openSUSE Security Update : java-1_6_0-openjdk (openSUSE-SU-2010:1017-1)

This update of IcedTea fixes an information leak in System property via public static. CVE-2010-3860 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update java-160-openjdk-3618. The text description...

CVE-2011-1149

Android before 2.3 does not properly restrict access to the system property space, which allows local applications to bypass the application sandbox and gain privileges, as demonstrated by psneuter and KillingInTheNameOf, related to the use of Android shared memory ashmem and ASHMEMSETPROTMASK...

Authentication flaw

Android before 2.3 does not properly restrict access to the system property space, which allows local applications to bypass the application sandbox and gain privileges, as demonstrated by psneuter and KillingInTheNameOf, related to the use of Android shared memory ashmem and ASHMEMSETPROTMASK...

CVE-2011-1149

Android before 2.3 does not properly restrict access to the system property space, which allows local applications to bypass the application sandbox and gain privileges, as demonstrated by psneuter and KillingInTheNameOf, related to the use of Android shared memory ashmem and ASHMEMSETPROTMASK...

CVE-2011-1149

CVE-2011-1149 : Android versions before 2.3 expose the system property space, allowing local apps to bypass the sandbox and gain privileges via ashmem usage and ASHMEM_SET_PROT_MASK. The issue enables local privilege escalation, illustrated by references to psneuter and KillingInTheNameOf; exploi...

CVE-2011-1149: Undefined Security Weakness

Android before 2.3 does not properly restrict access to the system property space, which allows local applications to bypass the application sandbox and gain privileges, as demonstrated by psneuter and KillingInTheNameOf, related to the use of Android shared memory ashmem and ASHMEMSETPROTMASK...

Linux Kernel "iriap_getvaluebyclass_indication()"缓冲区溢出漏洞

CVE ID: CVE-2011-1180 Linux 是一种类似于UNIX 计算机操作系统。 Linux Kernel "iriapgetvaluebyclassindication"在实现上存在缓冲区溢出漏洞，本地攻击者可利用此漏洞造成拒绝服务或控制受影响系统。 此漏洞源于net/irda/iriap.c中的"iriapgetvaluebyclassindication"内的边界错误，可通过超长名称或属性造成栈缓冲区溢出。 Linux kernel 2.6.x 厂商补丁： Linux -----...

RHEL 6 : java-1.6.0-ibm (RHSA-2011:0357)

The remote Redhat Enterprise Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2011:0357 advisory. The IBM 1.6.0 Java release includes the IBM Java 2 Runtime Environment and the IBM Java 2 Software Development Kit. This update fixes severa...

OpenJDK Java2D font-related system property leak (6985453)

Unspecified vulnerability in the Java Runtime Environment JRE in Oracle Java SE and Java for Business 6 Update 23 and earlier, and 5.0 Update 27 and earlier allows remote untrusted Java Web Start applications and untrusted Java applets to affect confidentiality via unknown vectors related to 2D...

[SECURITY] Fedora 14 Update: pywebdav-0.9.4.1-1.fc14

WebDAV library for Python. WebDAV is an extension to the normal HTTP/1.1 protocol allowing the user to upload data, create collections of objects, store properties for objects, etc...

CVE-2011-1046

IBM FileNet P8 Content Engine aka P8CE 4.0.1 through 5.0.0, as used in FileNet P8 Content Manager CM and FileNet P8 Business Process Manager BPM, does not require the PRIVILEGEDWRITE access role for all intended Object Store modifications, which allows remote attackers to change a privileged...

Stack overflow

Stack-based buffer overflow in a certain ActiveX control in MediaDBPlayback.DLL 2.2.0.5 in the Moxa ActiveX SDK allows remote attackers to execute arbitrary code via a long PlayFileName property value...

CVE-2010-4742

Stack-based buffer overflow in a certain ActiveX control in MediaDBPlayback.DLL 2.2.0.5 in the Moxa ActiveX SDK allows remote attackers to execute arbitrary code via a long PlayFileName property value...

Heap overflow

Multiple heap-based buffer overflows in Topaz Systems SigPlus Pro ActiveX Control 3.95, and possibly other versions before 4.29, allow remote attackers to execute arbitrary code via a long 1 KeyString property, 2 NewPath parameter to the SetLocalIniFilePath method, or 3 NewPortPath parameter to t...

CVE-2011-0681: Undefined Security Weakness

The Cascading Style Sheets CSS Extensions for XML implementation in Opera before 11.01 recognizes links to javascript: URLs in the -o-link property, which makes it easier for remote attackers to bypass CSS filtering via a crafted URL...

IcedTea System property information leak via public static

IcedTea 1.7.x before 1.7.6, 1.8.x before 1.8.3, and 1.9.x before 1.9.2, as based on OpenJDK 6, declares multiple sensitive variables as public, which allows remote attackers to obtain sensitive information including 1 user.name, 2 user.home, and 3 java.home system properties, and other sensitive...

Pirated Content Sites Hacked Attract Billions Of Years !

Web sites hawking pirated software and other digital goods will attract about 53 million visits per year. This is according to a report PDF released yesterday by MarkMonitor, a company that protects online brands to its corporate clients. The hacking scene of the majority of the 53 billion hits,...

DeKalb website hacked !

It appeared briefly this week that all DeKalb County's properties were owned by a hacker. The county's property appraisal website was hacked and listed every property owner as "Hacked by Red xD," CEO's spokesman Burke Brennan confirmed for The Atlanta Journal-Constitution. Brennan insisted none o...

Kerala cyber police closing in on software theft culprits !

Thiruvananthapuram, Jan 5 IANS The cyber wing of the Kerala Police Wednesday claimed it had got vital clues about the theft of software source codes and intellectual property data from a Kochi-based IT company. The investigation is progressing on the right track, V.K. Ajith Mohan of the police...

KillingInTheNameOf psneuter ashmem

Android before 2.3 does not properly restrict access to the system property space, which allows local applications to bypass the application sandbox and gain privileges...