Moderate: Red Hat Security Advisory: samba3x security and bug fix update

Updated samba3x packages that fix multiple security issues and various bugs are now available for Red Hat Enterprise Linux 5 Supplementary. This update has been rated as having moderate security impact by the Red Hat Security Response Team. Samba is a suite of programs used by machines to share...

CVE-2009-3676

The SMB client in the kernel in Microsoft Windows Server 2008 R2 and Windows 7 allows remote SMB servers and man-in-the-middle attackers to cause a denial of service infinite loop and system hang via a 1 SMBv1 or 2 SMBv2 response packet that contains a an incorrect length value in a NetBIOS heade...

Design/Logic Flaw

The SMB client in the kernel in Microsoft Windows Server 2008 R2 and Windows 7 allows remote SMB servers and man-in-the-middle attackers to cause a denial of service infinite loop and system hang via a 1 SMBv1 or 2 SMBv2 response packet that contains a an incorrect length value in a NetBIOS heade...

CVE-2009-3676

The SMB client in the kernel in Microsoft Windows Server 2008 R2 and Windows 7 allows remote SMB servers and man-in-the-middle attackers to cause a denial of service infinite loop and system hang via a 1 SMBv1 or 2 SMBv2 response packet that contains a an incorrect length value in a NetBIOS heade...

Server Message Block Bug Crashes Windows 7

Security researcher Laurent Gaffie unveiled a new unpatched bug in Windows 7 and Server 2008 R2 that, when exploited, locks up the system, requiring a total shutdown to regain control. Microsoft acknowledged that it’s investigating the flaw. Read the full article. Computerworld...

Microsoft Security Bulletin MS09-064 - Critical Vulnerability in License Logging Server Could Allow Remote Code Execution (974783)

Microsoft Security Bulletin MS09-064 - Critical Vulnerability in License Logging Server Could Allow Remote Code Execution 974783 Published: November 10, 2009 Version: 1.0 General Information Executive Summary This security update resolves a privately reported vulnerability in Microsoft Windows...

Microsoft Windows 72008 R2 - Remote Kernel Crash

Microsoft Windows 72008 R2 - Remote Kernel Crash !/usr/bin/python win7-crash.py: Trigger a remote kernel crash on Win7 and server 2008R2 infinite loop Crash in KeAccumulateTicks due to NTASSERT/DbgRaiseAssertionFailure caused by an infinite loop. NO BSOD, YOU GOTTA PULL THE PLUG. To trigger it...

Microsoft Windows 7/2008 R2 - Remote Kernel Crash

!/usr/bin/python win7-crash.py: Trigger a remote kernel crash on Win7 and server 2008R2 infinite loop Crash in KeAccumulateTicks due to NTASSERT/DbgRaiseAssertionFailure caused by an infinite loop. NO BSOD, YOU GOTTA PULL THE PLUG. To trigger it fast; from the target: \thisscriptipaddr\BLAH ,...

October Microsoft Patch Tuesday Has Something for Everyone

By Jason Miller Microsoft has released 13 new security bulletins in the October 2009 version of Patch Tuesday. Eight bulletins have a severity rating of Critical. The remaining five security bulletins have a severity rating of Important. For the first time, Windows 7 and Windows 2008 R2 are...

Microsoft Security Bulletin MS09-061 - Critical Vulnerabilities in the Microsoft .NET Common Language Runtime Could Allow Remote Code Execution (974378)

Microsoft Security Bulletin MS09-061 - Critical Vulnerabilities in the Microsoft .NET Common Language Runtime Could Allow Remote Code Execution 974378 Published: October 13, 2009 Version: 1.0 General Information Executive Summary This security update resolves three privately reported...

kvm security and bug fix update

83-105.0.1.el54.7 - Add kvm-add-oracle-workaround-for-libvirt-bug.patch kvm-83-105.el54.7 - kvm-qemu-virtio-net-do-not-return-stack-pointer-from-fun.patch bz524557 - Resolves: bz524557 QEMU crash during virtio-net WHQL tests for Win2008 R2 kvm-83-105.el54.6 -...

Spiceworks 3.6 Accept Parameter Overflow Crash Exploit

Exploit for unknown platform in category dos / poc ====================================================== Spiceworks 3.6 Accept Parameter Overflow Crash Exploit ====================================================== !/usr/bin/python Spiceworks 3.6 Accept Parameter Overflow Remote Crash P.O.C...

SAP Business One 2005-A License Manager Remote BOF Exploit

Exploit for windows platform in category remote exploits ========================================================== SAP Business One 2005-A License Manager Remote BOF Exploit ========================================================== !/usr/bin/python import socket, time INFO NTNamingService.exe...

Gentoo Security Advisory GLSA 200907-15 (nagios-core)

The remote host is missing updates announced in advisory GLSA 200907-15. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only OR GPL-3.0-only...

CVE-2009-2602

R2 Newsletter Lite, Pro, and Stats stores sensitive information under the web root with insufficient access control, which allows remote attackers to download the database file via a direct request for admin.mdb...

CVE-2009-2602

R2 Newsletter Lite, Pro, and Stats suffer an improper access control vulnerability that stores sensitive data under the web root, allowing remote attackers to directly download the admin.mdb database file. The issue is documented in CVE-2009-2602 with a base CVSS v2 score of 5.0 (Medium), attack ...

R2 Newsletter Store Admin Disclosure

--------------------------------------------------------------- --------------------------------------------------------------- R2 Newsletter Store admin.mdb Remote Admin Disclosure Vulnerability --------------------------------------------------------------- Founder : TiGeR-Dz...

R2 NewsLetter LiteProStats - admin.mdb Database Disclosure

R2 NewsLetter LiteProStats - admin.mdb Database Disclosure --------------------------------------------------------------- --------------------------------------------------------------- R2 Newsletter Store admin.mdb Remote Admin Disclosure Vulnerability...

R2 Newsletter Lite/Pro/Stats (admin.mdb) Database Disclosure Vuln

No description provided by source. --------------------------------------------------------------- --------------------------------------------------------------- R2 Newsletter Store admin.mdb Remote Admin Disclosure Vulnerability ---------------------------------------------------------------...

R2 Newsletter Lite/Pro/Stats (admin.mdb) Database Disclosure Vuln

Exploit for unknown platform in category web applications ================================================================= R2 Newsletter Lite/Pro/Stats admin.mdb Database Disclosure Vuln =================================================================...