security update

0.8.5-1.0.1.EL.3 - Update release to address ULN up2date 0.8.5-1.EL.3 - Add patches for CVE-2006-4192 and CVE-2011-1574 Related: rhbz 696507...

[SECURITY] Fedora 14 Update: wireshark-1.4.6-1.fc14

Wireshark is a network traffic analyzer for Unix-ish operating systems. This package lays base for libpcap, a packet capture and filtering library, contains command-line utilities, contains plugins and documentation for wireshark. A graphical user interface is packaged separately to GTK+ package...

Fedora Update for ikiwiki FEDORA-2011-5173

Check for the Version of ikiwiki OpenVAS Vulnerability Test Fedora Update for ikiwiki FEDORA-2011-5173 Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...

[SECURITY] Fedora 14 Update: ikiwiki-3.20110328-1.fc14

Ikiwiki is a wiki compiler. It converts wiki pages into HTML pages suitable for publishing on a website. Ikiwiki stores pages and history in a revision control system such as Subversion or Git. There are many other features, including support for blogging, as well as a large array of plugins...

[SECURITY] Fedora 13 Update: ikiwiki-3.20100815.7-1.fc13

Ikiwiki is a wiki compiler. It converts wiki pages into HTML pages suitable for publishing on a website. Ikiwiki stores pages and history in a revision control system such as Subversion or Git. There are many other features, including support for blogging, as well as a large array of plugins...

backorifice-info NSE Script

Connects to a BackOrifice service and gathers information about the host and the BackOrifice service itself. The extracted host information includes basic system setup, list of running processes, network resources and shares. Information about the service includes enabled port redirections,...

[SECURITY] Fedora 15 Update: ikiwiki-3.20110328-1.fc15

Ikiwiki is a wiki compiler. It converts wiki pages into HTML pages suitable for publishing on a website. Ikiwiki stores pages and history in a revision control system such as Subversion or Git. There are many other features, including support for blogging, as well as a large array of plugins...

JBoss Enterprise Application Platform '/jmx-console' Authentication Bypass

The version of JBoss Enterprise Application Platform EAP running on the remote host allows unauthenticated access to documents under the /jmx-console directory. This is due to a misconfiguration in web.xml which only requires authentication for GET and POST requests. Specifying a different verb...

Google Chrome Warns Users About Vulnerable Plugins

Google has added a new security feature to the latest versions of its Chrome browser that will now warn users when the browser encounters out-of-date plugins and will automatically disable them. The latest versions of Google Chrome has upgraded the browser’s ability to protect users against...

Step 6: Update and Patch

With your machine disinfected, take a few moments to update your operating system software and any third party applications to their latest and most secure version. Rogue antivirus and scareware programs are usually delivered as drive by downloads spawned by malicious Web sites. These leverage...

[SECURITY] Fedora 14 Update: pidgin-2.7.11-1.fc14

Pidgin allows you to talk to anyone using a variety of messaging protocols including AIM, MSN, Yahoo!, Jabber, Bonjour, Gadu-Gadu, ICQ, IRC, Novell Groupwise, QQ, Lotus Sametime, SILC, Simple and Zephyr. These protocols are implemented using a modular, easy to use design. To use a protocol, just...

Google Chrome < 9.0.597.107 Multiple Vulnerabilities

Binary data 5807.pasl...

Mozilla Foundation Security Advisory 2011-10

Mozilla Foundation Security Advisory 2011-10 Title: CSRF risk with plugins and 307 redirects Impact: High Announced: March 1, 2011 Reporter: Peleus Uhley Products: Firefox, SeaMonkey Fixed in: Firefox 3.6.14 Firefox 3.5.17 SeaMonkey 2.0.12 Description Adobe security researcher Peleus Uhley report...

Mozilla CSRF risk with plugins and 307 redirects (MFSA 2011-10)

Cross-site request forgery CSRF vulnerability in Mozilla Firefox before 3.5.17 and 3.6.x before 3.6.14, and SeaMonkey before 2.0.12, allows remote attackers to hijack the authentication of arbitrary users for requests that were initiated by a plugin and received a 307 redirect to a page on a...

FreeBSD : mozilla -- multiple vulnerabilities (45f102cd-4456-11e0-9580-4061862b8c22)

The Mozilla Project reports : MFSA 2011-01 Miscellaneous memory safety hazards rv:1.9.2.14/ 1.9.1.17 MFSA 2011-02 Recursive eval call causes confirm dialogs to evaluate to true MFSA 2011-03 Use-after-free error in JSON.stringify MFSA 2011-04 Buffer overflow in JavaScript upvarMap MFSA 2011-05...