Fedora 12 : squid-3.1.0.16-6.fc12 (2010-3064)

Denial of service issue in HTCP processing SQUID-2010:2 http://www.squid- cache.org/Advisories/SQUID-20102.txt Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as...

Fedora 12 : sssd-1.0.1-1.fc12 (2010-0413)

Fixes CVE-2010-0014 - SSSD accepts any password when offline with a valid TGT available Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible witho...

Fedora 12 : chrony-1.23-8.20081106gitbe42b4.fc12 (2010-1539)

This update fixes several vulnerabilities that can be exploited for a remote denial of service. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possib...

RedHat JBoss Enterprise JMX Console Authentication Bypass (CVE-2010-0738)

JBoss Application Server JBoss AS is a free software and open-source Java EE-based application server. An authentication bypass vulnerability has been reported in JBoss Enterprise Application Platform JMX Console application. The vulnerability is due to the authentication policy within the...

CVE-2010-2231

Cross-site request forgery CSRF vulnerability in report/overview/report.php in the quiz module in Moodle before 1.8.13 and 1.9.x before 1.9.9 allows remote attackers to hijack the authentication of arbitrary users for requests that delete quiz attempts via the attemptid parameter...

Adobe Flash Player LocalConnection内存破坏漏洞

BUGTRAQ ID: 40798 CVE ID: CVE-2010-2188 Flash Player是一款非常流行的FLASH播放器。 Flash Player通过ActionScript原始对象号2200所暴露的connect方式存在内存破坏漏洞。如果使用不同字符串多次调用了 LocalConnection函数，就可以触发这个漏洞，导致以运行浏览器用户的权限执行任意代码。 Adobe Flash Player 9.x Adobe Flash Player 10.x Adobe AIR = 1.5.3.9130 厂商补丁： Adobe -----...

Adobe Flash Player DefineBit标签JPEG解析内存破坏漏洞

BUGTRAQ ID: 40784 CVE ID: CVE-2010-2171 Flash Player是一款非常流行的FLASH播放器。 Flash Player负责解析SWF文件中内嵌图形数据的代码中存在安全漏洞，DefineBits标签在处理JPEG数据时存在解析问题。具体来讲，解压例程在对堆内存执行操作之前没有充分地验证图形维度，可能触发内存破坏，导致以运行浏览器用户的权限执行任意代码。 Adobe Flash Player 9.x Adobe Flash Player 10.x Adobe AIR = 1.5.3.9130 厂商补丁： Adobe -----...

Adobe Flash Player MP4数据解析堆内存破坏漏洞

BUGTRAQ ID: 40801 CVE ID: CVE-2010-2162 Flash Player是一款非常流行的FLASH播放器。 Flash Player负责解析MP4文件的代码中存在漏洞。在处理STSC、STSZ和STCO原子时，Flash Player错误的计算了长度值，之后的内存拷贝操作中使用该值作为大小参数。这可能触发堆内存破坏，导致以当前登录用户的权限执行任意代码。 Adobe Flash Player 9.x Adobe Flash Player 10.x Adobe AIR = 1.5.3.9130 厂商补丁： Adobe -----...

CUPS texttops过滤器空指针引用漏洞

BUGTRAQ ID: 40943 CVE ID: CVE-2010-0542 Common Unix Printing System（CUPS）是一款通用Unix打印系统，是Unix环境下的跨平台打印解决方案，基于Internet打印协议，提供大多数 PostScript和raster打印机服务。 CUPS的texttops过滤器中缺少内存分配失败检查导致了空指针引用。攻击者可以创建恶意的文本文件，如果打印了该文件就会导致texttops崩溃或以lp用户权限执行任意代码。 Easy Software Products CUPS 1.4.4 厂商补丁： Easy Software...

Mac OS X CUPS Web界面信息泄露漏洞

BUGTRAQ ID: 40897 CVE ID: CVE-2010-1748 Mac OS X是苹果家族机器所使用的操作系统。 Mac OS X中CUPS web界面存在未初始化内存读取漏洞。如果攻击者可以访问CUPS Web界面，就可以使用特制的URL来利用这个漏洞从cupsd进程读取有限数量的内存，可能获取敏感信息。 Apple Mac OS X 10.6.4 Apple MacOS X Server 10.6.4 Easy Software Products CUPS 1.4.4 厂商补丁： Apple ----- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载...

PHP 'SplObjectStorage' Unserializer Arbitrary Code Execution Vulnerability

PHP is prone to a vulnerability that an attacker could exploit to execute arbitrary code with the privileges of the user running the affected application. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the...

Samba SMB1报文链接远程内存破坏漏洞

BUGTRAQ ID: 40884 CVE ID: CVE-2010-2063 Samba是一套实现SMB（Server Messages Block）协议、跨平台进行文件共享和打印共享服务的程序。 Samba中负责处理链接起SMB1报文的代码没有正确地验证客户端所提供的输入字段，恶意客户端可以向Samba服务器发送特制的SMB报文触发堆内存破坏，导致以Samba服务器（smbd）的权限执行任意代码。利用这个漏洞无需认证，且samba的默认配置便受这个漏洞影响。 Samba 3.0.x - 3.3.12 厂商补丁： RedHat ------...

RedHat Update for samba and samba3x RHSA-2010:0488-01

Check for the Version of samba and samba3x OpenVAS Vulnerability Test RedHat Update for samba and samba3x RHSA-2010:0488-01 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or...

RedHat Update for kernel RHSA-2010:0474-01

Check for the Version of kernel OpenVAS Vulnerability Test RedHat Update for kernel RHSA-2010:0474-01 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the ter...

Perl Safe模块对象引用绕过安全限制漏洞

BUGTRAQ ID: 40302 CVECAN ID: CVE-2010-1168,CVE-2010-1974 Perl是一种免费且功能强大的编程语言。 Perl中所使用的Safe模块没有正确地对经过隐式bless处理的对象限制DESTROY和AUTOLOAD等方式的代码，在访问或释放这些对象时 Safe可能未加限制的执行这些方式。在Safe隔离中所执行的特制Perl脚本可以利用这个漏洞绕过预期的Safe模块限制。 Perl 5.12.1 厂商补丁： Larry Wall ---------- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载：...

RedHat JBoss Enterprise Application Platform JMX Console Authentication Bypass

Added: 06/07/2010 CVE: CVE-2010-0738 BID: 39710 OSVDB: 64171 Background JBoss Application Server AS is a full-featured open source Java application server that includes full support for J2EE-based APIs. JBoss AS runs on numerous operating systems e.g., Linux, FreeBSD, Mac OS X, and Microsoft...

RedHat JBoss Enterprise Application Platform JMX Console Authentication Bypass

Added: 06/07/2010 CVE: CVE-2010-0738 BID: 39710 OSVDB: 64171 Background JBoss Application Server AS is a full-featured open source Java application server that includes full support for J2EE-based APIs. JBoss AS runs on numerous operating systems e.g., Linux, FreeBSD, Mac OS X, and Microsoft...

RedHat JBoss Enterprise Application Platform JMX Console Authentication Bypass

Added: 06/07/2010 CVE: CVE-2010-0738 BID: 39710 OSVDB: 64171 Background JBoss Application Server AS is a full-featured open source Java application server that includes full support for J2EE-based APIs. JBoss AS runs on numerous operating systems e.g., Linux, FreeBSD, Mac OS X, and Microsoft...

CVE-2010-1633

RSA verification recovery in the EVPPKEYverifyrecover function in OpenSSL 1.x before 1.0.0a, as used by pkeyutl and possibly other applications, returns uninitialized memory upon failure, which might allow context-dependent attackers to bypass intended key requirements or obtain sensitive...

RedHat Update for postgresql RHSA-2010:0428-01

Check for the Version of postgresql OpenVAS Vulnerability Test RedHat Update for postgresql RHSA-2010:0428-01 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under...