[SECURITY] Fedora 9 Update: openssl-0.9.8g-9.fc9

The OpenSSL toolkit provides support for secure communications between machines. OpenSSL includes a certificate management tool and shared libraries which provide various cryptographic algorithms and protocols...

Trillian instant messenger multiple security vulnerabilities

Buffer overflows and memory corruptions in AIM/ICQ, MSN and XML-based protocols parsing...

gnutls security update

CentOS Errata and Security Advisory CESA-2008:0489 Updated gnutls packages that fix several security issues are now available for Red Hat Enterprise Linux 5. This update has been rated as having critical security impact by the Red Hat Security Response Team. The GnuTLS Library provides support fo...

Moderate: Red Hat Security Advisory: bind security, bug fix, and enhancement update

Updated bind packages that fix two security issues, several bugs, and add enhancements are now available for Red Hat Enterprise Linux 5. This update has been rated as having moderate security impact by the Red Hat Security Response Team. The Berkeley Internet Name Domain BIND is an implementation...

[SECURITY] Fedora 7 Update: asterisk-1.4.19.1-1.fc7

Asterisk is a complete PBX in software. It runs on Linux and provides all of the features you would expect from a PBX and more. Asterisk does voice over IP in three protocols, and can interoperate with almost all standards-based telephony equipment using relatively inexpensive hardware...

Cross site scripting

The badprotocolonce function in phpgwapi/inc/class.kses.inc.php in KSES, as used in eGroupWare before 1.4.003, Moodle before 1.8.5, and other products, allows remote attackers to bypass HTML filtering and conduct cross-site scripting XSS attacks via a string containing crafted URL protocols...

DEBIAN-CVE-2008-1502

The badprotocolonce function in phpgwapi/inc/class.kses.inc.php in KSES, as used in eGroupWare before 1.4.003, Moodle before 1.8.5, and other products, allows remote attackers to bypass HTML filtering and conduct cross-site scripting XSS attacks via a string containing crafted URL protocols...

CVE-2008-1502

The badprotocolonce function in phpgwapi/inc/class.kses.inc.php in KSES, as used in eGroupWare before 1.4.003, Moodle before 1.8.5, and other products, allows remote attackers to bypass HTML filtering and conduct cross-site scripting XSS attacks via a string containing crafted URL protocols...

RHEL 4 / 5 : openldap (RHSA-2008:0110)

Updated openldap packages that fix security issues are now available for Red Hat Enterprise Linux 4 and 5. This update has been rated as having moderate security impact by the Red Hat Security Response Team. OpenLDAP is an open source suite of Lightweight Directory Access Protocol LDAP applicatio...

[SECURITY] Fedora 7 Update: duplicity-0.4.9-1.fc7

Duplicity incrementally backs up files and directory by encrypting tar-format volumes with GnuPG and uploading them to a remote or local file server. In theory many protocols for connecting to a file server could be supported; so far ssh/scp, local file access, rsync, ftp, HSI, WebDAV and Amazon ...

[SECURITY] Fedora 7 Update: bind-9.4.2-3.fc7

BIND Berkeley Internet Name Domain is an implementation of the DNS Domain Name System protocols. BIND includes a DNS server named, which resolves host names to IP addresses; a resolver library routines for applications to use when interfacing with DNS; and tools for verifying that the DNS server ...

Debian Security Advisory DSA 204-1 (kdelibs)

The remote host is missing an update to kdelibs announced via advisory DSA 204-1. OpenVAS Vulnerability Test $Id: deb2041.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 204-1 Authors: Thomas Reinke Copyright: Copyright c 2007 E-Soft Inc...

Debian Security Advisory DSA 204-1 (kdelibs)

The remote host is missing an update to kdelibs announced via advisory DSA 204-1. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] Fedora 8 Update: bind-9.5.0-20.b1.fc8

BIND Berkeley Internet Name Domain is an implementation of the DNS Domain Name System protocols. BIND includes a DNS server named, which resolves host names to IP addresses; a resolver library routines for applications to use when interfacing with DNS; and tools for verifying that the DNS server ...

AST-2007-027 - Database matching order permits host-based authentication to be ignored

Asterisk Project Security Advisory - AST-2007-027 +------------------------------------------------------------------------+ | Product | Asterisk | |--------------------+---------------------------------------------------| | Summary | Database matching order permits host-based | | | authenticatio...

MS Internet Explorer 7.0 Beta 2 (urlmon.dll) Denial of Service Vuln

No description provided by source. !--- Internet Explorer 7.0 Beta 2 urlmon.dll DoS Discovered by: Tom Ferris tommyatsecurity-protocolsdotcom Tested on: Windows XP SP2 Vulnerable Versions: IE 7.0.5296.0 1/31/2006 Security-Protocols.com ...

[SECURITY] Fedora 7 Update: samba-3.0.28-0.fc7

Samba is the suite of programs by which a lot of PC-related machines share files, printers, and other information such as lists of available files and printers. The Windows NT, OS/2, and Linux operating systems support this natively, and add-on packages can enable the same thing for DOS, Windows,...

[SECURITY] Fedora 7 Update: pidgin-2.2.2-1.fc7

Pidgin allows you to talk to anyone using a variety of messaging protocols including AIM, MSN, Yahoo!, Jabber, Bonjour, Gadu-Gadu, ICQ, IRC, Novell Groupwise, QQ, Lotus Sametime, SILC, Simple and Zephyr. These protocols are implemented using a modular, easy to use design. To use a protocol, just...

[SECURITY] Fedora 7 Update: openssl-0.9.8b-15.fc7

The OpenSSL toolkit provides support for secure communications between machines. OpenSSL includes a certificate management tool and shared libraries which provide various cryptographic algorithms and protocols...

Datagram Transport Layer Security Detection

The remote service is encrypted using Datagram Transport Layer Security DTLS, which provides communications privacy for datagram protocols. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid27057; scriptversion"1.16"; scriptsetattributeattribute:"pluginmodificationdate"...