Moderate: Red Hat Security Advisory: apr security update

Updated apr packages that fix one security issue are now available for Red Hat Enterprise Linux 4, 5, and 6. The Red Hat Security Response Team has rated this update as having moderate security impact. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, ...

apr: unconstrained recursion in apr_fnmatch

Stack consumption vulnerability in the fnmatch implementation in aprfnmatch.c in the Apache Portable Runtime APR library before 1.4.3 and the Apache HTTP Server before 2.2.18, and in fnmatch.c in libc in NetBSD 5.1, OpenBSD 4.8, FreeBSD, Apple Mac OS X 10.6, Oracle Solaris 10, and Android, allows...

PT-2011-2336

Name of the Vulnerable Software and Affected Versions Apache Portable Runtime APR library versions prior to 1.4.3 Apache HTTP Server versions prior to 2.2.18 NetBSD version 5.1 OpenBSD version 4.8 FreeBSD affected versions not specified Apple Mac OS X version 10.6 Oracle Solaris version 10 Androi...

Revised: Portable OpenSSH security advisory: portable-keysign-rand-helper.adv

OpenSSH Security Advisory: portable-keysign-rand-helper.adv This document may be found at: http://www.openssh.com/txt/portable-keysign-rand-helper.adv 1. Vulnerability Portable OpenSSH's ssh-keysign utility may allow unauthorised local access to host keys on platforms if ssh-rand-helper is used. ...

Healthcare Breaches Affect More than 10.8 M

Officials from the Department of Health and Human Services’ Office for Civil Rights have revised their list of healthcare information breaches over the past month to include 16 additional incidents, according to a GovInfoSecurity.com report. The list now totals 265 cases that have affected over...

DEBIAN-CVE-2011-1553

Use-after-free vulnerability in t1lib 5.1.2 and earlier, as used in Xpdf before 3.02pl6, teTeX, and other products, allows remote attackers to cause a denial of service application crash via a PDF document containing a crafted Type 1 font that triggers an invalid memory write, a different...

[SECURITY] Fedora 13 Update: webkitgtk-1.2.7-1.fc13

WebKitGTK+ is the port of the portable web rendering engine WebKit to the GTK+ platform...

apr security update

CentOS Errata and Security Advisory CESA-2010:0950 Updated apr-util packages that fix one security issue are now available for Red Hat Enterprise Linux 4, 5, and 6. The Red Hat Security Response Team has rated this update as having moderate security impact. A Common Vulnerability Scoring System...

Fedora Update for evince FEDORA-2011-0208

Check for the Version of evince OpenVAS Vulnerability Test Fedora Update for evince FEDORA-2011-0208 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the term...

Fedora Update for webkitgtk FEDORA-2011-0121

Check for the Version of webkitgtk OpenVAS Vulnerability Test Fedora Update for webkitgtk FEDORA-2011-0121 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under th...

Mantra: A Browser based Security Framework !

Mantra is a dream that came true for the author. It is a collection of free and open source tools integrated into a web browser – Firefox, which can become handy for students, penetration testers, web application developers, security professionals etc. It is portable, ready-to-run, compact and...

Altap Salamander 2.5 PE Viewer - Local Buffer Overflow (Metasploit)

$Id: altapsalamanderpdb.rb 11353 2010-12-16 20:11:01Z egypt $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...

Clear iSpotClearspot 2.0.0.0 - Cross-Site Request Forgery

Clear iSpotClearspot 2.0.0.0 - Cross-Site Request Forgery Trustwave's SpiderLabs Security Advisory TWSL2010-008: Clear iSpot/Clearspot CSRF Vulnerabilities https://www.trustwave.com/spiderlabs/advisories/TWSL2010-008.txt Published: 2010-12-10 Version: 1.0 Vendor: Clear http://www.clear.com...

Clear iSpot/Clearspot 2.0.0.0 - Cross-Site Request Forgery

Trustwave's SpiderLabs Security Advisory TWSL2010-008: Clear iSpot/Clearspot CSRF Vulnerabilities https://www.trustwave.com/spiderlabs/advisories/TWSL2010-008.txt Published: 2010-12-10 Version: 1.0 Vendor: Clear http://www.clear.com Products: iSpot / ClearSpot 4G http://www.clear.com/devices...

DEBIAN-CVE-2010-4260

Multiple unspecified vulnerabilities in pdf.c in libclamav in ClamAV before 0.96.5 allow remote attackers to cause a denial of service application crash or possibly execute arbitrary code via a crafted PDF document, aka 1 "bb 2358" and 2 "bb 2396."...

PT-2010-5382 · Cisco · Clamav

Name of the Vulnerable Software and Affected Versions: ClamAV versions prior to 0.96.5 Description: The issue is related to multiple unspecified vulnerabilities in the pdf.c file of the libclamav library in ClamAV. These vulnerabilities can be exploited by remote attackers using a crafted PDF...

Fedora Update for freetype FEDORA-2010-15878

Check for the Version of freetype OpenVAS Vulnerability Test Fedora Update for freetype FEDORA-2010-15878 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...

Fedora Update for apr-util FEDORA-2010-16178

Check for the Version of apr-util OpenVAS Vulnerability Test Fedora Update for apr-util FEDORA-2010-16178 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...

Fedora Update for cups FEDORA-2010-17641

Check for the Version of cups OpenVAS Vulnerability Test Fedora Update for cups FEDORA-2010-17641 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms o...

DEBIAN-CVE-2010-3814

Heap-based buffer overflow in the InsSHZ function in ttinterp.c in FreeType 2.4.3 and earlier allows remote attackers to execute arbitrary code or cause a denial of service application crash via a crafted SHZ bytecode instruction, related to TrueType opcodes, as demonstrated by a PDF document wit...