[SECURITY] Fedora 7 Update: horde-3.1.7-1.fc7

The Horde Framework provides a common structure and interface for Horde applications such as IMP, a web-based mail program. This RPM is required for all other Horde module RPMs. The Horde Project writes web applications in PHP and releases them under Open Source licenses. For more information...

openSUSE 10 Security Update : asterisk (asterisk-5062)

Attackers could bypass host based authentication by using a valid username CVE-2007-6430 Attackers could inject SQL commands under certain circumstances if 'cdrpgsql' was used CVE-2007-6170 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin...

SuSE 10 Security Update : icu (ZYPP Patch Number 5014)

Certain regular expressions could crash the ICU library. CVE-2007-4770 / CVE-2007-4771 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if description scriptid31400; scriptversion"1.18...

[SECURITY] Fedora 8 Update: horde-3.1.6-1.fc8

The Horde Framework provides a common structure and interface for Horde applications such as IMP, a web-based mail program. This RPM is required for all other Horde module RPMs. The Horde Project writes web applications in PHP and releases them under Open Source licenses. For more information...

SuSE 10 Security Update : cairo (ZYPP Patch Number 5006)

This update fixes a regression that was caused by the previous security update. Several programs such as gedit didn't display some lines properly anymore. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc. include'deprecatednasllevel.inc';...

Stack overflow

Stack-based buffer overflow in RpmSrvc.exe in Brooks Remote Print Manager RPM 4.5.1.11 and earlier Elite and Select for Windows allows remote attackers to execute arbitrary code via a long filename in a "Receive data file" LPD command. NOTE: some of these details are obtained from third party...

CVE-2008-0766

Stack-based buffer overflow in RpmSrvc.exe in Brooks Remote Print Manager RPM 4.5.1.11 and earlier Elite and Select for Windows allows remote attackers to execute arbitrary code via a long filename in a "Receive data file" LPD command. NOTE: some of these details are obtained from third party...

CVE-2008-0766

CVE-2008-0766 affects Brooks Remote Print Manager (RPM) for Windows, specifically RpmSrvc.exe in RPM 4.5.1.11 and earlier (Elite and Select). The flaw is a stack-based buffer overflow triggered by a long filename in a "Receive data file" LPD command. This enables remote attackers to execute arbit...

Unicode buffer-overflow in RPM Remote Print Manager 4.5.1.11

Luigi Auriemma Application: RPM Remote Print Manager http://lpd.brooksnet.com Versions: = 4.5.1.11 tested both the Elite and Select versions the beta version 5.0.38.0 does NOT seem vulnerable Platforms: Windows Bug: unicode buffer-overflow Exploitation: remote Date: 11 Feb 2008 Author: Luigi...

RPM Remote Print Manager 4.5.1 - Service Remote Buffer Overflow

RPM Remote Print Manager 4.5.1 - Service Remote Buffer Overflow source: https://www.securityfocus.com/bid/27742/info RPM Remote Print Manager is prone to a remote buffer-overflow vulnerability because it fails to properly bounds-check user-supplied input before copying it into an insufficiently...

RPM Remote Print Manager 4.5.1 - Service Remote Buffer Overflow

source: https://www.securityfocus.com/bid/27742/info RPM Remote Print Manager is prone to a remote buffer-overflow vulnerability because it fails to properly bounds-check user-supplied input before copying it into an insufficiently sized buffer. An attacker may exploit this issue to execute...

[SECURITY] Fedora 8 Update: xine-lib-1.1.10-1.fc8

This package contains the Xine library. Xine is a free multimedia player. It can play back various media. It also decodes multimedia files from local disk drives, and displays multimedia streamed over the Internet. It interprets many of the most common multimedia formats available - and some of t...

Fedora 7 : icu-3.6-20.fc7 (2008-1076)

CVE-2007-4770 & CVE-2007-4771 Flaws in icu regexp handling. Technical details can be found at http://sourceforge.net/mailarchive/message.php?msgname= d03a2ffb0801221538x68825e42xb4a4aaf0fcccecbd%2540mail.gmail.com Note that Tenable Network Security has extracted the preceding description block...

Fedora 8 : bind-9.5.0-23.b1.fc8 (2008-0903)

CVE-2008-0122, libbind.so off-by-one buffer overflow, very low severity Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing...

Fedora 8 : clamav-0.92-6.fc8 (2008-0115)

Upstream clamav 0.92 fixes multiple security issues : - CVE-2007-6335 426210 - CVE-2007-6336 426343 - CVE-2007-6337 426344 Sendmail-specific parts moved to separate milter subpackage. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora securit...

openSUSE 10 Security Update : krb5 (krb5-4851)

This update fixes multiple vulnerabilities in krb5. It's unlikely that those vulnerabilities can actually be exploited. CVE-2007-5894, CVE-2007-5902, CVE-2007-5971, CVE-2007-5972 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were...

openSUSE 10 Security Update : net-snmp (net-snmp-4753)

This update of net-snmp fixes the following bugs : - default and configurable maximum number of varbinds returnable to a GETBULK request CVE-2007-5846 - crash when smux peers were configured with empty passwords - the UCD-SNMP-MIB::memCached.0 SNMP object was missing - the snmptrap command from t...

Fedora 8 : qt4-4.3.3-1.fc8 (2007-4285)

An update to the latest upstream release. Includes fix for security issue CVE-2007-5965 rhbz411751. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as...

Fedora 7 : qt4-4.3.3-1.fc7 (2007-4354)

An update to the latest upstream release. Includes fix for security issue CVE-2007-5965 rhbz411751. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as...

Fedora 7 : bind-9.4.2-2.fc7 (2007-4658)

fixed address of L.ROOT-SERVERS.NET 411141 - CVE-2007-6283 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional...