krb5 security update

1.6.1-36.el54.1 - add candidate patch to correct KDC integer overflows which could be triggered by malformed RC4 and AES ciphertexts CVE-2009-4212, 546347...

DSA-1969-1 krb5 - denial of service

Bulletin has no description...

Linux Kernel 2.6.31-rc4 - nfs4_proc_lock() Denial of Service

Linux Kernel 2.6.31-rc4 - nfs4proclock Denial of Service / Description of problem: execution of a particular program from the Arachne suite reliably causes a kernel panic due to a NULL-pointer dereference in nfs4proclock. Version-Release number of selected component if applicable:...

osTicket 1.6 RC4 Admin Login Blind SQL Injection Vulnerability

Exploit for unknown platform in category web applications ============================================================== osTicket 1.6 RC4 Admin Login Blind SQL Injection Vulnerability ============================================================== nGenuity Information Services - Security Advisory...

osTicket 1.6 RC4 - Admin Login Blind SQL Injection

nGenuity Information Services - Security Advisory Advisory ID: NGENUITY-2009-007 osTicket Admin Login Blind SQL Injection Application: osTicket v1.6 RC4 Vendor: osTicket Vendor website: http://www.osticket.com Author: Adam Baldwin [email protected] I. BACKGROUND "osTicket is a widely-us...

CVE-2009-1527

Race condition in the ptraceattach function in kernel/ptrace.c in the Linux kernel before 2.6.30-rc4 allows local users to gain privileges via a PTRACEATTACH ptrace call during an exec system call that is launching a setuid application, related to locking an incorrect credexecmutex object...

Mandriva Linux Security Advisory : libxslt (MDVSA-2008:160)

Chris Evans of the Google Security Team found a vulnerability in the RC4 processing code in libxslt that did not properly handle corrupted key information. A remote attacker able to make an application linked against libxslt process malicious XML input could cause the application to crash or...

Tiny Blogr 1.0.0 rc4 Authentication Bypass

Salvatore "drosophila" Fresta + Application: Tiny Blogr + Version: 1.0.0 rc4 + Website: http://tinyblogr.sourceforge.net + Bugs: A Authentication Bypass + Exploitation: Remote + Date: 17 Apr 2009 + Discovered by: Salvatore "drosophila" Fresta + Author: Salvatore "drosophila" Fresta + Contact:...

Tiny Blogr 1.0.0 RC4 SQL Injection

Salvatore "drosophila" Fresta + Application: Tiny Blogr + Version: 1.0.0 rc4 + Website: http://tinyblogr.sourceforge.net + Bugs: A Authentication Bypass + Exploitation: Remote + Date: 17 Apr 2009 + Discovered by: Salvatore "drosophila" Fresta + Author: Salvatore "drosophila" Fresta + Contact:...

Mandriva Update for libxslt MDVSA-2008:160 (libxslt)

Check for the Version of libxslt OpenVAS Vulnerability Test Mandriva Update for libxslt MDVSA-2008:160 libxslt Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it unde...

Ubuntu Update for libxslt vulnerabilities USN-633-1

Ubuntu Update for Linux kernel vulnerabilities USN-633-1 OpenVAS Vulnerability Test $Id: gbubuntuUSN6331.nasl 7969 2017-12-01 09:23:16Z santu $ Ubuntu Update for libxslt vulnerabilities USN-633-1 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH,...

Falt4 CMS RC4 (fckeditor) Arbitrary File Upload Exploit

No description provided by source. Falt4 CMS fckeditor Arbitrary File Upload Exploit Bug Discovered By : Sp3shial [email protected] Persian Boys Hacking Team From A Land With A History-Long Background Download CMS :...

FreeBSD Security Advisory FreeBSD-SA-08:11.arc4random

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ============================================================================= FreeBSD-SA-08.11.arc4random Security Advisory The FreeBSD Project Topic: arc4random9 predictable sequence vulnerability Category: core Module: sys Announced: 2008-11-24...

kernel: infinite loop in highres timers (kernel hang)

Integer overflow in the hrtimerforward function hrtimer.c in Linux kernel 2.6.21-rc4, when running on 64-bit systems, allows local users to cause a denial of service infinite loop via a timer with a large expiry value, which causes the timer to always be expired...

Debian: Security Advisory (DSA-1624-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian Security Advisory DSA 1624-1 (libxslt)

The remote host is missing an update to libxslt announced via advisory DSA 1624-1. OpenVAS Vulnerability Test $Id: deb16241.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 1624-1 libxslt Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc...

GLSA-200808-06 : libxslt: Execution of arbitrary code

The remote host is affected by the vulnerability described in GLSA-200808-06 libxslt: Execution of arbitrary code Chris Evans Google Security reported that the libexslt library that is part of libxslt is affected by a heap-based buffer overflow in the RC4 encryption/decryption functions. Impact :...

libxslt: Execution of arbitrary code

Background libxslt is the XSLT C library developed for the GNOME project. XSLT is an XML language to define transformations for XML. Description Chris Evans Google Security reported that the libexslt library that is part of libxslt is affected by a heap-based buffer overflow in the RC4...

libxslt RC4加密/解密函数堆溢出漏洞

BUGTRAQ ID: 30467 CVECAN ID: CVE-2008-2935 Libxslt是为GNOME项目开发的XSLT C库，XSLT本身是用于定义XML转换的XML语言。 Libxslt库的crypto.c文件中crypto:rc4encrypt函数错误的信任了密钥字符串的长度： static void exsltCryptoRc4EncryptFunction xmlXPathParserContextPtr ctxt, int nargs ... key = xmlXPathPopString ctxt; keylen = xmlUTF8Strlen str;...

CVE-2008-2935

Multiple heap-based buffer overflows in the rc4 1 encryption aka exsltCryptoRc4EncryptFunction and 2 decryption aka exsltCryptoRc4DecryptFunction functions in crypto.c in libexslt in libxslt 1.1.8 through 1.1.24 allow context-dependent attackers to execute arbitrary code via an XML file containin...